User’s Guide NWA/WAC/WAX Series 802.11 a/b/g/n/ac/ax Access Point Version 6.10-6.30 Edition 1, 1/2022 Default Login Details Management IP Address User Name Password http://DHCP-assigned IP OR http://192.168.1.2 admin 1234 Copyright © 2022 Zyxel and/or its affiliates. All rights reserved.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product hardware, firmware, or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this guide. Warnings tell you about things that could harm you or your device. Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations. Syntax Conventions • All models in this series may be referred to as the “Zyxel Device” in this guide.
Contents Overview Contents Overview Introduction ........................................................................................................................................... 13 AP Management .................................................................................................................................. 27 Hardware ...............................................................................................................................................
Table of Contents Table of Contents Document Conventions ......................................................................................................................3 Contents Overview .............................................................................................................................4 Table of Contents .................................................................................................................................5 Chapter 1 Introduction .................
Table of Contents 3.3.4 WAC500, WAC500H, NWA1123ACv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S .......................................................................................................... 43 3.4 Zyxel Device Models With Multiple LEDs ...................................................................................... 45 3.4.1 NWA1123-AC PRO ................................................................................................................ 46 3.4.2 NWA1302-AC ..
Table of Contents Chapter 8 Monitor ................................................................................................................................................82 8.1 Overview ......................................................................................................................................... 82 8.1.1 What You Can Do in this Chapter ....................................................................................... 82 8.2 What You Need to Know ...................
Table of Contents 11.2.1 Edit Advertising Settings .................................................................................................... 127 Chapter 12 User....................................................................................................................................................129 12.1 Overview ..................................................................................................................................... 129 12.1.
Table of Contents Chapter 16 Certificates .......................................................................................................................................174 16.1 Overview ..................................................................................................................................... 174 16.1.1 What You Can Do in this Chapter ................................................................................... 174 16.1.2 What You Need to Know ......................
Table of Contents Chapter 18 Log and Report.................................................................................................................................213 18.1 Overview ..................................................................................................................................... 213 18.1.1 What You Can Do In this Chapter .................................................................................. 213 18.2 Email Daily Report .................................
Table of Contents Chapter 23 Reboot...............................................................................................................................................243 23.1 Overview ..................................................................................................................................... 243 23.1.1 What You Need To Know ................................................................................................. 243 23.2 Reboot ..................................
Table of Contents 28.1 Overview ..................................................................................................................................... 258 28.2 Power, Hardware Connections, and LED ................................................................................ 258 28.3 Zyxel Device Management, Access, and Login ..................................................................... 259 28.4 Internet Access .......................................................................
CHAPTER 1 Introduction 1.1 Overview This User’s Guide covers the models listed in the following table. They can be managed in one of the following methods: remote management through Nebula Control Center (NCC) or an AP Controller (AC) such as the NXC, or local management in Standalone Mode. Each Zyxel Device runs in standalone mode by default, but it is recommended to use NCC management if it is available for your device.
Chapter 1 Introduction 1.2 Zyxel Device Roles This section describes some of the different roles that your Zyxel Device can take up within a network. Not all roles are supported by all models (see Section 1.4 on page 20). The Zyxel Device can serve as a: • • • • Access Point (AP) - This is used to allow wireless clients to connect to the Internet.
Chapter 1 Introduction Figure 2 Wireless Distribution System Network Example The following figure shows an example of a wireless bridge network. The root AP (Y) is connected to a network with Internet access and has a wireless repeater (X) connected to it to expand the wireless network’s range. Clients (A and B) are connected to the wired network through the gateway (G). They can access the wired network through the wireless repeater and/or root AP.
Chapter 1 Introduction 1.2.1 Root AP In Root AP mode, you can have multiple SSIDs active for regular wireless connections and one SSID for the connection with a repeater (repeater SSID). Wireless clients can use either SSID to associate with the Zyxel Device in Root AP mode. A repeater must use the repeater SSID to connect to the Zyxel Device in Root AP mode.
Chapter 1 Introduction For NCC managed devices, you only need to enable AP Smart Mesh to automatically create wireless links between APs. See the NCC User’s Guide for more details. To set up a WDS in standalone mode APs, do the following steps. You should already have the root AP set up (see the Quick Start Guide for hardware connections). 1 Go to Configuration > Object > WDS Profile in your root AP Web Configurator and click Add. 2 Enter a profile name, an SSID for the WDS, and a pre-shared key.
Chapter 1 Introduction 6 Select an AP or APs in the list and click Mark as Rogue AP or Mark as Friendly AP. MON Mode in NXC-Managed Zyxel Devices For NXC-managed Zyxel Devices, do the following steps in the NXC Web Configurator: 1 Create a MON Profile in CONFIGURATION > Object > MON Profile > Add. Specify a Channel dwell time to determine how long the RF monitor scans a specific channel before moving to the next one. 2 To scan all 2.4 GHz and 5 GHz channels, select auto in Scan Channel Mode.
Chapter 1 Introduction forbidden access to the wired Local Area Network (LAN) behind the AP and can access only the Internet. Figure 5 Multiple BSSs 1.3.2 Dual-Radio Some of the Zyxel Device models are equipped with dual wireless radios. This means you can configure two different wireless networks to operate simultaneously. Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference. You could use the 2.
Chapter 1 Introduction Figure 6 Dual-Radio Application 1.4 Zyxel Device Product Feature Comparison The following tables show the differences between each Zyxel Device model. Table 1 Zyxel Device 1000/5000 Series Comparison Table NWA1123ACV2 NWA1123 -AC PRO NWA1123 -AC HD NWA1302AC NWA5123 -AC NWA5123 -AC HD WAC5302 D-S IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.
Table 1 Zyxel Device 1000/5000 Series Comparison Table (continued) NWA1123ACV2 NWA1123 -AC PRO NWA1123 -AC HD NWA1302AC NWA5123 -AC NWA5123 -AC HD WAC5302 D-S WDS (Wireless Distribution System) - Root AP & Repeater Modes Yes Yes Yes Yes Yes Yes Yes Tunnel Forwarding Mode No No No No No Yes No Layer-2 Isolation Yes Yes Yes Yes Yes Yes Yes IEEE 802.3af IEEE 802.3at IEEE 802.3at IEEE 802.3af IEEE 802.3at IEEE 802.3af IEEE 802.3at IEEE 802.3af IEEE 802.3at IEEE 802.
Chapter 1 Introduction The following tables show the differences between each Zyxel Device model. Table 2 Zyxel Device 1000/5000 Series Comparison Table WAC500/ WAC500H NWA1123-ACV3 WAC5302D-SV2 IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac 2.4 GHz 5 GHz 2.4 GHz 5 GHz 2.
Chapter 1 Introduction Table 2 Zyxel Device 1000/5000 Series Comparison Table (continued) FEATURES WAC500/ WAC500H NWA1123-ACV3 WAC5302D-SV2 802.11r Fast Roaming Support Yes Yes Yes 802.11k/v Assisted Roaming Yes Yes Yes Bluetooth Low Energy (BLE) No No No USB Port for BLE No No No Ethernet Storm Control Yes Yes No Grounding No No No Power Jack Yes Yes No Firmware Version 6.30 6.30 6.25 Maximum number of log messages 512 A. For NXC managed devices only.
Chapter 1 Introduction Table 3 WAC 6000 Series Comparison Table (continued) FEATURES WAC6103D-I WAC6303D-S WAC6502D-E WAC6553D-E WAC6502D-S WAC6503D-S WAC6552D-S WDS (Wireless Distribution System) - Root AP & Repeater Modes Yes Yes Yes Yes Tunnel Forwarding Mode Yes Yes Yes Yes Layer-2 Isolation Yes Yes Yes Yes IEEE 802.3at IEEE 802.3af IEEE 802.3at IEEE 802.3af IEEE 802.3at IEEE 802.3af IEEE 802.
Chapter 1 Introduction The following tables show the differences between each Zyxel Device model. Table 4 802.11ax Series Comparison Table FEATURES WAX510D NWA110AX WAX630S WAX650S IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11ax IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11ax IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.11ax IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n IEEE 802.11ac IEEE 802.
Chapter 1 Introduction Table 4 802.11ax Series Comparison Table (continued) FEATURES WAX510D WAX610D WAX630S WAX650S NWA110AX NWA210AX Grounding Yes Yes Yes Yes Power Jack Yes Yes Yes Yes Firmware Version 6.30 6.30 6.30 6.30 Maximum number of log messages 512 event logs A. For NXC managed devices only. See the NXC User’s Guide for details.
Chapter 2 AP Management CHAPTER 2 AP Management 2.1 Management Mode The Zyxel Device is a unified AP and can be managed by the NCC or an AP controller (AC), or work as a standalone device. We recommend you use NCC to manage multiple APs (see the NCC User’s Guide). An AP Controller such as the NXC can only manage multiple APs in the same location. Note: Not all models can be managed by NCC or an AC. See Section 1.4 on page 20 to check whether your product supports these.
Chapter 2 AP Management 2.1.2 Nebula Control Center In this mode, which is also called cloud mode, you can manage and monitor the Zyxel Device through the Zyxel Nebula cloud-based network management system. This means you can manage devices remotely without the need of connecting to each device directly. It offers many features to better manage and monitor not just the Zyxel Device, but your network as a whole, including supported switches and gateways.
Chapter 2 AP Management Figure 7 Traffic Monitoring Graph From NCC See the NCC (Nebula Control Center) User’s Guide for how to configure Nebula managed devices. See Chapter 26 on page 249 if you want to change the Zyxel Device’s VLAN setting or manually set its IP address. Note: Make sure your network firewall allows TCP ports 443, 4335, and 6667 as well as UDP port 123 so the device can connect to and sync with the NCC. 2.1.
Chapter 2 AP Management Note: If the Zyxel Device is already registered to NCC, the controller will be unable to manage it. An AC uses Control And Provisioning of Wireless Access Points (CAPWAP, see RFC 5415) to discover and configure multiple managed APs. 2.2 Switching Management Modes The Zyxel Device is in standalone mode by default, with NCC and/or AC discovery enabled. Standalone-to-NCC Register the Zyxel Device at the NCC website and then turn on the Zyxel Device.
Chapter 2 AP Management 2.3 Zyxel One Network (ZON) Utility ZON Utility is a program designed to help you deploy and manage a network more efficiently. It detects devices automatically and allows you to do basic settings on devices in the network without having to be near it.
Chapter 2 AP Management Figure 8 Supported Devices and Versions If you want to check the supported models and firmware versions later, you can click the Show information about ZON icon in the upper right hand corner of the screen. Then select the Supported model and firmware version link. If your device is not listed here, see the device release notes for ZON Utility support. The release notes are in the firmware zip file on the Zyxel web site.
Chapter 2 AP Management Figure 10 Network Adapter 4 Click the Go button for the ZON Utility to discover all supported devices in your network. Figure 11 Discovery 5 The ZON Utility screen shows the devices discovered. Figure 12 ZON Utility Screen 6 Select a device and then use the icons to perform actions. Some functions may not be available for your devices. Note: You must know the selected device admin password before taking actions on the device using the ZON Utility icons.
Chapter 2 AP Management Figure 13 Password Prompt The following table describes the icons numbered from left to right in the ZON Utility screen. Table 7 ZON Utility Icons ICON DESCRIPTION 1 IP Configuration Change the selected device’s IP address. 2 Renew IP Address Update a DHCP-assigned dynamic IP address. 3 Reboot Device Use this icon to restart the selected device(s). This may be useful when troubleshooting or upgrading new firmware.
Chapter 2 AP Management The following table describes the fields in the ZON Utility main screen. Table 8 ZON Utility Fields LABEL DESCRIPTION Type This field displays an icon of the kind of device discovered. Model This field displays the model name of the discovered device. Firmware Version This field displays the firmware version of the discovered device. MAC Address This field displays the MAC address of the discovered device.
Chapter 2 AP Management AP Controller (AC) An AP controller such as the NXC2500 or NXC5500 lets you configure multiple APs through a single device. See the NXC Series User’s Guide for more information. ZON Utility Zyxel One Network (ZON) Utility is a utility tool that assists you to set up and maintain network devices in a simple and efficient way. You can download the ZON Utility at www.zyxel.com and install it on your computer (Windows operating system).
Chapter 3 Hardware CHAPTER 3 Hardware See the Quick Start Guide for hardware installation and connections. 3.1 Grounding (WAC6552D-S and WAC6553D-E) Earth grounding helps protect against lightning and interference. Note: The power installation must be performed by qualified service personnel and should conform to the National Electrical Code. The Zyxel Device must be connected to earth ground to adequately ground the Zyxel Device and protect the operator from electrical hazards.
Chapter 3 Hardware Figure 14 Grounding Example 3.2 Zyxel Device Models With Single LEDs The LEDs of some Zyxel Device models can be controlled by using the suppression feature such that the LEDs stay lit (ON) or OFF after the Zyxel Device is ready. Some Zyxel Device models also has Locator LED which allows you to see the actual location of the Zyxel Device among several devices in the network. See Section 1.4 on page 20 to check which models support these features.
Chapter 3 Hardware 3.3.1 NWA1123-ACv2 Figure 15 NWA1123-ACv2 LED The following are the LED descriptions for your NWA1123-ACv2. Table 9 NWA1123-ACv2 LED COLOR STATUS DESCRIPTION Blinks amber for 1 second and green for 1 second alternatively. The LED blinks amber and green alternatively when the Zyxel Device is booting up or is connecting to the NCC. The Zyxel Device is discovering the NCC. Green Blinks amber and green alternatively 3 times and then turns solid green for 3 seconds.
Chapter 3 Hardware Table 9 NWA1123-ACv2 LED (continued) COLOR Red STATUS DESCRIPTION Steady On The Zyxel Device failed to boot up or is experiencing system failure. Slow Blinking (Blink for 3 times, Off for 3s) The Uplink interface is down. Fast Blinking (On for 50 ms, Off for 50 ms) The Zyxel Device is undergoing firmware upgrade. 3.3.2 WAC6303D-S, NWA1123-AC HD and NWA5123-AC HD Figure 16 WAC6303D-S LED The following are the LED descriptions for your WAC6303D-S, NWA1123-AC HD or NWA5123-AC HD.
Chapter 3 Hardware Table 10 WAC6303D-S, NWA1123-AC HD and NWA5123-AC HD LED (continued) COLOR STATUS DESCRIPTION Green Slow Blinking (On for 1 second, Off for 1 second) The wireless module of the Zyxel Device is disabled or fails, the Zyxel Device is using default wireless settings, or the Zyxel Device is configured to be managed by NCC but is not yet registered with the NCC.
Chapter 3 Hardware 3.3.3 NWA5123-AC Figure 17 NWA5123-AC LED The following are the LED descriptions for your NWA5123-AC. Table 11 NWA5123-AC LED COLOR STATUS DESCRIPTION Blinks amber for 1 second and green for 1 second alternatively. The Zyxel Device is booting up. Blinks amber and green alternatively 3 times and then turns solid green for 3 seconds. The Zyxel Device is discovering an AC. Green Blinks amber and green alternatively 2 times and then turns solid green for 3 seconds.
Chapter 3 Hardware Table 11 NWA5123-AC LED (continued) COLOR Red STATUS DESCRIPTION Steady On The Zyxel Device failed to boot up or is experiencing system failure. Slow Blinking (Blink for 3 times, Off for 3s) The Uplink interface is down. Fast Blinking (On for 50 ms, Off for 50 ms) The Zyxel Device is undergoing firmware upgrade. 3.3.
Chapter 3 Hardware Figure 19 WAC500H LED The following are the LED descriptions for your WAC500, WAC500H, NWA1123ACv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S. Table 12 WAC500, WAC500H, NWA1123ACv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S LED COLOR Amber Green Amber Green Amber Green Green STATUS DESCRIPTION Blinks amber for 1 second and green for 1 second alternatively. The Zyxel Device is booting up or is connecting with NCC.
Chapter 3 Hardware Table 12 WAC500, WAC500H, NWA1123ACv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S LED (continued) COLOR STATUS DESCRIPTION Green Steady On The Zyxel Device is ready for use, the Zyxel Device’s wireless interface is activated, and/or wireless clients are connected to the Zyxel Device in full power mode (see Table 25 on page 70).
Chapter 3 Hardware 3.4.1 NWA1123-AC PRO The following are the LED descriptions for your NWA1123-AC PRO. Figure 20 NWA1123-AC PRO LEDs The following table describes the LEDs. Table 13 NWA1123-AC PRO LEDs LED COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks amber for 1 second and green for 1 second alternatively. The LED blinks amber and green alternatively when the Zyxel Device is booting up. On The Zyxel Device is ready for use.
Chapter 3 Hardware Table 13 NWA1123-AC PRO LEDs (continued) LED COLOR Management Green Amber Green Amber Green WLAN WLAN UPLINK On The Zyxel Device is managed by the NCC. Slow Blinking (On for 1 sec, Off for 1 sec) The Zyxel Device is using default wireless settings, or the Zyxel Device is connected to the NCC but is unregistered with the NCC. Blinks amber for 1 second and green for 1 second alternatively The Zyxel Device is searching for (discovering) the NCC.
Chapter 3 Hardware Figure 21 NWA1302-AC LEDs The following table describes the LEDs. Table 14 NWA1302-AC LEDs LED COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks amber for 1 second and green for 1 second alternatively. The LED blinks amber and green alternatively when the Zyxel Device is booting up. On The Zyxel Device is ready for use. Slow Blinking (On for 1 sec, Off for 1 sec) The wireless module of the Zyxel Device is disabled or failed.
Chapter 3 Hardware Table 14 NWA1302-AC LEDs (continued) LED COLOR STATUS DESCRIPTION UPLINK Amber On The port is operating as a 10/100 Mbps connection. Blinking The Zyxel Device is sending/receiving data through the port at 10/100 Mbps. On The port is operating as a Gigabit connection (1000 Mbps). Blinking The Zyxel Device is sending/receiving data through the port at 1Gbps. Off The port is not connected. On The 2.4 GHz WLAN is active. Off The 2.4 GHz WLAN is not active.
Chapter 3 Hardware Figure 22 WAC6502D-E, WAC6502D-S, or WAC6503D-S LEDs The following table describes the LEDs. Table 15 WAC6502D-E, WAC6502D-S, or WAC6503D-S LEDs LED COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks amber for 1 second and green for 1 second alternatively. The Zyxel Device is booting up or is connecting to the NCC or to an AC. On The Zyxel Device is ready for use. Slow Blinking (On for 1s, Off for 1ss) The wireless module of the Zyxel Device is disabled or failed.
Chapter 3 Hardware Table 15 WAC6502D-E, WAC6502D-S, or WAC6503D-S LEDs (continued) LED COLOR Management Green On The Zyxel Device is managed by a the NCC or an AC. The Zyxel Device is searching (discovery) for an AC. Slow Blinking (On for 1s, Off for 1s) The Zyxel Device is using default wireless settings, or the Zyxel Device is connected to the NCC but is unregistered with the NCC. Off The Zyxel Device is in standalone mode.
Chapter 3 Hardware Figure 23 WAC6103D-I LEDs The following table describes the LEDs. Table 16 WAC6103D-I LEDs LED COLOR STATUS DESCRIPTION PWR/SYS Amber Blinks amber for 1 second and green for 1 second alternatively. The Zyxel Device is booting up. On The Zyxel Device is ready for use. Slow Blinking (On for 1s, Off for 1s) The wireless module of the Zyxel Device is disabled or failed. On There is system error and the Zyxel Device cannot boot up, or the Zyxel Device suffered a system failure.
Chapter 3 Hardware Table 16 WAC6103D-I LEDs (continued) LED COLOR Management Green On The Zyxel Device is managed by an AC or the NCC. The Zyxel Device is searching (discovery) for an AC. Slow Blinking (On for 1s, Off for 1s) The Zyxel Device is using default wireless settings, or the Zyxel Device is connected to the NCC but is unregistered with the NCC. Off The Zyxel Device is in standalone mode.
Chapter 3 Hardware Figure 24 WAC5302D-S LEDs The following table describes the LEDs. Table 17 WAC5302D-S LEDs LED PWR/SYS COLOR STATUS DESCRIPTION Amber Blinks amber for 1 second and green for 1 second alternatively. The LED blinks amber and green alternatively when the WAC is booting up. On The Zyxel Device is ready for use. Slow Blinking (On for 1s, Off for 1s) The wireless module of the Zyxel Device is disabled or failed. Fast Blinking (On 50ms, Off 50ms) The Locator LED is on.
Chapter 3 Hardware Table 17 WAC5302D-S LEDs (continued) LED COLOR STATUS DESCRIPTION UPLINK Amber On The port is operating as a 10/100 Mbps connection. Blinking The Zyxel Device is sending/receiving data through the port at 10/100 Mbps. On The port is operating as a Gigabit connection (1000 Mbps). Blinking The Zyxel Device is sending/receiving data through the port at 1 Gbps. Off The port is not connected. On The 2.4 GHz WLAN is active. Off The 2.4 GHz WLAN is not active.
CHAPTER 4 Web Configurator 4.1 Overview The Web Configurator is an HTML-based management interface that allows easy system setup and management via internet browser. Use a browser that supports HTML5, such Internet Explorer 11, Mozilla Firefox, or Google Chrome. The recommended screen resolution is 1024 by 768 pixels. In order to use the Web Configurator you need to allow: • Web browser pop-up windows from your device. • JavaScript (enabled by default). • Java permissions (enabled by default). 4.
Chapter 4 Web Configurator Figure 25 Login Page If a Zyxel Device is in standalone mode and supports NCC, the following page displays. Here, you can watch a tutorial for using the Zyxel Nebula Control Center (NCC) or access the link to the NCC, as shown in the following figure. Otherwise, continue with the next step. The NCC is a cloud-based network management system that allows you to remotely manage and monitor the Zyxel Device (see Section 2.1.
Chapter 4 Web Configurator Figure 27 Login Page in Standalone Mode 4 Enter the user name (default: “admin”) and password (default: “1234”). If the Zyxel Device is being managed or has been managed by the NCC, check the NCC's Site-Wide > Configure > General settings screen for the Zyxel Device's current password. 5 Select the language you prefer for the Web Configurator. Click Login.
Chapter 4 Web Configurator 4.3 Navigating the Web Configurator The following summarizes how to navigate the Web Configurator from the Dashboard screen. The following figures show the Dashboard screen for standalone mode and for cloud (NCC) mode. The screen is different for standalone mode and cloud (NCC) mode and may vary slightly for different models.
Chapter 4 Web Configurator 4.3.1 Title Bar The title bar provides some useful links that always appear over the screens below, regardless of how deep into the Web Configurator you navigate. If your Zyxel Device is in NCC mode, not all icons will be available in the Title Bar. Figure 31 Title Bar The icons provide the following functions. Table 18 Title Bar: Web Configurator Icons LABEL DESCRIPTION Wizard Click this to open the wizard. See Chapter 7 on page 76 for more information.
Chapter 4 Web Configurator CLI Messages Click CLI to look at the CLI commands sent by the Web Configurator. These commands appear in a popup window, such as the following. Figure 33 CLI Messages Click Clear to remove the currently displayed information. Note: See the Command Reference Guide for information about the commands. 4.3.2 Navigation Panel Use the menu items on the navigation panel to open screens to configure Zyxel Device features.
Chapter 4 Web Configurator Dashboard The dashboard displays information such as general device information, system status, system resource usage, and interface status in widgets that you can re-arrange to suit your needs. For details on the Dashboard’s features, see Chapter 6 on page 70. Monitor Menu The monitor menu screens display status and statistics information.
Chapter 4 Web Configurator Table 20 Configuration Menu Screens Summary (continued) FOLDER OR LINK TAB FUNCTION Radio Create and manage wireless radio settings files that can be associated with different APs. SSID Create and manage wireless SSID, security, MAC filtering, and layer-2 isolation files that can be associated with different APs. MON Profile MON Profile Create and manage rogue AP monitoring files that can be associated with different APs.
Chapter 4 Web Configurator 4.3.4 Cloud Mode Navigation Panel Menus If your Zyxel Device is in NCC mode, you only need to use the Web Configurator for troubleshooting if your Zyxel Device cannot connect to the Internet. Dashboard The dashboard displays general Zyxel Device information, and AP information in widgets that you can re-arrange to suit your needs. For details on the Dashboard’s features, see Chapter 25 on page 247.
Chapter 4 Web Configurator • Filter by mathematical operators (<, >, or =) or searching for text. 3 Select a column heading cell’s right border and drag to re-size the column. 4 Select a column heading and drag and drop it to change the column order. A green check mark displays next to the column’s title when you drag the column to a valid new location. 5 Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time.
Chapter 4 Web Configurator 4.3.5.2 Working with Table Entries The tables have icons for working with table entries. A sample is shown next. You can often use the [Shift] or [Ctrl] key to select multiple entries to remove, activate, or deactivate. Figure 35 Common Table Icons Here are descriptions for the most common table icons. Table 23 Common Table Icons LABEL DESCRIPTION Add Click this to create a new entry.
P ART I Standalone Configuration 67
CHAPTER 5 Standalone Configuration 5.1 Overview The Zyxel Device is in standalone mode by default. Use the web configurator to manage and configure the Zyxel Device directly. As shown in the following figure, WiFi clients can connect to the Zyxel Device (A) to access network resources. 5.2 Starting and Stopping the Zyxel Device Here are some of the ways to start and stop the Zyxel Device. Always use Maintenance > Shutdown or the shutdown command before you turn off the Zyxel Device or remove the power.
Chapter 5 Standalone Configuration Table 24 Starting and Stopping the Zyxel Device (continued) METHOD DESCRIPTION Using the RESET button If you press the RESET button on the back of the Zyxel Device, the Zyxel Device sets the configuration to its default values and then reboots. See Section 28.6 on page 266 for more information. Note: Some models do not have a RESET button due to feature differences.
CHAPTER 6 Dashboard 6.1 Overview This screen displays general device information, system status, system resource usage, and interface status in widgets that you can re-arrange to suit your needs. You can also collapse, refresh, and close individual widgets. Fields in this screen may slightly differ by models. Figure 36 Dashboard A B C D The following table describes the labels in this screen. Table 25 Dashboard LABEL DESCRIPTION Widget Settings (A) Use this link to re-open closed widgets.
Chapter 6 Dashboard Table 25 Dashboard (continued) LABEL DESCRIPTION Firmware Version This field displays the version number and date of the firmware the Zyxel Device is currently running. Click the icon to open the screen where you can upload firmware. Last Firmware Upgrade Status This field displays whether the latest firmware update was successfully completed. Last Firmware Upgrade This field displays the date and time when the last firmware update was made.
Chapter 6 Dashboard Table 25 Dashboard (continued) LABEL Boot Status DESCRIPTION This field displays details about the Zyxel Device’s startup state. OK - The Zyxel Device started up successfully. Firmware update OK - A firmware update was successful. Problematic configuration after firmware update - The application of the configuration failed after a firmware upgrade. System default configuration - The Zyxel Device successfully applied the system default configuration.
Chapter 6 Dashboard Table 25 Dashboard (continued) LABEL DESCRIPTION Cloud Control Status This field displays: • • • The Zyxel Device Internet connection status. The connection status between the Zyxel Device and NCC. The Zyxel Device registration status on NCC. Mouse over the circles to display detailed information. To pass your Zyxel Device management to NCC, first make sure your Zyxel Device is connected to the Internet. Then go to NCC and register your Zyxel Device.
Chapter 6 Dashboard Table 25 Dashboard (continued) LABEL DESCRIPTION WLAN Interface Status Summary This displays status information for the WLAN interface. Status This displays whether or not the WLAN interface is activated. MAC Address This displays the MAC address of the radio. Radio This indicates the radio number on the Zyxel Device. Band This indicates the wireless frequency band currently being used by the radio. This shows - when the radio is in monitor mode.
Chapter 6 Dashboard The following table describes the labels in this screen. Table 26 Dashboard > CPU Usage LABEL DESCRIPTION % The y-axis represents the percentage of CPU usage. time The x-axis shows the time period over which the CPU usage occurred. Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. 6.1.
CHAPTER 7 Setup Wizard 7.1 Accessing the Wizard When you log into the Web Configurator for the first time or when you reset the Zyxel Device to its default configuration, the wizard screen displays. Note: If you have already configured the wizard screens and want to open it again, click the Wizard icon on the upper right corner of any Web Configurator screen. 7.
Chapter 7 Setup Wizard Figure 39 Wizard: Time Settings 7.2.2 Step 2 Password and Uplink Connection Use this screen to configure the Zyxel Device’s system password and IP address. Change Password: Enter a new password and retype it to confirm. Uplink Connection: Select Auto (DHCP) if the Zyxel Device is connected to a router with the DHCP server enabled. You then need to check the router for the IP address assigned to the Zyxel Device in order to access the Zyxel Device’s Web Configurator again.
Chapter 7 Setup Wizard Figure 40 Wizard: Change Password and Uplink Connection 7.2.3 Step 3 Radio Use this screen to configure the Zyxel Device’s radio transmitter(s). • Channel Selection: Select Auto to have the Zyxel Device automatically choose a radio channel that has least interference. Otherwise, select Manual and specify a channel the Zyxel Device will use in the 2.4 GHz or 5 GHz wireless LAN. The options vary depending on the frequency band and the country you are in.
Chapter 7 Setup Wizard 7.2.4 Step 4 SSID Use this screen to enable, disable or edit an SSID profile. Select an SSID profile and click the Status switch to turn it on or off. To change an SSID profile’s settings, such as the SSID (WiFi network name) and WiFi password, double-click the SSID profile entry from the list. See Section 7.2.4.1 on page 79 for more information. Note: You cannot add or remove an SSID profile after running the setup wizard. Figure 42 Wizard: SSID 7.2.4.
Chapter 7 Setup Wizard Figure 43 Wizard: SSID: Edit (WPA2-Personal) Figure 44 Wizard: SSID: Edit (WPA2-Enterprise) NWA/WAC/WAX Series User’s Guide 80
Chapter 7 Setup Wizard 7.2.5 Summary Use this screen to check whether what you have configured is correct. Click Save to apply your settings and complete the wizard setup. Otherwise, click Prev to return to the previous screen or click Cancel to close the wizard without saving.
CHAPTER 8 Monitor 8.1 Overview Use the Monitor screens to check status and statistics information. 8.1.1 What You Can Do in this Chapter • The Network Status screen (Section 8.3 on page 83) displays general LAN interface information and packet statistics. • The AP Information > Radio List screen (Section 8.4 on page 85) displays statistics about the wireless radio transmitters in the Zyxel Device. • The Station Info screen (Section 8.5 on page 89) displays statistics pertaining to the associated stations.
Chapter 8 Monitor 8.3 Network Status Use this screen to look at general Ethernet interface information and packet statistics. To access this screen, click Monitor > Network Status. Figure 46 Monitor > Network Status The following table describes the labels in this screen. Table 28 Monitor > Network Status LABEL DESCRIPTION Interface Summary Use the Interface Summary section for IPv4 network settings.
Chapter 8 Monitor Table 28 Monitor > Network Status (continued) LABEL DESCRIPTION Set Interval Click this to set the Poll Interval the screen uses. Stop Click this to stop the window from updating automatically. You can start it again by setting the Poll Interval and clicking Set Interval. Switch to Graphic View Click this to display the port statistics as a line graph. Name This field displays the name of the interface. Status This field displays the current status of the physical port.
Chapter 8 Monitor Figure 47 Monitor > Network Status > Switch to Graphic View The following table describes the labels in this screen. Table 29 Monitor > Network Status > Switch to Graphic View LABEL DESCRIPTION Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. Port Selection Select the Ethernet port for which you want to view the packet statistics.
Chapter 8 Monitor Figure 48 Monitor > Wireless > AP Information > Radio List (for Zyxel Device that supports WDS) Figure 49 Monitor > Wireless > AP Information > Radio List (for Zyxel Device that does not support WDS) The following table describes the labels in this screen. Table 30 Monitor > Wireless > AP Information > Radio List LABEL DESCRIPTION More Information Click this to view additional information about the selected radio’s wireless traffic and station count.
Chapter 8 Monitor Table 30 Monitor > Wireless > AP Information > Radio List (continued) LABEL DESCRIPTION Upload This displays the total number of packets received by the radio. Download This displays the total number of packets transmitted by the radio. Channel Utilization This indicates how much IEEE 802.11 traffic the radio can receive on the channel. It displays what percentage of the radio’s channel is currently being used. 8.4.
Chapter 8 Monitor Figure 50 Monitor > Wireless > AP Information > Radio List > More Information The following table describes the labels in this screen. Table 31 Monitor > Wireless > AP Information > Radio List > More Information LABEL DESCRIPTION SSID Detail This list shows information about all the wireless clients that have connected to the specified radio over the preceding 24 hours. # This is the items sequential number in the list. It has no bearing on the actual data in this list.
Chapter 8 Monitor Table 31 Monitor > Wireless > AP Information > Radio List > More Information (continued) LABEL DESCRIPTION SSID Name This displays an SSID associated with this radio. There can be up to eight maximum. BSSID This displays a BSSID associated with this radio. The BSSID is tied to the SSID. Security Mode This displays the security mode in which the SSID is operating. VLAN This displays the VLAN ID associated with the SSID.
Chapter 8 Monitor Table 32 Monitor > Wireless > Station Info (continued) LABEL DESCRIPTION SSID Name This indicates the name of the wireless network to which the station is connected. A single AP can have multiple SSIDs or networks. Security Mode This indicates which secure encryption methods is being used by the station to connect to the network. Signal Strength This is the RSSI (Received Signal Strength Indicator) of the station’s wireless connection.
Chapter 8 Monitor Table 33 Monitor > Wireless > WDS Link Info (continued) LABEL DESCRIPTION MAC Address This is the MAC address of the root AP or repeater to which the Zyxel Device is connected using WDS. Radio This is the radio number on the root AP or repeater to which the Zyxel Device is connected using WDS. SSID Name This indicates the name of the wireless network to which the Zyxel Device is connected using WDS.
Chapter 8 Monitor Figure 53 Monitor > Wireless > Detected Device (for Zyxel Device that supports Monitor mode) NWA/WAC/WAX Series User’s Guide 92
Chapter 8 Monitor Figure 54 Monitor > Wireless > Detected Device (for Zyxel Device that does not support Monitor mode) The following table describes the labels in this screen. Table 34 Monitor > Wireless > Detected Device LABEL DESCRIPTION Discovered APs Rogue AP This shows how many devices are detected as rogue APs. Suspected rogue AP This shows how many devices are detected as possible rogue APs based on the classification rule(s) in Section 10.3 on page 116.
Chapter 8 Monitor Table 34 Monitor > Wireless > Detected Device (continued) LABEL DESCRIPTION Mark as Rogue AP Click this button to mark the selected AP as a rogue AP. For more on managing rogue APs, see the Configuration > Wireless > Rogue AP screen (Section 10.3 on page 116). Mark as Friendly AP Click this button to mark the selected AP as a friendly AP. For more on managing friendly APs, see the Configuration > Wireless > Rogue AP screen (Section 10.3 on page 116).
Chapter 8 Monitor Figure 55 Monitor > Log > View Log The following table describes the labels in this screen. Table 35 Monitor > Log > View Log LABEL DESCRIPTION Show Filter / Hide Filter Click this button to show or hide the filter settings. If the filter settings are hidden, the Display, Email Log Now, Refresh, and Clear Log fields are available.
Chapter 8 Monitor Table 35 Monitor > Log > View Log (continued) LABEL DESCRIPTION Destination Address This displays when you show the filter. Type the IP address of the destination of the incoming packet when the log message was generated. Do not include the port in this filter. Source Interface This displays when you show the filter. Select the source interface of the packet that generated the log message. Destination Interface This displays when you show the filter.
CHAPTER 9 Network 9.1 Overview This chapter describes how you can configure the management IP address and VLAN settings of your Zyxel Device. The Internet Protocol (IP) address identifies a device on a network. Every networking device (including computers, servers, routers, printers, etc.) needs an IP address to communicate across the network. These networking devices are also known as hosts. Figure 56 IP Setup The figure above illustrates one possible setup of your Zyxel Device.
Chapter 9 Network Figure 57 AC managed Network Example Note: The Zyxel Device can be a standalone device or be managed by an AC. AC Discovery and Management The link between AC Discovery-enabled access points proceeds as follows: 1 An Zyxel Device with AC Discovery enabled joins a wired network (receives a dynamic IP address). 2 The Zyxel Device sends out a discovery request, looking for an AC. 3 If there is an AC on the network, it receives the discovery request.
Chapter 9 Network Note: The AC needs to have a static IP address. If it is a DHCP client, set the DHCP server to reserve an IP address for the AC. AC management and IP Subnets By default, CAPWAP works only between Zyxel Devices with IP addresses in the same subnet. However, you can configure the Zyxel Device and the AC to use CAPWAP with IP addresses in different subnets by doing the following. • Activate DHCP. Your network’s DHCP server must support option 138 defined in RFC 5415.
Chapter 9 Network • The NCC Discovery screen (Section 9.6 on page 107) configures the Zyxel Device’s Nebula Control Center (NCC) discovery settings. 9.2 IP Setting Use this screen to configure the IP address for your Zyxel Device. To access this screen, click Configuration > Network > IP Setting. Figure 59 Configuration > Network > IP Setting Each field is described in the following table.
Chapter 9 Network Table 36 Configuration > Network > IP Setting (continued) LABEL DESCRIPTION Enable Stateless Address Autoconfiguration (SLAAC) Select this to enable IPv6 stateless auto-configuration on the Zyxel Device. The Zyxel Device will generate an IPv6 address itself from a prefix obtained from an IPv6 router in the network. Link-Local Address This displays the IPv6 link-local address and the network prefix that the Zyxel Device generates itself for the LAN interface.
Chapter 9 Network Figure 60 Management VLAN Setup In the figure above, to access and manage the Zyxel Device from computer A, the Zyxel Device and switch B’s ports to which computer A and the Zyxel Device are connected should be in the same VLAN. A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one group.
Chapter 9 Network Figure 61 Wireless Bridge VLAN ID Example IEEE 802.1Q Tag The IEEE 802.1Q standard defines an explicit VLAN tag in the MAC header to identify the VLAN membership of a frame across bridges. A VLAN tag includes the 12-bit VLAN ID and 3-bit user priority. The VLAN ID associates a frame with a specific VLAN and provides the information that devices need to process the frame across the network. Use this screen to configure the VLAN settings for your Zyxel Device.
Chapter 9 Network Figure 62 Configuration > Network > VLAN (for Zyxel Device with multiple Ethernet ports) Figure 63 Configuration > Network > VLAN (for Zyxel Device with one Ethernet port) Each field is described in the following table. Table 37 Configuration > Network > VLAN LABEL DESCRIPTION VLAN Settings Management VLAN ID Enter a VLAN ID for the Zyxel Device.
Chapter 9 Network Table 37 Configuration > Network > VLAN (continued) LABEL PVID DESCRIPTION This field displays the port number of the VLAN ID. VLAN Configuration Add Click this to create a new entry. For features where the entry’s position in the numbered list is important (features where the Zyxel Device applies the table’s entries in order like the SSID for example), you can select an entry and click Add to create a new entry after the selected entry.
Chapter 9 Network Figure 64 Configuration > Network > Storm Control Each field is described in the following table. Table 38 Configuration > Network > Storm Control LABEL DESCRIPTION Broadcast Storm Control Select the check box to enable broadcast storm control on the Zyxel Device. Enabling this will drop ingress broadcast traffic in the physical Ethernet port if it exceeds the maximum traffic rate. Multicast Storm Control Select the check box to enable multicast storm control on the Zyxel Device.
Chapter 9 Network Figure 65 Configuration > Network > AC Discovery Each field is described in the following table. Table 39 Configuration > Network > AC Discovery LABEL DESCRIPTION Discovery Setting Auto Select this option to use DHCP option 138/DNS SRV record/Broadcast to get the AC’s IP address. If the Zyxel Device and a Zyxel AC, such as the NXC2500 or NXC5500, are in the same subnet, it will be managed by the controller automatically.
Chapter 9 Network Figure 66 Configuration > Network > NCC Discovery Each field is described in the following table. Table 40 Configuration > Network > NCC Discovery LABEL DESCRIPTION Nebula Control Center Status Internet This field displays whether the Zyxel Device can connect to the Internet. Nebula Connectivity This field displays whether the Zyxel Device can connect to the Zyxel Nebula Control Center (NCC).
C H A P T E R 10 Wireless 10.1 Overview This chapter discusses how to configure the wireless network settings in your Zyxel Device. The following figure provides an example of a wireless network. Figure 67 Example of a Wireless Network The wireless network is the part in the blue circle. In this wireless network, devices A and B are called wireless clients. The wireless clients use the access point (AP) to interact with other devices (such as the printer) or with the Internet. Your Zyxel Device is the AP.
Chapter 10 Wireless 10.1.2 What You Need to Know The following terms and concepts may help as you read this chapter. Station / Wireless Client A station or wireless client is any wireless-capable device that can connect to an AP using a wireless signal. Dynamic Channel Selection (DCS) Dynamic Channel Selection (DCS) is a feature that allows an AP to automatically select the radio channel which it broadcasts. For more information, see Section 10.6 on page 123.
Chapter 10 Wireless Figure 68 Configuration > Wireless > AP Management NWA/WAC/WAX Series User’s Guide 111
Chapter 10 Wireless Figure 69 Configuration > Wireless > AP Management (for Zyxel Device with multiple Ethernet ports - in Repeater mode) NWA/WAC/WAX Series User’s Guide 112
Chapter 10 Wireless Figure 70 Configuration > Wireless > AP Management > Setup Wireless Bridge Vlan ID: Wireless Bridge Vlan Setting (for Zyxel Device with multiple Ethernet ports) Each field is described in the following table. Table 41 Configuration > Wireless > AP Management LABEL DESCRIPTION Radio 1 Setting Radio 1 Activate Select the check box to enable the Zyxel Device’s first (default) radio. Radio 1 OP Mode Select the operating mode for radio 1.
Chapter 10 Wireless Table 41 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION Enable WDS Wireless Bridging If you set the Zyxel Device as a root AP, the radio that’s bridging with the Zyxel Device should be in repeater mode. Be careful to avoid bridge loops. For example, if your root AP and the Zyxel Device are connected to a switch, and they’re also connected to each other using a WiFi connection. This will create bridge loops.
Chapter 10 Wireless Table 41 Configuration > Wireless > AP Management (continued) LABEL DESCRIPTION # This field shows the index number of the SSID SSID Profile This field displays the SSID profile that is associated with the radio profile. Radio 2 Setting Radio 2 Activate This displays if the Zyxel Device has a second radio. Select the check box to enable the Zyxel Device’s second radio. Radio 2 OP Mode This displays if the Zyxel Device has a second radio. Select the operating mode for radio 2.
Chapter 10 Wireless Table 41 Configuration > Wireless > AP Management (continued) LABEL Uplink Selection Mode DESCRIPTION This field is available only when the radio is in Repeater mode. Select AUTO to have the Zyxel Device automatically use the settings in the applied WDS profile to connect to a root AP or repeater. Select Manual to have the Zyxel Device connect to the root AP or repeater with the MAC address specified in the Radio 1 Uplink MAC Address field.
Chapter 10 Wireless software. In this example, the attacker now has access to the company network, including sensitive data stored on the file server (C). Figure 71 Rogue AP Example Friendly APs If you have more than one AP in your wireless network, you should also configure a list of “friendly” APs. Friendly APs are wireless access points that you know are not a threat.
Chapter 10 Wireless Figure 72 Configuration > Wireless > Rogue AP (for Zyxel Devices that support Monitor mode) Figure 73 Configuration > Wireless > Rogue AP (for Zyxel Devices that support Rogue AP Detection) NWA/WAC/WAX Series User’s Guide 118
Chapter 10 Wireless Each field is described in the following table. Table 42 Configuration > Wireless > Rogue AP LABEL DESCRIPTION Rogue AP Detection Setting Enable Rogue AP Detection Select this check box to detect Rogue APs in the network. Suspected Rogue AP Classification Rule Select the check boxes (Weak Security (Open, WEP, WPA-PSK), Hidden SSID, SSID Keyword) of the characteristics an AP should have for the Zyxel Device to mark it as a Rogue AP. Add Click this to add an SSID Keyword.
Chapter 10 Wireless Each field is described in the following table. Table 43 Configuration > Wireless > Rogue AP > Add/Edit Rogue/Friendly AP List LABEL DESCRIPTION MAC Enter the MAC address of the AP you want to add to the list. A MAC address is a unique hardware identifier in the following hexadecimal format: xx:xx:xx:xx:xx:xx where xx is a hexadecimal number separated by colons. Description Enter up to 60 characters for the AP’s description. Spaces and underscores are allowed.
Chapter 10 Wireless Each field is described in the following table. Table 44 Configuration > Wireless > Load Balancing LABEL DESCRIPTION Enable Load Balancing Select this to enable load balancing on the Zyxel Device. Mode Use this section to configure wireless network traffic load balancing between the managed APs in this group. Select a mode by which load balancing is carried out.
Chapter 10 Wireless 10.4.1 Disassociating and Delaying Connections When your AP becomes overloaded, there are two basic responses it can take. The first one is to “delay” a client connection. This means that the AP withholds the connection until the data transfer throughput is lowered or the client connection is picked up by another AP. If the client is picked up by another AP then the original AP cannot resume the connection. For example, here the AP has a balanced bandwidth allotment of 6 Mbps.
Chapter 10 Wireless Connections are cut based on either idle timeout or signal strength. The Zyxel Device first looks to see which devices have been idle the longest, then starts kicking them in order of highest idle time. If no connections are idle, the next criteria the Zyxel Device analyzes is signal strength. Devices with the weakest signal strength are kicked first. 10.5 DCS Use this screen to configure dynamic radio channel selection (see Dynamic Channel Selection (DCS) on page 110).
Chapter 10 Wireless Figure 79 An Example Three-Channel Deployment Three channels are situated in such a way as to create almost no interference with one another if used exclusively: 1, 6 and 11. When an AP broadcasts on any of these 3 channels, it should not interfere with neighboring APs as long as they are also limited to same trio.
Chapter 10 Wireless available bandwidth to the point where each connecting device receives a meager trickle, the load balanced AP instead limits the incoming connections as a means to maintain bandwidth integrity. There are three kinds of wireless load balancing available on the Zyxel Device: Load balancing by station number limits the number of devices allowed to connect to your AP. If you know exactly how many stations you want to let connect, choose this option.
C H A P T E R 11 Bluetooth 11.1 Overview Use this screen to configure the iBeacon advertising settings for the Zyxel Device that supports Bluetooth Low Energy (BLE). Bluetooth Low Energy, which is also known as Bluetooth Smart, transmits less data over a shorter distance but consumes less power than classic Bluetooth. On the WAC5302D-S, you need to attach a supported BLE USB dongle to its USB port to have the AP act as a beacon to broadcast packets.
Chapter 11 Bluetooth 11.2 Bluetooth Advertising Settings The Zyxel Device communicates with another BLE enabled device for advertisements. Use this screen to configure up to five beacon IDs to be included in the advertising packet. To access this screen, click Configuration > Bluetooth > Advertising Settings. Figure 82 Configuration > Bluetooth > Advertising Settings The following table describes the labels in this screen.
Chapter 11 Bluetooth Figure 83 Configuration > Bluetooth > Advertising Settings > Edit The following table describes the labels in this screen. Table 47 Configuration > Bluetooth > Advertising Settings > Edit LABEL DESCRIPTION Activate Select this option to enable the advertising settings. UUID To specify a UUID for the Zyxel Device’s beacon ID, enter 32 hexadecimal digits in the range of “A-F”, “a-f” and “0-9”, split into five groups separated by hyphens (-).
C H A P T E R 12 User 12.1 Overview This chapter describes how to set up user accounts and user settings for the Zyxel Device. 12.1.1 What You Can Do in this Chapter • The User screen (see Section 12.2 on page 130) provides a summary of all user accounts. • The Setting screen (see Section 12.3 on page 132) controls default settings, login settings, lockout settings, and other user settings for the Zyxel Device. 12.1.
Chapter 12 User 12.2 User Summary The User screen provides a summary of all user accounts. To access this screen click Configuration > Object > User. Figure 84 Configuration > Object > User The following table describes the labels in this screen. Table 49 Configuration > Object > User LABEL DESCRIPTION Add Click this to create a new entry. Edit Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.
Chapter 12 User The first character must be alphabetical (A-Z a-z), an underscore (_), or a dash (-). Other limitations on user names are: • User names are case-sensitive. If you enter a user 'bob' but use 'BOB' when connecting via CIFS or FTP, it will use the account settings used for 'BOB' not ‘bob’. • User names have to be different than user group names.
Chapter 12 User Table 50 Configuration > User > User > Add/Edit A User (continued) LABEL DESCRIPTION Authentication Timeout Settings This field is not available if the user type is user. Lease Time This field is not available if the user type is user. If you want to set authentication timeout to a value other than the default settings, select Use Manual Settings then fill your preferred values in the fields that follow.
Chapter 12 User Figure 86 Configuration > Object > User > Setting The following table describes the labels in this screen. Table 51 Configuration > Object > User > Setting LABEL DESCRIPTION User Default Setting Default Authentication Timeout Settings These authentication timeout settings are used by default when you create a new user account. They also control the settings for any existing user accounts that are set to use the default settings.
Chapter 12 User Table 51 Configuration > Object > User > Setting (continued) LABEL Reauthentication Time DESCRIPTION This is the default reauthentication time in minutes for each type of user account. It defines the number of minutes the user can be logged into the Zyxel Device in one session before having to log in again. Unlike Lease Time, the user has no opportunity to renew the session without logging out.
Chapter 12 User Figure 87 User > Setting > Edit User Authentication Timeout Settings The following table describes the labels in this screen. Table 52 User > Setting > Edit User Authentication Timeout Settings LABEL DESCRIPTION User Type This read-only field identifies the type of user account for which you are configuring the default settings. • • Lease Time admin - this user can look at and change the configuration of the Zyxel Device.
C H A P T E R 13 AP Profile 13.1 Overview This chapter shows you how to configure preset profiles for the Zyxel Device. 13.1.1 What You Can Do in this Chapter • The Radio screen (Section 13.2 on page 137) creates radio configurations that can be used by the APs. • The SSID screen (Section 13.3 on page 144) configures three different types of profiles for your networked APs. 13.1.2 What You Need To Know The following terms and concepts may help as you read this chapter.
Chapter 13 AP Profile WEP WEP (Wired Equivalent Privacy) encryption scrambles all data packets transmitted between the AP and the wireless stations associated with it in order to keep network communications private. Both the wireless stations and the access points must use the same WEP key for data encryption and decryption. WPA2 WPA2 (IEEE 802.11i) is a WiFi security standard that defines stronger encryption, authentication and key management than WPA.
Chapter 13 AP Profile Note: You can have a maximum of 32 radio profiles on the Zyxel Device. Figure 88 Configuration > Object > AP Profile > Radio The following table describes the labels in this screen. Table 53 Configuration > Object > AP Profile > Radio LABEL DESCRIPTION Add Click this to add a new radio profile. Edit Click this to edit the selected radio profile. Remove Click this to remove the selected radio profile. Activate To turn on an entry, select it and click Activate.
Chapter 13 AP Profile Figure 89 Configuration > Object > AP Profile > Radio > Add/Edit The following table describes the labels in this screen. Table 54 Configuration > Object > AP Profile > Radio > Add/Edit LABEL DESCRIPTION Hide / Show Advanced Settings Click this to hide or show the Advanced Settings in this window. General Settings Activate Select this option to make this profile active. Profile Name Enter up to 31 alphanumeric characters to be used as this profile’s name.
Chapter 13 AP Profile Table 54 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL 802.11 Mode DESCRIPTION Select how to let wireless clients connect to the AP. If 802.11 Band is set to 2.4G: • • • 11b/g: allows either IEEE 802.11b or IEEE 802.11g compliant WLAN devices to associate with the Zyxel Device. The Zyxel Device adjusts the transmission rate automatically according to the wireless standard supported by the wireless devices. 11n: allows IEEE802.11b, IEEE802.11g and IEEE802.
Chapter 13 AP Profile Table 54 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL Enable DCS Client Aware DESCRIPTION This field is available when you set Channel Selection to DCS. Select this to have the Zyxel Device switch channels only when there are no clients connected to it. If there is a client connected, the Zyxel Device will not switch channels but generate a log.
Chapter 13 AP Profile Table 54 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL DESCRIPTION Time Interval Select this option to have the Zyxel Device survey the other APs within its broadcast radius at the end of the specified time interval. DCS Time Interval This field is available when you set Channel Selection to DCS and select the Time Interval option. Enter a number of minutes. This regulates how often the Zyxel Device surveys the other APs within its broadcast radius.
Chapter 13 AP Profile Table 54 Configuration > Object > AP Profile > Radio > Add/Edit (continued) LABEL Enable Signal Threshold DESCRIPTION Select the check box to use the signal threshold to ensure wireless clients receive good throughput. This allows only wireless clients with a strong signal to connect to the AP. Clear the check box to not require wireless clients to have a minimum signal strength to connect to the AP. Station Signal Threshold Set a minimum client signal strength.
Chapter 13 AP Profile 13.3 SSID The SSID screens allow you to configure three different types of profiles for your networked APs: an SSID list, which can assign specific SSID configurations to your APs; a security list, which can assign specific encryption methods to the APs when allowing wireless clients to connect to them; and a MAC filter list, which can limit connections to an AP based on wireless clients MAC addresses. 13.3.
Chapter 13 AP Profile The following table describes the labels in this screen. Table 55 Configuration > Object > AP Profile > SSID > SSID List LABEL DESCRIPTION Add Click this to add a new SSID profile. This button is not available after you configure the Zyxel Deviceusing the wizard. Edit Click this to edit the selected SSID profile. Remove Click this to remove the selected SSID profile.
Chapter 13 AP Profile Figure 92 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile The following table describes the labels in this screen. Table 56 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile LABEL DESCRIPTION Create new Object Select an object type from the list to create a new one associated with this SSID profile. Profile Name Enter up to 31 alphanumeric characters for the profile name.
Chapter 13 AP Profile Table 56 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (continued) LABEL DESCRIPTION MAC Filtering Profile Select a MAC filtering profile from the list to associate with this SSID. If none exist, you can use the Create new Object menu to create one. MAC filtering allows you to limit the wireless clients connecting to your network through a particular SSID by wireless client MAC addresses.
Chapter 13 AP Profile Table 56 Configuration > Object > AP Profile > SSID > SSID List > Add/Edit SSID Profile (continued) LABEL DESCRIPTION Enable Proxy ARP The Address Resolution Protocol (ARP) is a protocol for mapping an IP address to a MAC address. An ARP broadcast is sent to all devices in the same Ethernet network to request the MAC address of a target IP address. Select this option to allow the Zyxel Device to answer ARP requests for an IP address on behalf of a client associated with this SSID.
Chapter 13 AP Profile Table 57 Configuration > Object > AP Profile > SSID > Security List (continued) LABEL DESCRIPTION Profile Name This field indicates the name assigned to the security profile. Security Mode This field indicates this profile’s security mode (if any). 13.4.1 Add/Edit Security Profile This screen allows you to create a new security profile or edit an existing one. To access this screen, click the Add button or select a security profile from the list and click the Edit button.
Chapter 13 AP Profile Table 58 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: none (continued) LABEL Accounting Share Secret Accounting Interim Update DESCRIPTION Enter a password (up to 128 alphanumeric characters) as the key to be shared between the external accounting server and the Zyxel Device. The key must be the same on the external accounting server and your Zyxel Device. The key is not sent over the network.
Chapter 13 AP Profile Table 59 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: enhanced- open (continued) LABEL DESCRIPTION Security Mode Select a security mode from the list: none, enhanced-open, wep, wpa2, wpa2-mix or wpa3. enhanced-open uses Opportunistic Wireless Encryption (OWE) which encrypts the wireless connection when possible.
Chapter 13 AP Profile Figure 95 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep The following table describes the labels in this screen. Table 60 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes.
Chapter 13 AP Profile Table 60 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep (continued) LABEL DESCRIPTION Authentication Settings Enterprise ReAuthentication Timer Select this to enable 802.1X secure authentication with a RADIUS server. Enter the interval (in seconds) between authentication requests. Enter a 0 for unlimited time. Authentication Type Select a WEP authentication method. Choices are Open or Share key.
Chapter 13 AP Profile Table 60 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wep (continued) LABEL Interim Update Interval DESCRIPTION Specify the time interval for how often the Zyxel Device is to send a subscriber status update to the accounting server. General Server Settings NAS IP Address If the RADIUS server requires the Zyxel Device to provide the NAS (Network Access Server) IP address attribute, enter it here.
Chapter 13 AP Profile Figure 96 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 NWA/WAC/WAX Series User’s Guide 155
Chapter 13 AP Profile Figure 97 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 The following table describes the labels in this screen. Table 61 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name.
Chapter 13 AP Profile Table 61 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 (continued) LABEL DESCRIPTION Cipher Type Select an encryption cipher type from the list. • • auto - This automatically chooses the best available cipher based on the cipher in use by the wireless client that is attempting to make a connection. aes - This is the Advanced Encryption Standard encryption method.
Chapter 13 AP Profile Table 61 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2 (continued) LABEL Interim Update Interval DESCRIPTION Specify the time interval for how often the Zyxel Device is to send a subscriber status update to the accounting server. General Server Settings NAS IP Address If the RADIUS server requires the Zyxel Device to provide the NAS (Network Access Server) IP address attribute, enter it here.
Chapter 13 AP Profile Figure 98 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix NWA/WAC/WAX Series User’s Guide 159
Chapter 13 AP Profile Figure 99 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix The following table describes the labels in this screen. Table 62 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix LABEL DESCRIPTION General Settings Profile Name Enter up to 31 alphanumeric characters for the profile name.
Chapter 13 AP Profile Table 62 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa2-mix (continued) LABEL DESCRIPTION Cipher Type Select an encryption cipher type from the list. • • auto - This automatically chooses the best available cipher based on the cipher in use by the wireless client that is attempting to make a connection. aes - This is the Advanced Encryption Standard encryption method.
Chapter 13 AP Profile Figure 100 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa3 NWA/WAC/WAX Series User’s Guide 162
