Manuale d’uso / di manutenzione del prodotto NWA-3160 del fabbricante ZyXEL
Vai alla pagina of 350
www .zyxel.com NW A-3160 Series IEEE 802.1 1a/b/g Business WLAN Access Point IEEE 802.1 1b/g Business WLAN Access Point IEEE WirelessN Busine ss WLAN Access Point User ’ s Guide V ersion 3.60 03/2008 Edition 3 DEFAULT LOGIN IP Address http://1 92 .168.
.
About This User's Guide ZyXEL NWA-3160 Series User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator . Y ou should have at leas t a basic knowledge of TCP/IP networking concepts and topology .
Document Conventions ZyXEL NWA-3160 Series User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide.
Document Conventions ZyXEL NWA-3160 Series User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons.
Safety Warnings ZyXEL NWA-3160 Series User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warning notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool.
Safety Warnings ZyXEL NWA-3160 Series User’s Guide 7.
Safety Warnings ZyXEL NWA-3160 Series User’s Guide 8.
Contents Overview ZyXEL NWA-3160 Series User’s Guide 9 Contents Overview Introduction .......................................... ........................................................................ .......... 31 Introducing the ZyXEL Device ....
Contents Overview ZyXEL NWA-3160 Series User’s Guide 10.
Table of Contents ZyXEL NWA-3160 Series User’s Guide 11 Table of Contents About This User's Guide ................................ ........................................................................ .. 3 Document Conventions...............
Table of Contents ZyXEL NWA-3160 Series User’s Guide 12 Chapter 3 T utorial ........................................................................ ............................................... .............. 47 3.1 How to Configure the Wirele ss LAN .
Table of Contents ZyXEL NWA-3160 Series User’s Guide 13 5.2 The Management Mode Screen ................ ................ ................ ................ ................ .......... 81 Chapter 6 AP Controller Mode (NW A-3160 Only) .................
Table of Contents ZyXEL NWA-3160 Series User’s Guide 14 8.3.3.2 A T C+WMM from WLAN to LAN .......... ................ ................ .......... 109 8.3.4 T ype Of Service (T oS) ............... ................ ................. ................ .
Table of Contents ZyXEL NWA-3160 Series User’s Guide 15 9.10 Introduction to RADIUS ................. ................ ................ ................ ................. ................ . 136 9.1 1 Conf iguring RADIUS ... ................ ........
Table of Contents ZyXEL NWA-3160 Series User’s Guide 16 13.3.3 Rogue AP List ...................... ................ ................ ................ ................. ................ . 16 3 Chapter 14 Remote Management Screens ...................
Table of Contents ZyXEL NWA-3160 Series User’s Guide 17 Chapter 17 Log Screens ............................................................................................... ..................... ...... 201 17.1 Configuring View Log ..... .........
Table of Contents ZyXEL NWA-3160 Series User’s Guide 18 Chapter 20 Introducing the SMT ............................................................ ................................................ .2 3 7 20.1 Introduction to the SMT .............. .
Table of Contents ZyXEL NWA-3160 Series User’s Guide 19 26.2 Backup Configuration .... ...... ............. ................ ................. ................ ............. ................ .2 5 8 26.2.1 Using the FTP command from the DOS Prompt ..
Table of Contents ZyXEL NWA-3160 Series User’s Guide 20 Appendix C Pop-up Windows, JavaScripts and Java Permissions ...................................... 313 Appendix D IP Addresses and Subnetting ................................................ ..
List of Figures ZyXEL NWA-3160 Series User’s Guide 21 List of Figures Figure 1 Access Point Application ...... ............. ...... ............. ................ ................ ............. .......... ............. 34 Figure 2 Bridge Application .
List of Figure s ZyXEL NWA-3160 Series User’s Guide 22 Figure 39 T utorial: MAC Filter Edit (SERVER_1) .. ................ ................. ............ ................. ................ ... 71 Figure 40 T utorial: SSID Profiles Activated ..... ..
List of Figures ZyXEL NWA-3160 Series User’s Guide 23 Figure 82 Wireless: Mu ltiple BSS ....... ................................ ................ ....................................... ...... ..... 140 Figure 83 SSID ...... ................ .......
List of Figure s ZyXEL NWA-3160 Series User’s Guide 24 Figure 125 Management VLAN Conf iguration Example .................. ................ ................ ................ ..... 214 Figure 126 VLAN-Aware Switch - S tatic VLAN ... ...... .........
List of Figures ZyXEL NWA-3160 Series User’s Guide 25 Figure 168 Menu 22 SNMP Configuration ............. ............. ................ ................ ............. ................ .. ... 247 Figure 169 Menu 23 System Passwo rd .... ............
List of Figure s ZyXEL NWA-3160 Series User’s Guide 26 Figure 21 1 Security Settings - Ja va Sc ripting ........... ................. ................ ................ ................ ..... ...... 317 Figure 212 Security Settings - Java ...........
List of Tables ZyXEL NWA-3160 Series User’s Guide 27 List of Tables T able 1 Models Cov ered .... ................ ................ ................ ................ .................... ............... .......... ....... 33 T able 2 LEDs ..........
List of Tables ZyXEL NWA-3160 Series User’s Guide 28 T able 39 Wireless Security Levels .. ............. ... ................ ............. ................ ................ ............. .......... . 128 T able 40 WIRELES S > Security ..........
List of Tables ZyXEL NWA-3160 Series User’s Guide 29 T able 82 Sys log ... ................ ................ ................ ................ ................. ................ ......... ................ ..... 206 T able 83 Log Categories and Ava ilable Settings .
List of Tables ZyXEL NWA-3160 Series User’s Guide 30 T able 125 Subnet 2 ............... ............. ................ ................ ................ ................ ............... ........ ........... 324 T able 126 Subnet 3 ............... .
31 P ART I Introduction Introducing the ZyXEL Device (33) Introducing the W eb Configurator (43) T utorial (47) S tatus Screens (75) Management Mod e (79) AP Controller Mode (NW A-3160 Only) (83).
32.
ZyXEL NWA-3160 Series User’s Guide 33 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device.
Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 34 " A different channel should be configured for each WLAN interface to reduce the effect s of radio interference. 1.2.1 Access Point The ZyXEL Device is an ideal access solution fo r wireless Internet connection.
Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 35 Figure 2 Bridge Application Figure 3 Repeater Application 1.2.3 AP + Bridge (NW A -3160 and NW A-3163 Only) In AP+Bridge mode, the ZyXEL Device supports both AP and bridge connectio n at the same time.
Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 36 In the figure below , A and B use X as an AP to access the wired network, while X and Y communicate in bridge mode.
Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 37 For example, you might want to set up a wire less network in your office where Internet telephony (V oice over IP , or V oIP) users have priority . Y ou also want a regular wireless network for standard users, as well as a ‘guest ’ wireless network for vis itors.
Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 38 1.3 CAPW AP (NW A-3160 and NW A-3163 Only) CAPW AP allows a single access point (the AP cont roller) to manage up to eight other access points (the managed APs ). The managed APs r eceive all their configura tion information from the AP controller .
Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 39 1.6 Hardware Connections See your Quick S tart Guide for informa tion on making hardware connections. 1.6.1 Antennas The ZyXEL Device has two antennas. When yo u are looking at the ZyXEL Device from the front, the main antenna is on the left.
Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 40 Figure 7 LEDs T able 2 LEDs LABEL COLOR STATUS DESCRIPTION WDS (NW A-31 60 and NW A- 3163 only) Off Either • The ZyXEL Device is in Acces s Point or MBSSID mode and is functioning normally .
Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 41 ETHERNET Green On The ZyXEL Device has a 10 Mbps Ethernet connection. Blinking The ZyXEL Device has a 10 Mbps Ethernet connection and is sending or receivin g data. Y ellow O n The ZyXEL Device has a 100 Mbps Ethernet connection.
Chapter 1 Introducing the ZyXEL Device ZyXEL NWA-3160 Series User’s Guide 42.
ZyXEL NWA-3160 Series User’s Guide 43 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access the ZyXEL Device’ s web configura tor and provides an overview of its screens. " When your ZyXEL Device is in (CAPW AP) Managed AP mode (NW A-3160 and NW A-3163 only) the Web Configurator is not available.
Chapter 2 Introducing the Web Configur ator ZyXEL NWA-3160 Series User’s Guide 44 Figure 8 Change Password Screen 6 Click Apply in the Replace Certificate screen to create a certificate using your ZyXEL Device’ s MAC address that will be specific to this device.
Chapter 2 Introducing the Web Configurator ZyXEL NWA-3160 Series User’s Guide 45 2.2.1 Methods of Restoring Factory-Default s Y ou can erase the current configuration and restore factory defaults in three ways: Use the RESET button to upload the default configuratio n file.
Chapter 2 Introducing the Web Configur ator ZyXEL NWA-3160 Series User’s Guide 46 Click MAINTENANCE to view information about your ZyXEL Device or upgrade configuration and firmware file s.
ZyXEL NWA-3160 Series User’s Guide 47 C HAPTER 3 Tutorial This chapter first provides an overview of ho w to configure the wireless LAN on your ZyXEL Device, and then gives step-by- step guidelines showing how to configure your ZyXEL Device for some example scenarios.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 48 3.1.2 Wireless LAN Configuration Overview The following figure shows th e steps you should take to configure t h e wireless settings according to the operatin g mode you select.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 49 Figure 1 1 Configuring Wireless LAN S elect Operating Mode Access Point Bridge / Repeater Mo de. AP + Bridge Mode. MBSSID Mode. Select 802.1 1 Mode and Channel ID . Select SSID Configure SSID P rofile.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 50 3.1.3 Further Reading Use these links to find more information on the steps: • Choosing 802.1 1 Mode : see Section 8.7. 1 on page 1 1 3 . • Choosing a wireless Channel ID : see Section 8.7.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 51 Figure 12 T utorial: Example MBSSID Set up The standard network ( SSID04 ) has ac cess to all resources. The V oIP ne twork ( V oIP_SSID ) has access to a ll resources and a high Quality of Service (QoS) setting (see Chapter 8 on page 105 for information on QoS).
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 52 Figure 13 T utorial: Wireless LAN: Before Select MBSSID from the Operating Mode drop-down list box. The screen displays as follows. Figure 14 T utorial: Wireless LAN: Change Mode This Select SSID Pr ofile table allows you to activate or deactivate SSID profiles.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 53 Select the Index box for the en try and click Apply to activate the profile. Y our standard wireless network ( SSID04 ) is now accessible to your wireless clients as before. Y ou do not need to configure anything el se for your standard n etwork.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 54 Figure 16 T utorial: V oIP SSID Profile Edit • Choose a new SSID for the V oIP network. In this example, enter V OIP_SSID_Example . Note that although the SSID chan ges, the SSID profile name ( V oIP_SSID ) remains the same as before.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 55 Figure 17 T utorial: V oIP Sec urity Y ou already chose to use the security02 profile for this network, so select the radio button for security02 and click Edit . The following screen appears.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 56 • Click Apply . The WIRELESS > Security screen displays. Ensure that the Prof ile Name for entry 2 displays “ Vo I P _ S e c u r i t y ” and that the Security Mode is WP A2-PSK . Figure 19 T utorial: V oIP Sec urity: Updated 3.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 57 Figure 21 T utorial: Guest Edit • Choose a new SSID for the guest network. In this example, enter Guest_SSID_Example . Note that although the SSID chan ges, the SSID profile name ( Guest_SSID ) remains the same as before.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 58 • Select WP A-PSK in the Security Mode field. WP A-PSK provides strong security that is supported by most wireless clients . Even though your Guest_S SID clients do not have access to sensitive information on the network, you should not leave the network without security .
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 59 Figure 25 T utorial: Layer 2 Isolation Profile Enter the MAC addresses of the two network devi ces you want users on the guest network to be able to access: the main network router (00:AA:00:AA:00:AA) and the network printer (AA:00:AA:00:AA:00).
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 60 • T ry to access each network using the corre ct security settings, and then using incorrect security settings, such as the WP A-PSK for an other active network.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 61 Figure 27 T utorial: Wireless Netw ork Example In the figure, the solid circle represents the range of your wireless network, and the dashed circle represents the extent of the coffee shop’ s wireless networ k.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 62 " The ZyXEL Device can detect the MAC addresse s of APs automatically . However , it is more secure to obt ain the correct MAC addresses from another source and add them to the friendl y AP list manually .
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 63 " Y ou can add APs that are not p art of your network to the friendly AP list, as long as you know that they do not pose a t hreat to your network’ s security . The Friendly AP screen now appears as follows.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 64 Figure 31 T utorial: Warning 5 Save the friendly AP list somewhere it can be accessed by all the other access points on the network. In this example, save it on the network file server ( E in Figure 27 on page 61 ).
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 65 2 In the Period (min.) field, enter how often yo u want the ZyXEL Device to scan for rogue APs. Y ou can have the ZyXEL Device sca n anywhere from once every ten minutes to once every hour . In this example, enter “10”.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 66 • Enter the email address to which you want alerts to be sent ( myname@myfirm.co m , in this example). •I n t h e Send Immediate Alert section, select the events you want to trigger immediate e- mails.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 67 • Check your e-mail. Y ou should have receiv ed at least one e-mail alert (your other ZyXEL Devices may also have sent alerts , depending on their proximity and the output power of your “rogue” AP).
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 68 3.4.3 Setup In this example, you have already set up the ZyXEL Device in MBSSID mode (see Chapter 10 on page 139 ). It uses two SSID profiles simultaneously . Y ou have configured each SSID profile as shown in the following table.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 69 Y ou will configure the MAC filter to restrict access to Alice alone, and then configure layer-2 isolation to allow her to access onl y the network router , the file server and the Internet security gateway .
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 70 Figure 37 T utorial: SSID Edit Select l2Isolation03 in the L2 Isolatio n field, a nd select macf ilter03 in the MAC Filtering field. Click Apply . 3 Click the Layer -2 Isolation tab. When the Layer-2 Isolation screen appears, select L2Isolation03 ’ s entry and click Edit .
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 71 Figure 39 T utorial: MAC Filter Edit (SERVER_1) Y ou have restricted a ccess to the SER VER_1 ne twork to only the networking device whose MAC address you entered. The SER VER_1 network is now configured.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 72 3.4.6 Checking your Settings and T esting the Configuration Use the following sections to ensure that yo ur wireless networks are set up correctly .
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 73 • Using Alice’ s computer and wireless client , and the correct secu rity settings, do the following. Attempt to access Server 1. Y o u should be able to do so. Attempt to access the Internet.
Chapter 3 Tutorial ZyXEL NWA-3160 Series User’s Guide 74.
ZyXEL NWA-3160 Series User’s Guide 75 C HAPTER 4 Status Screens The St a t u s screen displays wh en you log in to the ZyXEL Device, or click ST A TUS in the navigation menu. Use the St a t u s screens to look at the current status of the device, system resources, interface s and SSID status.
Chapter 4 Sta tus Screens ZyXEL NWA-3160 Series User’s Guide 76 Figure 42 The S tatus Screen The following table describes the labels in this screen. T able 10 The Stat us Screen LABEL DESCRIPTION Automati c Refresh Interval Enter how often you want the ZyXEL Device to upda te this screen.
Chapter 4 Status Screens ZyXEL NWA-3160 Series User’s Guide 77 System Resources Flash This field displays the amount of the ZyXEL Device’s flash memory currently in use. The flash memory is used to store firmware and SSID profiles. Memory This field displa ys what percentage of the ZyXEL Device’s volatile memory is currently in use.
Chapter 4 Sta tus Screens ZyXEL NWA-3160 Series User’s Guide 78.
ZyXEL NWA-3160 Series User’s Guide 79 C HAPTER 5 Management Mode This chapter discusses the MGNT MODE (Management Mode) screen (NW A-3160 and NW A-3163 only). This screen de termines whether the ZyXEL Devi ce is used in its default, standalone mode, or as part of a CAPW AP (Control And Provisioning of W irele ss Access Points) network.
Chapter 5 Manage ment Mode ZyXEL NWA-3160 Series User’s Guide 80 2 The AP sends out a management request, looking for an AP in CAPW AP AP controller mode. 3 If there is an AP controller on the network, it receives the manageme nt request. If the AP controller is in Manual mode (see Section 6.
Chapter 5 Manag ement Mode ZyXEL NWA-3160 Series User’s Guide 81 5.1.4 Notes on CAPW AP This section lists some add itional features of ZyXEL ’ s implementation of the CAPW AP protocol.
Chapter 5 Manage ment Mode ZyXEL NWA-3160 Series User’s Guide 82 Managed AP Select this to have the ZyXEL Device managed by ano ther ZyXEL Device on your network.
ZyXEL NWA-3160 Series User’s Guide 83 C HAPTER 6 AP Controller Mode (NWA-3160 Only) When the ZyXEL Device is an AP controller , it can manage other access points. Y ou configure settings for the AP co ntroller and the managed access po ints in the AP controller , which then sends the configura tion details to the managed AP s.
Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 84 The following table describes the new labels in this screen. 6.1.1 The AP List St atus Screen Use this screen to see a list of the APs ma naged by the ZyXEL Device. When the ZyXEL Device is in AP controller mode, cli ck AP List in the St a t u s screen.
Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 85 The following table describes the labels in this screen. 6.1.2 The AP St atistics Screen Use this screen to statistics relating to th e APs managed by the ZyXEL Device.
Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 86 6.1.3 The AP Association List Screen Use this screen to see information about the wi reless clients associated to the APs managed by the ZyXEL Device. When the ZyXEL Devi ce is in AP controller mode, click A ssociation List in the St a t u s screen.
Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 87 When the ZyXEL Device is in AP controller mode, click SSID Information in the St a t u s screen. The following screen displays. Figure 50 SSID Informa tion The following table describes the labels in this screen.
Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 88 6.3 The Controller Screens This section discusses the Controller screens that display when the ZyXEL Device is in AP controller mode (NW A-3 160 only). 6.3.1 The AP Lists Screen When the ZyXEL Device is in AP controller mode, click CONTROLLER > AP Lists .
Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 89 Figure 52 The Controller > AP List s Screen The following table describes the labels in this screen.
Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 90 6.3.2 The AP List s Edit Screen Use this screen to change the descriptio n or radio profile of an AP managed by the ZyXEL Device. Click Edit in the CONTROL LER > AP Lists screen.
Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 91 6.3.3 The Configuration Screen Use this screen to control th e way in which the ZyXEL Device accepts new APs to manage. Y ou can also configure the pre-shared key (PSK) that is use to secure the data transmitted between the ZyXEL Device and the APs it manages.
Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 92 6.4 The Profile Edit Screens This section describes the Profile Edit screens, which are availabl e only in AP controller mode (NW A-3160 only).
Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 93 6.5 The Radio Profile Edit Screen Use this screen to configure a specific radio profile. In the Profile Edit > Ra dio screen, select a profile and click Edit . The following screen displays.
Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 94 The following table describes the labels in this screen. T able 22 The Profile Edit > Radio > Edit Screen LABEL DESCRIPTION Profile Name Enter a name identifying thi s profile.
Chapter 6 AP Controller Mo de (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 95 Apply Click this to save your changes. Reset Click this to reload the previous configuration for this screen.
Chapter 6 AP Co ntroller Mode (NWA-3160 Only) ZyXEL NWA-3160 Series User’s Guide 96.
97 P ART II The W eb Configurator System Screens (99) W ireless Config uration (105) W ireless Security Configuration (123) MBSSID and SSID (139) Other W ireless Configuration (147) IP Screen (157) Ro.
98.
ZyXEL NWA-3160 Series User’s Guide 99 C HAPTER 7 System Screens 7.1 System Overview This section provides information on general system setup. 7.2 Configuring General Setup Click SYSTEM > General . Figure 57 System > General The following table describes the labels in this screen.
Chapter 7 System Screens ZyXEL NWA-3160 Series User’s Guide 100 7.3 Administrator Authentication on RADIUS The administrator authentication on RADIUS fe ature lets a (external or internal) RADIUS server authenticate management logins t o the Zy XEL Device.
Chapter 7 S ystem Screen s ZyXEL NWA-3160 Series User’s Guide 101 Figure 58 SYSTEM > Password. The following table describes the labels in this screen. T able 24 Password LABEL DESCRIPTIONS Enable Admin at Local Select this check box to have the de vice authenticate ma nagement l ogins to the device.
Chapter 7 System Screens ZyXEL NWA-3160 Series User’s Guide 102 7.4 Configuring T ime Setting T o change your ZyX EL Device’ s time and date, click SYSTEM > T ime Setting . The screen appears as shown. Use this screen to configur e the ZyXEL Device’ s time based on yo ur local time zone.
Chapter 7 S ystem Screen s ZyXEL NWA-3160 Series User’s Guide 103 The following table describes the labels in this screen. T able 25 SYSTEM > Time Setting LABEL DESCRIPTION Current T ime This field displays the time of your ZyXEL Device.
Chapter 7 System Screens ZyXEL NWA-3160 Series User’s Guide 104 7.5 Pre-defined NTP T ime Servers List When you turn on the ZyXEL De vice for the first time, the date and time start at 2000-01-01 00:00:00.
ZyXEL NWA-3160 Series User’s Guide 105 C HAPTER 8 Wireless Configuration This chapter discusses how to configure the ZyXEL Device’ s Wire l es s screens. 8.1 Wireless LAN Overview This section introduces the wireless LAN (WLAN) and some basic scenarios.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 106 8.1.2 ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 107 8.3 Quality of Service This section discusses the Quality of Service (QoS) fe atures available on the ZyXEL Device. 8.3.1 WMM QoS WMM (W i-Fi MultiMedia) QoS (Qua lity of Service) ensures quality of ser vice in wireless networks.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 108 A TC assigns priority based on packet size, since time-sensitive applications such as Internet telephony (V oice over IP or V oIP) tend to have smaller pa cket sizes than non-time sensitive applications such as FTP (File T ransfer Protoc ol).
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 109 The following table shows how priorities are ass igned for packets coming from the LAN to the WLAN. 8.3.3.2 A TC+WMM from WLAN to LAN A TC+WMM from WLAN to LAN automatically pr ioritizes (assigns an A TC value to) all packets coming from the WLAN.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 0 DSCP is backward compatible with the three precedence bits in the T oS octet so that non- DiffServ compliant , T oS-enabled network device will not conflict with the DSCP mapping.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 111 8.4.2 STP T erminolo gy The root bridge is the base of the spannin g tree; it is the bridge with the l owest identifier value (MAC address). Path cost is the cost of tr ansmitting a frame onto a LAN thro ugh that port.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 2 8.4.4 STP Port St ates STP assigns five port states (see next table) to eliminate packet looping. A bridge port is not allowed to go directly fro m blocking state to forwarding state so as to eliminate transient loops.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 3 8.7 Configuring Wireless Settings Click WIRELESS > Wir eless . The screen varies depending upon the op erating mode you select. 8.7.1 Access Point Mode : NW A-3160 and NW A-3163 This section describes the Access Point mo de screen for the NW A-3160 and NW A-3163.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 4 8.7.2 Access Point Mode: NW A-3165 This section describes the Access Point mode screen for the NW A-3165 . For the NW A-3160 and NW A-3163, see Section 8.7.1 on page 1 13 . Select Access Point as the Operating Mode to display the scree n shown next.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 5 Figure 64 Wireless: Access Point (NWA-3165) The following table describes the general wireless LAN labels in this screen. T able 36 Wireless: Access Point (NWA-3165) LABEL DESCRIPTION Operating Mode Select Access Point from the drop -down list.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 6 8.7.3 Bridge/Repeater Mode (NW A-3160 and NW A-3163 Only) The ZyXEL Device can act as a wireless network bridge and establish wireless links with other APs. Y ou need to know the MAC address of the peer device, which also must be in bridge mode.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 7 Figure 65 Bridging Example Be careful to avoid bridg e loops when you enable bridging in th e ZyXEL Device. Bridge loops cause broadcast traffic to circ le the network endlessly , resulting in possible throughput degradation and disru ption of communications.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 8 Figure 67 Bridge Loop: Bridge Connected to Wired LAN T o prevent bridge loops, ensu re that you enable STP in the Wi re l e ss screen or your ZyXEL Device is not set to bridge mode while co nnec ted to both wired and wireless segments of the same LAN.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 11 9 The following table describes the bridge labels in this screen. T able 37 Wireless: Bridge/Repeater (NW A-3160 and NWA-3163 Only) LABEL DESCRIPTIONS Operating Mode Select Bridge/Repeater in this field.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 120 See T able 35 on page 1 13 for information on the other labels in this screen.
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 121 Figure 69 Wireless: AP+Bridge See the tables describing the fields in the Access Point and Bridge/Repeater operating modes for descriptions of the fields in this screen. 8.7.5 MBSSID Mode Select MBSSID as the Operating Mode .
Chapter 8 Wireless Configuration ZyXEL NWA-3160 Series User’s Guide 122.
ZyXEL NWA-3160 Series User’s Guide 123 C HAPTER 9 Wireless Security Configuration This chapter describes how to use the Security and RADIUS screens to configure wireless security on your ZyXEL Device.
Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 124 Y our ZyXEL Device allows you to configure up to four 64-bit, 128-bit or 152-bit WEP keys but only one key can be enabled at any one time. 9.2 802.1x Overview The IEEE 802.
Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 125 9.4.1 User Authentication WP A applies IEEE 802.1x and Extensible Auth entication Protocol (EAP) to authenticate wireless clients using a RADIUS database. See later in this chapter and the appendices for more information on IEEE 80 2.
Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 126 3 The AP derives and distrib utes key informatio n to the wireless clients. The key itself is not sent over the network, but i s derived from the PSK an d information exchanged between the AP and the client.
Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 127 Figure 72 WP A(2) with RAD IUS Application Example 9.6 Security Modes The following table describes the security modes you can configure. T able 38 Security Modes SECURITY MODE DESCRIPTION None Select this to have no data encryption.
Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 128 9.7 Wireless Client WP A Supplicant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A.
Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 129 Figure 73 Wireless > Security The following table describes the labels in this screen. The next screen varies according to the Security Mode you select. 9.9.1 Security: WEP Select WEP in the Security Mode field to display the following screen.
Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 130 Figure 74 WIRELESS > Security: WEP The following table describes the labels in this screen. 9.9.2 Security: 802.1x Only Select 802.1x-Only in the Security Mode field to display the following screen.
Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 131 Figure 75 Security: 802.1x Only The following table describes the labels in this screen. 9.9.3 Security: 802.1x S tatic 64-bit, 802.1x S t atic 128-bit Select 802.1x S tatic 64 or 802.
Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 132 Figure 76 Security: 802.1x Static 64-bit, 802.1x Static 128-bit The following table describes the labels in this screen. T able 43 Security: 802.1x Static 64-b it, 802.
Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 133 9.9.4 Security: WP A Select WP A in t he Security Mode field to display the followi ng screen. Figure 77 Security: WP A The following table describes the labels in this screen.
Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 134 Figure 78 Security:WP A2 or WP A2-MIX The following table describes the labels not previously discussed T able 45 Security: WPA2 or WPA2-MIX LABEL DE SCRIPTIONS Name T ype a name to identify this security profile.
Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 135 9.9.6 Security: WP A-PSK, WP A2-PSK, WP A2-PSK-MIX Select WP A-PSK , WP A2-PSK or WP A2-PSK-MIX in the Security Mode field to display the following screen.
Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 136 9.10 Introduction to RADIUS RADIUS is based on a client-sever model that supports authentication and accounting, where the access point is the client and the serve r is the RADIUS server .
Chapter 9 Wireless Se curity Configuration ZyXEL NWA-3160 Series User’s Guide 137 Backup If the ZyXEL Device ca nnot communicate with the Primary accounting server , you can have the ZyXEL Device use a Backu p RADIUS server . Make sure the Active check boxes are selected if you want to use backup servers.
Chapter 9 Wireless Secu rity Configuration ZyXEL NWA-3160 Series User’s Guide 138.
ZyXEL NWA-3160 Series User’s Guide 139 C HAPTER 10 MBSSID and SSID This chapter describes how to configure and use your ZyXEL Device’ s MBSSID mode and configure SSID profiles. 10.1 Wireless LAN Infrastructures See the W ireless LAN chapter for some basic WLAN scenarios and terminology .
Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 140 The switch adds PVID (Port VLAN IDentit y) tags to incoming frames that don’t already have tags (on switch ports wh ere PVI D is enabled). Figure 81 Multiple BSS with VLAN Example 10.
Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 141 The following table describes the labels in this screen. T able 48 Wireless: Multiple BSS LABEL DESCRIPTION Operating Mode Select MBSSID in this field to disp lay the screen as shown 802.
Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 142 10.2 SSID When the ZyXEL Device is set to Access Point, AP+Bridge (NW A-3160 and NW A -3163 only) or MBSSID mode, you n e ed to choose the SSID pro file(s) you want to use in your wireless network (see Section 8.
Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 143 Figure 83 SSID The following table describes the labels in this screen. 10.2.2 Configuring SSID Each SSID profile references the settings configured in the following screens: T able 49 SSID LABEL DESCRIPTION Index This field displays the index number of each SSID profile.
Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 144 • WIRELESS > Security (one of the security profil es). • WIRELESS > RADIUS (one of the RADIUS profiles). • WIRELESS > MAC Filter (the MAC filter list , if activated in the SSID profile).
Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 145 QoS Select the Quality of Service priority for this BSS’ s traffic. • In the pre-configured V oIP_SSID profile, the QoS setting is Vo I P .
Chapter 10 MBSSID and SSID ZyXEL NWA-3160 Series User’s Guide 146.
ZyXEL NWA-3160 Series User’s Guide 147 C HAPTER 11 Other Wireless Configuration This chapter describes how to configure the Layer -2 Isolation and MAC Filter screens on your ZyXEL Device.
Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 148 Figure 85 Layer-2 Isolation Application MAC addresses that are not listed in the Allow devices with these MAC addresses table are blocked from communica ting with the ZyXEL Devi ce’ s wireless clients except for broadcast packets.
Chapter 11 Other Wireless Configu ration ZyXEL NWA-3160 Series User’s Guide 149 Figure 86 WIRELESS > Layer 2 Isolation The following table describes the labels in this screen. 1 1.3 Configuring Layer-2 Isolation T o configure layer-2 isolation, click WIRELESS > Layer-2 Isolation > Edit .
Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 150 Figure 87 WIRELESS > Layer-2 Isolat ion Configuration Screen The following table describes th e labels in this screen. 1 1.3.1 Layer-2 Isolation Examples The following section sho ws you example laye r -2 isolation configur ations on the ZyXEL Device ( A ).
Chapter 11 Other Wireless Configu ration ZyXEL NWA-3160 Series User’s Guide 151 " When configuring, remember to select the correct layer-2 isolat ion profile in the WIRELESS > SSID > Edit screen of the relevant SSID profile. Figure 88 Layer-2 Isolation Example Co nfiguration 1 1.
Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 152 Figure 90 Layer-2 Isolation Example 2 1 1.4 The MAC Filter Screen The MAC filter function allows you to configur e the ZyXEL Device to give exclusive access to devices (Allow Association) or exclude de vices from accessing the ZyXEL Device (Deny Association).
Chapter 11 Other Wireless Configu ration ZyXEL NWA-3160 Series User’s Guide 153 The following table describes the labels in this screen. 1 1.4.1 Configuring MAC Filtering T o change your ZyXEL Device ’ s MAC filter settings, click WIRELESS > MAC Filter > Edit .
Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 154 The following table describes the labels in this screen. " T o activate MAC filtering on an SSID profi le, select the correct filter from the Enable MAC Filtering drop-down list box in the WIRELESS > SSID > Edit screen and click Apply .
Chapter 11 Other Wireless Configu ration ZyXEL NWA-3160 Series User’s Guide 155 Figure 93 Roaming Example The steps below describe the roaming process. 1 W ireless station Y moves from the coverage area of access point AP 1 to that of access point AP 2 .
Chapter 11 Other Wire less Configuration ZyXEL NWA-3160 Series User’s Guide 156 Figure 94 Roaming Select the Roaming Active check box and click Apply .
ZyXEL NWA-3160 Series User’s Guide 157 C HAPTER 12 IP Screen This chapter discusses how to config ure IP settings on the ZyXEL Device. 12.1 Factory Ethernet Default s The Ethernet parameters of the ZyXEL Device are preset in the fact ory with the following values: 1 IP address of 192.
Chapter 12 IP Screen ZyXEL NWA-3160 Series User’s Guide 158 " Regardless of your p articular situation, do not create an arbitrary IP address; always follow the guidelines above.
ZyXEL NWA-3160 Series User’s Guide 159 C HAPTER 13 Rogue AP This chapter discusses rogue wireless access poin ts (APs) and how to c onfigure the ZyXEL Device’ s rogue AP detection feature. " Rogue AP detection features are availab le on the NW A-3160 and NW A-3163 only .
Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 160 Figure 96 Rogue AP: Example 13.2.1 “Honeypot” Att ack Rogue APs need not be co nnected to the legitimate network to pose a severe security threat.
Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 161 Figure 97 “Honeypot” Att a ck 13.3 Configuring Rogue AP Detection (NW A-3160 and NW A- 3163 Only) Y ou can configure the ZyXEL Device to detect rogue IEEE 802.1 1a (5 GHz - NW A-3160 only) and IEEE 802.
Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 162 13.3.1 Rogue AP: Configuration Click ROGUE AP > Configu r ation . The following screen appears. Figure 98 ROGUE AP > Configuration The following table describes the labels in this screen.
Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 163 Figure 99 ROGUE AP > Friendly AP The following table describes the labels in this screen. 13.3.3 Rogue AP List This list displays details of all IEEE 802.1 1a (NW A-3160 only) and IEEE 802.
Chapter 13 Rogue AP ZyXEL NWA-3160 Series User’s Guide 164 Figure 100 ROGUE AP > Rogue AP The following table describes the labels in this screen.
ZyXEL NWA-3160 Series User’s Guide 165 C HAPTER 14 Remote Management Screens This chapter provides information on the Remote Management screens. 14.1 Remote Management Overview Remote management allows you to determin e which services/protocols can access which of the ZyXEL Device’ s inte rfaces (if any) from which computers.
Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 166 14.2 Configuring T elnet Y ou can configure your ZyXEL Device for remote T elnet access as show n next. The administrator uses T elnet from a computer on a remote netw ork to access the ZyXEL Device.
Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 167 14.3 Configuring FTP Y ou can upload and download the ZyXEL Devi ce’ s firmw are and configuration files using FTP , please see the chapter on firmware and configuration file maintenance for details.
Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 168 14.4 Configuring WWW T o change your ZyXEL Device’ s W orld W ide W eb settings, click REMOTE MGNT > WWW . Figure 104 Remote Mana gement: WWW The following table describes the labels in this screen.
Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 169 14.5 SNMP Simple Network Management Protocol (SNM P) i s a protocol used for ex changing management information b e tween network devices. SNMP is a memb er of the TCP/IP protocol suite.
Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 170 Figure 105 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: ag ents and a manager . An agent is a management software module that resi des in a managed device (the ZyXEL Device).
Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 171 14.5.2 SNMP T rap s The ZyXEL Device can send the following traps to the SNMP manager . 14.6 SNMP T rap Interface Index Some traps include an SNMP in terface index. The following ta ble maps the SNMP interface indexes to the ZyXEL Device’ s physical and virtual ports.
Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 172 14.6.1 SNMP v3 and Security SNMP v3 enhances security for SNMP manage ment. SNMP managers can be required to authenticate with agents before co nducting SNMP mana gement sessions.
Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 173 Figure 106 Remote Mana gement: SNMP The following table describes the labels in this screen.
Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 174 14.6.2.1 The SNMPv3 User Profi le Screen (NW A-3165 Only) Use this screen to set up the details of SNMPv3 users. Click Configure SNMPv3 User Profile in the REMOTE MGNT > SNMP scree n.
Chapter 14 Remot e Management Screens ZyXEL NWA-3160 Series User’s Guide 175 The following table describes the labels in this screen. T able 67 Remote Management: SNMP User Profile LABEL DESCRIPTION Enable SNMPv3A dmin Select this box to activate the SNMPv3 administration account.
Chapter 14 Remo te Management Screens ZyXEL NWA-3160 Series User’s Guide 176.
ZyXEL NWA-3160 Series User’s Guide 177 C HAPTER 15 Internal RADIUS Server The ZyXEL Device can use its interna l RADIUS server to authenticate wireless clients. It ca n also serve as a RADIUS server to authenticate other APs and their wireless clients.
Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 178 " The internal RADIUS server does not s upport domain accounts (DOMAIN/user). When you configure your W indows XP SP2 Wireless Ze ro Configuration PEAP/ MS-CHAPv2 settings, deselect the Use W indows logon name and p assword check box.
Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 179 15.3 T rusted AP Overview A trusted AP is an AP that uses the ZyXEL De vice’ s internal RADIUS server to authenticate its wireless clients. Each wireless client must ha ve a user name and password configured in the AUTH.
Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 180 Figure 109 T rusted AP Overview 1 Configure an IP address and shared secret in the T rusted AP database to authenticate an AP as a trusted AP .
Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 181 Figure 1 10 T rusted AP Screen The following table describes the labels in this screen. 15.5 Configuring T rusted Users A trusted user entry consists of a wireless client user name and password.
Chapter 15 Internal RADIUS Server ZyXEL NWA-3160 Series User’s Guide 182 Figure 1 1 1 T ruste d Users Screen The following table describes the labels in this screen. T able 70 Trusted Users LABEL DESCRIPTION # This field displays the trusted user index number .
ZyXEL NWA-3160 Series User’s Guide 183 C HAPTER 16 Certificates This chapter gives background in formation about public-key certificates and explains how to use them. 16.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authenticate users.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 184 Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List ).
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 185 Figure 1 13 Certificate Det ails 4 Use a secure method to verify that the certificate owner ha s the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may vary according to your situation.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 186 Figure 1 14 My Certificates The following table describes the labels in this screen. T able 71 My Certificates LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy XEL Device’s PKI storage space that is currently in use.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 187 16.6 Certificate File Format s The certification authority certific ate that yo u want to import ha s to be in one of these file formats: • Binary X.509: This is an ITU-T recommen dation that defines th e formats for X.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 188 16.7 Importing a Certificate Click CER TIFICA TES > My Certificates and then Import to open the My Certificate Import screen. Follow the instructions in this sc reen to save an exis ting certificate to the ZyXEL Device.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 189 16.8 Creating a Certificate Click CER TIFICA TES > My Certificates and then Create to open the My Certifica te Create screen.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 190 Common Name Select a radio button to identify th e certifica te’s owner by IP address, domain name or e-mail address. T y pe the IP address (in dotted decimal notation), domain name or e-mail address in the field provide d.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 191 After you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyXEL Device is generating the self-signe d certificate or certification request.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 192 Figure 1 17 My Certificate Details The following table describes the labels in this screen. T able 74 My Certificate Details LABEL DESCRIPTION Name This field displays the identifying name of this certificate.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 193 Certificate Path Click the Refresh button to have th is read-only te xt box display the h ierarchy of certification authorities that validate th e ce rtificate (and th e certificate itself).
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 194 16.10 T rusted CAs Click CER TIFICA TES > T rusted CAs to open the Tr u s t e d C A s screen. Thi s screen displays a summary list of certificates of the certification authorities that you ha ve set the ZyXEL Device to accept as trusted.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 195 The following table describes the labels in this screen. 16.1 1 Importing a T rusted CA ’ s Certificate Click CER TIFICA TES > T rusted CAs to open the T rusted CAs screen and then click Import to open the T rusted CA Import screen.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 196 " Y ou must remove any sp aces from the certificate’ s filename before you can import the certificate. Figure 1 19 T rusted CA Import The following table describes the labels in this screen.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 197 Figure 120 T rusted CA Details The following table describes the labels in this screen. T able 77 T rusted CA Details LABEL DESCRIPTION Name This field displays the identifying name of this certificate .
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 198 Certifica te Information These read-only fields disp lay detailed information about the certificate . T ype Thi s field displays genera l information about the certificat e. CA-signed me ans that a Certification Authorit y sig ned the certificate.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 199 SHA1 Fingerprin t This is the cert ificate’s message digest that the ZyXEL Device calculated using the SHA1 algo rithm.
Chapter 16 Certificates ZyXEL NWA-3160 Series User’s Guide 200.
ZyXEL NWA-3160 Series User’s Guide 201 C HAPTER 17 Log Screens This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs. 17.1 Configuring V iew Log The web confi gurator allows you to look at a ll of the ZyXEL Device’ s logs in one location.
Chapter 17 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 202 17.2 Configuring Log Settings T o change your ZyXEL De vice’ s log settings, click LOGS > Log Settings .
Chapter 17 Log Screens ZyXEL NWA-3160 Series User’s Guide 203 Figure 122 Log Settings The following table describes the labels in this screen. T able 79 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below .
Chapter 17 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 204 17.3 Example Log Messages This section provides descriptions of some example log messages. Log Facility Select a location from the drop down list box. The log facility allows you to log the messages to different files in the syslog server .
Chapter 17 Log Screens ZyXEL NWA-3160 Series User’s Guide 205 TELNET Login Successfully Someone has logged on to the router via te lnet. TELNET Login Fail Someone has failed to log on to the router via telnet. FTP Login Successfully Someone has logged on to the router via FT P .
Chapter 17 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 206 17.4 Log Commands Go to the command i nterpreter interface (the Comma nd Interpreter a ppendix explains how to access and use the commands).
Chapter 17 Log Screens ZyXEL NWA-3160 Series User’s Guide 207 17.5 Log Command Example This example shows how to set the ZyXEL Device to record the error logs and alerts and then view the results. ras> sys logs load ras> sys logs category error 3 ras> sys logs save ras> sys logs display access #.
Chapter 17 Log Scre ens ZyXEL NWA-3160 Series User’s Guide 208.
ZyXEL NWA-3160 Series User’s Guide 209 C HAPTER 18 VLAN This chapter discusses how to configure VLAN on the ZyXEL Device. 18.1 VLAN A VLAN (V irtual Local Area Network) allows a physical network to be partitioned into multiple logical networks. Stations on a logical network can belong to one or more groups.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 210 18.2 Configuring VLAN The ZyXEL Device allows you to configure VL AN based on SSID profile (wireless VLAN), and / or based on your RA DIUS server (RADIUS VLAN).
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 21 1 Figure 123 WIRELESS VLAN The following table describes the labels in this screen T able 84 WIRELESS VLAN FIELD DESCRIPTION Enable VIRTUAL LAN Select this box to enable VLAN tagging. Management VLAN ID Enter a number from 1 to 4094 to define this VLAN group.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 212 18.2.2 RADIUS VLAN Click VLAN > RADIUS VLAN . The following screen appe ars. Figure 124 RADIUS VLAN VLAN ID Ente r a VLAN ID number from 1 to 4094. Packets coming from the WLAN using this SSID profile are tagged with the VLAN ID number by the ZyXEL Device .
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 213 The following table describes the labels in this screen. 18.2.3 Configuring Ma nagement VLAN Example This section shows you how to create a VLAN on an Ethernet switch. By default, the port on the ZyXEL Device is a member of the management VLAN (VLAN ID 1).
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 214 Figure 125 Management VLAN Con figuration Example Perform the following steps in the switch web configurator: 1 Click VLAN under Advanced Appli c ation . 2 Click St a t i c V L A N . 3 Select the ACTIVE check box.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 215 Figure 128 VLAN-Aware Switch - VLAN S tatus Follow the instructions in the Quick S tart Guide to set up yo ur ZyXEL Device for configuration. The ZyXEL Dev ice should be connected to the VLAN-aware switch.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 216 18.2.4 Configuring Microsof t’ s IAS Server Example Dynamic VLAN assignme nt can be used with the ZyXEL Device . Dynamic VLAN assignment allows network admi nistrators to assign a speci fic VLAN (configured on the ZyXEL Device) to an individual’ s W indows Us er Account.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 217 Figure 130 New Global Security Group 2 In VLAN Group ID Pr operties , click the Members tab. • The IAS uses group memberships to determ ine whic h user accounts belong to which VLAN groups. Click the Add button and co nfigure the VLAN group details.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 218 •E n t e r a Policy friendly name that describes the policy . Each Remote Access Policy will be matched to one VLAN Gr oup. An example may be, Allow - VLAN 10 Policy . • Click Nex t . Figure 132 New Remote Access Policy for VLAN Group 2 The Conditions window displays.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 219 Figure 134 Adding VLAN Group 6 When the Permissions options screen displays, select Grant r emote access permission . • Click Nex t to grant access based on group membership. • Click the Edit Profile button.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 220 Figure 136 Authentication T ab Settings 8 Click the Encryption tab. Select the St r o n g e s t encryption option.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 221 Figure 138 Connection Attributes Screen 11 The RADIUS Attribute screen displays. From the list, three RADIUS attributes will be added: • T unnel-Medium-T ype • T unnel-Pvt-Group-ID • T unnel-T ype • Click the Add button • Select T unnel-Medium-T ype • Click the Add button.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 222 Figure 140 802 Attribute Setting for T unnel-Medium-T ype 13 Return to the RADIUS Attribute Sc reen shown as Figure 139 on page 221 . • Select T unnel-Pvt-Group-ID. • Click Add . 14 The Attribute Information screen displays.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 223 Figure 142 VLAN Attribute Setting for T unnel-T ype 17 Return to the RADIUS Attribute Sc reen shown as Figure 139 on page 221 . • Click the Close button. • The completed Advanced tab configuration should rese mble the following screen.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 224 18.2.5 Second Rx VLAN ID Example In this example, the ZyXEL Device is configured to tag packets from SSID01 with VLAN ID 1 and tag packets from SSID02 with VLAN ID 2. VLAN 1 and VLAN 2 have access to a server , S , and the Internet, as shown in the following figure.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 225 5 Enter a Second Rx VLAN ID . The following screen shows SSID03 tagged with a VLAN ID of 3 and a Second Rx VLAN ID of 4 . Figure 145 Configuring SSID: Second Rx VLAN ID Example 6 Click Apply to save these settings.
Chapter 18 VLAN ZyXEL NWA-3160 Series User’s Guide 226.
ZyXEL NWA-3160 Series User’s Guide 227 C HAPTER 19 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 19.1 Maintenance Overview The maintenanc e screens can help you view system in forma tion, upload new firmware, manage configuratio n and restart your ZyXEL Device.
Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 228 19.2.1 System St atistics Click Maintenance > Show S tatistics . Read-only information here includes port status, packet specific statistics and bridge link status . Also provided are "system up time" and "poll interval(s)".
Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 229 Figure 148 Associa tion List The following table describes the labels in this screen. 19.4 Channel Usage (NW A-3160 and NW A-3163 Only) The Channel Usage screen shows whether a channel is used by another wireless network or not.
Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 230 The following table describes the labels in this screen. 19.5 F/W Upload Screen Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a "*.bin" extension, for exampl e "NW A-3160.
Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 231 1 Do not turn off the ZyXEL De vice while firmware upload is in progress! After you see the Firmware Upload in Pr ocess screen, wait two minutes before logging into the ZyXEL Device again.
Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 232 Figure 153 Firmware Upload Error 19.6 Configuration Screen See Chapter 26 on page 257 for information on how to transf er configuration files using FTP/ TFTP commands. Click MAINTENANCE > Configuration .
Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 233 19.6.2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your ZyXEL Device. 1 Do not turn off the ZyXEL De vice while configuration file upload is in progress.
Chapter 19 Maintenance ZyXEL NWA-3160 Series User’s Guide 234 Figure 157 Configuration Upload Err or 19.6.3 Back to Factory Default s Pressing the Reset button in this section clears al l user-e ntered configuration information and returns the ZyXEL Device to its factory defau lts as shown on the screen.
235 P ART III SMT , T roubleshooting and S pecifications Introducing the SMT (237) General Setup (243) LAN Setup (245) SNMP Configuration (247) System Password (249) System Information and Diagnosis (.
236.
ZyXEL NWA-3160 Series User’s Guide 237 C HAPTER 20 Introducing the SMT This chapter describes how to access the SM T and provides an overview of its menus .
Chapter 20 Introd ucing the SMT ZyXEL NWA-3160 Series User’s Guide 238 Figure 160 Initial Screen 20.2.2 Entering the Password The login screen appears after you press [ENTER ], prompting you to enter the password, as shown below . For your first login, enter th e default password “1234”.
Chapter 20 Introdu cing the SMT ZyXEL NWA-3160 Series User’s Guide 239 " Whether or not you use administrato r authentication on RADIUS, you still use the local system p assword to log in via the console port.
Chapter 20 Introd ucing the SMT ZyXEL NWA-3160 Series User’s Guide 240 Figure 163 Menu 23 System Password 3 T ype your new system p a ssword in the New Password field (up to 30 characters), and press [ENTER]. 4 Re-type your new system password in the Retype to confirm field for confirmation and press [ENTER].
Chapter 20 Introdu cing the SMT ZyXEL NWA-3160 Series User’s Guide 241 Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below . After you enter the password, the SMT di splays the main menu, as shown next.
Chapter 20 Introd ucing the SMT ZyXEL NWA-3160 Series User’s Guide 242 Figure 164 SMT Main Menu 20.6.1 System Manage ment T erminal Interface Summary Copyright (c) 1994 - 2008 ZyXEL Communications Corp. NWA-31 60 Main Menu Getting Started Advanced Management 1.
ZyXEL NWA-3160 Series User’s Guide 243 C HAPTER 21 General Setup The chapter shows you th e information on general setu p. 21.1 General Setup Menu 1 – General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes.
Chapter 21 Gener al Setup ZyXEL NWA-3160 Series User’s Guide 244 IP Address Enter the IP addresses of the DNS servers. This field is availabl e when you select User-Defin ed in the field above.
ZyXEL NWA-3160 Series User’s Guide 245 C HAPTER 22 LAN Setup This chapter shows you how to configure the LAN on your ZyXEL Device. 22.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 – LAN Setup . From the main menu, enter “3 ” to display menu 3.
Chapter 22 LAN Set up ZyXEL NWA-3160 Series User’s Guide 246 Follow the instructions in the following table on how to configure the fields in this menu. T able 97 Menu 3.2 TCP/IP Setup FIELD DESCRIPTION IP Address Assignment Press [SP ACE BAR] and then [ENTER] to se lect Dynamic to have the ZyXEL Device obtain an IP address from a DHCP server .
ZyXEL NWA-3160 Series User’s Guide 247 C HAPTER 23 SNMP Configuration This chapter explains SNMP Configuration me nu 22. See the web configurator chapter on SNMP for background information. " This menu is available in the NW A-3160 and NW A-3163 only .
Chapter 23 SNMP Configuration ZyXEL NWA-3160 Series User’s Guide 248 Tr a p : Community T yp e the trap community , which is the password sent with each trap to the SNMP manager . Destination T yp e the IP address of the station to send your SNMP traps to.
ZyXEL NWA-3160 Series User’s Guide 249 C HAPTER 24 System Password This chapter describes how to configure the ZyXEL Device’ s system password. 24.1 System Password Y ou can configure the system password in this menu. Refer to Section 20.4 on page 239 .
Chapter 24 System Password ZyXEL NWA-3160 Series User’s Guide 250.
ZyXEL NWA-3160 Series User’s Guide 251 C HAPTER 25 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status , port status, log and trace capabiliti es and upgrades for the system software.
Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 252 Figure 171 Menu 24.1 System Maintenan ce: St atus The following table describes the fields present in this menu. Menu 24.1 - Sys tem Maintenance - Status 00:15:06 Sat.
Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 253 25.2 System Information T o get to the System Information: 1 Enter “24” to display Menu 24 – System Maintenance . 2 Enter “2” to display Menu 24.2 – System Information and Console Port Speed .
Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 254 25.2.2 Console Port Speed Y ou can set up different port speeds for the console port through Menu 24.2.2 – System Maintenance – Console Port Speed . Y our ZyXEL Device supports 9600 (default), 19200, 38400, 57600 and 11520 0 bps console port sp eeds.
Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 255 Figure 175 Menu 24.3 System Maintenance: Log and T race 3 Enter 1 from Menu 24.3 – System Maintenance – Log and T race and press [ENTER] twice to display the error log in the system.
Chapter 25 System Information and Diagnosis ZyXEL NWA-3160 Series User’s Guide 256 The following table describes the diagnostic te sts available in menu 24.
ZyXEL NWA-3160 Series User’s Guide 257 C HAPTER 26 Firmware and Configuration File Maintenance This chapter tells y ou how to backup an d restor e your configuration file as well as upload new firmware and configuratio n files using the SMT screens.
Chapter 26 Firmware and Conf iguration File Main tenance ZyXEL NWA-3160 Series User’s Guide 258 The following table is a summary . Please note that the internal filename refe rs to the filename on t.
Chapter 26 Firmw are and Co nfiguration File Maintenance ZyXEL NWA-3160 Series User’s Guide 259 Figure 178 FTP Session Example The following table describes some of the co mmands that you may see in third party FTP clients.
Chapter 26 Firmware and Conf iguration File Main tenance ZyXEL NWA-3160 Series User’s Guide 260 5 Use the TFTP client (see the example belo w) to transfer files between the ZyXEL Device and the computer . The file na me for the configuration file is rom-0 (rom-zer o , not capital o).
Chapter 26 Firmw are and Co nfiguration File Maintenance ZyXEL NWA-3160 Series User’s Guide 261 4 Enter “root” and your SMT passwo rd as requested. The default is 1234. 5 Enter “bin” to set transfer mode to binary . 6 Use “put” to transfer files from the computer to the ZyXEL Device for example “put firmware.
Chapter 26 Firmware and Conf iguration File Main tenance ZyXEL NWA-3160 Series User’s Guide 262 Note that the telnet co nnection must be active and the SMT in CI mode b efore and during the TFTP transfer . For details on TFTP commands (see following example), please consult the documentation of your TFTP client program.
ZyXEL NWA-3160 Series User’s Guide 263 C HAPTER 27 System Maintenance and Information This chapter leads you through SM T menus 24.8 and 24.10. 27.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware.
Chapter 27 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 264 " Not all commands are available in all models. Figure 181 V alid CI Commands 27.1.1 Command Synt ax • The command keywords are in courier new font. • Enter the command keywords exactly as shown, do not abbreviate.
Chapter 27 Syste m Maintenance an d Information ZyXEL NWA-3160 Series User’s Guide 265 This command sets the password protection to bl ock all ac cess attempts for five minutes after the third time an incorrect password is entered. 27.2 T ime and Date Setting The ZyXEL De vice keeps track of t he time and date.
Chapter 27 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 266 27.2.1 Resetting the T ime The ZyXEL Device resets the time in three instances: 1 On leaving menu 24.10 after making changes. 2 When the ZyXEL Device starts up, if there is a timeserver configured in menu 24.
Chapter 27 Syste m Maintenance an d Information ZyXEL NWA-3160 Series User’s Guide 267 Figure 183 T elnet Configuration on a TCP/IP Network 27.3.2 FTP Y ou can upload and download ZyXEL Dev ice fi rmware and configuratio n files using FTP . T o use this feature, your computer mu st have an FTP client.
Chapter 27 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 268 Figure 184 Menu 24.1 1 Remote Ma nagement Control The following table describes the fields in this menu. Menu 24.11 - Re mote Management Control TELNET Server: Port = 23 Access = ALL Secure Clien t IP = 0.
Chapter 27 Syste m Maintenance an d Information ZyXEL NWA-3160 Series User’s Guide 269 27.3.5 Remote Management Limit ations Remote management over LAN or W AN will not work when: 1 Y ou have disabled that service in menu 24.1 1. 2 The IP address in the Secured Client IP field (menu 24.
Chapter 27 System Maintenance and Information ZyXEL NWA-3160 Series User’s Guide 270.
ZyXEL NWA-3160 Series User’s Guide 271 C HAPTER 28 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories.
Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 272 28.2 ZyXEL Device Access and Login V I forgot the IP address for the ZyXEL Device.
Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 273 Advanced Suggestions • T ry to access the ZyXEL Device using anot her service, such as T elnet. If you can access the ZyXEL Device, check the remote manage ment settings to find out why the ZyXEL Device does not respond to HTTP .
Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 274 28.3 Internet Access V I cannot access the Internet. 1 Check the hardware connections , and make su re the LEDs are be having as expected. Se e the Quick S tart Guide and Section 28.
Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 275 28.4 Wireless Router/AP T roubleshooting V I cannot access the ZyXEL Device or ping a ny computer from the WLAN. 1 Make sure the wireless LAN is enabled on the ZyXEL Device 2 Make sure the wireless adapter on the wireless station is working properly .
Chapter 28 Trou bleshooting ZyXEL NWA-3160 Series User’s Guide 276.
ZyXEL NWA-3160 Series User’s Guide 277 C HAPTER 29 Product Specifications The following tables summarize the ZyXEL De vice’ s hardware and firmware features. T able 108 Hardware Specifications SPECIFICATIO N DESCRIPTION Dimensions 190x 135 x 40 mm Weight NW A-3160: 4 20g NW A-3163: 4 20g NW A-3165: 3 92g Power 12V DC, 1.
Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 278 Output Power NW A-3160: IEEE 802.1 1b/g 54Mbps: 16dBm 24Mbps: 17dBm 6Mbps: 18dBm 1 1Mp bs: 18dBm IEEE 802.1 1a 54Mbps: 12dBm 24Mbps: 12dBm 6Mbps: 14dBm 1 1Mp bs: 14dBm NW A-3163: IEEE 802.
Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 279 Approvals EMC: FCC Class B, CE-EMC Class B, C-T ick Class B, Safety: CSA International, CE EN60950-1 Plenum Rating The ZyXEL Device’s housing is treated with fire-retardant chemicals.
Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 280 W all-mounting Instructions Complete the following step s to hang your ZyXEL Device on a wall. " See T able 108 on p age 277 for the size of screws to use and how far a part to place them.
Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 281 Figure 185 W all-mounting Example The following are dimension s of an M4 tap screw and masonry plug used for wall mounting.
Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 282 Power over Ethernet (PoE) S pecifications Y ou can use a power over Et hernet injector to power this device . The injector must comply to IEEE 802.3af. Power Co nsumption 6 W Max Safety S tandards UL, CUL (UL60950 Third Ed ition, CSA C22.
Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 283 1 Output T ransmit Data + 2 Output T ransmit Data - 3 Receive Da ta + 4 Power + 5 Power + 6 Receive Da ta - 7 Power - 8 Power.
Chapter 29 Product Specifications ZyXEL NWA-3160 Series User’s Guide 284.
285 P ART IV Appendices and Index Setting up Y our Computer ’ s IP Address (263) W ireless LANs (299) Pop-up W indows, JavaScripts and Java Permissions (313) IP Addresses and Subnetting (319) T ext .
286.
ZyXEL NWA-3160 Series User’s Guide 287 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 288 Figure 187 WIndows 95/98 /Me: Networ k: Configuratio n Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microsoft Netwo rks.
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 289 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically .
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 290 Figure 189 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r gateway’ s IP addr ess, remove previously installed gateways.
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 291 Figure 190 Windows XP: S tart Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 191 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 292 Figure 192 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties .
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 293 Figure 194 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address, remove any previously installe d gateways in the IP Settin gs tab and click OK .
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 294 If you have previously co nfigured DNS servers, click Advanced and then the DNS tab to order them. Figure 195 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window .
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 295 Figure 196 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 197 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 296 • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your ZyXEL Device in the Router address box.
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 297 Figure 199 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box.
Appendix A Setting up Your Computer’s IP Address ZyXEL NWA-3160 Series User’s Guide 298.
ZyXEL NWA-3160 Series User’s Guide 299 A PPENDIX B W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless adapters (A, B, C).
Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 300 Figure 201 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network.
Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 301 Figure 202 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.
Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 302 Figure 203 RTS /C T S When station A sends data to the AP , it might not know that the station B is already using the channel.
Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 303 If the Fragmentation Threshold value is smaller than the RT S /C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size.
Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 304 W ireless security methods availabl e on the ZyXEL Device are data encryption, wireless client authentication, restricting access by devi ce MAC address and hiding the ZyXEL Device identity .
Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 305 Determines the network services available to authenticated users once they are connected to the network.
Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 306 For EAP-TLS authentication type, you must firs t hav e a wired connection to the network and obtain the certificate(s) from a certificate authorit y (CA).
Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 307 Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS se rver . This key expires when the wireless connection times out, disconnects or reauthentic ation times out.
Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 308 Encryption Both WP A and WP A2 improve data encryp tion by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.
Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 309 Wireless Client WP A Supplicant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A.
Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 310 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them.
Appendix B Wir eless LANs ZyXEL NWA-3160 Series User’s Guide 31 1 Antenna Characteristics Frequency An antenna in the frequency of 2.4GHz (IEEE 802.11 b) or 5GHz(IEEE 802.
Appendix B Wireless LANs ZyXEL NWA-3160 Series User’s Guide 312 For omni-directional antennas mounted on a table, desk, and so on, point the antenna up.
ZyXEL NWA-3160 Series User’s Guide 313 A PPENDIX C Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-u p windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default).
Appendix C Pop-up Windows, JavaScripts and Java Perm issions ZyXEL NWA-3160 Series User’s Guide 314 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have enabled . Figure 207 Internet Options: Privacy 3 Click Apply to save this setting.
Appendix C Pop-up Windows, JavaScripts and Java Per m issions ZyXEL NWA-3160 Series User’s Guide 315 Figure 208 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”.
Appendix C Pop-up Windows, JavaScripts and Java Perm issions ZyXEL NWA-3160 Series User’s Guide 316 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer , ch eck that JavaScripts are allowed.
Appendix C Pop-up Windows, JavaScripts and Java Per m issions ZyXEL NWA-3160 Series User’s Guide 317 Figure 21 1 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab.
Appendix C Pop-up Windows, JavaScripts and Java Perm issions ZyXEL NWA-3160 Series User’s Guide 318 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted.
ZyXEL NWA-3160 Series User’s Guide 319 A PPENDIX D IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.
Appendix D IP Addresses a nd Subnetting ZyXEL NWA-3160 Series User’s Guide 320 Figure 214 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask.
Appendix D IP Addresses and Subnetting ZyXEL NWA-3160 Series User’s Guide 321 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks.
Appendix D IP Addresses a nd Subnetting ZyXEL NWA-3160 Series User’s Guide 322 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons.
Appendix D IP Addresses and Subnetting ZyXEL NWA-3160 Series User’s Guide 323 Figure 216 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address).
Appendix D IP Addresses a nd Subnetting ZyXEL NWA-3160 Series User’s Guide 324 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet.
Appendix D IP Addresses and Subnetting ZyXEL NWA-3160 Series User’s Guide 325 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number .
Appendix D IP Addresses a nd Subnetting ZyXEL NWA-3160 Series User’s Guide 326 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
ZyXEL NWA-3160 Series User’s Guide 327 A PPENDIX E T ext File Based Auto Configuration This chapter describes how admini strators can use text configuration files to configure the wireless LAN settings for multiple APs.
Appendix E Tex t File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 328 " If adjacent APs use the same c onfiguration file, you should leave out the channel setting since they could in terfere with each other ’s wire less traffic.
Appendix E Text File Based Auto Configuration ZyXEL NWA-3160 Series User’s Guide 329 V erifying Y our Configuration File Upload Via SNMP Y ou can use SNMP management software t o disp lay the configuration file version cu rrently on the device by using the fol lowing MIB.
Appendix E Tex t File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 330 If there are any errors while processing the config uration file, the AP generates a message with the line number and reason for the first error (s ubsequent errors during the processing of an individual config uration file are not recorded).
Appendix E Text File Based Auto Configuration ZyXEL NWA-3160 Series User’s Guide 331 Figure 220 802.1X Configuration File Example Figure 221 WP A-PSK Configuration File Example !#ZYXEL PROWLAN !#VER.
Appendix E Tex t File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 332 Figure 222 WP A Configuration File Example Wlan Command Configuration File Example This example configur ation .
Appendix E Text File Based Auto Configuration ZyXEL NWA-3160 Series User’s Guide 333 Figure 223 Wlan Configuration File Example !#ZYXEL PROWLAN !#VERSION 15 wcfg ssid 1 name ssid-wep wcfg ssid 1 sec.
Appendix E Tex t File Ba sed Auto Configuration ZyXEL NWA-3160 Series User’s Guide 334.
ZyXEL NWA-3160 Series User’s Guide 335 A PPENDIX F Legal Information Copyright Copyright © 2008 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any p.
Appendix F L egal Information ZyXEL NWA-3160 Series User’s Guide 336 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off.
Appendix F Legal Information ZyXEL NWA-3160 Series User’s Guide 337 Vie wing Certifications 1 Go to http://www .zyxel.com . 2 Select your product on the ZyXEL home pag e to go to that product's page. 3 Select the certification you wish to view from this page.
Appendix F L egal Information ZyXEL NWA-3160 Series User’s Guide 338.
[Document Title] 339 A PPENDIX G Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor . If you cannot contact yo ur vendor , then contac t a ZyXEL office for the region in which you bought the dev ice.
Appendix G Custo mer Support [Document Title] 340 • Address: 1005F , ShengGao Internationa l T ower , No.137 XianXia Rd., Shanghai • W eb: http://www .zyxel.cn Cost a Rica • Support E-mail: soporte@zyxel.co.cr • Sales E-mail: sales@zyxel.co.cr • T elephone: +506-2017878 • Fax: +506-2 015098 • W eb: www .
Appendix G Custome r Support [Document Title] 341 Germany • Support E-mail: support@zyxel.de • Sales E-mail: sales@zyxel.de • T elephone: +49-2405-6909-69 • Fax: +49-2405-6909-99 • W eb: www .zyxel.de • Re g ul a r Ma i l: ZyXEL Deut schland GmbH.
Appendix G Custo mer Support [Document Title] 342 Malaysia • Support E-mail: support@zyxel.com.my • Sales E-mail: sales@zyxel.com.my • T elephone: +603-8076-9933 • Fax: +603-8076- 9833 • W eb: http://www .zyxel.com.my • Regular Mail: ZyXEL Malaysia Sdn Bhd.
Appendix G Custome r Support [Document Title] 343 Singapore • Support E-mail: support@zyxel.com.sg • Sales E-mail: sales@zyxel.com.sg • T elephone: +65-6899-6678 • Fax: +65-6899-8887 • W eb: http://www .zyxel.com.sg • Regular Mail: ZyXEL Singapore Pte Ltd.
Appendix G Custo mer Support [Document Title] 344 T urkey • Support E-mail: cso@zyxel.com.tr • T elephone: +90 212 222 55 22 • Fax: +90-212-220-2 526 • W eb: http:www .zyxel.com.tr • Address: Kaptanpasa Mahallesi Piyalep asa Bulvari Ortadogu Plaza N:14/13 K:6 Okmeydani/Sisli Istanbul/T urkey Ukraine • Support E-mail: su pport@ua.
Index ZyXEL NWA-3160 Series User’s Guide 345 Index A access 34 access point 34 access privileges 36 address assignment 157 address filtering 33 administrator authentication on RADIU S 100 Advanced Encryption St andard See AES.
Index ZyXEL NWA-3160 Series User’s Guide 346 DiffServ 109 DiffServ Code Point (DSCP) 109 DiffServ Code Points 109 DiffServ marking rule 11 0 disclaimer 335 Distribution System 106 DS field 109 DSCPs.
Index ZyXEL NWA-3160 Series User’s Guide 347 MAC address filter actio n 154 MAC filter 37 , 123 , 152 MAC filtering 279 MAC service dat a unit 94 , 11 4 , 11 5 , 11 9 , 141 main menu 241 maintenance 33 management 33 management AP 83 Management Information Base (MIB) 170 management VLAN 213 managing the device good habits 38 using FTP .
Index ZyXEL NWA-3160 Series User’s Guide 348 threshold 301 , 302 RTS/CTS handshake 94 , 11 4 , 11 5 , 11 9 , 141 S safety warnings 6 screws 280 security 34 security profiles 33 server 33 Service Set.
Index ZyXEL NWA-3160 Series User’s Guide 349 W warranty 337 note 337 wcfg command 330 WDS 34 , 36 , 11 6 web 168 web configurator 33 , 43 , 45 WEP 33 WEP encryption 123 , 130 Wi-Fi Multimedia QoS 10.
Index ZyXEL NWA-3160 Series User’s Guide 350.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il ZyXEL NWA-3160 è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del ZyXEL NWA-3160 - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso ZyXEL NWA-3160 imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul ZyXEL NWA-3160 ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il ZyXEL NWA-3160, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del ZyXEL NWA-3160.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il ZyXEL NWA-3160. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo ZyXEL NWA-3160 insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
