Zyxel NWA3550-N User Manual [ru]
NWA3000-N Series
Wireless N Business WLAN 3000 Series Access Point
Default Login Details
Edition 1, 1/2011
ZyXEL Communications Corporation
About This User’s Guide
About This User’s Guide
This manual is intended for people who want to configure a NWA3000-N series AP using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology.
• Quick Start Guide
The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your network and configuring for Internet access.
Refer to the included CD for support documents.
Please refer to www.zyxel.com for additional support documentation and product certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
NWA3000-N Series User’s Guide
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may need to configure or helpful tips) or recommendations.
• The product in this book may be referred to as the “NWA3000-N series AP”, the “device”, the “AP”, or the “system” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER] means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key. “Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Maintenance > Status > Show Statistics means you first click
Maintenance in the navigation panel, then the Status sub menu and finally the Show Statistics button to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000” or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
• Screens reproduced here for demonstration purposes may not exactly match the screens on your device.
NWA3000-N Series User’s Guide
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The NWA3000-N series AP icon is not an exact representation of your device.
NWA3000-N series AP
NWA3000-N Series User’s Guide
Safety Warnings
• Do NOT use this product near water, for example, in a wet basement or near a swimming pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• ONLY qualified service personnel should service or disassemble this device.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device.
• Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution.
• If the power adaptor or cord is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning.
• “Not to remove the plug and plug into a wall outlet by itself; always attach the plug to the power supply first before insert into the wall.”
• (In other words, do NOT remove the plug and connect it to a power outlet by itself; always attach the plug to the power adaptor first before connecting it to a power outlet.)
• Antenna Warning! This device meets ETSI and FCC certification requirements when using the included antenna(s). Only use the included antenna(s).
• If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged.
• The PoE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors.
• The indoors versions of this product are for indoor use only (utilisation intérieure exclusivement).
This product is recyclable. Dispose of it properly.
NWA3000-N Series User’s Guide
Table of Contents
Table of Contents
About This User’s Guide .
Table of Contents.
Part I: User’s Guide.
Applications for the NWA3000-N series AP .
1.2.1 Bridge / Repeater .
1.3 Management Mode .
Ways to Manage the NWA3000-N series AP .
Good Habits for Managing the NWA3000-N series AP .
Starting and Stopping the NWA3000-N series AP .
The Web Configurator .
The Main Screen .
2.3.2 Navigation Panel .
2.3.3 Warning Messages .
2.3.5 Object Reference .
2.3.6 Tables and Lists .
NWA3000-N Series User’s Guide
Table of Contents
Object — based Configuration .
Feature Configuration Overview .
3.3.3 LAN Setting .
3.4.3 MON Profile .
3.5.1 WWW, SSH, TELNET, FTP, SNMP, and Auth. Server .
3.5.2 Logs and Reports .
3.5.3 File Manager .
Sample Network Setup .
4.1.1 Set the Management Modes
4.1.2 Set the LAN IP Address and Management VLAN (vlan99)
4.1.3 Set Up Wireless User Authentication
4.1.4 Create the AP Profiles (staff, guest)
Rogue AP Detection
4.2.1 Rogue AP Containment
Dynamic Channel Selection
Part II: Technical . Reference
5.1.1 What You Can Do in this Chapter
5.2.2 Memory Usage
NWA3000-N Series User’s Guide
Table of Contents
6.1.1 What You Can Do in this Chapter .
What You Need to Know .
6.3.1 LAN Status Graph .
6.4.1 Station Count of AP .
6.5.1 AP Mode Radio Information .
Legacy Device Info .
6.8.1 Legacy Device Info Add or Edit .
6.10 View AP Log .
7.2 About CAPWAP .
7.2.1 CAPWAP Discovery and Management .
7.2.2 Managed AP Finds the Controller .
7.2.3 CAPWAP and IP Subnets .
7.2.4 Notes on CAPWAP .
The Management Mode Screen .
LAN Setting Overview .
8.1.1 What You Can Do in this Chapter .
8.1.2 What You Need to Know .
8.2.1 Add or Edit a DNS Setting .
9.1.1 What You Can Do in this Chapter .
9.1.2 What You Need to Know .
NWA3000-N Series User’s Guide
Table of Contents
9.3.1 Edit AP List .
9.4.1 Add/Edit Rogue/Friendly List .
9.5 Load Balancing .
9.5.1 Disassociating and Delaying Connections .
9.7 Technical Reference .
10.1.1 What You Can Do in this Chapter .
10.1.2 What You Need to Know .
10.1.3 Before You Begin .
10.2 Device HA General .
10.3 Active-Passive Mode .
10.3.1 Edit Monitored Interface .
10.4 Technical Reference .
11.1.1 What You Can Do in this Chapter .
11.1.2 What You Need To Know .
11.2 User Summary .
11.2.1 Add/Edit User .
11.3.1 Edit User Authentication Timeout Settings .
12.1.1 What You Can Do in this Chapter .
12.1.2 What You Need To Know .
12.2.1 Add/Edit Radio Profile .
12.3.2 Security List .
12.3.3 MAC Filter List .
NWA3000-N Series User’s Guide
Table of Contents
13.1.1 What You Can Do in this Chapter .
13.1.2 What You Need To Know .
13.2 MON Profile .
13.2.1 Add/Edit MON Profile .
13.3 Technical Reference .
14.1.1 What You Can Do in this Chapter .
14.1.2 What You Need to Know .
14.1.3 Verifying a Certificate .
14.2 My Certificates .
14.2.1 Add My Certificates .
14.2.2 Edit My Certificates .
14.2.3 Import Certificates .
14.3 Trusted Certificates .
14.3.1 Edit Trusted Certificates .
14.3.2 Import Trusted Certificates .
14.4 Technical Reference .
15.1.1 What You Can Do in this Chapter .
15.3 Date and Time .
15.3.1 Pre-defined NTP Time Servers List .
15.3.2 Time Server Synchronization .
15.4 Console Speed .
15.5 WWW Overview .
15.5.1 Service Access Limitations .
15.5.2 System Timeout .
15.5.4 Configuring WWW Service Control .
15.5.5 HTTPS Example .
15.6.1 How SSH Works .
15.6.2 SSH Implementation on the NWA3000-N series AP .
15.6.3 Requirements for Using SSH .
15.6.4 Configuring SSH .
15.6.5 Examples of Secure Telnet Using SSH .
NWA3000-N Series User’s Guide
Table of Contents
15.9.1 Supported MIBs .
15.9.2 SNMP Traps .
15.9.3 Configuring SNMP .
15.9.4 Adding or Editing an SNMPv3 User Profile .
15.10 Internal RADIUS Server .
15.10.1 Configuring the Internal RADIUS Server .
15.10.2 Adding or Editing a Trusted AP Profile .
15.11 Technical Reference .
16.1.1 What You Can Do In this Chapter .
Email Daily Report .
16.3.1 Log Setting Summary .
16.3.2 Edit Log Settings .
16.3.3 Edit Remote Server .
16.3.4 Active Log Summary .
17.1.1 What You Can Do in this Chapter .
17.1.2 What you Need to Know .
18.1.1 What You Can Do in this Chapter .
18.3.1 Packet Capture Files .
18.3.2 Example of Viewing a Packet Capture File .
Wireless Frame Capture .
18.4.1 Wireless Frame Capture Files .
NWA3000-N Series User’s Guide
Table of Contents
19.1.1 What You Need To Know .
20.1.1 What You Need To Know .
Power, Hardware Connections, and LEDs .
NWA3000-N series AP Access and Login .
Wireless AP Troubleshooting .
Resetting the NWA3000-N series AP .
Getting More Troubleshooting Help .
C Wireless LANs .
D Open Software Announcements .
NWA3000-N Series User’s Guide
Table of Contents
NWA3000-N Series User’s Guide
User’s Guide
Introduction
1.1 Overview
Your NWA3000-N series AP’s business-class reliability, SMB features, and centralized wireless management make it ideally suited for advanced service delivery in mission-critical networks. The NWA3000-N series AP provides secure mobility across the 2.4GHz and 5GHz spectrums and the IEEE 802.11n standard’s high bandwidth to support high-performance applications. It uses Multiple BSSID and VLAN to provide up to eight simultaneous independent virtual APs. Additionally, innovations in roaming technology and QoS features eliminate voice call disruptions. It can serve as an AP, Bridge, Repeater or even as an RF monitor to search for rouge APs to help eliminate network threats.
The NWA3000-N series AP controls network access with Media Access Control (MAC) address filtering, rogue Access Point (AP) detection and containment, and an internal authentication server. It also provides a high level of network traffic security, supporting IEEE 802.1x, Wi-Fi Protected Access (WPA), WPA2 and Wired Equivalent Privacy (WEP) data encryption.
A NWA3000-N series AP can manage up to 24 other NWA3000-N series APs on your network. Configuration profiles let you easily use different WLAN and security settings for various virtual and managed APs.
Your NWA3000-N series AP is easy to install, configure and use. The embedded Web-based configurator enables simple, straightforward management and maintenance. See the Quick Start Guide for how to make hardware connections.
NWA3000-N Series User’s Guide
Chapter 1 Introduction
1.2 Applications for the NWA3000-N series AP
The NWA3000-N series AP can be configured to use the following operating modes
Applications for each operating mode are shown below.
Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference.
1.2.1 Bridge / Repeater
The NWA3000-N series AP can act as a wireless network bridge and establish wireless links with other APs. In the figure below, the two NWA3000-N series APs (A and B) are connected to independent wired networks and have a bridge connection (A can communicate with B) at the same time. A NWA3000-N series AP in repeater mode (C) has no Ethernet connection. When the NWA3000-N series AP is in bridge mode, you should enable Spanning Tree Protocol (STP) to prevent bridge loops.
When the NWA3000-N series AP is in Bridge / Repeater mode, security between APs (the Wireless Distribution System or WDS) is independent of the security between the wireless stations and the AP. If you do not enable WDS security, traffic between APs is not encrypted. When WDS security is enabled, both APs must use the same pre-shared key.
Once the security settings of peer sides match one another, the connection between devices is made.
