ZyAIR Access Point Series User's Guide Version 3.
ZyAIR Access Point Series User’s Guide Copyright Copyright © 2003 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
ZyAIR Access Point Series User’s Guide Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules.
ZyAIR Access Point Series User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase.
ZyAIR Access Point Series User’s Guide Customer Support Please have the following information ready when you contact customer support. • • • • Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it. METHOD E-MAIL SUPPORT/SALES TELEPHONE/FAX WEB SITE/ FTP SITE REGULAR MAIL LOCATION WORLDWIDE support@zyxel.com.tw +886-3-578-3942 www.zyxel.com www.europe.zyxel.com ftp.zyxel.com sales@zyxel.com.
ZyAIR Access Point Series User’s Guide Table of Contents Copyright......................................................................................................................................................... ii Federal Communications Commission (FCC) Interference Statement.....................................................iii ZyXEL Limited Warranty ............................................................................................................................ iv Customer Support..
ZyAIR Access Point Series User’s Guide 5.1.2 BSS.....................................................................................................................................5-1 5.1.3 ESS.....................................................................................................................................5-2 5.2 Wireless LAN Basics .................................................................................................................5-3 5.2.1 RTS/CTS ..........................
ZyAIR Access Point Series User’s Guide 8.3 Configuring IP ...........................................................................................................................8-2 LOGS .............................................................................................................................................................III Chapter 9 Logs Screens ...............................................................................................................................9-1 9.
ZyAIR Access Point Series User’s Guide 16.1 About SNMP............................................................................................................................16-1 16.2 Supported MIBs .......................................................................................................................16-2 16.3 SNMP Configuration ...............................................................................................................16-2 16.4 SNMP Traps..............................
ZyAIR Access Point Series User’s Guide Appendix F Types of EAP Authentication ................................................................................................ F-1 Appendix G Power over Ethernet Specifications .....................................................................................G-1 Appendix H Antenna Selection and Positioning Recommendation........................................................H-1 Appendix I PPPoE ..............................................................
ZyAIR Access Point Series User’s Guide List of Figures Figure 1-1 PoE Installation Example ............................................................................................................. 1-3 Figure 1-2 WDS Functionality Example........................................................................................................ 1-5 Figure 1-3 Internet Access Application..........................................................................................................
ZyAIR Access Point Series User’s Guide Figure 9-2 Log Settings ..................................................................................................................................9-3 Figure 10-1 System Status ............................................................................................................................10-1 Figure 10-2 System Status: Show Statistics..................................................................................................
ZyAIR Access Point Series User’s Guide Figure 17-3 Menu 23.2 System Security : RADIUS Server ........................................................................ 17-2 Figure 17-4 Menu 23 System Security......................................................................................................... 17-3 Figure 17-5 Menu 23.4 System Security : IEEE802.1x ............................................................................... 17-4 Figure 18-1 Menu 24 System Maintenance ....................
ZyAIR Access Point Series User’s Guide List of Tables Table 1-1 Model Specific Features................................................................................................................. 1-1 Table 3-1 Wizard 1 : General Setup ............................................................................................................... 3-3 Table 3-2 Wizard 2 : Wireless LAN Setup .....................................................................................................
ZyAIR Access Point Series User’s Guide Table 13-6 Menu 3.5.3.1 ESS x Configuration...........................................................................................13-10 Table 13-7 Menu 3.5.4 Bridge Link Configuration ....................................................................................13-12 Table 14-1 Menu 14.1- Edit Dial-in User .....................................................................................................14-2 Table 15-1 Menu 16 VLAN Setup....................
ZyAIR Access Point Series User’s Guide Preface Congratulations on your purchase from the ZyAIR Access Point (AP) series. An AP acts as a bridge between the wireless and wired networks, extending your existing wired network without any additional wiring. Some features are not available in every model. Refer to the Model Specific Features table in Chapter 1 of this user’s guide to see what features are specific to your ZyAIR model.
ZyAIR Access Point Series User’s Guide • Mouse action sequences are denoted using a comma. For example, “click the Apple icon, Control Panels and then Modem” means first click the Apple icon, then point your mouse pointer to Control Panels and then click Modem. • For brevity’s sake, we will use “e.g.,” as a shorthand for “for instance”, and “i.e.,” for “that is” or “in other words” throughout this manual. • The ZyAIR Access Point series may be referred to simply as the ZyAIR in the user’s guide.
Overview Part I: OVERVIEW This part introduces the main features and applications of ZyAIR and shows how to access the web configurator and use the Wizard to configure for Internet Access.
ZyAIR Access Point Series User’s Guide Chapter 1 Getting to Know Your ZyAIR This chapter introduces the main features and applications of the ZyAIR. 1.1 Introducing the ZyAIR Access Point Series The ZyAIR Access Point extends the range of your existing wired network without any additional wiring efforts. The ZyAIR provides easy network access to mobile users. The ZyAIR offers highly secured wireless connectivity to your wired network with IEEE 802.1x, WEP data encryption and MAC address filtering.
ZyAIR Access Point Series User’s Guide Table 1-1 Model Specific Features ZYAIR MODEL FEATURES B-1000 B-1000 V.2 B-3000 Power over Ethernet O Bridge/Repeater O AP & WDS (Wireless Distribution System) Support Concurrently O Table Key: An “O” in a model’s column shows that the model has the specified feature. A number specific to an individual model may alternately be displayed. The information in this table was correct at the time of writing, although it may be subject to change.
ZyAIR Access Point Series User’s Guide Bridge/Repeater A Bridge/Repeater link LED turns steady on green when your ZyAIR acts as a bridge, establishing a wireless link to another AP. It turns steady on orange when your ZyAIR acts as a repeater, establishing wireless links to two or more APs. Power over Ethernet (PoE) Power over Ethernet (PoE) is the ability to provide power to your ZyAIR via an 8-pin CAT 5 Ethernet cable, eliminating the need for a nearby power source.
ZyAIR Access Point Series User’s Guide The ZyAIR may be prone to RF (Radio Frequency) interference from other 2.4 GHz devices such as microwave ovens, wireless phones, Bluetooth enabled devices, and other wireless LANs. Output Power Management Output Power Management is the ability to set the level of output power. There may be interference or difficulty with channel assignment when there is a high density of APs within a coverage area.
ZyAIR Access Point Series User’s Guide Wireless LAN MAC Address Filtering Your ZyAIR checks the MAC address of the wireless station against a list of allowed or denied MAC addresses. IEEE 802.1x Network Security The ZyAIR supports the IEEE 802.1x standard to enhance user authentication. Use the built-in user profile database to authenticate up to 32 users using MD5 encryption.
ZyAIR Access Point Series User’s Guide (System Management Terminal) interface. The SMT is a menu-driven interface that you can access from a terminal emulator over a telnet connection. Logging and Tracing ♦ Built-in message logging and packet tracing. ♦ Unix syslog facility support. Embedded FTP and TFTP Servers The ZyAIR’s embedded FTP and TFTP servers enable fast firmware upgrades as well as configuration file backups and restoration.
ZyAIR Access Point Series User’s Guide Figure 1-3 Internet Access Application 1.3.2 Corporation Network Application In situations where users are always on the move in the coverage area but still need access to corporate network access, the ZyAIR is an ideal solution for wireless stations to connect to the corporate network without expensive network cabling. The following figure depicts a typical application of the ZyAIR in an enterprise environment.
ZyAIR Access Point Series User’s Guide Chapter 2 Introducing the Web Configurator This chapter describes how to access the ZyAIR web configurator and provides an overview of its screens. The default IP address of the ZyAIR is 192.168.1.2. 2.1 Accessing the ZyAIR Web Configurator Step 1. Make sure your ZyAIR hardware is properly connected (refer to the Quick Installation Guide). Step 2. Prepare your computer/computer network to connect to the ZyAIR (refer to the appendix). Step 3.
ZyAIR Access Point Series User’s Guide The ZyAIR automatically times out after five minutes of inactivity. Simply log back into the ZyAIR if this happens to you. 2.2 Resetting the ZyAIR If you forget your password or cannot access the ZyAIR, you will need to reload the factory-default configuration file or use the RESET button on the top panel of the ZyAIR. Uploading this configuration file replaces the current configuration file with the factory-default configuration file.
ZyAIR Access Point Series User’s Guide 2.3 Navigating the ZyAIR Web Configurator We use the ZyAIR B-3000 web configurator in this guide as an example. The web configurator screens for your model may vary slightly for different ZyAIR models. The following summarizes how to navigate the web configurator from the MAIN MENU screen. Follow the instructions you see in the MAIN MENU screen or click the icon (located in the top right corner of most screens) to view online help.
ZyAIR Access Point Series User’s Guide Chapter 3 Wizard Setup This chapter provides information on the Wizard Setup screens in the web configurator. 3.1 Wizard Setup Overview The web configurator’s setup wizard helps you configure your ZyAIR for wireless stations to access your wired LAN. 3.1.1 Channel The range of radio frequencies used by IEEE 802.11b wireless devices is called a “channel”. Channels available depend on your geographical area.
ZyAIR Access Point Series User’s Guide 3.2 Wizard Setup: General Setup General Setup contains administrative and system-related information. Figure 3-1 Wizard 1 : General Setup The following table describes the labels in this screen.
ZyAIR Access Point Series User’s Guide Table 3-1 Wizard 1 : General Setup LABEL System Name DESCRIPTION It is recommended you type your computer's "Computer name". In Windows 95/98 click Start, Settings, Control Panel, Network. Click the Identification tab, note the entry for the Computer Name field and enter it as the System Name. In Windows 2000, click Start, Settings, Control Panel and then double-click System. Click the Network Identification tab and then the Properties button.
ZyAIR Access Point Series User’s Guide Figure 3-2 Wizard 2 : Wireless LAN Setup The following table describes the labels in this screen. Table 3-2 Wizard 2 : Wireless LAN Setup LABEL DESCRIPTION Wireless LAN Setup ESSID Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. If you change this field on the ZyAIR, make sure all wireless stations use the same ESSID in order to access the network.
ZyAIR Access Point Series User’s Guide Table 3-2 Wizard 2 : Wireless LAN Setup LABEL WEP Encryption DESCRIPTION Select Disable allows all wireless computers to communicate with the access points without any data encryption. Select 64-bit WEP or 128-bit WEP to allow data encryption. ASCII Select this option in order to enter ASCII characters as the WEP keys. Hex Select this option to enter hexadecimal characters as the WEP keys. The preceding 0x is entered automatically.
ZyAIR Access Point Series User’s Guide You can obtain your IP address from the IANA, from an ISP or have it assigned by a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses.
ZyAIR Access Point Series User’s Guide Figure 3-3 Wizard 3 : IP Address Assignment The following table describes the labels in this screen. Table 3-4 Wizard 3 : IP Address Assignment LABEL DESCRIPTION IP Address Assignment Get automatically Select this option if your ZyAIR is using a dynamically assigned IP address from a DHCP server each time. You must know the IP address assigned to the ZyAIR (by the DHCP server) to access the ZyAIR again.
ZyAIR Access Point Series User’s Guide Table 3-4 Wizard 3 : IP Address Assignment LABEL Gateway IP Address DESCRIPTION Type the IP address of the gateway. The gateway is an immediate neighbor of your ZyAIR that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your ZyAIR; over the WAN, the gateway must be the IP address of one of the remote node. Back Click Back to return to the previous screen.
ZyAIR Access Point Series User’s Guide Well done! You have successfully set up your ZyAIR to operate on your network and access the Internet.
System, Wireless, VLAN and IP Part II: SYSTEM, WIRELESS, VLAN AND IP This part covers the information and web configurator screens of System, Wireless, VLAN and IP.
ZyAIR Access Point Series User’s Guide Chapter 4 System Screens This chapter provides information on the System screens. 4.1 System Overview This section provides information on general system setup. 4.2 Configuring General Setup Click ADVANCED and then SYSTEM to open the General screen. Figure 4-1 System General Setup The following table describes the labels in this screen.
ZyAIR Access Point Series User’s Guide Table 4-1 System General Setup LABEL DESCRIPTION System Name Type a descriptive name to identify the ZyAIR in the Ethernet network. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes "-" and underscores "_" are accepted. Domain Name This is not a required field. Leave this field blank or enter the domain name here if you know it.
ZyAIR Access Point Series User’s Guide Figure 4-2 Password The following table describes the labels in this screen. Table 4-2 Password LABEL DESCRIPTION Old Password Type in your existing system password (1234 is the default password). New Password Type your new system password (up to 31 characters). Note that as you type a password, the screen displays an asterisk (*) for each character you type. Retype to Confirm Retype your new system password for confirmation.
ZyAIR Access Point Series User’s Guide Figure 4-3 Time Setting The following table describes the labels in this screen. Table 4-3 Time Setting LABEL Time Protocol 4-4 DESCRIPTION Select the time service protocol that your time server sends when you turn on the ZyAIR. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use trial and error to find a protocol that works. The main difference between them is the format.
ZyAIR Access Point Series User’s Guide Table 4-3 Time Setting LABEL DESCRIPTION Time Server Address Enter the IP address or the URL of your time server. Check with your ISP/network administrator if you are unsure of this information. Current Time (hh:mm:ss) This field displays the time of your ZyAIR. Each time you reload this page, the ZyAIR synchronizes the time with the time server. New Time (hh:mm:ss) This field displays the last updated time from the time server.
ZyAIR Access Point Series User’s Guide Chapter 5 Wireless Configuration and Roaming This chapter discusses how to configure Wireless and Roaming screens on the ZyAIR. Some features such as Multiple-ESS are not available on all models. 5.1 Wireless LAN Overview This section introduces the wireless LAN (WLAN) and some basic scenarios. 5.1.1 IBSS An Independent Basic Service Set (IBSS), also called an Ad-hoc network, is the simplest WLAN configuration.
ZyAIR Access Point Series User’s Guide Figure 5-2 Basic Service set 5.1.3 ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). An ESSID (ESS IDentification) uniquely identifies each ESS. All access points and their associated wireless stations within the same ESS must have the same ESSID in order to communicate.
ZyAIR Access Point Series User’s Guide Figure 5-3 Extended Service Set 5.2 Wireless LAN Basics Refer also to the Wizard Setup chapter for more background information on Wireless LAN features, such as channels. 5.2.1 RTS/CTS A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node.
ZyAIR Access Point Series User’s Guide Figure 5-4 RTS/CTS When station A sends data to the ZyAIR, it might not know that the station B is already using the channel. If these two stations send data at the same time, collisions may occur when both sets of data arrive at the AP at the same time, resulting in a loss of messages for both stations. RTS/CTS is designed to prevent collisions due to hidden nodes.
ZyAIR Access Point Series User’s Guide A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously) you set then the RTS (Request To Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmented before they reach RTS/CTS size. 5.
ZyAIR Access Point Series User’s Guide The following table describes the general wireless LAN labels in this screen. Table 5-1 Wireless LABEL DESCRIPTION Operating Mode Select the operating mode from the drop-down list. Options are Access Point, Multiple ESS and Bridge. The screen changes when you select Multiple ESS or Bridge in this field. Refer to the Multiple ESS and VLAN chapter for more information on multiple ESS.
ZyAIR Access Point Series User’s Guide 5.4 Configuring Bridge The ZyAIR can function as a wireless network bridge allowing you to wirelessly connect two wired network segments. You need to know the MAC address of the peer device, which also must be in bridge mode. In the example below, Computers B and C will be able to communicate with Computer A through the ZyAIR bridges, forming a Wireless Distribution System (WDS).
ZyAIR Access Point Series User’s Guide Figure 5-8 Bridge Loop: Bridge Connected to Wired LAN To prevent bridge loops, ensure that your ZyAIR is not set to bridge mode while connected to both wired and wireless segments of the same LAN. Click ADVANCED and WIRELESS. Select Bridge in the Operating Mode drop-down list box to display the screen as shown.
ZyAIR Access Point Series User’s Guide Figure 5-9 Wireless : Bridge The following table describes the bridge labels in this screen. Table 5-2 Wireless : Bridge LABEL DESCRIPTION Operating Mode Select Bridge in this field to display the screen as shown in Figure 5-9. Peer Bridge MAC Address Type the MAC address of the peer device in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc.
ZyAIR Access Point Series User’s Guide 5.5 Configuring Roaming A wireless station is a device with an IEEE 802.11b compliant wireless adapters. An access point (AP) acts as a bridge between the wireless and wired networks. An AP creates its own wireless coverage area. A wireless station can associate with a particular access point only if it is within the access point’s coverage area.
ZyAIR Access Point Series User’s Guide The steps below describe the roaming process. Step 1. As wireless station Y moves from the coverage area of access point AP 1 to that of access point AP 2, it scans and uses the signal of access point AP 2. Step 2. Access point AP 2 acknowledges the presence of wireless station Y and relays this information to access point AP 1 through the wired LAN. Step 3. Access point AP 1 updates the new position of wireless station. Step 4.
ZyAIR Access Point Series User’s Guide Table 5-3 Roaming LABEL Active DESCRIPTION Select Yes from the drop-down list box to enable roaming on the ZyAIR if you have two or more ZyAIRs on the same subnet. All APs on the same subnet and the wireless stations must have the same ESSID to allow roaming. Port # Enter the port number to communicate roaming information between access points. The port number must be the same on all access points. The default is 16290.
ZyAIR Access Point Series User’s Guide Chapter 6 Wireless Security This chapter describes how to use the MAC Filter, 802.1x, Local User Database and RADIUS to configure wireless security on your ZyAIR. 6.1 Wireless Security Overview Wireless security is vital to your network to protect wireless communication between wireless stations, access points and the wired network. The figure below shows the possible wireless security levels on your ZyAIR.
ZyAIR Access Point Series User’s Guide 6.2.2 Authentication Three different methods can be used to authenticate wireless stations to the network: Open System, Shared Key, and Auto. The following figure illustrates the steps involved.
ZyAIR Access Point Series User’s Guide When your ZyAIR's authentication method is set to open system, it will only accept open system authentication requests. The same is true for shared key authentication. However, when it is set to auto authentication, the ZyAIR will accept either type of authentication request and the ZyAIR will fall back to use open authentication if the shared key does not match. 6.
ZyAIR Access Point Series User’s Guide The following table describes the wireless LAN security labels in this screen. Table 6-1 Wireless LABEL DESCRIPTION WEP Encryption Select Disable to allow wireless stations to communicate with the access points without any data encryption. Select 64-bit WEP or 128-bit WEP to enable data encryption. Authentication Method Select Auto, Open System or Shared Key from the drop-down list box. This field is N/A if WEP is not activated.
ZyAIR Access Point Series User’s Guide Table 6-1 Wireless LABEL Click Reset to begin configuring this screen afresh. Reset 6.4 DESCRIPTION MAC Filter The MAC filter screen allows you to configure the ZyAIR to give exclusive access to up to 32 devices (Allow Association) or exclude up to 32 devices from accessing the ZyAIR (Deny Association). Every Ethernet device has a unique MAC (Media Access Control) address.
ZyAIR Access Point Series User’s Guide Figure 6-4 MAC Address Filter The following table describes the labels in this screen. Table 6-2 MAC Address Filter LABEL Active 6-6 DESCRIPTION Select Yes from the drop down list box to enable MAC address filtering.
ZyAIR Access Point Series User’s Guide Table 6-2 MAC Address Filter LABEL DESCRIPTION Filter Action Define the filter action for the list of MAC addresses in the MAC address filter table. Select Deny Association to block access to the router, MAC addresses not listed will be allowed to access the router. Select Allow Association to permit access to the router, MAC addresses not listed will be denied access to the router.
ZyAIR Access Point Series User’s Guide • Access-Reject Sent by a RADIUS server rejecting access. • Access-Accept Sent by a RADIUS server allowing access. • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access-Request message.
ZyAIR Access Point Series User’s Guide AP RADIUS Server Wireless Station Ethernet Figure 6-5 EAP Authentication The details below provide a general description of how IEEE 802.1x EAP authentication works. For an example list of EAP-MD5 authentication steps, see the IEEE 802.1x appendix. • The wireless station sends a “start” message to the ZyAIR. • The ZyAIR sends a “request identity” message to the wireless station for identity information.
ZyAIR Access Point Series User’s Guide 6.8 Introduction to Local User Database By storing user profiles locally on the ZyAIR, your ZyAIR is able to authenticate wireless users without interacting with a network RADIUS server. However, there is a limit on the number of users you may authenticate in this way. 6.9 Configuring 802.1x To change your ZyAIR’s authentication settings, click ADVANCED, WIRELESS and then the 802.1x tab. The screen appears as shown. Figure 6-6 802.
ZyAIR Access Point Series User’s Guide Table 6-3 802.1x Authentication LABEL DESCRIPTION Wireless Port Control To control wireless stations access to the wired network, select a control method from the drop-down list box. Choose from No Authentication Required, Authentication Required and No Access Allowed. No Authentication Required allows all wireless stations access to the wired network without entering usernames and passwords. This is the default setting.
ZyAIR Access Point Series User’s Guide Table 6-3 802.1x Authentication LABEL DESCRIPTION Authentication Databases This field is activated only when you select Authentication Required in the Wireless Port Control field. The authentication database contains wireless station login information. The local user database is the built-in database on the ZyAIR. The RADIUS is an external server. Use this drop-down list box to select which database the ZyAIR should use (first) to authenticate a wireless station.
ZyAIR Access Point Series User’s Guide 6.10 Configuring Local User Database To change your ZyAIR’s local user database, click ADVANCED, WIRELESS and then the Local User Database tab. The screen appears as shown.
ZyAIR Access Point Series User’s Guide The following table describes the labels in this screen. Table 6-4 Local User Database LABEL DESCRIPTION Active Select this check box to activate the user profile. User Name Enter the username (up to 31 characters) for this user profile. Password Type a password (up to 31 characters) for this user profile. Note that as you type a password, the screen displays a (*) for each character you type. Apply Click Apply to save your changes back to the ZyAIR.
ZyAIR Access Point Series User’s Guide The following table describes the labels in this screen. Table 6-5 RADIUS LABEL DESCRIPTION Authentication Server Active Server IP Address Port Number Shared Secret Select Yes from the drop-down list box to enable user authentication through an external authentication server. Select No to enable user authentication using the local user profile on the ZyAIR. Enter the IP address of the external authentication server in dotted decimal notation.
ZyAIR Access Point Series User’s Guide Chapter 7 Multiple ESS and VLAN This chapter is only applicable to the ZyAIR B-3000. 7.1 Wireless LAN Infrastructures See the Wizard Setup and Wireless Configuration chapters for some basic WLAN scenarios and terminology. 7.1.1 Multiple ESS Traditionally, you needed different APs to configure different ESSs. As well as the cost of buying extra APs, there was also the possibility of channel interference.
ZyAIR Access Point Series User’s Guide Station 1 relays communications via the ZyAIR within the Multi-ESS coverage area and with AP X if it moves to the RD ESS coverage area. Similarly, station 2 relays communications via the ZyAIR within the Multi-ESS coverage area and with AP Y if it moves to the Sales ESS coverage area. Figure 7-1 Multi-ESS Example 7.2 VLAN A VLAN (Virtual Local Area Network) allows a physical network to be partitioned into multiple logical networks.
ZyAIR Access Point Series User’s Guide If no devices are in the management VLAN, then no one will be able to access the ZyAIR and you will have to restore the default configuration file. 7.2.2 Multi-ESS with VLAN Example In this example, VLAN 2 is the management VLAN and includes the computers in ESS1 and LAN 1. Computers in ESS2 and LAN 2 belong to VLAN 2. “Wireless group” ESS1is limited to accessing the resources on LAN 1 and similarly “wireless group” ESS2 may only access resources on LAN 2.
ZyAIR Access Point Series User’s Guide Figure 7-3 Wireless : Multiple ESS The following table describes the labels in this screen.
ZyAIR Access Point Series User’s Guide Table 7-1 Wireless : Multiple ESS LABEL DESCRIPTION Select Multiple ESS in this field to display the screen as shown in Figure 7-3. Operating Mode Choose Channel ID Scan Set the operating frequency/channel depending on your particular region. To manually set the ZyAIR to use a channel, select a channel from the dropdown list box.
ZyAIR Access Point Series User’s Guide Figure 7-4 Wireless : Edit ESS The following table describes the labels in this screen. Table 7-2 Wireless : Edit ESS LABEL DESCRIPTION ESSID Enter a descriptive name (up to 32 alphanumeric characters) for identification purposes. This name is case sensitive. Active Select this check box to activate this ESS. VLAN ID Enter a number from 1 to 255. ASCII Select this option to enter ASCII characters as the WEP keys.
ZyAIR Access Point Series User’s Guide Table 7-2 Wireless : Edit ESS LABEL DESCRIPTION Unicast WEP key Key 1 or Key 2 Key 1 or key 2 is used to encrypt unicast transmissions. If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F"). If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal characters ("0-9", "A-F"). You must configure both keys, but only one key can be activated at any one time. The default key is key 1.
ZyAIR Access Point Series User’s Guide Figure 7-5 MAC Filter Summary The following table describes the labels in this screen. Table 7-3 MAC Filter Summary LABEL DESCRIPTION Set This is the index number of each ESS. ESSID This is the identification name of each ESS. Status This field displays Disable if the MAC filter is inactive, Association Allowed if the MAC filter is active and filter action is allowed or Association Denied if the MAC filter is active but filter action is denied.
ZyAIR Access Point Series User’s Guide Figure 7-6 VLAN The following table describes the labels in this screen. Table 7-4 VLAN LABEL DESCRIPTION Enable VLAN Tagging Select this check box to turn on VLAN tagging. Management VLAN ID Enter a number from 1 to 255 to define this VLAN group. At least one device in your network must belong to this VLAN group in order to manage the ZyAIR. Apply Click Apply to save your changes back to the ZyAIR. Reset Click Reset to begin configuring this screen afresh.
ZyAIR Access Point Series User’s Guide Chapter 8 IP Screen This chapter discusses how to configure IP on the ZyAIR 8.1 Factory Ethernet Defaults The Ethernet parameters of the ZyAIR are preset in the factory with the following values: • IP address of 192.168.1.2 • Subnet mask of 255.255.255.0 (24 bits) These parameters should work for the majority of installations. 8.2 TCP/IP Parameters 8.2.
ZyAIR Access Point Series User’s Guide Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space. 8.3 Configuring IP Click ADVANCED and then IP to display the screen shown next. Figure 8-1 IP Setup The following table describes the labels in this screen.
ZyAIR Access Point Series User’s Guide Table 8-2 IP Setup LABEL Get automatically DESCRIPTION Select this option if your ZyAIR is using a dynamically assigned IP address from a DHCP server each time. You must know the IP address assigned to the ZyAIR (by the DHCP server) to access the ZyAIR again. Use fixed IP address IP Address Select this option if your ZyAIR is using a static IP address. When you select this option, fill in the fields below.
Logs Part III: LOGS This part provides information and configuration instructions for the logs.
ZyAIR Access Point Series User’s Guide Chapter 9 Logs Screens This chapter contains information about configuring general log settings and viewing the ZyAIR’s logs. Refer to the appendix for example log message explanations. 9.1 Configuring View Log The web configurator allows you to look at all of the ZyAIR’s logs in one location. Click ADVANCED and then LOGS to open the View Log screen.
ZyAIR Access Point Series User’s Guide The following table describes the labels in this screen. Table 9-1 View Log LABEL DESCRIPTION Display Select a log category from the drop down list box to display logs within the selected category. To view all logs, select All Logs. The number of categories shown in the drop down list box depends on the selection in the Log Settings page. Time This field displays the time the log was recorded. Message This field states the reason for the log.
ZyAIR Access Point Series User’s Guide Figure 9-2 Log Settings The following table describes the labels in this screen.
ZyAIR Access Point Series User’s Guide Table 9-2 Log Settings LABEL DESCRIPTION Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below. If this field is left blank, logs and alert messages will not be sent via e-mail. Mail Subject Type a title that you want to be in the subject line of the log e-mail message that the ZyAIR sends. Send log to Logs are sent to the e-mail address specified in this field.
ZyAIR Access Point Series User’s Guide Table 9-2 Log Settings LABEL Send Immediate Alert DESCRIPTION Select the categories of alerts for which you want the ZyAIR to immediately send e-mail alerts. Apply Click Apply to save your customized settings and exit this screen. Reset Click Reset to reconfigure all the fields in this screen.
Maintenance Part IV: MAINTENANCE This part describes the Maintenance web configurator screens.
ZyAIR Access Point Series User’s Guide Chapter 10 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 10.1 Maintenance Overview The maintenance screens can help you view system information, upload new firmware, manage configuration and restart your ZyAIR. 10.2 System Status Screen Click MAINTENANCE to open the System Status screen, where you can use to monitor your ZyAIR.
ZyAIR Access Point Series User’s Guide Table 10-1 System Status LABEL DESCRIPTION ZyNOS Firmware Version This is the ZyNOS Firmware version and the date created. ZyNOS is ZyXEL's proprietary Network Operating System design. Routing Protocols This shows the routing protocol – BRIDGE for which the ZyAIR is configured. IP Address IP Subnet Mask DHCP Show Statistics This is the Ethernet port IP address. This is the Ethernet port subnet mask. This is the Ethernet port DHCP role - Client or None.
ZyAIR Access Point Series User’s Guide Table 10-2 System Status: Show Statistics LABEL DESCRIPTION Status This shows the port speed and duplex setting if you are using Ethernet encapsulation for the Ethernet port. This shows the transmission speed only for wireless port. TxPkts This is the number of transmitted packets on this port. RxPkts This is the number of received packets on this port. Collisions This is the number of collisions on this port.
ZyAIR Access Point Series User’s Guide Figure 10-3 Association List The following table describes the labels in this screen. Table 10-3 Association List LABEL DESCRIPTION # This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station. Association Time This field displays the time a wireless station first associated with the ZyAIR.
ZyAIR Access Point Series User’s Guide Figure 10-4 Channel Usage (ZyAIR B-1000) The following table describes the labels in this screen. Table 10-4 Channel Usage (ZyAIR B-1000) LABEL DESCRIPTION Channel This is the index number of the channel currently used by the associated AP in an Infrastructure wireless network or wireless station in an Ad-Hoc wireless network. Activity This field display Yes if the channel is used by another AP or Ad-hoc network within the ZyAIR’s transmission range.
ZyAIR Access Point Series User’s Guide Figure 10-5 Channel Usage The following table describes the labels in this screen. Table 10-5 Channel Usage LABEL DESCRIPTION SSID This is the Service Set IDentification name of the AP in an Infrastructure wireless network or wireless station in an Ad-Hoc wireless network. For our purposes, we define an Infrastructure network as a wireless network that uses an AP and an Ad-Hoc network (also known as Independent Basic Service Set (IBSS)) as one that doesn’t.
ZyAIR Access Point Series User’s Guide Table 10-5 Channel Usage LABEL DESCRIPTION Network Mode “Network mode” in this screen refers to your wireless LAN infrastructure (refer to the Wireless LAN chapter) and WEP setup. Network modes are: Infrastructure (same as an extended service set ESS)), Infrastructure with WEP (WEP encryption is enabled), Ad-Hoc (same as an independent basic service set IBSS)), or Ad-Hoc with WEP. Refresh Click Refresh to reload the screen. 10.
ZyAIR Access Point Series User’s Guide Table 10-6 Firmware Upload LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. Browse... Click Browse... to find the .bin file you want to upload. Remember that you must decompress compressed (.zip) files before you can upload them. Upload Click Upload to begin the upload process. This process may take up to two minutes.
ZyAIR Access Point Series User’s Guide If the upload was not successful, the following screen will appear. Click Return to go back to the F/W Upload screen. Figure 10-9 Firmware Upload Error 10.5 Configuration Screen The web configurator uses TFTP to transfer files. See the Firmware and Configuration File Maintenance chapter for transferring configuration files using FTP/TFTP commands. Click MAINTENANCE and then CONFIGURATION.
ZyAIR Access Point Series User’s Guide Figure 10-10 Backup Configuration 10.5.2 Restore Configuration Restore configuration replaces your ZyAIR's current configuration with a previously saved configuration. Restore files (usually) have a .ROM extension, e.g., "zyair.rom". The system reboots automatically after the file transfer is complete and uses the configured values in the file. WARNING! Do not interrupt the file transfer process as this may PERMANENTLY DAMAGE YOUR ZyAIR.
ZyAIR Access Point Series User’s Guide Table 10-7 Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. Browse... Click Browse... to find the file you want to upload. Remember that you must decompress compressed (.ZIP) files before you can upload them. Upload Click Upload to begin the upload process. Do not turn off the device while configuration file upload is in progress.
ZyAIR Access Point Series User’s Guide If the upload was not successful, the following screen will appear. Click Return to go back to the Configuration screen. Figure 10-14 Configuration Upload Error 10.5.3 Back to Factory Defaults Clicking the Reset button in this section clears all user-entered configuration information and returns the ZyAIR to its factory defaults as shown on the screen. This will erase all configurations that you have applied.
ZyAIR Access Point Series User’s Guide Figure 10-16 Reset Warning Message You can also press the RESET button on the rear panel to reset the factory defaults of your ZyAIR. Refer to the Resetting the ZyAIR section for more information on the RESET button.
SMT Configuration Part V: SMT CONFIGURATION This part contains SMT (System Management Terminal) configuration and background information for features only configurable by SMT. See the web configurator parts of this guide for background information on features configurable by web configurator and SMT.
ZyAIR Access Point Series User’s Guide Chapter 11 Introducing the SMT This chapter describes how to access the SMT and provides an overview of its menus. 11.1 Connect to your ZyAIR Using Telnet The following procedure details how to telnet into your ZyAIR. Step 1. In Windows, click Start (usually in the bottom left corner), Run and then type “telnet 192.168.1.2” (the default IP address) and click OK. Step 2. For your first login, enter the default password “1234”.
ZyAIR Access Point Series User’s Guide Menu 23.1 – System Security – Change Password Old Password= **** New Password= ? Retype to confirm= ? Enter here to CONFIRM or ESC to CANCEL: Figure 11-2 Menu 23.1 System Security : Change Password Step 4. Type your new system password in the New Password field (up to 30 characters), and press [ENTER]. Step 5. Re-type your new system password in the Retype to confirm field for confirmation and press [ENTER].
ZyAIR Access Point Series User’s Guide ZyAIR B-3000 Main Menu Menu 3 LAN Setup Menu 14 Dial-in User Setup Menu 3.2 TCP/IP Setup Menu14.1 Edit Dial-in User Menu 3.5.1 WLAN MAC Address Filter Menu 3.5 Wireless LAN Setup Menu 3.5.2 Roaming Configuration Menu 3.5.3.1 ESS x Configuration Menu 3.5.3 Multiple ESS Configuration Menu 1 General Setup Menu 16 VLAN Setup Menu 22 SNMP Configuration Menu 23 System Security Menu 23.1 System SecurityChange Password Menu 23.4 System SecurityIEEE802.
ZyAIR Access Point Series User’s Guide 11.4 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your ZyAIR. Several operations that you should be familiar with before you attempt to modify the configuration are listed in the table below. Table 11-1 Main Menu Commands OPERATION KEYSTROKE DESCRIPTION Move down to another menu [ENTER] To move forward to a submenu, type in the number of the desired submenu and press [ENTER].
ZyAIR Access Point Series User’s Guide Copyright (c) 1994 - 2003 ZyXEL Communications Corp. ZyAIR B-3000 Main Menu Getting Started 1. General Setup 3. LAN Setup Advanced Management 22. SNMP Configuration 23. System Security 24. System Maintenance Advanced Applications 14. Dial-in User Setup 16. VLAN Setup 99. Exit Enter Menu Selection Number: Figure 11-4 ZyAIR B-3000 SMT Main Menu 11.4.
ZyAIR Access Point Series User’s Guide Chapter 12 General Setup The chapter shows you the information on general setup. 12.1 General Setup Menu 1 – General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. It is recommended you type your computer's "Computer name". The Domain Name entry is what is propagated to the DHCP clients on the LAN.
ZyAIR Access Point Series User’s Guide Table 12-1 Menu 1 General Setup FIELD DESCRIPTION EXAMPLE System Name Choose a descriptive name for identification purposes. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes “-” and underscores "_" are accepted. B-3000 Domain Name This is not a required field. Leave this field blank or enter the domain name here if you know it.
ZyAIR Access Point Series User’s Guide Chapter 13 LAN Setup This chapter shows you how to configure the LAN on your ZyAIR.. 13.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 – LAN Setup. From the main menu, enter 3 to display menu 3. Menu 3 - LAN Setup 2. TCP/IP Setup 5. Wireless LAN Setup Enter Menu Selection Number: Figure 13-1 Menu 3 LAN Setup Detailed explanation about the LAN Setup menu is given in the next chapter. 13.2 TCP/IP Ethernet Setup Use menu 3.
ZyAIR Access Point Series User’s Guide Follow the instructions in the following table on how to configure the fields in this menu. Table 13-1 Menu 3.2 TCP/IP Setup FIELD IP Address Assignment DESCRIPTION EXAMPLE Press [SPACE BAR] and then [ENTER] to select Dynamic to have the ZyAIR obtain an IP address from a DHCP server. You must know the IP address assigned to the ZyAIR (by the DHCP server) to access the ZyAIR again. Select Static to give the ZyAIR a fixed, unique IP address.
ZyAIR Access Point Series User’s Guide Menu 3.5 - Wireless LAN Setup Operating Mode= Access Point ESSID= Wireless Hide ESSID= No Channel ID= CH01 2412MHz RTS Threshold= 2432 Frag. Threshold= 2432 WEP Encryption= Disable Default Key= N/A Key1= N/A Key2= N/A Key3= N/A Key4= N/A Authen.
ZyAIR Access Point Series User’s Guide Table 13-2 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXMAPLE WEP Encryption Select Disable to allow wireless stations to communicate with the access points without any data encryption. Select 64-bit WEP or 128-bit WEP to enable data encryption. Disable Default Key Enter the key number (1 to 4) in this field. Only one key can be enabled at any one time. This key must be the same on the ZyAIR and the wireless stations to communicate.
ZyAIR Access Point Series User’s Guide 13.3.1 Configuring MAC Address Filter Your ZyAIR checks the MAC address of the wireless station device against a list of allowed or denied MAC addresses. However, intruders could fake allowed MAC addresses so MAC-based authentication is less secure than EAP authentication. Follow the steps below to create the MAC address table on your ZyAIR. Step 1. From the main menu, enter 3 to open Menu 3 – LAN Setup. Step 2. Enter 5 to display Menu 3.5 – Wireless LAN Setup.
ZyAIR Access Point Series User’s Guide Menu 3.5.
ZyAIR Access Point Series User’s Guide 13.3.2 Configuring Roaming Enable the roaming feature if you have two or more ZyAIRs on the same subnet. Follow the steps below to allow roaming on your ZyAIR. Step 1. From the main menu, enter 3 to display Menu 3 – LAN Setup. Step 2. Enter 5 to display Menu 3.5 – Wireless LAN Setup. Menu 3.5 - Wireless LAN Setup Operating Mode= Access Point ESSID= Wireless Hide ESSID= No Channel ID= CH01 2412MHz RTS Threshold= 2432 Frag.
ZyAIR Access Point Series User’s Guide Table 13-4 Menu 3.5.2 Roaming Configuration FIELD DESCRIPTION Active Press [SPACE BAR] and then [ENTER] to select Yes to enable roaming on the ZyAIR if you have two or more ZyAIRs on the same subnet. Port # Type the port number to communicate roaming information between access points. The port number must be the same on all access points. The default is 16290. Make sure this port is not used by other services.
ZyAIR Access Point Series User’s Guide Menu 3.5.3 - Multiple ESS Configuration Number ESSID Active VLAN ID MAC Filter -----------------------------------------------------------------------------1 Wireless Y 1 Disable 2 CSOB1000 Y 2 Disable 3 N 0 Disable 4 N 0 Disable 5 N 0 Disable 6 N 0 Disable 7 N 0 Disable 8 N 0 Disable -----------------------------------------------------------------------------WEP= 64-bit WEP Action= Edit ESS= 0 Press ENTER to Confirm or ESC to Cancel: Figure 13-9 Menu 3.5.
ZyAIR Access Point Series User’s Guide Menu 3.5.3.1 - ESS 1 Configuration ESSID= Active= No Default Unicast Key= 1 Default Broadcast/Multicast Key= 3 Key 1= ******** Key 2= ******** Key 3= ******** Key 4= ******** VLAN ID= 0 Edit MAC Address Filter= No Press ENTER to Confirm or ESC to Cancel: Figure 13-10 Menu 3.5.3.1 ESS x Configuration The following table describes the fields in this menu. Table 13-6 Menu 3.5.3.
ZyAIR Access Point Series User’s Guide Table 13-6 Menu 3.5.3.1 ESS x Configuration FIELD DESCRIPTION Edit MAC Address Each service set has its own MAC address filter. Refer to MAC Address Filter section Filter for details. When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel” to save your configuration or press [ESC] to cancel and go back to the previous screen. 13.3.
ZyAIR Access Point Series User’s Guide Menu 3.5.4 - Bridge Link Configuration Active = No -----------------------------------------------------------------------------Peer Address = 00:00:00:00:00:00 ------------------------------------------------------------------------------ Press ENTER to Confirm or ESC to Cancel: Figure 13-12 Menu 3.5.4 Bridge Link Configuration The following table describes the fields in this menu. Table 13-7 Menu 3.5.
ZyAIR Access Point Series User’s Guide Chapter 14 Dial-in User Setup This chapter shows you how to create user accounts on the ZyAIR. 14.1 Dial-in User Setup By storing user profiles locally, your ZyAIR is able to authenticate wireless users without interacting with a network RADIUS server. Follow the steps below to set up user profiles on your ZyAIR. Step 1. From the main menu, enter 14 to display Menu 14 - Dial-in User Setup. Menu 14 - Dial-in User Setup 1. 2. 3. 4. 5. 6. 7. 8.
ZyAIR Access Point Series User’s Guide Table 14-1 Menu 14.1- Edit Dial-in User FIELD User Name DESCRIPTION Enter a username up to 31 alphanumeric characters long for this user profile. This field is case sensitive. Active Press [SPACE BAR] to select Yes and press [ENTER] to enable the user profile. Password Enter a password up to 31 characters long for this user profile.
ZyAIR Access Point Series User’s Guide Chapter 15 VLAN Setup This chapter explains VLAN Setup menu 16. Refer to the Multiple-ESS and VLAN chapter for background information on VLAN. This chapter is not available on all models. 15.1 VLAN Setup To setup VLAN, select option 16 from the main menu to open Menu 16 – VLAN Setup as shown next.
ZyAIR Access Point Series User’s Guide Chapter 16 SNMP Configuration This chapter explains SNMP Configuration menu 22. 16.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your ZyAIR supports SNMP agent functionality, which allows a manager station to manage and monitor the ZyAIR through the network. The ZyAIR supports SNMP version one (SNMPv1) and version two c (SNMPv2c).
ZyAIR Access Point Series User’s Guide An agent is a management software module that resides in a managed device (the ZyAIR). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions. It executes applications that control and monitor managed devices.
ZyAIR Access Point Series User’s Guide Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Host= 0.0.0.0 Trap: Community= public Destination= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 16-2 Menu 22 SNMP Configuration The following table describes the SNMP configuration parameters.
ZyAIR Access Point Series User’s Guide Table 16-2 SNMP Traps TRAP # TRAP NAME DESCRIPTION 1 coldStart (defined in RFC-1215) A trap is sent after booting (power on). 2 warmStart (defined in RFC-1215) A trap is sent after booting (software reboot). 3 linkUp (defined in RFC-1215) A trap is sent when the port is up. 4 authenticationFailure (defined in RFC-1215) A trap is sent to the manager when receiving any SNMP get or set requirements with wrong community (password).
ZyAIR Access Point Series User’s Guide Chapter 17 System Security This chapter describes how to configure the system security on the ZyAIR. 17.1 System Security You can configure the system password, an external RADIUS server and 802.1x in this menu. 17.1.1 System Password Menu 23 - System Security 1. Change Password 2. RADIUS Server 4. IEEE802.1x Figure 17-1 Menu 23 System Security You should change the default password. If you forget your password you have to restore the default configuration file.
ZyAIR Access Point Series User’s Guide Menu 23.2 - System Security - RADIUS Server Authentication Server: Active= No Server Address= 10.11.12.13 Port #= 1812 Shared Secret= ? Accounting Server: Active= No Server Address= 10.11.12.13 Port #= 1813 Shared Secret= ? Press ENTER to Confirm or ESC to Cancel: Figure 17-3 Menu 23.2 System Security : RADIUS Server The following table describes the fields in this menu. Table 17-1 Menu 23.
ZyAIR Access Point Series User’s Guide Table 17-1 Menu 23.2 System Security : RADIUS Server FIELD DESCRIPTION Port The default port of the RADIUS server for accounting is 1813. EXAMPLE 1813 You need not change this value unless your network administrator instructs you to do so with additional information. Shared Secret Specify a password (up to 31 alphanumeric characters) as the key to be shared between the external accounting server and the access points. The key is not sent over the network.
ZyAIR Access Point Series User’s Guide Menu 23.4 - System Security - IEEE802.1X Wireless Port Control= Authentication Required ReAuthentication Timer (in second)= 1800 Idle Timeout (in second)= 3600 Authentication Databases= RADIUS Only Dynamic WEP Key Exchange= Disable Press ENTER to Confirm or ESC to Cancel: Figure 17-5 Menu 23.4 System Security : IEEE802.1x The following table describes the fields in this menu. Table 17-2 Menu 23.4 System Security : IEEE802.
ZyAIR Access Point Series User’s Guide Table 17-2 Menu 23.4 System Security : IEEE802.1x FIELD Authentication Databases DESCRIPTION This field is activated only when you select Authentication Required in the Wireless Port Control field. The authentication database contains wireless station login information. The local user database is the built-in database on the ZyAIR. The RADIUS is an external server. Use this field to decide which database the ZyAIR should use (first) to authenticate a wireless station.
ZyAIR Access Point Series User’s Guide Chapter 18 System Information and Diagnosis This chapter covers the information and diagnostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Type 24 in the main menu and press [ENTER] to open Menu 24 – System Maintenance, as shown in the following figure. Menu 24 – System Maintenance 1. 2. 3. 4. 5. 6.
ZyAIR Access Point Series User’s Guide Port ETH WLAN Port ETH WLAN Status 100M/Full 11M Menu 24.1 - System Maintenance - Status 00:57:47 Sat. Jan. 01, 2000 TxPkts 1092 915 Rx B/s 128 0 Ethernet Address 00:A0:C5:01:23:45 00:A0:C5:01:23:45 System up Time: RxPkts 2199 0 IP Address 192.168.1.2 Cols 0 0 Tx B/s 286 0 IP Mask 255.255.255.0 Up Time 0:57:45 0:57:45 DHCP None 0:57:50 Name: B-3000 ZyNOS F/W Version: V3.50(HC.
ZyAIR Access Point Series User’s Guide Table 18-1 Menu 24.1 System Maintenance : Status FIELD System Up Time DESCRIPTION This is the time the ZyAIR is up and running from the last reboot. 18.2 System Information To get to the System Information: Step 1. Enter 24 to display Menu 24 – System Maintenance. Step 2. Enter 2 to display Menu 24.2 – System Information and Console Port Speed. Step 3. From this menu you have two choices as shown in the next figure: Menu 24.
ZyAIR Access Point Series User’s Guide The following table describes the fields in this menu. Table 18-2 Menu 24.2.1 System Maintenance : Information FIELD DESCRIPTION Name Displays the system name of your ZyAIR. This information can be changed in Menu 1 – General Setup. Routing Refers to the routing protocol used. ZyNOS F/W Version Refers to the ZyNOS (ZyXEL Network Operating System) system firmware version. ZyNOS is a registered trademark of ZyXEL Communications Corporation.
ZyAIR Access Point Series User’s Guide 18.3 Log and Trace Your ZyAIR provides the error logs and trace records that are stored locally. 18.3.1 Viewing Error Log The first place you should look for clues when something goes wrong is the error log. Follow the procedures to view the local error/trace log: Step 1. Type 24 in the main menu to display Menu 24 – System Maintenance. Step 2. From menu 24, type 3 to display Menu 24.3 – System Maintenance – Log and Trace. Menu 24.
ZyAIR Access Point Series User’s Guide Menu 24.4 - System Maintenance – Diagnostic TCP/IP 1. Ping Host 2. DHCP Release 3. DHCP Renewal System 11. Reboot System Enter Menu Selection Number: Host IP Address= N/A Figure 18-8 Menu 24.4 System Maintenance : Diagnostic Follow the procedure next to get to display this menu: Step 1. From the main menu, type 24 to open Menu 24 – System Maintenance. Step 2. From this menu, type 4. Diagnostic to open Menu 24.4 – System Maintenance – Diagnostic.
ZyAIR Access Point Series User’s Guide Chapter 19 Firmware and Configuration File Maintenance This chapter tells you how to backup and restore your configuration file as well as upload new firmware and configuration files using the SMT screens. 19.1 Filename Conventions The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password and TCP/IP Setup, etc. It arrives from ZyXEL with a rom filename extension.
ZyAIR Access Point Series User’s Guide Table 19-1 Filename Conventions FILE TYPE INTERNAL NAME EXTERNAL NAME DESCRIPTION Configuration File Rom-0 *.rom This is the configuration filename on the ZyAIR. Uploading the rom-0 file replaces the entire ROM file system, including your ZyAIR configurations, system-related data (including the default password), the error log and the trace log. Firmware Ras *.bin This is the generic name for the ZyNOS firmware on the ZyAIR. 19.
ZyAIR Access Point Series User’s Guide 19.2.2 Using the FTP command from the DOS Prompt Step 1. Launch the FTP client on your computer. Step 2. Enter “open” and the IP address of your ZyAIR. Step 3. Press [ENTER] when prompted for a username. Step 4. Enter “root” and your SMT password as requested. The default is 1234. Step 5. Enter “bin” to set transfer mode to binary. Step 6. Use “get” to transfer files from the ZyAIR to the computer, for example, “get rom-0 config.
ZyAIR Access Point Series User’s Guide Table 19-2 General Commands for Third Party FTP Clients COMMAND DESCRIPTION Initial Remote Directory Specify the default remote directory (path). Initial Local Directory Specify the default local directory (path). 19.2.3 Backup Configuration Using TFTP The ZyAIR supports the up/downloading of the firmware and the configuration file using TFTP (Trivial File Transfer Protocol) over LAN. Although TFTP should work over WAN as well, it is not recommended.
ZyAIR Access Point Series User’s Guide where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the ZyAIR IP address, “get” transfers the file source on the ZyAIR (rom-0 name of the configuration file on the ZyAIR) to the file destination on the computer and renames it config.rom. The following table describes some of the fields that you may see in third party TFTP clients.
ZyAIR Access Point Series User’s Guide Menu 24.6 – Restore Configuration To transfer the firmware and the configuration file, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your router. Then type "root" and SMT password as requested. 3. Type “put backupfilename rom-0” where backupfilename is the name of your backup configuration file on your workstation and rom-spt is the Remote file name on the router.
ZyAIR Access Point Series User’s Guide 19.4.1 Firmware Upload FTP is the preferred method for uploading the firmware and configuration. To use this feature, your computer must have an FTP client. When you telnet into the ZyAIR, you will see the following screens for uploading firmware and the configuration file using FTP. Menu 24.7.1 - System Maintenance - Upload System Firmware To upload the system firmware, follow the procedure below: 1. Launch the FTP client on your workstation. 2.
ZyAIR Access Point Series User’s Guide Menu 24.7.2 - System Maintenance - Upload System Configuration File To upload the system configuration file, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your system. Then type "root" and SMT password as requested. 3.
ZyAIR Access Point Series User’s Guide 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware.bin ras 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 327680 bytes sent in 1.10Seconds 297.89Kbytes/sec. ftp> quit Figure 19-7 FTP Session Example More commands that you may find in third party FTP clients, are listed earlier in this chapter. 19.4.
ZyAIR Access Point Series User’s Guide 19.4.5 Example: TFTP Command The following is an example TFTP command: TFTP [-i] host put firmware.bin ras where “i” specifies binary image transfer mode (use this mode when transferring binary files), “host” is the ZyAIR’s IP address, “put” transfers the file source on the computer (firmware.bin – name of the firmware on the computer) to the file destination on the remote host (ras - name of the firmware on the ZyAIR).
ZyAIR Access Point Series User’s Guide Chapter 20 System Maintenance and Information This chapter leads you through SMT menus 24.8 and 24.10. 20.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the main system firmware. The CI provides much of the same functionality as the SMT, while adding some low-level setup and diagnostic functions. Enter the CI from the SMT by selecting menu 24.8. See the included disk or the zyxel.com web site for more detailed information on CI commands.
ZyAIR Access Point Series User’s Guide 20.2 Time and Date Setting The ZyAIR keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your ZyAIR. Menu 24.10 allows you to update the time and date settings of your ZyAIR. The real time is then displayed in the ZyAIR error logs and firewall logs. Step 1. Select menu 24 in the main menu to open Menu 24 – System Maintenance. Step 2.
ZyAIR Access Point Series User’s Guide Table 20-1 Menu 24.10 System Maintenance : Time and Date Setting FIELD Use Time Server when Bootup DESCRIPTION Enter the time service protocol that your time server sends when you turn on the ZyAIR. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use trial and error to find a protocol that works. The main differences between them are the format.
Appendices Part VI: APPENDICES This part provides troubleshooting and background information about setting up your computer’s IP address, wireless LAN, 802.1x, PPPoE, PPTP and IP subnetting. It also provides information on the antenna, PoE, command interpreter interface, NetBIOS commands and logs.
ZyAIR Access Point Series User’s Guide Appendix A Troubleshooting This appendix covers potential problems and possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. Problems Starting Up the ZyAIR Chart A-1 Troubleshooting the Start-Up of Your ZyAIR PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I plug in the power adaptor.
ZyAIR Access Point Series User’s Guide Chart A-2 Troubleshooting the Ethernet Interface PROBLEM I cannot ping any computer on the LAN. CORRECTIVE ACTION If the ETHN LED on the front panel is off, check the Ethernet cable connections between your ZyAIR and the Ethernet device. Check the Ethernet cable connections between the Ethernet device and the LAN computers. Check for faulty Ethernet cables. Make sure the LAN computer’s Ethernet adapter is installed and working properly.
ZyAIR Access Point Series User’s Guide Problems with the WLAN Interface Chart A-5 Troubleshooting the WLAN Interface PROBLEM CORRECTIVE ACTION Cannot access the ZyAIR from the WLAN. Make sure the wireless card is properly inserted in the ZyAIR and the link LED is on. Make sure the wireless adapter on the wireless station is working properly. Check that both the ZyAIR and your wireless station are using the same ESSID, channel and WEP keys (if WEP encryption is activated).
ZyAIR Access Point Series User’s Guide Appendix B Brute-Force Password Guessing Protection The following describes the commands for enabling, disabling and configuring the brute-force password guessing protection mechanism for the password. See the Command Interpreter appendix for information on the command structure. Chart B-1 Brute-Force Password Guessing Protection Commands COMMAND DESCRIPTION sys pwderrtm This command displays the brute-force guessing password protection settings.
ZyAIR Access Point Series User’s Guide Appendix C Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer. Windows 3.1 requires the purchase of a third-party TCP/IP application package.
ZyAIR Access Point Series User’s Guide If you need the adapter: a. In the Network window, click Add. b. Select Adapter and then click Add. c. Select the manufacturer and model of your network adapter and then click OK. If you need TCP/IP: a. In the Network window, click Add. b. Select Protocol and then click Add. c. Select Microsoft from the list of manufacturers. d. Select TCP/IP from the list of network protocols and then click OK. If you need Client for Microsoft Networks: a. Click Add.
ZyAIR Access Point Series User’s Guide 1. Click the IP Address tab. -If your IP address is dynamic, select Obtain an IP address automatically. -If you have a static IP address, select Specify an IP address and type your information into the IP Address and Subnet Mask fields. 2. Click the DNS Configuration tab. -If you do not know your DNS information, select Disable DNS.
ZyAIR Access Point Series User’s Guide 3. Click the Gateway tab. -If you do not know your gateway’s IP address, remove previously installed gateways. -If you have a gateway IP address, type it in the New gateway field and click Add. 4. Click OK to save and close the TCP/IP Properties window. 5. Click OK to close the Network window. Insert the Windows CD if prompted. 6. Turn on your ZyAIR and restart your computer when prompted. Verifying Your Computer’s IP Address 1. Click Start and then Run. 2.
ZyAIR Access Point Series User’s Guide 1. For Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel. 2. For Windows XP, click Network Connections. For Windows 2000/NT, click Network and Dial-up Connections. Setting Up Your Computer’s IP Address 3. Right-click Local Area Connection and then click Properties.
ZyAIR Access Point Series User’s Guide 4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. 5. The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). -If you have a dynamic IP address click Obtain an IP address automatically. -If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet mask, and Default gateway fields. Click Advanced.
ZyAIR Access Point Series User’s Guide 6. -If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: -In the IP Settings tab, in IP addresses, click Add. -In TCP/IP Address, type an IP address in IP address and a subnet mask in Subnet mask, and then click Add. -Repeat the above two steps for each IP address you want to add.
ZyAIR Access Point Series User’s Guide 7. In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): -Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). -If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields. If you have previously configured DNS servers, click Advanced and then the DNS tab to order them. 8.
ZyAIR Access Point Series User’s Guide 1. Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. 2. Select Ethernet built-in from the Connect via list. 3. For dynamically assigned settings, select Using DHCP Server from the Configure: list.
ZyAIR Access Point Series User’s Guide 4. For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box. -Type the IP address of your ZyAIR in the Router address box. 5. Close the TCP/IP Control Panel. 6. Click Save if prompted, to save changes to your configuration. 7. Turn on your ZyAIR and restart your computer (if prompted).
ZyAIR Access Point Series User’s Guide 2. Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list. - Click the TCP/IP tab. 3. For dynamically assigned settings, select Using DHCP from the Configure list. 4. For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box.
ZyAIR Access Point Series User’s Guide Appendix D Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without the use of a cabled connection. In effect a wireless LAN environment provides you the freedom to stay connected to the network while roaming around in the coverage area. WLAN is not available on all models.
ZyAIR Access Point Series User’s Guide unlicensed ISM (Industrial, Scientific and Medical) band. The third method is infrared technology, using very high frequencies, just below visible light in the electromagnetic spectrum to carry data. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless nodes or stations (STA), which is called a Basic Service Set (BSS).
ZyAIR Access Point Series User’s Guide The Extended Service Set (ESS) shown in the next figure consists of a series of overlapping BSSs (each containing an Access Point) connected together by means of a Distribution System (DS). Although the DS could be any type of network, it is almost invariably an Ethernet LAN. Mobile nodes can roam between access points and seamless campus-wide coverage is possible. Diagram D-2 ESS Provides Campus-Wide Coverage Wireless LAN and IEEE 802.
ZyAIR Access Point Series User’s Guide Appendix E Wireless LAN With IEEE 802.1x As wireless networks become popular for both portable computing and corporate networks, security is now a priority. Security Flaws with IEEE 802.11 Wireless networks based on the original IEEE 802.11 have a poor reputation for safety. The IEEE 802.11b wireless access standard, first published in 1999, was based on the MAC address. As the MAC address is sent across the wireless link in clear text, it is easy to spoof and fake.
ZyAIR Access Point Series User’s Guide RADIUS Server Authentication Sequence The following figure depicts a typical wireless network with a remote RADIUS server for user authentication using EAPOL (EAP Over LAN). Client computer access authorized. Client computer access not authorized. Diagram E-1 Sequences for EAP MD5–Challenge Authentication E-2 Wireless LAN with IEEE 802.
ZyAIR Access Point Series User’s Guide Appendix F Types of EAP Authentication This appendix discusses the four popular EAP authentication types: EAP-MD5, EAP-TLS, EAP-TTLS and PEAP. The type of authentication you use depends on the RADIUS server or the AP. Consult your network administrator for more information. EAP-MD5 (Message-Digest Algorithm 5) MD5 authentication is the simplest one-way authentication method. The authentication server sends a challenge to the wireless station.
ZyAIR Access Point Series User’s Guide hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5 and EAPMSCHAPv2, for client authentication. For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption. They are often deployed in corporate environments, but for public deployment, simple user name and password pair is more practical. The following table is a comparison of the features of four authentication types.
ZyAIR Access Point Series User’s Guide Appendix G Power over Ethernet Specifications You can use a power over Ethernet injector to power this device. The injector must comply to IEEE 802.3af. Chart 1 Power over Ethernet Injector Specifications Power Output 15.
ZyAIR Access Point Series User’s Guide Appendix H Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. Choosing the right antennas and positioning them properly increases the range and coverage area of a wireless LAN.
ZyAIR Access Point Series User’s Guide environment. With a wide coverage area, it is possible to make circular overlapping coverage areas with multiple access points. • Directional antennas concentrate the RF signal in a beam, like a flashlight. The angle of the beam width determines the direction of the coverage pattern; typically ranges from 20 degrees (less directional) to 90 degrees (very directional). The directional antennas are ideal for hallways and outdoor point-to-point applications.
ZyAIR Access Point Series User’s Guide Appendix I PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your PC to an ATM PVC (Permanent Virtual Circuit), which connects to a DSL Access Concentrator where the PPP session terminates (see the next figure). One PVC can support any number of PPP sessions from your LAN. PPPoE provides access control and billing functionality in a manner similar to dial-up services using PPP.
ZyAIR Access Point Series User’s Guide How PPPoE Works The PPPoE driver makes the Ethernet appear as a serial link to the PC and the PC runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the AC and an ISP, the AC is acting as a L2TP (Layer 2 Tunneling Protocol) LAC (L2TP Access Concentrator) and tunnels the PPP frames to the ISP. The L2TP tunnel is capable of carrying multiple PPP sessions.
ZyAIR Access Point Series User’s Guide Appendix J PPTP What is PPTP? PPTP (Point-to-Point Tunneling Protocol) is a Microsoft proprietary protocol (RFC 2637 for PPTP is informational only) to tunnel PPP frames. How can we transport PPP frames from a PC to a broadband modem over Ethernet? A solution is to build PPTP into the ANT (ADSL Network Termination) where PPTP is used only over the short haul between the PC and the modem over Ethernet.
ZyAIR Access Point Series User’s Guide PPTP Protocol Overview PPTP is very similar to L2TP, since L2TP is based on both PPTP and L2F (Cisco’s Layer 2 Forwarding). Conceptually, there are three parties in PPTP, namely the PNS (PPTP Network Server), the PAC (PPTP Access Concentrator) and the PPTP user. The PNS is the box that hosts both the PPP and the PPTP stacks and forms one end of the PPTP tunnel. The PAC is the box that dials/answers the phone calls and relays the PPP frames to the PNS.
ZyAIR Access Point Series User’s Guide Diagram J-3 Example Message Exchange between PC and an ANT PPP Data Connection The PPP frames are tunneled between the PNS and PAC over GRE (General Routing Encapsulation, RFC 1701, 1702). The individual calls within a tunnel are distinguished using the Call ID field in the GRE header.
ZyAIR Access Point Series User’s Guide Appendix K IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1. IP addresses are categorized into different classes. The class of an address depends on the value of its first octet. Class “A” addresses have a 0 in the left most bit.
ZyAIR Access Point Series User’s Guide A class “A” address (24 host bits) can have 224 –2 hosts (approximately 16 million hosts). Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a class “B” must begin with “10”, therefore the first octet of a class “B” address has a valid range of 128 to 191. The first octet of a class “C” address begins with “110”, and therefore has a range of 192 to 223.
ZyAIR Access Point Series User’s Guide sequence of ones beginning from the left most bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
ZyAIR Access Point Series User’s Guide Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit. The “borrowed” host ID bit can be either “0” or “1” thus giving two subnets; 192.168.1.0 with mask 255.255.255.128 and 192.168.1.128 with mask 255.255.255.128. In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to form network ID bits.
ZyAIR Access Point Series User’s Guide to an actual host for the first subnet is 192.168.1.1 and the highest is 192.168.1.126. Similarly the host ID range for the second subnet is 192.168.1.129 to 192.168.1.254. Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00, 01, 10 and 11.
ZyAIR Access Point Series User’s Guide Chart K-9 Subnet 3 NETWORK NUMBER Subnet Mask (Binary) LAST OCTET BIT VALUE 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.128 Lowest Host ID: 192.168.1.129 Broadcast Address: 192.168.1.191 Highest Host ID: 192.168.1.190 Chart K-10 Subnet 4 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. 192 IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.
ZyAIR Access Point Series User’s Guide The following table is a summary for class “C” subnet planning. Chart K-12 Class C Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 1 255.255.255.128 (/25) 2 126 2 255.255.255.192 (/26) 4 62 3 255.255.255.224 (/27) 8 30 4 255.255.255.240 (/28) 16 14 5 255.255.255.248 (/29) 32 6 6 255.255.255.252 (/30) 64 2 7 255.255.255.254 (/31) 128 1 Subnetting With Class A and Class B Networks.
ZyAIR Access Point Series User’s Guide Chart K-13 Class B Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 9 255.255.255.128 (/25) 512 126 10 255.255.255.192 (/26) 1024 62 11 255.255.255.224 (/27) 2048 30 12 255.255.255.240 (/28) 4096 14 13 255.255.255.248 (/29) 8192 6 14 255.255.255.252 (/30) 16384 2 15 255.255.255.
ZyAIR Access Point Series User’s Guide Appendix L Command Interpreter The following describes how to use the command interpreter. Enter 24 in the main menu to bring up the system maintenance menu. Enter 8 to go to Menu 24.8 - Command Interpreter Mode. See the included disk or zyxel.com for more detailed information on these commands. Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable. Command Syntax The command keywords are in courier new font.
ZyAIR Access Point Series User’s Guide Appendix M NetBIOS Filter Commands The following describes the NetBIOS packet filter commands. See the Command Interpreter appendix for information on the command structure. Introduction NetBIOS (Network Basic Input/Output System) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN. For some dial-up services such as PPPoE or PPTP, NetBIOS packets cause unwanted calls.
ZyAIR Access Point Series User’s Guide Chart M-1 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE WAN to LAN This field displays whether NetBIOS packets are blocked or forwarded from the WAN to the LAN. Forward IPSec Packets This field displays whether NetBIOS packets sent through a VPN connection are blocked or forwarded. Forward Trigger dial This field displays whether NetBIOS packets are allowed to initiate calls. Disabled means that NetBIOS packets are blocked from initiating calls.
ZyAIR Access Point Series User’s Guide Appendix N Log Descriptions Chart N-1 System Error Logs LOG MESSAGE DESCRIPTION %s exceeds the max. number of session per host! This attempt to create a NAT session exceeds the maximum number of NAT session table entries allowed to be created per host. Chart N-2 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on information from the time server.
ZyAIR Access Point Series User’s Guide Chart N-2 System Maintenance Logs FTP Login Successfully Someone has logged on to the router via FTP. FTP Login Fail Someone has failed to log on to the router via FTP. NAT Session Table is Full! The maximum number of NAT session table entries has been exceeded and the table is full.
ZyAIR Access Point Series User’s Guide Chart N-3 ICMP Notes TYPE CODE 8 DESCRIPTION Echo 0 11 Echo message Time Exceeded 0 Time to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 13 Pointer indicates the error Timestamp 0 14 Timestamp request message Timestamp Reply 0 15 Timestamp reply message Information Request 0 16 Information request message Information Reply 0 Information reply message Chart N-4 Sys log LOG MESSAGE Mon dd hr:mm:ss hostname src
ZyAIR Access Point Series User’s Guide Configuring What You Want the ZyAIR to Log Use the sys logs load command to load the log setting buffer that allows you to configure which logs the ZyAIR is to record.
ZyAIR Access Point Series User’s Guide message 0|11/11/2002 15:10:12 |172.22.3.80:137 |ACCESS BLOCK Log Description |172.22.255.
ZyAIR Access Point Series User’s Guide Appendix O Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adaptor Model AD48-1201200DUY Input Power AC120Volts/60Hz/0.25A Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards UL, CUL (UL 1950, CSA C22.2 No.234-M90) NORTH AMERICAN PLUG STANDARDS AC Power Adaptor Model DV-121A2-5720 Input Power AC120Volts/60Hz/27VA Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards UL, CUL (UL 1310, CSA C22.2 No.
ZyAIR Access Point Series User’s Guide JAPAN PLUG STANDARDS AC Power Adaptor Model JOD-48-1124 Input Power AC100Volts/ 50/60Hz/ 27VA Output Power DC12Volts/1.2A Power Consumption 10 W Safety Standards T-Mark (Japan Dentori) AUSTRALIA AND NEW ZEALAND PLUG STANDARDS AC Power Adaptor Model AD-1201200DS or AD-121200DS Input Power AC240Volts/50Hz/0.2A Output Power DC12Volts/1.
ZyAIR Access Point Series User’s Guide Appendix P Index A Address Assignment.........................................3-5, 8-1 Ad-hoc Configuration............................................. D-2 Alternative Subnet Mask Notation ......................... K-3 Antenna Directional ......................................................... G-2 Omni-directional ................................................ G-1 Types.................................................................. G-1 Antenna gain ...........
ZyAIR Access Point Series User’s Guide H P Hidden Menus........................................................11-4 Host .........................................................................4-3 Host IDs..................................................................K-1 Packets .................................................................. 18-2 Password ...............................................4-2, 11-1, 16-2 Ping .......................................................................
ZyAIR Access Point Series User’s Guide Trap...................................................................16-2 Traps ........................................................16-3, 16-4 Trusted Host......................................................16-3 Subnet Mask.................................. 3-6, 8-1, 13-2, 18-4 Subnet Masks ......................................................... K-2 Subnetting .............................................................. K-3 Supporting Disk..................
