Zyxel nwa5121 ni настроить

Zyxel NWA5121-NI User Manual [ru]

NWA5120 Series

802.11 a/b/g/n Unified Access Point

Edition 1, 05/2014

Quick Start Guide

Default Login Details

Copyright © 2014 ZyXEL Communications Corporation

READ CAREFULLY BEFORE USE.

KEEP THIS GUIDE FOR FUTURE REFERENCE.

This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product firmware or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.

• Quick Start Guide

The Quick Start Guide shows how to connect the NWA and access the Web Configurator.

• CLI Reference Guide

The CLI Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands to configure the NWA.

Note: It is recommended you use the Web Configurator to configure the NWA.

• Web Configurator Online Help

Click the help icon in any screen for help in configuring that screen and supplementary information.

NWA5120 Series User’s Guide

Contents Overview

The Web Configurator .

NWA5120 Series User’s Guide

Table of Contents

Table of Contents

Table of Contents .

Part I: User’s Guide .

1.1.1 Management Mode .

1.2 Ways to Manage the NWA .

Good Habits for Managing the NWA .

Starting and Stopping the NWA .

The Web Configurator .

Navigating the Web Configurator .

2.3.2 Navigation Panel .

2.3.3 Warning Messages .

2.3.4 Tables and Lists .

Part II: Technical Reference.

3.1.1 What You Can Do in this Chapter .

NWA5120 Series User’s Guide

Table of Contents

3.2.2 Memory Usage .

4.1.1 What You Can Do in this Chapter .

What You Need to Know .

4.3.1 Network Status Graph .

4.4.1 AP Mode Radio Information .

5.2 About CAPWAP .

5.2.1 CAPWAP Discovery and Management .

5.2.2 Managed AP Finds the Controller .

5.2.3 CAPWAP and IP Subnets .

5.2.4 Notes on CAPWAP .

Management Mode Screen .

6.1.1 What You Can Do in this Chapter .

7.1.1 What You Can Do in this Chapter .

7.1.2 What You Need to Know .

7.2 AP Management .

7.3.1 Add/Edit Rogue/Friendly List .

NWA5120 Series User’s Guide

Table of Contents

7.4.1 Disassociating and Delaying Connections .

8.1.1 What You Can Do in this Chapter .

8.1.2 What You Need To Know .

8.2.1 Add/Edit User .

8.3.1 Edit User Authentication Timeout Settings .

9.1.1 What You Can Do in this Chapter .

9.1.2 What You Need To Know .

9.2.1 Add/Edit Radio Profile .

9.3.2 Add/Edit SSID Profile .

9.4.1 Add/Edit Security Profile .

MAC Filter List .

9.5.1 Add/Edit MAC Filter Profile .

Layer-2 Isolation List .

9.6.1 Add/Edit Layer-2 Isolation Profile .

10.1.1 What You Can Do in this Chapter .

10.2 MON Profile .

10.2.1 Add/Edit MON Profile .

10.3 Technical Reference .

NWA5120 Series User’s Guide

Table of Contents

11.1.1 What You Can Do in this Chapter .

11.2 WDS Profile .

11.2.1 Add/Edit WDS Profile .

12.1.1 What You Can Do in this Chapter .

12.1.2 What You Need to Know .

12.1.3 Verifying a Certificate .

12.2.1 Add My Certificates .

12.2.2 Edit My Certificates .

12.2.3 Import Certificates .

12.3.1 Edit Trusted Certificates .

12.3.2 Import Trusted Certificates .

12.4 Technical Reference .

13.1.1 What You Can Do in this Chapter .

13.3.1 Pre-defined NTP Time Servers List .

13.3.2 Time Server Synchronization .

13.4 WWW Overview .

13.4.1 Service Access Limitations .

Читайте также:  Роутер не поддерживает dhcp

13.4.2 System Timeout .

13.4.4 Configuring WWW Service Control .

13.4.5 HTTPS Example .

13.5.1 How SSH Works .

13.5.2 SSH Implementation on the NWA .

13.5.3 Requirements for Using SSH .

13.5.4 Configuring SSH .

13.5.5 Examples of Secure Telnet Using SSH .

13.8.1 Supported MIBs .

NWA5120 Series User’s Guide

Table of Contents

13.8.2 SNMP Traps .

13.8.3 Configuring SNMP .

13.8.4 Adding or Editing an SNMPv3 User Profile .

14.1.1 What You Can Do In this Chapter .

Email Daily Report .

14.3.1 Log Setting .

14.3.2 Edit System Log Settings .

14.3.3 Edit Remote Server .

14.3.4 Active Log Summary .

15.1.1 What You Can Do in this Chapter .

15.1.2 What you Need to Know .

15.2.1 Example of Configuration File Download Using FTP .

15.3.1 Example of Firmware Upload Using FTP .

16.1.1 What You Can Do in this Chapter .

17.1.1 What You Need To Know .

18.1.1 What You Need To Know .

NWA5120 Series User’s Guide

Table of Contents

Power, Hardware Connections, and LED .

NWA Access and Login .

Resetting the NWA .

Getting More Troubleshooting Help .

A Importing Certificates .

C Customer Support .

D Legal Information .

NWA5120 Series User’s Guide

User’s Guide

Introduction

1.1 Overview

This User’s Guide covers the following models: NWA5121-N, NWA5121-NI, and NWA5123-NI. Your NWA is a wireless AP (Access Point). It extends the range of your existing wired network without additional wiring, providing easy network access to mobile users.

Table 1 NWA Series Comparison Table

Supported Wireless Standards

Supported Frequency Bands

Available Security Modes

Number of SSID Profiles

Number of Wireless Radios

Maximum number of log messages

512 event logs or 1024 debug logs

You can set the NWA to operate in either standalone AP or managed AP mode. When the NWA is in standalone AP mode, it can serve as a normal AP, as an RF monitor to search for rouge APs to help eliminate network threats, or even as a root AP or a wireless repeater to establish wireless links with other APs in a WDS (Wireless Distribution System). A WDS is a wireless connection between two or more APs.

Your NWA’s business-class reliability, SMB features, and centralized wireless management make it ideally suited for advanced service delivery in mission-critical networks. It uses Multiple BSSID and VLAN to provide simultaneous independent virtual APs. Additionally, innovations in roaming technology and QoS features eliminate voice call disruptions.

The NWA controls network access with Media Access Control (MAC) address filtering, and rogue Access Point (AP) detection. It also provides a high level of network traffic security, supporting IEEE 802.1x, Wi-Fi Protected Access (WPA), WPA2 and Wired Equivalent Privacy (WEP) data encryption.

NWA5120 Series User’s Guide

Chapter 1 Introduction

Your NWA is easy to install, configure and use. The embedded Web-based configurator enables simple, straightforward management and maintenance. See the Quick Start Guide for how to make hardware connections.

1.1.1 Management Mode

An AP controller can use Control And Provisioning of Wireless Access Points (CAPWAP, see RFC 5415) to discover and configure multiple managed APs.

The NWA is a standalone AP by default. You can switch the NWA from being a standalone AP to acting as a managed AP to allow it to be managed by an AP controller, such as the NXC2500. To change between management modes, see Chapter 5 on page 49 .

Table 2 NWA Management Mode Comparison

DEFAULT IP ADDRESS

UPLOAD FIRMWARE VIA

Web Configurator or FTP

When the NWA is in standalone AP mode, the NWA is set to have a static management IP address (192.168.1.2) by default. You can use either the web configurator or FTP to upload firmware. See Section 15.3 on page 160 for more information about firmware uploading.

Читайте также:  Слетела прошивка на роутере zyxel keenetic

When the NWA is in managed AP mode, it acts as a DHCP client and obtains an IP address from the AP controller. It can be configured ONLY by the AP controller. To change the NWA back to standalone AP mode, you need to check the AP controller for the NWA’s IP address and use FTP to upload firmware for standalone AP mode.

1.1.2 MBSSID

A Basic Service Set (BSS) is the set of devices forming a single wireless network (usually an access point and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS. In Multiple BSS (MBSSID) mode, the NWA provides multiple virtual APs, each forming its own BSS and using its own individual SSID profile.

You can configure multiple SSID profiles, and have all of them active at any one time.

You can assign different wireless and security settings to each SSID profile. This allows you to compartmentalize groups of users, set varying access privileges, and prioritize network traffic to and from certain BSSs.

To the wireless clients in the network, each SSID appears to be a different access point. As in any wireless network, clients can associate only with the SSIDs for which they have the correct security settings.

For example, you might want to set up a wireless network in your office where Internet telephony (VoIP) users have priority. You also want a regular wireless network for standard users, as well as a ‘guest’ wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority, SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for guest users. In this example, the guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access only the Internet.

NWA5120 Series User’s Guide

Chapter 1 Introduction

Figure 1 Multiple BSSs

1.1.3 Dual-Radio

The NWA5123-NI is equipped with dual wireless radios. This means you can configure two different wireless networks to operate simultaneously.

Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference.

You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming.

NWA5120 Series User’s Guide

Chapter 1 Introduction

Figure 2 Dual-Radio Application

1.1.4 Root AP

In Root AP mode, the NWA ( Z ) can act as the root AP in a wireless network and also allow repeaters ( X and Y ) to extend the range of its wireless network at the same time. In the figure below, both clients A , B and C can access the wired network through the root AP.

Figure 3 Root AP Application

On the NWA in Root AP mode, you can have multiple SSIDs active for reqular wireless connections and one SSID for the connection with a repeater (repeater SSID). Wireless clients can use either

NWA5120 Series User’s Guide

Chapter 1 Introduction

SSID to associate with the NWA in Root AP mode. A repeater must use the repeater SSID to connect to the NWA in Root AP mode.

When the NWA is in Root AP mode, repeater security between the NWA and other repeater is independent of the security between the wireless clients and the AP or repeater. When repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section 7.2 on page 58 and Section 11.2 on page 98 for more details.

Читайте также:  Стс роутер что это

Unless specified, the term “security settings” refers to the traffic between the wireless clients and the AP. At the time of writing, repeater security is compatible with the NWA only.

1.1.5 Repeater

The NWA can act as a wireless network repeater to extend a root AP’s wireless network range, and also establish wireless connections with wireless clients.

Using Repeater mode, your NWA can extend the range of the WLAN. In the figure below, the NWA in Repeater mode ( Z ) has a wireless connection to the NWA in Root AP mode ( X ) which is connected to a wired network and also has a wireless connection to another NWA in Repeater mode ( Y ) at the same time. Z and Y act as repeaters that forward traffic between associated wireless clients and the wired LAN. Clients A and B access the AP and the wired network behind the AP throught repeaters Z and Y .

Figure 4 Repeater Application

When the NWA is in Repeater mode, repeater security between the NWA and other repeater is independent of the security between the wireless clients and the AP or repeater. When repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section 7.2 on page 58 and Section 11.2 on page 98 for more details.

Once the security settings of peer sides match one another, the connection between devices is made.

NWA5120 Series User’s Guide

Chapter 1 Introduction

At the time of writing, repeater security is compatible with the NWA only.

1.2 Ways to Manage the NWA

You can use the following ways to manage the NWA.

The Web Configurator allows easy NWA setup and management using an Internet browser. This User’s Guide provides information about the Web Configurator.

Command-Line Interface (CLI)

The CLI allows you to use text-based commands to configure the NWA. You can access it using remote management (for example, SSH or Telnet). See the Command Reference Guide for more information.

File Transfer Protocol (FTP)

This protocol can be used for firmware upgrades and configuration backup and restore.

Simple Network Management Protocol (SNMP)

The NWA can be monitored by an SNMP manager. See the SNMP chapter in this User’s Guide.

1.3 Good Habits for Managing the NWA

Do the following things regularly to make the NWA more secure and to manage it more effectively.

• Change the password often. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.

• Write down the password and put it in a safe place.

• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes. If you forget your password, you will have to reset the NWA to its factory default settings. If you backed up an earlier configuration file, you won’t have to totally re-configure the NWA; you can simply restore your last configuration.

1.4 Hardware Connections

See your Quick Start Guide for information on making hardware connections.

NWA5120 Series User’s Guide

Chapter 1 Introduction

1.5 LEDs

The following are the LED descriptions for your NWA.

Источник

Adblock
detector