Manuale d’uso / di manutenzione del prodotto NWA5121-N del fabbricante ZyXEL
Vai alla pagina of 202
Quick Start Guide www .zyxel.com NWA5120 Series 802.11 a/b/g/n Unified Access P oint V e rsion 2.25 Edition 1, 01/2013 Copyright © 2013 Z yXEL Communications Corpor ation User’s Guide Default Login Details LAN IP Address http://192.
NWA1120 Series U ser’s Guide 2 IMPORT ANT! READ CAREFULL Y BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Gu ide for a series of products.
Contents Overview NWA5120 Series User’ s Guide 3 Contents Overview User ’ s Guide .............................................................................. .................................... ..................... 1 1 Introduction ..........
Contents Overview NWA5120 Series U ser’s Guide 4.
Table of Contents NWA5120 Series User’ s Guide 5 Table of Contents Contents Overview ......................... ..................................................... ............................... ................. 3 Table of Contents ..............
Table of Contents NWA5120 Series U ser’s Guide 6 3.2.2 Memory Usage ....................... ................ ............. ................ ................ ................ ........ ............ 37 Chapter 4 Monitor ................................
Table of Contents NWA5120 Series User’ s Guide 7 Chapter 8 AP Profile ............................................................... ...................................................... ........................ 73 8.1 Overview ................ ..
Table of Contents NWA5120 Series U ser’s Guide 8 1 1.3.2 Time Server Synchroniza tion ............ ................. ................ ................ ............. ................ .. ... 1 16 1 1.4 WWW Overview ............................. ......
Table of Contents NWA5120 Series User’ s Guide 9 Chapter 14 Diagnostics ................................................. ..................................................... .............. ................... 163 14.1 Overview ....... ............
Table of Contents NWA5120 Series U ser’s Guide 10.
11 P ART I User ’ s Guide.
12.
NWA5120 Series User’ s Guide 13 C HAPTER 1 Introduction 1.1 Overview This User’s Guide covers the following models: NW A5121 -N, NWA5121-NI, and NW A5123-NI. Y our NW A is a wireless AP (Access Point). It extends th e r ange of your existing wired network without additional wiring, providing easy network access to mobile users.
Chapter 1 Introductio n NWA5120 Series U ser’s Guide 14 1.1.1 MBSSID A Basic Service Set (BSS) is the set of devices fo rming a single wireless network (usually an access point and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS.
Chapter 1 Introduction NWA5120 Series User’ s Guide 15 Note: A different channel should be configured for each WLAN interface to reduce the effects of r adio interference.
Chapter 1 Introductio n NWA5120 Series U ser’s Guide 16 Web Configurator The W eb Configurator allows easy NW A setup and management using an Internet browser . This User’s Guide provides informat ion about the W eb Configurator . Command-Line Interface (CLI) The CLI allows you to use text -based commands to configure the NW A.
Chapter 1 Introduction NWA5120 Series User’ s Guide 17 1.5 LEDs The following are the LED descriptions for your NWA. Figure 3 LED 1.6 S t arting and Stopping the NW A Here are some of the wa ys to start and stop the NW A.
Chapter 1 Introductio n NWA5120 Series U ser’s Guide 18 Always use Maintenance > Shut down or the shutdown command before you turn off the NW A or remove the power .
NWA5120 Series User’ s Guide 19 C HAPTER 2 The Web Configurator 2.1 Overview The NWA W eb Configur ator allows easy management using an Internet browser . In order to use the W eb Configurator , you must: • Use Internet Explorer 7.0 and later or Firefox 1.
Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 20 4 Click Login . If you logged in using the default user name and password, the Update Admin Info screen appears. Otherwise, the dashboard appears. The Update Admin Info screen appears every time you log in using the default user name and default password.
Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 21 2.3 Navigating the W eb Configurator The following summarizes how to navigate the web configur ator from the Dashboard screen. This guide uses the NWA5123-NI screens as an exampl e. Th e screens may v ary slightly for different models.
Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 22 The icons provide the following functions. About Click About to display basic information about the NWA. Figure 6 About The following table describes labels that can appear in this screen.
Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 23 Site Map Click Site MAP to see an overview of links to the W eb Configurator screens. Click a screen’ s link to go to that screen. Figure 7 Site Map Object Reference Click Object Refe rence to open the Object Reference screen.
Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 24 The fields vary with the type of object. The followi ng table des cribes labels that can appear in this screen. CLI Messages Click CLI to look at the CLI commands sent by the W eb Configur ator .
Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 25 drag it to resize them. The following sections introduce the NWA’ s navigation panel menus and their screens.
Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 26 Maintenance Menu Use the maintenance menu screens to manage configur ation and firmware files, run diagnostics, and reboot or shut down the NW A. MON Mode Configure how the NWA monitors for rogue APs.
Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 27 2.3.3 W arning Messages W arning messages, such as those resulting from misconfiguration, displa y in a popup window .
Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 28 • Filter by mathematical operators (<, >, or =) or searching for text. 3 Select a column heading cell’s right bo rder and drag to re-size the column. 4 Select a column heading and drag an d drop it to change the column order .
Chapter 2 The Web Configurator NWA5120 Series User’ s Guide 29 2.3.4.2 Working wi th T able Entries The tables have icons for working with table entries. A sample is shown next. Y ou can often use the [Shift] or [Ctrl] key to select multiple entries to remove, activ ate, or deactivate.
Chapter 2 The Web Configurator NWA5120 Series U ser’s Guide 30.
31 P ART II T echnical Reference.
32.
NWA5120 Series User’ s Guide 33 C HAPTER 3 Dashboard 3.1 Overview Use the Dashboard screens to check status information about the NW A. 3.1.1 What Y o u Can Do in this Chapter •T h e m a i n Dashboard screen ( Section 3.2 on page 33 ) displays the NW A ’ s general device information, system status, system resource usage, and interface status.
Chapter 3 Dashboa rd NWA5120 Series U ser’s Guide 34 The following table describes the labels in this screen. T a ble 13 Dashboard LABEL DESCRIPTION Widget Settings (A) Use this link t o re-open closed widgets. Widgets that are al ready open appear grayed out.
Chapter 3 Dashboard NWA5120 Series User’ s Guide 35 Boot Status This field displays de tails about the NWA’ s startup state. OK - The NWA started up successfully . Firmware update OK - A firmware update was successful . Problematic configuratio n after firmware update - The application of the configurati on failed after a firmware upgrade.
Chapter 3 Dashboa rd NWA5120 Series U ser’s Guide 36 3.2.1 CPU Usage Use this screen to look at a chart of the NW A’s recent CPU usage. T o access this screen, click CPU Usage in the dashboard. Figure 14 Dashboard > CPU Usage The following table describes the labels in this screen.
Chapter 3 Dashboard NWA5120 Series User’ s Guide 37 3.2.2 Memory Usage Use this screen to look at a chart of the NW A’s re cent memory (RAM) usage. T o access this screen, click Memory Usage in the dashboard. Figure 15 Dashboard > Memory Usage The following table describes the labels in this screen.
Chapter 3 Dashboa rd NWA5120 Series U ser’s Guide 38.
NWA5120 Series User’ s Guide 39 C HAPTER 4 Monitor 4.1 Overview Use the Monitor screens to check status and statistics information. 4.1.1 What Y o u Can Do in this Chapter •T h e LAN Status screen ( Section 4.3 on page 40 ) displays general LAN interface information and packet statistics.
Chapter 4 Mon itor NWA5120 Series U ser’s Guide 40 4.3 LAN S t atus Use this screen to look at general LAN interface information and packet statistics. T o access this screen, click Monitor > LAN Status . Figure 16 Monitor > LAN Status The following table describes the labels in this screen.
Chapter 4 Monitor NWA5120 Series User’ s Guide 41 Action Use this field to get or to upda te the IP address for the i nterface. Click Renew to send a new DHCP request to a DHCP server . If the in terface cannot use one of thes e ways to get or to update its IP addr ess, this field displays n/a .
Chapter 4 Mon itor NWA5120 Series U ser’s Guide 42 4.3.1 LAN St atus Graph Use the port statistics graph to loo k at a line graph of pack et statistics for the NWA’ s physical LAN port. T o view , in the LAN Status screen click the Switch to Graphic View button.
Chapter 4 Monitor NWA5120 Series User’ s Guide 43 4.4 Radio List Use this screen to view statistics for the NW A’ s wireless radio tr ansmitters. T o access this screen, click Monitor > Wireless > AP Information > Radio List .
Chapter 4 Mon itor NWA5120 Series U ser’s Guide 44 4.4.1 AP Mode Radio Information This screen allows you to view a selected radio’ s SSID details, wireless traffic statistics and station count for the preceding 24 hours. T o access this window , select a radio and click the More Information button in the Radio List screen.
Chapter 4 Monitor NWA5120 Series User’ s Guide 45 The following table describes the labels in this screen. 4.5 S t ation List Use this screen to view statistics pertaining to the associated stations (or “wireless clients”). Click Monitor > Wireless > Stati on Info to access this screen.
Chapter 4 Mon itor NWA5120 Series U ser’s Guide 46 The following table describes the labels in this screen. 4.6 Rogue AP Use this screen to view informatio n about suspected rogue APs. Click Monitor > Wireless > Rogue AP > Detected Device to access this screen.
Chapter 4 Monitor NWA5120 Series User’ s Guide 47 4.7 V iew Log Log messages are stored in two separate logs, one for regular log message s and one for debugging messages. In the regular log, you can look at all the log messages by se lecting All Logs , or you can select a specific category of log messages (for ex ample, user).
Chapter 4 Mon itor NWA5120 Series U ser’s Guide 48 Events that gener ate an alert (as well as a log message) display in red. R egular logs display in black. Click a column’ s heading cell to sort the ta ble entries by that column’ s criteria . Click the heading cell again to reverse the sort order .
Chapter 4 Monitor NWA5120 Series User’ s Guide 49 The W eb Configurator saves the filter settings if y ou leave the View Log screen and return to it later . Destinat ion Address This displays when you show the filt er . T ype the IP address of the desti nation of the incoming packet wh en the log m essage was generated.
Chapter 4 Mon itor NWA5120 Series U ser’s Guide 50.
NWA5120 Series User’ s Guide 51 C HAPTER 5 LAN Setting 5.1 Overview This chapter describes how you can configur e the management IP address of your NW A. The Internet Protocol (IP) address identifies a device on a network. Ev ery networking device (including computers, servers, routers, printers , etc.
Chapter 5 LAN Setting NWA5120 Series U ser’s Guide 52 5.2 LAN Setting Use this screen to configure the IP address for your NW A. T o access this screen, click Configuration > LAN Setting . Figure 24 Configuration > LAN Setting Each field is described in the following table.
NWA5120 Series User’ s Guide 53 C HAPTER 6 Wireless 6.1 Overview This chapter discusses how to configure the wireless network settings in your NW A. The following figure provides an example of a wireless network. Figure 25 Example of a Wireless Network The wireless network is the part in the blue circle.
Chapter 6 Wireless NWA5120 Series U ser’s Guide 54 6.1.2 What Y ou Need to Know The following terms and concepts may help as you read this chapter . St ation / Wireless Client A station or wireless client is any wireless-capable de vice that can connect to an AP using a wireless signal.
Chapter 6 Wireless NWA5120 Series User’ s Guide 55 Each field is described in the following table. 6.3 MON Mode Use this screen to assign APs either to the rogue AP list or the friendly AP list.
Chapter 6 Wireless NWA5120 Series U ser’s Guide 56 Click Configuration > Wireless > MON Mode to access this screen. Figure 27 Configuration > Wireless > MON Mode Each field is described in the following table.
Chapter 6 Wireless NWA5120 Series User’ s Guide 57 6.3.1 Add/Edit Rogue/Friendly List Click Add or sele ct an AP and click the Edit button in the Configuration > Wireless > MON Mode table to display this screen.
Chapter 6 Wireless NWA5120 Series U ser’s Guide 58 Each field is described in the following table. 6.4.1 Disassociating an d Delaying Connections When your AP becomes overloaded, there are two ba sic responses it can take. The first one is to “delay” a client connection.
Chapter 6 Wireless NWA5120 Series User’ s Guide 59 until it can afford the bandwidth or the laptop is picked up by a different AP with bandwidth to spare. Figure 30 Delaying a Connection The second response your AP can take is to kick the connections that are pushing it ov er its balanced bandwidth allotment.
Chapter 6 Wireless NWA5120 Series U ser’s Guide 60 6.5 DCS Use this screen to configure dynamic radio channel selection. Click Configuration > Wireless > DCS to access this screen. Figure 32 Configuration > Wireless > DCS Each field is described in the following table.
Chapter 6 Wireless NWA5120 Series User’ s Guide 61 DCS Sensitivity Level Select the AP’ s sensitivity lev el toward other c hannels. Options are High , Medium , and Low .
Chapter 6 Wireless NWA5120 Series U ser’s Guide 62 6.6 T echnical Reference The following section contains additional technical information about the features described in this chapter .
Chapter 6 Wireless NWA5120 Series User’ s Guide 63 Finally , there is an alternative four channel scheme fo r ETSI, consisting of channels 1, 5, 9, 13.
Chapter 6 Wireless NWA5120 Series U ser’s Guide 64.
NWA5120 Series User’ s Guide 65 C HAPTER 7 User 7.1 Overview This chapter describes how to set up user accounts and user settings for the NWA. 7.1.1 What Y o u Can Do in this Chapter •T h e User screen (see Section 7.2 on page 66 ) provides a summary of all user accounts.
Chapter 7 User NWA5120 Series U ser’s Guide 66 7.2 User Summary The User screen provides a summary of all user accounts. T o access this screen click Configuration > Object > User . Figure 36 Configuration > Object > User The following table describes the labels in this screen.
Chapter 7 User NWA5120 Series User’ s Guide 67 • Alphanum eric A-z 0-9 (there is no unicode su pport) • _ [underscores] •- [ d a s h e s ] The first character must be alphabetical (A -Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive.
Chapter 7 User NWA5120 Series U ser’s Guide 68 The following table describes the labels in this screen. 7.3 Setting This screen controls default settings, login settings, lockout settings, and other user settings for the NW A.
Chapter 7 User NWA5120 Series User’ s Guide 69 T o access this screen, login to the W e b Configurator , and click Configuration > Object > User > Setting . Figure 38 Configuration > Object > User > Setting The following table describes the labels in this screen.
Chapter 7 User NWA5120 Series U ser’s Guide 70 7.3.1 Edit User Authen tication Timeout Settings This screen allows you to set the default authentication timeout settings for the selected type of user account.
Chapter 7 User NWA5120 Series User’ s Guide 71 The following table describes the labels in this screen. T a ble 33 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User T ype This read-only field iden ti fies the type of user acco unt for which you are configuring the default settin gs.
Chapter 7 User NWA5120 Series U ser’s Guide 72.
NWA5120 Series User’ s Guide 73 C HAPTER 8 AP Profile 8.1 Overview This chapter shows you how to configure preset profiles for the NW A. 8.1.1 What Y o u Can Do in this Chapter •T h e Radio screen ( Section 8.2 on page 74 ) creates radio configur ations that can be used by the APs.
Chapter 8 AP Profile NWA5120 Series U ser’s Guide 74 WEP WEP (Wired Equivalent Priv acy) encryption scrambl es all data packets transmitted between the AP and the wireless stations associated with it in order to keep network communications pr ivate.
Chapter 8 AP Profile NWA5120 Series User’ s Guide 75 Rem ov e Click this to remove the select ed radio profile. Activ ate T o turn on an entry , sele ct it and click Activate . Inactiv ate T o turn off an entry , select it an d click Inactivate . Object Reference Click th is to view which o ther objects ar e linked to the sele cted radio profile.
Chapter 8 AP Profile NWA5120 Series U ser’s Guide 76 8.2.1 Add/Edit Radio Profile This screen allows you to create a new radio profile or edit an existing one. T o access this screen, click the Add button or select a radio profile from the list and click the Edit button.
Chapter 8 AP Profile NWA5120 Series User’ s Guide 77 The following table describes the labels in this screen. T a ble 35 Configuration > Object > AP Profile > Add/Edit Profile LABEL DESCRIPTION Hide / Show Adv anced S etting s Click this to hide or show the Advanced Settings in this window .
Chapter 8 AP Profile NWA5120 Series U ser’s Guide 78 Enable A-MSDU Aggregation Select this to en able A-MSDU aggregation. Mac Service Data Unit (MSDU) aggregation collects Ethernet fr ames without any of their 802.11n headers and wraps the header- less payload in a single 802.
Chapter 8 AP Profile NWA5120 Series User’ s Guide 79 8.3 SSID The SSID screens allow you to configure three differe nt types of profiles for your network ed APs: an SSID list, which can assign speci.
Chapter 8 AP Profile NWA5120 Series U ser’s Guide 80 Note: Y ou can have a maximum of 32 SSID profiles on the NWA. Figure 42 Configuration > Object > AP Profile > SSID List The following table describes the labels in this screen.
Chapter 8 AP Profile NWA5120 Series User’ s Guide 81 8.3.1.1 Add/Ed it SSID Profile This screen allows you to create a new SSID profile or edit an existing one. T o access this screen, click the Add button or select an SSID profile from the list and click the Edit button.
Chapter 8 AP Profile NWA5120 Series U ser’s Guide 82 8.3.2 Security List This screen allows you to manage wireless security configurations that can be used by your S S IDs. Wireless security is implemented strictly between the AP broadcasting the SSID and the stations that are connected to it.
Chapter 8 AP Profile NWA5120 Series User’ s Guide 83 Note: Y ou can have a maximum of 32 security profiles on the NWA. Figure 44 Configuration > Object > AP Profile > SSID > Security List The following table describes the labels in this screen.
Chapter 8 AP Profile NWA5120 Series U ser’s Guide 84 Note: This screen’ s options change based on th e Security Mode selected. Only the default screen is displayed here.
Chapter 8 AP Profile NWA5120 Series User’ s Guide 85 The following table describes the labels in this screen. T a ble 39 SSID > Security Profile > Add/Edit Security Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanu meric characters for the pro file name.
Chapter 8 AP Profile NWA5120 Series U ser’s Guide 86 8.3.3 MAC Filter List This screen allows you to create and manage security configur ations that can be used by your SSIDs. T o access this screen click Configuration > Object > AP Profile > SSID > MAC Filter List .
Chapter 8 AP Profile NWA5120 Series User’ s Guide 87 The following table describes the labels in this screen. 8.3.3.1 Add/Edit MAC Filter Profile This screen allows you to create a new MAC filtering profile or edit an existing one. T o access this screen, click the Add button or select a MAC filter profile from the list and click the Edit button.
Chapter 8 AP Profile NWA5120 Series U ser’s Guide 88 8.3.4 Layer-2 Isolation List Layer-2 isolation is used to prevent wireless clients associated with your NWA from communicating with other wireless clients, APs, computers or routers in a network.
Chapter 8 AP Profile NWA5120 Series User’ s Guide 89 This screen allows you to specify devices you want the users on y our wireless networks to access. T o access this screen click Conf iguration > Object > AP Profi le > SSID > Layer-2 Iso lation List .
Chapter 8 AP Profile NWA5120 Series U ser’s Guide 90 Note: Y ou need to know the MAC address of ea ch wireless client, AP , computer or router that you want to al low to communicate with the NW A's wireless clients.
NWA5120 Series User’ s Guide 91 C HAPTER 9 MON Profile 9.1 Overview This screen allows you to set up monitor mode configur ations that allow your NWA to scan for other wireless devices in the vicinity . Once detected, you can use the Wireless > MON Mode screen ( Section 6.
Chapter 9 MON Profile NWA5120 Series U ser’s Guide 92 9.2.1 Add/Edit MON Profile This screen allows you to create a new monitor mode profile or edit an existing one. T o acce ss this screen, click the Add button or select and existing monitor mode profile and click the Edit button.
Chapter 9 MON Profile NWA5120 Series User’ s Guide 93 The following table describes the labels in this screen. 9.3 T echnical Reference The following section contains additional technical information about the features described in this chapter .
Chapter 9 MON Profile NWA5120 Series U ser’s Guide 94 or set up their own rogue APs in order to capture information from wireless clients. If a scan reveals a rogue AP , you can use commercially-av ailable software to physically locate it.
NWA5120 Series User’ s Guide 95 C HAPTER 10 Certificates 10.1 Overview The NWA can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-priv ate key pairs. A certificate contains the certificate owner ’s identity and public k ey .
Chapter 10 Certif icates NWA5120 Series U ser’s Guide 96 5 Additionally , Jenny uses her own private k ey to sign a message and Tim uses Jenny’ s public key to verify the message.
Chapter 10 Certificates NWA5120 Series User’ s Guide 97 • Binary PKCS#12: This is a format for tr ansferri ng public key and private ke y certificates.The private k ey in a PKCS #12 file is within a passw ord-encrypted envelope. The file’ s password is not connected to your certificate’ s public or private passwords.
Chapter 10 Certif icates NWA5120 Series U ser’s Guide 98 10.2 My Certificates Click Configuration > Object > Certifi cate > My Certificates to open this screen.
Chapter 10 Certificates NWA5120 Series User’ s Guide 99 Subject This field displays identi fying information about the certificate’s owner , such as CN (Common Name), OU (Organizational Unit or department), O (Organ ization or company) and C (Country).
Chapter 10 Certif icates NWA5120 Series U ser’s Guide 100 10.2.1 Add My Certificates Click Configuration > Object > Certifi cate > My Certificates and then the Add icon to open the Add My Certificates screen.
Chapter 10 Certificates NWA5120 Series User’ s Guide 101 The following table describes the labels in this screen. T a ble 47 Configuration > Ob ject > Cer tif icate > My Certificates > Add LABEL DESCRIPTION Name T ype a name to identify this certificat e.
Chapter 10 Certif icates NWA5120 Series U ser’s Guide 102 If you configured the Add My Certificates screen to have the NW A enroll a certificate and the certificate enrollment is not successful, you see a screen with a Return button that takes you back to the Add My Certificates screen.
Chapter 10 Certificates NWA5120 Series User’ s Guide 103 10.2.2 Edit My Certificates Click Configuration > Object > Certifi cate > My Certificates and then the Edit icon to open the My Certificate Edit screen. Y ou can use this screen to vi ew in-depth certificate information and change the certificate’ s name.
Chapter 10 Certif icates NWA5120 Series U ser’s Guide 104 The following table describes the labels in this screen. T a ble 48 Configuration > Object > Certificate > My Certificates > Edit LABEL DESCRIPTION Name This field disp lays the ident ifying name of this certif icate.
Chapter 10 Certificates NWA5120 Series User’ s Guide 105 10.2.3 Import Certificates Click Configuration > Object > Certifi cate > My Certificates > Import to open the My Certificate Impor t screen. F ollow the instructions in this screen to save an existing certificate to the NWA.
Chapter 10 Certif icates NWA5120 Series U ser’s Guide 106 Y ou must remove any spaces in the certificate’s filename before y ou can import it. Figure 57 Configuration > Object > Certificate > My Certificates > Import The following table describes the labels in this screen.
Chapter 10 Certificates NWA5120 Series User’ s Guide 107 being trustworthy; thus y ou do not need to import any certificate that is signed by one of these certificates. Figure 58 Configuration > Object > Certificate > T rusted Certificates The following table describes the labels in this screen.
Chapter 10 Certif icates NWA5120 Series U ser’s Guide 108 10.3.1 Edit T rusted Certificates Click Configuration > Object > Cert ific ate > Trust ed Certific ates and then a certificate’ s Edit icon to open the Trusted Certificates Edit screen.
Chapter 10 Certificates NWA5120 Series User’ s Guide 109 The following table describes the labels in this screen. T a ble 51 Configuration > Object > Certificate > T rusted Certificates > Edit LABEL DESCRIPTION Name This field display s the identify ing name of this certificate.
Chapter 10 Certif icates NWA5120 Series U ser’s Guide 11 0 10.3.2 Import T rusted Certificates Click Configuration > Object > Certificat e > Trusted Certificates > Import to open the Import Trusted Certificates screen. Follow the instructions in this screen to sa ve a trusted certificate to the NW A.
Chapter 10 Certificates NWA5120 Series User’ s Guide 111 Note: Y ou mus t remove any spaces from t he certificate’s filename be fore you can import the certificate. Figure 60 Configuration > Object > Certificate > T rusted Certificates > Import The following table describes the labels in this screen.
Chapter 10 Certif icates NWA5120 Series U ser’s Guide 11 2.
NWA5120 Series User’ s Guide 11 3 C HAPTER 11 System 1 1.1 Overview Use the system screens to configure general NW A settings. 1 1.1.1 What Y ou Can Do in this Chapter •T h e Host Name scre en ( Section 11.2 on page 113 ) configures a unique name for the NW A in your net wor k.
Chapter 11 System NWA5120 Series U ser’s Guide 11 4 The following table describes the labels in this screen. 1 1.3 Date and Time For effectiv e scheduling and logging, the NWA system time must be accurate. The NWA has a software mechanism to set the time manually or ge t the current time an d date from an external server .
Chapter 11 System NWA5120 Series User’ s Guide 11 5 The following table describes the labels in this screen. T a ble 54 Configuration > System > Dat e/Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the present time of your NWA.
Chapter 11 System NWA5120 Series U ser’s Guide 11 6 1 1.3.1 Pre-defined NTP Time Servers List When you turn on the NW A for the first time, the date and time start at 2003-01-01 00:00:00. The NW A then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers.
Chapter 11 System NWA5120 Series User’ s Guide 11 7 The Current Time and Current Date fields will display the appropriate settings if the synchronization is successful. If the synchronization w as not successful, a log displays in the View Log screen.
Chapter 11 System NWA5120 Series U ser’s Guide 11 8 1 1.4 WWW Overview The following figure shows secure and insecure ma nagement of the NWA coming in from the W AN. HT TPS and SSH access are secure. HT TP , T e lnet, and FTP management access are not secure.
Chapter 11 System NWA5120 Series User’ s Guide 11 9 HT TPS on the NWA is used so that you can securely access the NW A using the W eb Configurator . The SSL protocol specifies that the HT TPS server.
Chapter 11 System NWA5120 Series U ser’s Guide 120 1 1.4.4 Configuring WWW Service Control Click Configuration > System > WWW to open the WWW screen. Use this screen to specify HT TP or HT TPS settings. Figure 66 Configuration > System > WWW > Service Control The following table describes the labels in this screen.
Chapter 11 System NWA5120 Series User’ s Guide 121 1 1.4.5 HTTPS Example If you haven’t changed the default HT TPS port on the NWA, th en in your browser enter “https:// NW A IP Address/” as the web site address where “N WA IP Address” is the IP address or domain name of the NWA you wish to access.
Chapter 11 System NWA5120 Series U ser’s Guide 122 Figure 68 Security Certificate 1 (Firefox) Figure 69 Security Certificate 2 (Firefox) 1 1.4.5.3 Avoiding Br owser W arning Messages Here are the ma.
Chapter 11 System NWA5120 Series User’ s Guide 123 • For the browser to trust a self-signed certificat e, import the self-signed certificate into y our operating system as a trusted certificate.
Chapter 11 System NWA5120 Series U ser’s Guide 124 1 1.4.5 .5 Inst alling the CA ’ s Certificate 1 Double click the CA ’s trusted certificate to produce a screen similar to the one shown next. 2 Click Install Certificate and follow the wizard as shown earlier in this appendix.
Chapter 11 System NWA5120 Series User’ s Guide 125 1 Click Next to begin the wizard. 2 The file name and path of the certificate you do uble-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate.
Chapter 11 System NWA5120 Series U ser’s Guide 126 3 Enter the password given to you by the CA. 4 Have the wizard determine where the certificate should be sav ed on your computer or select Place all cert ificates i n the fo llowing st ore and choose a different location.
Chapter 11 System NWA5120 Series User’ s Guide 127 5 Click Finish to complete the wizard and begin the import process. 6 Y ou should see the following screen when the certificate is correctly installed on y our computer .
Chapter 11 System NWA5120 Series U ser’s Guide 128 2 When Authenticate Client Certificates is selected on the NWA, the following screen asks y ou to select a personal certificate to send to the NWA. Th is screen displays even if you only have a single certificate as in the example.
Chapter 11 System NWA5120 Series User’ s Guide 129 1 1.5.1 How SSH Works The following figure is an example of how a secure connection is estab lished between two remote hosts using SSH v1. Figure 72 How SSH v1 W orks Ex ample 1 Host Identification The SSH client sends a connection request to the S SH server .
Chapter 11 System NWA5120 Series U ser’s Guide 130 1 1.5.2 SSH Implement ation on the NW A Y our NWA supports S SH versions 1 and 2 using RS A authentication and four encryption methods (AES, 3DES, Archfour , and Blowfish). The SSH server is implemented on the NWA for management using port 22 (by default).
Chapter 11 System NWA5120 Series User’ s Guide 131 1 1.5.5 Examples of S ecure T elnet Using SSH This section shows two examples using a command interface and a gr aphical interface SSH client program to remotely access the NW A. The confi guration and connection steps are similar for most SSH client progr ams.
Chapter 11 System NWA5120 Series U ser’s Guide 132 2 Enter “ ssh –1 192.168.1.2 ” . This command forces your computer to connect to the NW A using SSH version 1. If th is is the first time you are connecting to the NW A using SSH, a message displays prompting you to sa ve the host information of the NWA.
Chapter 11 System NWA5120 Series User’ s Guide 133 1 1.7 FTP Y ou can upload and download the NW A’s firmware and configuration files using FTP . T o use this feature, your computer must have an FTP client. See Chapter 13 on page 151 for more information about firmware and configuration files.
Chapter 11 System NWA5120 Series U ser’s Guide 134 (SNMPv1), version two (SNMPv2c), and version th ree (SNMPv3). The next figure illustrates an SNMP management operation. Figure 79 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager .
Chapter 11 System NWA5120 Series User’ s Guide 135 1 1.8.1 Supported MIBs The NWA supports MIB II that is defined in RFC - 1213 and RFC-1215. The NW A also supports private MIBs (ZYXEL -ES-CAPWAP .MIB, ZYXEL -ES-COMMO N.MIB, ZYXEL -ES-HYBRIDAP .MIB, ZYXEL -ES- PROWLAN.
Chapter 11 System NWA5120 Series U ser’s Guide 136 The following table describes the labels in this screen. T a ble 61 Configuration > System > SNMP LABEL DESCRIPTION Enable Select the check box to allow or disa llow users to acce ss the NWA using SNMP .
Chapter 11 System NWA5120 Series User’ s Guide 137 1 1.8.4 Adding or Editing an SNMPv3 User Profile This screen allows you to add or edit an SNMP v3 user profile. T o access this screen, click the Configuration > System > SNMP screen’ s Add button or select a SNMPv3 user profile from the list and click the Edit button.
Chapter 11 System NWA5120 Series U ser’s Guide 138.
NWA5120 Series User’ s Guide 139 C HAPTER 12 Log and Report 12.1 Overview Use the system screens to configur e daily reporting and log settings. 12.1.1 What Y ou Can Do In this Chapter •T h e Email D aily Report screen ( Section 12.2 on page 139 ) configures how and where to send daily reports and what reports to send.
Chapter 12 Log and Report NWA5120 Series U ser’s Guide 140 Click Configuration > Log & Report > Email Daily Report to display the following screen.
Chapter 12 Log and Report NWA5120 Series User’ s Guide 141 12.3 Log Setting These screens control log messages and alerts. A log message stores the information for viewing (for exampl e, in the Monitor > View Lo g screen) or regular e-mailing later , and an alert is e- mailed immediately .
Chapter 12 Log and Report NWA5120 Series U ser’s Guide 142 12.3.1 Log Setting T o access this screen, click Configuration > Log & Report > Log Setting . Figure 83 Configuration > Lo g & Report > Log Setting The following table describes the labels in this screen.
Chapter 12 Log and Report NWA5120 Series User’ s Guide 143 12.3.2 Edit System Log Settings This screen controls the detailed settings for each log in the system log (which includes the e-mail profiles). Select a system log entry in the Log Setting screen and click the Edit icon.
Chapter 12 Log and Report NWA5120 Series U ser’s Guide 144 The following table describes the labels in this screen. T a ble 65 Configuration > Log & Report > Log Set ting > Edit System Log Se tting LABEL DESCRIPTION E-Mail Server 1/2 Active Sel ect this to send log me ssages and al erts according to the information in this section.
Chapter 12 Log and Report NWA5120 Series User’ s Guide 145 E-mail Se rver 2 Use the E-Mail Server 2 drop -down list to c hange the se ttings for e -mailing logs to e-mail server 2 for all log categories. Using the System Log drop-down list to disable all logs overrides your e-mai l server 2 settin gs.
Chapter 12 Log and Report NWA5120 Series U ser’s Guide 146 12.3.3 Edit Remote Server This screen controls the settings for each log in the remote server (syslog).
Chapter 12 Log and Report NWA5120 Series User’ s Guide 147 The following table describes the labels in this screen. 12.3.4 Active Log Summary This screen allows you to view and to edit what information is included in the system log, e-mail profiles, and remote servers at the same time.
Chapter 12 Log and Report NWA5120 Series U ser’s Guide 148 example, where and how often log information is e-mailed or re mote server names). T o access this screen, go to the Log Setting screen, and click the Active Log Summary button.
Chapter 12 Log and Report NWA5120 Series User’ s Guide 149 The following table describes the fields in this screen. T a ble 67 Configuration > Log & Report > Log Se tting > Active Lo g .
Chapter 12 Log and Report NWA5120 Series U ser’s Guide 150 E-mail Server 1 E-mail Select whether each category of events should be inclu ded in the log messages wh en it is e-mailed (green check mark) and/or in aler ts (red exclamati on point) for the e-mail settings speci fied in E-Mail Server 1 .
NWA5120 Series User’ s Guide 151 C HAPTER 13 File Manager 13.1 Overview Configuration files define the NW A’s settings. Shell scripts are files of commands that you can store on the NW A and run when you need them. Y ou can apply a configuration file or run a shell script without the NW A restarting.
Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 152 While configuration files and shell scripts have th e same syntax, the NWA applies configuration files differently than it runs shell scripts. This is explained below . Y ou have to ru n the aforemention ed example as a shell script because the first command is run in Privilege mode.
Chapter 13 File Manager NWA5120 Series User’ s Guide 153 configuration files from the NWA to y our computer and upload configur ation files from your computer to the NWA. Once your NW A is configured and functioning properly , it is highly recommended that you back up your configur ation file before making further conf iguration changes.
Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 154 The following table describes the labels in this screen. T a ble 69 Maintenance > File Manager > Configuration File LABEL DESCRIPTION Ren am e Use this button to change the label of a configur ation file on the NWA.
Chapter 13 File Manager NWA5120 Series User’ s Guide 155 Apply Use this button to ha ve the NWA us e a specific configur ation file. Click a configuration file ’ s row to select it and cl ick Apply to have the NWA use that configuration file.
Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 156 13.2.1 Example of Configurati on File Download Using FTP The following example gets a configuration file named startup-config.conf from the NW A and saves it on the computer . 1 Connect your computer to the NW A.
Chapter 13 File Manager NWA5120 Series User’ s Guide 157 8 Use "get” to download files. T ran sfer the configuration file on the NW A to your computer . T ype get followed by the name of the configur ation file. This examples uses get startup-conf ig.
Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 158 The firmware up date can take up to five minutes. Do not turn off or reset the NW A while the firmware update is in progress! Figure 88 Maintenance > File Manager > Firmware Package The following table describes the labels in this screen.
Chapter 13 File Manager NWA5120 Series User’ s Guide 159 13.3.1 Example of Firm ware Upload Using FTP This procedure requires the NWA’ s firmware. Download the firmware package from www.zyx el.com and unzip it. The firmware file uses a .bin ex tension, for example, "225AAHY0C0.
Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 160 Click Maintenance > File Manager > Shell Script to open this screen. Use the Shell Script screen to store, name, download, upload and run shell script files. Y ou can store multiple shell script files on the NWA at the sam e time.
Chapter 13 File Manager NWA5120 Series User’ s Guide 161 # This column displa ys the number for each shell script file entry . File Name This column displays t he label that identifie s a shell script file. Size This column displa ys the size (in KB) of a sh ell script file.
Chapter 13 Fil e Manager NWA5120 Series U ser’s Guide 162.
NWA5120 Series User’ s Guide 163 C HAPTER 14 Diagnostics 14.1 Overview Use the diagnostics screen for troubleshooting. 14.1.1 What Y ou Can Do in this Chapter •T h e Dia gnostics screen ( Section 14.
Chapter 14 Diagnostics NWA5120 Series U ser’s Guide 164 Collect Now Click this to have the NWA create a new diagnostic file. Download Click this t o save the most r e cent diagnostic file to a computer .
NWA5120 Series User’ s Guide 165 C HAPTER 15 Reboot 15.1 Overview Use this to restart the device. 15.1.1 What Y ou Need T o Know If you applied changes in the W eb configurator , these were saved automatically and do not change when you reboot.
Chapter 15 Reboo t NWA5120 Series U ser’s Guide 166.
NWA5120 Series User’ s Guide 167 C HAPTER 16 Shutdown 16.1 Overview Use this screen to shutdown the device. Always use Maintena nce > Shut down > Shut down or the shutdown command before you turn off the NW A or remove the power . Not doing so can cause the firmware to become corrupt.
Chapter 16 Shutdown NWA5120 Series U ser’s Guide 168.
NWA5120 Series User’ s Guide 169 C HAPTER 17 Troubleshooting 17.1 Overview This chapter offers some suggestions to solve problems you might encounter .
Chapter 17 Tro ubleshooting NWA5120 Series U ser’s Guide 170 5 If the problem continues, contact the v e ndor . 17.3 NW A Access and Login I forgot the IP address for the NWA. 1 The default IP address is 192.168.1.2 . 2 If you changed the IP address and have forgotten it, you hav e to reset the device to its factory defaults.
Chapter 17 Troubl eshooting NWA5120 Series User’ s Guide 171 • T ry to access the NW A using another service, such as T elnet. If you can access the NW A, check the remote management settings to find out why the NW A does not respond to HT TP .
Chapter 17 Tro ubleshooting NWA5120 Series U ser’s Guide 172 2 Make sure the NW A is connected to a broadband modem or router with Internet access and your computer is set to obtain an dynamic IP address.
Chapter 17 Troubl eshooting NWA5120 Series User’ s Guide 173 1 Make sure the wireless LAN (wireless radio) is enabled on the NW A . 2 Make sure the r adio or at least one of the NW A’s r adios is operating in AP mode. 3 Make sure the wireless adapter (installed on your computer) is working properly .
Chapter 17 Tro ubleshooting NWA5120 Series U ser’s Guide 174 • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form.
Chapter 17 Troubl eshooting NWA5120 Series User’ s Guide 175 In the Monitor > Wireless > AP Information > Radio List screen, there is no load balancing indicato r associated with any AP s assigned to the load balancing task.
Chapter 17 Tro ubleshooting NWA5120 Series U ser’s Guide 176.
NWA5120 Series User’ s Guide 177 A PPENDIX A Importing Certificates This appendix shows you how to import public key certificates into y our web browser . Public key certificates are used by web browsers to ensure that a secure web site is legitimate.
Appendix A Importing Certificates NWA5120 Series U ser’s Guide 178 1 If your device’ s W eb Configurator is set to use SSL certifi cation, then the first time you browse to it you are presented with a certification erro r . 2 Click Continue to this website (not recommended) .
Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 179 4 In the Certificate dialog box, click Install Cer tificate . 5 In the Certificate Import Wizard , click Next .
Appendix A Importing Certificates NWA5120 Series U ser’s Guide 180 6 If you want Internet Explorer to Automatically select certificat e store based on the typ e of certificate , click Next again and then go to step 9. 7 Otherwise, select Place all certificates in the following store and then click Browse .
Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 181 9 In the Completing the Certificate Import Wizard screen, click Finish . 10 If you are presented with another Security Warning , click Yes . 11 Finally , click OK when presented with the successful certificate installation message .
Appendix A Importing Certificates NWA5120 Series U ser’s Guide 182 12 The next time you start Internet Explorer and go to a Z yXEL W eb Configurator page, a sealed padlock icon appears in the address bar . Click it to view the page’s Website Identification information.
Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 183 Removing a Certificate in Internet Explorer This section shows you how to remove a public key ce rtificate in Internet Explorer 7 on Windows XP . 1 Open Internet Explorer and click Tools > Internet Options .
Appendix A Importing Certificates NWA5120 Series U ser’s Guide 184 3 In the Certificates dialog box, click the Trusted Root Certif icates Authorities tab, select the certificate that you want to delete, and then click Remove . 4 In the Certificates confirmation, click Yes .
Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 185 Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however , the screens can also apply to Firefox 2 on all platforms.
Appendix A Importing Certificates NWA5120 Series U ser’s Guide 186 Inst alling a St and-Alone Ce rtificate File in Firefox Rather than browsing to a Z y XEL W eb Configurator and installing a public key certificate when prompted, you can install a stand-alone certif icate file if one has been issued to y ou.
Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 187 3 In the Certificate Manager dialog bo x, click Web Sites > Import . 4 Use the Select File dialog box to locate the certificate and then click Open .
Appendix A Importing Certificates NWA5120 Series U ser’s Guide 188 1 Open Firefox and click Tools > Options . 2 In the Options dialog bo x, click Advanced > Encryption > View Certi ficates .
Appendix A Imp orting Certificates NWA5120 Series User’ s Guide 189 3 In the Certificate Manager dialog bo x, sele ct the Web Sites tab, select the certificate that you want to remov e, and then click Delete . 4 In the Delete Web Site Certificates dialog box, click OK .
Appendix A Importing Certificates NWA5120 Series U ser’s Guide 190.
NWA5120 Series User’ s Guide 191 A PPENDIX B Legal Information Copyright Copyright © 2013 by Z yXEL Communications Corpor ation. Th e c o n te nt s of t hi s pu b li ca t io n ma y n o t b e re p r.
Appendix B Legal Information NWA5120 Series U ser’s Guide 192 IC Radiation Exposur e St atement This equipmen t complies with IC radiati on exposure limi ts set forth for an uncontrolle d environment. End users must follow the spe cific operating instructions for satisfying RF exposu re compliance.
Appendix B Legal Informa tion NWA5120 Series User’ s Guide 193 Open Source Licenses This product contains in part some free software distribu ted under GPL licens e terms and/or GPL like lic enses. Open source lice nses are provided w ith the firmware pac kage.
Appendix B Legal Information NWA5120 Series U ser’s Guide 194 National Restrictions This prod uct may be us ed in all E U count ries (and o ther coun tries foll owing the E U direct ive 1999/5 /EC) .
Appendix B Legal Informa tion NWA5120 Series User’ s Guide 195 List of national codes Safety Warnings • Do NOT u se this product near w ater , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, d ust or corrosive liquids.
Appendix B Legal Information NWA5120 Series U ser’s Guide 196 RoHS ENGL I SH DEUTSCH ESP AÑOL FRANÇA IS Green Prod uct Declaration RoHS Directiv e 2011/65/EU WEEE Directiv e 2002/96/EC ( W EEE: Wa.
Index NWA5120 Series User’ s Guide 197 Index Symbols A access 19 access privileges 14 access users 65 see also users 65 admin users 65 multiple logins 70 see also users 65 alerts 141 , 144 , 145 , 1.
Index NWA5120 Series U ser’s Guide 198 editing 151 how applied 152 lastgood.conf 153 , 156 managing 152 startup-config.conf 156 startup-config-bad.conf 153 syntax 15 1 system-default.
Index NWA5120 Series User’ s Guide 199 HyperT ext T ransfer Protocol ov er Secure Socket Layer , see HTTPS I IEEE 802.1x 74 installation 13 interface status 35 interfaces as DHCP servers 11 4 interf.
Index NWA5120 Series U ser’s Guide 200 O objects certificates 95 users, account user 65 Online Certificate Status Protocol (OCSP) 111 vs CRL 111 other documentation 2 overview 13 P packet statistics.
Index NWA5120 Series User’ s Guide 201 MIB 134 , 135 network components 134 Set 134 Tr a p 134 traps 135 vers ion s 133 SSH 128 and certificates 130 client requirements 130 encryption methods 130 fo.
Index NWA5120 Series U ser’s Guide 202 V Va n t a g e R e p o r t ( V R P T ) 142 , 147 Vo I P 14 VRPT (V antage Report) 142 , 147 W warm sta rt 18 warning message popup 27 warranty 192 note 192 W e.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il ZyXEL NWA5121-N è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del ZyXEL NWA5121-N - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso ZyXEL NWA5121-N imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul ZyXEL NWA5121-N ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il ZyXEL NWA5121-N, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del ZyXEL NWA5121-N.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il ZyXEL NWA5121-N. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo ZyXEL NWA5121-N insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
