![Zyxel NWA3000-N series [5/386] Nwa3000 n series user s guide](/img/pdf.png)
Zyxel NWA3000-N series [5/386] Nwa3000 n series user s guide
![Zyxel NWA3550-N [5/386] Nwa3000 n series user s guide](/views2/1169031/page5/bg5.png)
Document Conventions
NWA3000-N Series User’s Guide
5
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The NWA3000-N
series AP icon is not an exact representation of your device.
NWA3000-N series AP Computer Notebook computer
Server Printer Firewall
Telephone Switch Router
Содержание
- Default login details 1
- Nwa3000 n series 1
- Version 2 3 edition 1 1 2011 1
- Wireless n business wlan 3000 series access point 1
- Www zyxel com 1
- About this user s guide 3
- Intended audience 3
- Related documentation 3
- User guide feedback 3
- Document conventions 4
- Note notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4
- Syntax conventions 4
- Warnings and notes 4
- Warnings tell you about things that could harm you or your device 4
- Document conventions 5
- Figures in this user s guide may use the following generic icons the nwa3000 n series ap icon is not an exact representation of your device 5
- Icons used in figures 5
- Nwa3000 n series user s guide 5
- Nwa3000 n series user s guide 6
- Safety warnings 6
- This product is recyclable dispose of it properly 6
- About this user s guide 7
- Chapter 1 introduction 7 7
- Chapter 2 the web configurator 1 7
- Chapter 3 configuration basics 9 7
- Document conventions 7
- Part i user s guide 15 7
- Safety warnings 7
- Table of contents 7
- Chapter 4 tutorials 5 8
- Chapter 5 dashboard 5 8
- Part ii technical reference 73 8
- Chapter 6 monitor 3 9
- Chapter 7 management mode 03 9
- Chapter 8 lan setting 07 9
- Chapter 9 wireless 111 9
- Chapter 10 device ha 27 10
- Chapter 11 user 37 10
- Chapter 12 ap profile 47 10
- Chapter 13 mon profile 65 10
- Chapter 14 certificates 71 11
- Chapter 15 system 93 11
- Chapter 16 log and report 27 12
- Chapter 17 file manager 41 12
- Chapter 18 diagnostics 53 12
- Appendix a log descriptions 85 13
- Appendix b importing certificates 05 13
- Appendix c wireless lans 19 13
- Appendix d open software announcements 33 13
- Appendix e legal information 73 13
- Chapter 19 reboot 63 13
- Chapter 20 shutdown 65 13
- Chapter 21 troubleshooting 67 13
- Chapter 22 product specifications 79 13
- Index 79 13
- User s guide 15
- Hapter 17
- Introduction 17
- Overview 17
- Applications for the nwa3000 n series ap 18
- Bridge repeater 18
- Note a different channel should be configured for each wlan interface to reduce the effects of radio interference 18
- Figure 1 bridge application 19
- Figure 2 repeater application 19
- Bridge repeater mode example 20
- Figure 3 bridging example 20
- Figure 4 bridge loop two bridges connected to hub 21
- Figure 5 bridge loop bridge connected to wired lan 21
- Ap bridge 22
- Figure 6 ap bridge application 22
- Mbssid 22
- Management mode 23
- C m1 m2 m3 m4 24
- Command line interface cli 24
- Figure 7 capwap network example 24
- Ways to manage the nwa3000 n series ap 24
- Web configurator 24
- Console port 25
- Controller 25
- File transfer protocol ftp 25
- Good habits for managing the nwa3000 n series ap 25
- Simple network management protocol snmp 25
- Table 1 console port default settings 25
- Hardware connections 26
- Chapter 1 introduction 27
- Figure 8 leds 27
- Label color status description 27
- Nwa3000 n series user s guide 27
- Table 2 leds 27
- The following are the led descriptions for your nwa3000 n series ap 27
- Chapter 1 introduction 28
- Label color status description 28
- Nwa3000 n series user s guide 28
- Table 2 leds continued 28
- Shutdown or the shutdown command before you turn off the nwa3000 n series ap or remove the power not doing so can cause the firmware to become corrupt 29
- Starting and stopping the nwa3000 n series ap 29
- Table 3 starting and stopping the nwa3000 n series ap 29
- Hapter 31
- Overview 31
- The web configurator 31
- Access 32
- Figure 9 the web configurator s main screen 33
- The main screen 33
- Chapter 2 the web configurator 34
- Figure 10 title bar 34
- Figure 11 navigation panel 34
- Label description 34
- Navigation panel 34
- Nwa3000 n series user s guide 34
- Table 4 title bar web configurator icons 34
- The icons provide the following functions 34
- The title bar provides some useful links that always appear over the screens below regardless of how deep into the web configurator you navigate 34
- Title bar 34
- Use the menu items on the navigation panel to open screens to configure nwa3000 n series ap features click the arrow in the middle of the right edge of the navigation panel to hide the navigation panel menus or drag it to resize them the following sections introduce the nwa3000 n series ap s navigation panel menus and their screens 34
- Chapter 2 the web configurator 35
- Configuration menu 35
- Dashboard 35
- Folder or link tab function 35
- For details on the dashboard s features see chapter 5 on page 75 35
- Monitor menu 35
- Nwa3000 n series user s guide 35
- Table 5 monitor menu screens summary 35
- Table 6 configuration menu screens summary 35
- The dashboard displays general device information system status system resource usage and interface status in widgets that you can re arrange to suit your needs 35
- The monitor menu screens display status and statistics information 35
- Use the configuration menu screens to configure the nwa3000 n series ap s features 35
- Chapter 2 the web configurator 36
- Folder or link tab function 36
- Nwa3000 n series user s guide 36
- Table 6 configuration menu screens summary continued 36
- Chapter 2 the web configurator 37
- Folder or link tab function 37
- Maintenance menu 37
- Nwa3000 n series user s guide 37
- Table 6 configuration menu screens summary continued 37
- Table 7 maintenance menu screens summary 37
- Use the maintenance menu screens to manage configuration and firmware files run diagnostics and reboot or shut down the nwa3000 n series ap 37
- Figure 12 warning message 38
- Figure 13 site map 38
- Object reference 38
- Site map 38
- Warning messages 38
- Chapter 2 the web configurator 39
- Figure 14 object reference 39
- Label description 39
- Nwa3000 n series user s guide 39
- Settings reference the object the following example shows which configuration settings reference the ldap users user object in this case the first firewall rule 39
- Table 8 object references 39
- The fields vary with the type of object the following table describes labels that can appear in this screen 39
- Cli messages 40
- Console 40
- Figure 15 cli messages 40
- Note see the command reference guide for information about the commands 40
- Table 9 console continued 42
- Manipulating table display 44
- Tables and lists 44
- Chapter 2 the web configurator 46
- Here are descriptions for the most common table icons 46
- Label description 46
- Nwa3000 n series user s guide 46
- Table 10 common table icons 46
- Table 11 common table icons 46
- The tables have icons for working with table entries a sample is shown next you can often use the shift or ctrl key to select multiple entries to remove activate or deactivate 46
- Working with table entries 46
- Figure 17 working with lists 47
- Working with lists 47
- Configuration basics 49
- Feature configuration overview 49
- Hapter 49
- Object based configuration 49
- Overview 49
- Chapter 3 configuration basics 50
- Feature 50
- Lan setting 50
- Menu item s 50
- Mgnt mode 50
- Note prequisites or where used does not appear if there are no prerequisites or references in other features to this one for example no other features reference ap management entries so there is no where used entry 50
- Nwa3000 n series user s guide 50
- Prerequisites 50
- This provides a brief description see the appropriate chapter s in this user s guide for more information about any feature 50
- Use these screens to manage your wireless access points 50
- Use this screen to configure the lan ethernet interface including vlan settings 50
- Use this screen to set the nwa3000 n series ap to control other nwa3000 n series aps work as a standalone ap or be managed by another nwa3000 n series ap 50
- Where used 50
- Wireless 50
- Device ha 51
- Objects 51
- Table 12 objects overview 51
- Table 13 user types 51
- Ap profile 52
- Mon profile 52
- System 52
- Table 14 ap profile types 52
- Table 15 mon profile types 52
- Www ssh telnet ftp snmp and auth server 52
- Diagnostics 53
- File manager 53
- Logs and reports 53
- Shutdown 53
- Shutdown or the shutdown command before you turn off the nwa3000 n series ap or remove the power not doing so can cause the firmware to become corrupt 53
- Hapter 55
- Sample network setup 55
- Tutorials 55
- Figure 19 tutorial guest vlan example 56
- Set the management modes 56
- Table 16 tutorial topology summary 56
- Controller 57
- Managed aps 57
- Set the lan ip address and management vlan vlan99 57
- My certificates screen 58
- Set up wireless user authentication 58
- Create the ap profiles staff guest 60
- Rogue ap detection 63
- Figure 20 rogue ap example a 64
- Figure 21 rogue ap example b 65
- Rogue ap containment 67
- Figure 22 containing a rogue ap 68
- Load balancing 69
- Dynamic channel selection 70
- Technical reference 73
- Dashboard 75
- Hapter 75
- Overview 75
- What you can do in this chapter 75
- Dashboard 76
- Figure 23 dashboard 76
- Table 17 dashboard 76
- Chapter 5 dashboard 77
- Label description 77
- Nwa3000 n series user s guide 77
- Table 17 dashboard continued 77
- Chapter 5 dashboard 78
- Label description 78
- Nwa3000 n series user s guide 78
- Table 17 dashboard continued 78
- Chapter 5 dashboard 79
- Label description 79
- Nwa3000 n series user s guide 79
- Table 17 dashboard continued 79
- Chapter 5 dashboard 80
- Cpu usage 80
- Label description 80
- Nwa3000 n series user s guide 80
- Table 17 dashboard continued 80
- The following table describes the labels in this screen 80
- Use this screen to look at a chart of the nwa3000 n series ap s recent cpu usage to access this screen click cpu usage in the dashboard 80
- Memory usage 81
- Hapter 83
- Monitor 83
- Overview 83
- What you can do in this chapter 83
- What you need to know 83
- Lan status 84
- Chapter 6 monitor 85
- Label description 85
- Lan status continued 85
- Nwa3000 n series user s guide 85
- Chapter 6 monitor 86
- Label description 86
- Lan status continued 86
- Lan status graph 86
- Nwa3000 n series user s guide 86
- Switch to graphic view 86
- The following table describes the labels in this screen 86
- Use the port statistics graph to look at a line graph of packet statistics for the nwa3000 n series ap s physical lan port to view in the lan status screen click the switch to graphic view button 86
- Ap list 87
- Chapter 6 monitor 87
- Label description 87
- Nwa3000 n series user s guide 87
- Switch to graphic view continued 87
- Ap list 88
- Ap list icons 88
- Chapter 6 monitor 88
- Label description 88
- Nwa3000 n series user s guide 88
- The following table describes the icons in this screen 88
- The following table describes the labels in this screen 88
- More information 89
- Radio list 89
- Station count of ap 89
- Chapter 6 monitor 90
- Label description 90
- Nwa3000 n series user s guide 90
- Radio list 90
- Radio list controller mode 90
- The following table describes the labels in this screen 90
- Ap mode radio information 91
- More information 91
- Chapter 6 monitor 92
- Label description 92
- More information 92
- Nwa3000 n series user s guide 92
- The following table describes the labels in this screen 92
- Chapter 6 monitor 93
- Label description 93
- Nwa3000 n series user s guide 93
- Station info 93
- Station info to access this screen 93
- Station list 93
- The following table describes the labels in this screen 93
- Chapter 6 monitor 94
- Detected device to access this screen 94
- Label description 94
- Note the nwa3000 n series ap or at least one of the aps the nwa3000 n series ap is managing must be set to monitor mode in order to detect other wireless devices in its vicinity 94
- Nwa3000 n series user s guide 94
- Rogue ap 94
- The following table describes the labels in this screen 94
- Legacy device info 95
- Rogue ap continued 95
- Legacy device info 96
- Legacy device info add or edit 96
- Legacy device info continued 96
- View log 96
- Note when a log reaches the maximum number of log messages new log messages automatically overwrite existing log messages starting with the oldest existing log message first 97
- View log 97
- Chapter 6 monitor 98
- Label description 98
- Nwa3000 n series user s guide 98
- The following table describes the labels in this screen 98
- View log 98
- Chapter 6 monitor 99
- Label description 99
- Nwa3000 n series user s guide 99
- The web configurator saves the filter settings if you leave the view log screen and return to it later 99
- View log continued 99
- Chapter 6 monitor 100
- Label description 100
- Nwa3000 n series user s guide 100
- The following table describes the labels in this screen 100
- View ap log 100
- View ap log to access this screen 100
- Chapter 6 monitor 101
- Label description 101
- Note this criterion only appears when you show filter 101
- Nwa3000 n series user s guide 101
- View ap log continued 101
- Chapter 6 monitor 102
- Label description 102
- Nwa3000 n series user s guide 102
- View ap log continued 102
- About capwap 103
- Hapter 103
- Management mode 103
- Overview 103
- Capwap and ip subnets 104
- Capwap discovery and management 104
- Managed ap finds the controller 104
- Note the nwa3000 n series ap can be a standalone ap default a capwap managed ap or a capwap ap controller 104
- Figure 39 capwap and dhcp option 138 105
- Notes on capwap 105
- The management mode screen 105
- Chapter 7 management mode 106
- Label description 106
- Mgnt mode 106
- Mgnt mode in the nwa3000 n series ap s navigation menu the following screen displays 106
- Note after you change the operation mode the nwa3000 n series ap resets to its default settings for the mode you set it to including the ip address of 192 68 it also backs up its configuration to a xxx backup conf file where xxx denotes the mode the nwa3000 n series ap was previously using 106
- Nwa3000 n series user s guide 106
- The following table describes the labels in this screen 106
- Hapter 107
- Lan setting 107
- Lan setting overview 107
- What you can do in this chapter 107
- What you need to know 107
- Lan setting 108
- Chapter 8 lan setting 109
- Each field is described in the following table 109
- Label description 109
- Lan setting 109
- Nwa3000 n series user s guide 109
- Add or edit a dns setting 110
- Chapter 8 lan setting 110
- Label description 110
- Lan setting and then click the add button or select a dns server entry from the list and click the edit button to access this screen 110
- Lan setting continued 110
- Nwa3000 n series user s guide 110
- The following table describes the labels in this screen 110
- Hapter 111
- Overview 111
- What you can do in this chapter 111
- What you need to know 111
- Wireless 111
- Controller 112
- Load balancing wireless 112
- Note select the manual option for managing a specific set of aps this is recommended as the registration mechanism cannot automatically differentiate between friendly and rogue aps for details on how to handle rogue aps see section 6 on page 94 112
- Ap management 113
- Ap management controller mode 113
- Ap management to access this screen this screen manages the nwa3000 n series ap s general wireless settings if it is in standalone mode or the general wireless settings of all of the nwa3000 n series ap s managed aps if the nwa3000 n series ap is in controller mode 113
- Chapter 9 wireless 113
- Controller screen you set the registration type to always accept then as soon as you remove an ap from this list it reconnects 113
- Label description 113
- Nwa3000 n series user s guide 113
- The following fields display if the nnwa3000 n series ap is in controller mode 113
- Ap management standalone mode 114
- Chapter 9 wireless 114
- Label description 114
- Nwa3000 n series user s guide 114
- The following fields display if the nnwa3000 n series ap is in standalone mode 114
- Ap management table to display this screen use this screen to set the managed ap s general wireless settings 115
- Chapter 9 wireless 115
- Each field is described in the following table 115
- Edit ap list 115
- Label description 115
- Nwa3000 n series user s guide 115
- Chapter 9 wireless 116
- Edit ap list continued 116
- Label description 116
- Mon mode 116
- Mon mode to access this screen 116
- Nwa3000 n series user s guide 116
- Use this screen to assign aps either to the rogue ap list or the friendly ap list a rogue ap is a wireless access point operating in a network s coverage area that is not under the control of the network administrator and which can potentially open up holes in a network s security 116
- Chapter 9 wireless 117
- Each field is described in the following table 117
- Label description 117
- Mon mode 117
- Nwa3000 n series user s guide 117
- Add edit rogue friendly 118
- Add edit rogue friendly list 118
- Chapter 9 wireless 118
- Each field is described in the following table 118
- Label description 118
- Mon mode continued 118
- Mon mode table to display this screen 118
- Nwa3000 n series user s guide 118
- Add edit rogue friendly 119
- Chapter 9 wireless 119
- Each field is described in the following table 119
- Label description 119
- Load balancing 119
- Load balancing to access this screen 119
- Nwa3000 n series user s guide 119
- Chapter 9 wireless 120
- Disassociating and delaying connections 120
- For example here the ap has a balanced bandwidth allotment of 6 mbps if laptop r connects and it pushes the ap over its allotment say to 7 mbps then the ap 120
- Label description 120
- Load balancing continued 120
- Note if you enable this function you should ensure that there are multiple aps within the broadcast radius that can accept any rejected or kicked wireless clients otherwise a wireless client attempting to connect to an overloaded ap will be kicked continuously and never be allowed to connect 120
- Nwa3000 n series user s guide 120
- When your ap becomes overloaded there are two basic responses it can take the first one is to delay a client connection this means that the ap withholds the connection until the data transfer throughput is lowered or the client connection is picked up by another ap if the client is picked up by another ap then the original ap cannot resume the connection 120
- Figure 50 delaying a connection 121
- Figure 51 kicking a connection 121
- Chapter 9 wireless 122
- Dcs to access this screen 122
- Each field is described in the following table 122
- Label description 122
- Nwa3000 n series user s guide 122
- Chapter 9 wireless 123
- Dcs continued 123
- Label description 123
- Note generally speaking the higher the sensitivity level the more frequently the ap switches channels as a consequence anyone connected to the ap will experience more frequent disconnects and reconnects unless you select enable dcs client aware 123
- Nwa3000 n series user s guide 123
- Dcs continued 124
- Dynamic channel selection 124
- Technical reference 124
- Figure 53 an example three channel deployment 125
- Figure 54 an example four channel deployment 125
- Figure 55 an alternative four channel deployment 125
- Load balancing 126
- Device ha 127
- Hapter 127
- Overview 127
- What you can do in this chapter 127
- Before you begin 128
- Management access 128
- Note only nwa3000 n series aps of the same model and firmware version can synchronize 128
- Note subscribe to services on the backup nwa3000 n series ap before synchronizing it with the master nwa3000 n series ap 128
- Synchronization 128
- What you need to know 128
- Chapter 10 device ha 129
- Device ha general 129
- General 129
- General to display 129
- Label description 129
- Note it is not recommended to use stp spanning tree protocol with device ha 129
- Nwa3000 n series user s guide 129
- The following table describes the labels in this screen 129
- Chapter 10 device ha 130
- General continued 130
- Label description 130
- Nwa3000 n series user s guide 130
- Active passive mode 131
- Active passive mode 132
- Chapter 10 device ha 132
- Label description 132
- Note do not set this field to master for two or more nwa3000 n series aps in the same virtual router same cluster id 132
- Nwa3000 n series user s guide 132
- The following table describes the labels in this screen 132
- Active passive mode continued 133
- Chapter 10 device ha 133
- Label description 133
- Nwa3000 n series user s guide 133
- Active passive mode continued 134
- Chapter 10 device ha 134
- Edit monitored interface 134
- Label description 134
- Nwa3000 n series user s guide 134
- Chapter 10 device ha 135
- Edit monitored interface 135
- Figure 60 virtual router 135
- Label description 135
- Nwa3000 n series user s guide 135
- Technical reference 135
- The following section contains additional technical information about the features described in this chapter 135
- The following table describes the labels in this screen 135
- The master and backup nwa3000 n series ap form a single virtual router in the following example master nwa3000 n series ap a and backup nwa3000 n series ap b form a virtual router 135
- Virtual router 135
- Cluster id 136
- Figure 61 cluster ids for multiple virtual routers 136
- Monitored interfaces in active passive mode device ha 136
- Virtual router and management ip addresses 136
- Hapter 137
- Overview 137
- What you can do in this chapter 137
- What you need to know 137
- Chapter 11 user 138
- Label description 138
- Note the default admin account is always authenticated locally regardless of the authentication method setting 138
- Nwa3000 n series user s guide 138
- Table 47 types of user accounts continued 138
- The following table describes the labels in this screen 138
- Type abilities login method s 138
- User summary 138
- Add edit user 139
- Alphanumeric a z 0 9 there is no unicode support 139
- Chapter 11 user 139
- Dashes 139
- Enter a user name from 1 to 31 characters 139
- Here are the reserved user names 139
- Label description 139
- Nwa3000 n series user s guide 139
- Rules for user names 139
- The first character must be alphabetical a z a z an underscore _ or a dash other limitations on user names are 139
- The user add edit screen allows you to create a new user account or edit an existing one 139
- The user name can only contain the following characters 139
- User continued 139
- User names are case sensitive if you enter a user bob but use bob when connecting via cifs or ftp it will use the account settings used for bob not bob 139
- User names have to be different than user group names 139
- _ underscores 139
- Add edit a user 140
- Chapter 11 user 140
- Label description 140
- Nwa3000 n series user s guide 140
- The following table describes the labels in this screen 140
- To access this screen go to the user screen and click add or edit 140
- Add edit a user continued 141
- Chapter 11 user 141
- Label description 141
- Nwa3000 n series user s guide 141
- Setting 141
- This screen controls default settings login settings lockout settings and other user settings for the nwa3000 n series ap you can also use this screen to specify when users must log in to the nwa3000 n series ap before it routes traffic for them 141
- Chapter 11 user 142
- Label description 142
- Nwa3000 n series user s guide 142
- Setting 142
- The following table describes the labels in this screen 142
- Chapter 11 user 143
- Label description 143
- Nwa3000 n series user s guide 143
- Setting continued 143
- Chapter 11 user 144
- Edit user authentication timeout settings 144
- Label description 144
- Nwa3000 n series user s guide 144
- Setting screen and click one of the default authentication timeout settings section s edit icons 144
- The following table describes the labels in this screen 144
- This screen allows you to set the default authentication timeout settings for the selected type of user account these default authentication timeout settings also control the settings for any existing user accounts that are set to use the default settings you can still manually configure any user account s authentication timeout settings 144
- Chapter 11 user 145
- Edit user authentication timeout settings continued 145
- Label description 145
- Nwa3000 n series user s guide 145
- Ap profile 147
- Hapter 147
- Overview 147
- What you can do in this chapter 147
- What you need to know 147
- Ieee 802 x 148
- Wpa and wpa2 148
- Ap profile 149
- Chapter 12 ap profile 149
- Label description 149
- Note you can have a maximum of 32 radio profiles on the nwa3000 n series ap 149
- Nwa3000 n series user s guide 149
- The following table describes the labels in this screen 149
- Add edit profile standalone mode 150
- Add edit radio profile 150
- Add edit profile 151
- Chapter 12 ap profile 151
- Label description 151
- Nwa3000 n series user s guide 151
- The following table describes the labels in this screen 151
- Add edit profile continued 152
- Chapter 12 ap profile 152
- Label description 152
- Note reducing the output power also reduces the nwa3000 n series ap s effective broadcast radius 152
- Nwa3000 n series user s guide 152
- Add edit profile continued 153
- Chapter 12 ap profile 153
- Label description 153
- Note at the time of writing this option is compatible with other zyxel nwa access points only 153
- Note check your other ap s documentation to make sure it supports wds security 153
- Note other aps must use the same encryption method to enable wds security 153
- Note wds security is independent of the security settings between the nwa3000 n series ap and any wireless clients 153
- Nwa3000 n series user s guide 153
- Add edit profile continued 154
- Chapter 12 ap profile 154
- Label description 154
- Nwa3000 n series user s guide 154
- Ssid list 154
- The ssid screens allow you to configure three different types of profiles for your networked aps an ssid list which can assign specific ssid configurations to your aps a security list which can assign specific encryption methods to the aps when allowing wireless clients to connect to them and a mac filter list which can limit connections to an ap based on wireless clients mac addresses 154
- This screen allows you to create and manage ssid configurations that can be used by the aps an ssid or service set identifier is basically the name of the wireless network to which a wireless client can connect the ssid appears as readable text to any device capable of scanning for wireless frequencies such as the wifi adapter in a laptop and is displayed as the wireless network name when a person makes a connection to it 154
- Chapter 12 ap profile 155
- Label description 155
- Note you can have a maximum of 32 ssid profiles on the nwa3000 n series ap 155
- Nwa3000 n series user s guide 155
- Ssid list 155
- The following table describes the labels in this screen 155
- Add edit ssid profile 156
- Chapter 12 ap profile 156
- Label description 156
- Note it is highly recommended that you create security profiles for all of your ssids to enhance your network security 156
- Nwa3000 n series user s guide 156
- The following table describes the labels in this screen 156
- This screen allows you to create a new ssid profile or edit an existing one to access this screen click the add button or select an ssid profile from the list and click the edit button 156
- Add edit ssid profile continued 157
- Chapter 12 ap profile 157
- Label description 157
- Nwa3000 n series user s guide 157
- Add edit ssid profile continued 158
- Chapter 12 ap profile 158
- Label description 158
- Note you can have a maximum of 32 security profiles on the nwa3000 n series ap 158
- Nwa3000 n series user s guide 158
- Security list 158
- The following table describes the labels in this screen 158
- This screen allows you to manage wireless security configurations that can be used by your ssids wireless security is implemented strictly between the ap broadcasting the ssid and the stations that are connected to it 158
- Add edit security profile 159
- Chapter 12 ap profile 159
- Label description 159
- Note this screen s options change based on the security mode selected only the default screen is displayed here 159
- Nwa3000 n series user s guide 159
- The following table describes the labels in this screen 159
- This screen allows you to create a new security profile or edit an existing one to access this screen click the add button or select a security profile from the list and click the edit button 159
- Add edit security profile continued 160
- Chapter 12 ap profile 160
- Label description 160
- Nwa3000 n series user s guide 160
- Add edit security profile continued 161
- Chapter 12 ap profile 161
- Label description 161
- Mac filter list 161
- Note you can have a maximum of 32 mac filtering profiles on the nwa3000 n series ap 161
- Nwa3000 n series user s guide 161
- The following table describes the labels in this screen 161
- Add edit mac filter profile 162
- Chapter 12 ap profile 162
- Label description 162
- Mac filter list continued 162
- Note each mac filtering profile can include a maximum of 512 mac addresses 162
- Nwa3000 n series user s guide 162
- The following table describes the labels in this screen 162
- This screen allows you to create a new mac filtering profile or edit an existing one to access this screen click the add button or select a mac filter profile from the list and click the edit button 162
- Add edit mac filter profile continued 163
- Chapter 12 ap profile 163
- Label description 163
- Nwa3000 n series user s guide 163
- Hapter 165
- Mon profile 165
- Overview 165
- What you can do in this chapter 165
- What you need to know 165
- Chapter 13 mon profile 166
- Label description 166
- Mon profile 166
- Nwa3000 n series user s guide 166
- The following table describes the labels in this screen 166
- Add edit mon profile 167
- Chapter 13 mon profile 167
- Label description 167
- Nwa3000 n series user s guide 167
- The following table describes the labels in this screen 167
- This screen allows you to create a new monitor mode profile or edit an existing one to access this screen click the add button or select and existing monitor mode profile and click the edit button 167
- Add edit mon profile continued 168
- Chapter 13 mon profile 168
- Figure 76 rogue ap example 168
- Label description 168
- Nwa3000 n series user s guide 168
- Rogue aps 168
- Rogue aps are wireless access points operating in a network s coverage area that are not under the control of the network s administrators and can open up holes in a network s security attackers can take advantage of a rogue ap s weaker or non existent security to gain access to the network or set up their own rogue aps in order to capture information from wireless clients if a scan reveals a rogue ap you can use commercially available software to physically locate it 168
- Technical reference 168
- The following section contains additional technical information about the features described in this chapter 168
- Friendly aps 169
- Certificates 171
- Hapter 171
- Overview 171
- What you can do in this chapter 171
- What you need to know 171
- Advantages of certificates 172
- Certificate file formats 173
- Factory default certificate 173
- Note be careful not to convert a binary file to text during the transfer process it is easy for this to occur since many programs use text files by default 173
- Self signed certificates 173
- Verifying a certificate 173
- Chapter 14 certificates 175
- Label description 175
- My certificates 175
- My certificates to open this screen this is the nwa3000 n series ap s summary list of certificates and certification requests 175
- Nwa3000 n series user s guide 175
- The following table describes the labels in this screen 175
- Chapter 14 certificates 176
- Label description 176
- My certificates continued 176
- Nwa3000 n series user s guide 176
- Add my certificates 177
- Chapter 14 certificates 178
- Label description 178
- Nwa3000 n series user s guide 178
- The following table describes the labels in this screen 178
- Add continued 179
- Chapter 14 certificates 179
- Label description 179
- Nwa3000 n series user s guide 179
- Add continued 180
- Chapter 14 certificates 180
- If you configured the my certificate create screen to have the nwa3000 n series ap enroll a certificate and the certificate enrollment is not successful you see a screen with a return button that takes you back to the my certificate create screen click return and check your information in the my certificate create screen make sure that the certification authority information is correct and that your internet connection is working properly if you want the nwa3000 n series ap to enroll a certificate online 180
- Label description 180
- Nwa3000 n series user s guide 180
- Edit my certificates 181
- Chapter 14 certificates 182
- Label description 182
- Nwa3000 n series user s guide 182
- The following table describes the labels in this screen 182
- Chapter 14 certificates 183
- Label description 183
- Nwa3000 n series user s guide 183
- Chapter 14 certificates 184
- Import 184
- Import certificates 184
- Import to open the my certificate import screen follow the instructions in this screen to save an existing certificate to the nwa3000 n series ap 184
- Label description 184
- Note you can import a certificate that matches a corresponding certification request that was generated by the nwa3000 n series ap you can also import a certificate in pkcs 12 format including the certificate s public and private keys 184
- Nwa3000 n series user s guide 184
- The certificate you import replaces the corresponding request in the my certificates screen 184
- The following table describes the labels in this screen 184
- You must remove any spaces in the certificate s filename before you can import it 184
- Chapter 14 certificates 185
- Import continued 185
- Label description 185
- Nwa3000 n series user s guide 185
- The following table describes the labels in this screen 185
- Trusted certificates 185
- Trusted certificates to open the trusted certificates screen this screen displays a summary list of certificates that you have set the nwa3000 n series ap to accept as trusted the nwa3000 n series ap also accepts any valid certificate signed by a certificate on this list as being trustworthy thus you do not need to import any certificate that is signed by one of these certificates 185
- Chapter 14 certificates 186
- Label description 186
- Nwa3000 n series user s guide 186
- Trusted certificates continued 186
- Edit trusted certificates 187
- Chapter 14 certificates 188
- Label description 188
- Nwa3000 n series user s guide 188
- The following table describes the labels in this screen 188
- Chapter 14 certificates 189
- Label description 189
- Nwa3000 n series user s guide 189
- Chapter 14 certificates 190
- Import 190
- Import to open the trusted certificates import screen follow the instructions in this screen to save a trusted certificate to the nwa3000 n series ap 190
- Import trusted certificates 190
- Label description 190
- Note you must remove any spaces from the certificate s filename before you can import the certificate 190
- Nwa3000 n series user s guide 190
- Chapter 14 certificates 191
- Import 191
- Label description 191
- Nwa3000 n series user s guide 191
- Ocsp online certificate status protocol allows an application or device to check whether a certificate is valid with ocsp the nwa3000 n series ap checks the status of individual certificates instead of downloading a certificate revocation list crl ocsp has two main advantages over a crl the first is real time status information the second is a reduction in network traffic since the nwa3000 n series ap only gets information on the certificates that it needs to verify not a huge list when the nwa3000 n series ap requests certificate status information the ocsp server returns a expired current or unknown response 191
- Technical reference 191
- The following section contains additional technical information about the features described in this chapter 191
- The following table describes the labels in this screen 191
- Hapter 193
- Overview 193
- System 193
- What you can do in this chapter 193
- Chapter 15 system 194
- Date and time 194
- For effective scheduling and logging the nwa3000 n series ap system time must be accurate the nwa3000 n series ap has a software mechanism to set the time manually or get the current time and date from an external server 194
- Host name 194
- Host name to open this screen 194
- Label description 194
- Nwa3000 n series user s guide 194
- The following table describes the labels in this screen 194
- Chapter 15 system 195
- Date time 195
- Date time the screen displays as shown you can manually set the nwa3000 n series ap s time and date or have the nwa3000 n series ap get the date and time from a time server 195
- Label description 195
- Nwa3000 n series user s guide 195
- The following table describes the labels in this screen 195
- Chapter 15 system 196
- Date time continued 196
- Label description 196
- Nwa3000 n series user s guide 196
- Chapter 15 system 197
- Date time continued 197
- Label description 197
- Nwa3000 n series user s guide 197
- Pre defined ntp time servers list 197
- Table 71 default time servers 197
- The nwa3000 n series ap continues to use the following pre defined list of ntp time servers if you do not specify a time server or it cannot synchronize with the time server you specified 197
- When the nwa3000 n series ap uses the pre defined list of ntp time servers it randomly selects one server and tries to synchronize with it if the synchronization fails then the nwa3000 n series ap goes through the rest of the list in order from the first one tried until either it is successful or all the pre defined ntp time servers have been tried 197
- When you turn on the nwa3000 n series ap for the first time the date and time start at 2003 01 01 00 00 00 the nwa3000 n series ap then attempts to synchronize with one of the following pre defined list of network time protocol ntp time servers 197
- Figure 86 loading 198
- Time server synchronization 198
- Chapter 15 system 199
- Console speed 199
- Console speed to open this screen 199
- Label description 199
- Nwa3000 n series user s guide 199
- The following table describes the labels in this screen 199
- This section shows you how to set the console port speed when you connect to the nwa3000 n series ap via the console port using a terminal emulation program see table 1 on page 25 for default console port settings 199
- Figure 88 secure and insecure service access from the wan 200
- Service access limitations 200
- System timeout 200
- Www overview 200
- Configuring www service control 201
- Figure 89 http https implementation 201
- Note if you disable http in the www screen then the nwa3000 n series ap blocks all http connection attempts 201
- Chapter 15 system 202
- Label description 202
- Nwa3000 n series user s guide 202
- Service control 202
- The following table describes the labels in this screen 202
- Figure 91 security alert dialog box internet explorer 203
- Https example 203
- Internet explorer warning messages 203
- Service control continued 203
- Avoiding browser warning messages 204
- Enrolling and importing ssl client certificates 204
- Figure 92 login screen internet explorer 204
- Login screen 204
- Figure 93 trusted certificates 205
- Installing the ca s certificate 205
- Installing a personal certificate 206
- Using a certificate when accessing the nwa3000 n series ap 208
- Figure 94 ssh communication over the wan example 210
- Figure 95 how ssh v1 works example 210
- How ssh works 210
- Requirements for using ssh 211
- Ssh implementation on the nwa3000 n series ap 211
- Chapter 15 system 212
- Configuring ssh 212
- Label description 212
- Note it is recommended that you disable telnet and ftp when you configure ssh for secure connections 212
- Nwa3000 n series user s guide 212
- Ssh to open the following screen use this screen to configure your nwa3000 n series ap s secure shell settings 212
- The following table describes the labels in this screen 212
- Example 1 microsoft windows 213
- Example 2 linux 213
- Examples of secure telnet using ssh 213
- Figure 97 ssh example 1 store host key 213
- Figure 98 ssh example 2 test 214
- Figure 99 ssh example 2 log in 214
- Telnet 214
- Chapter 15 system 215
- Label description 215
- Nwa3000 n series user s guide 215
- Telnet 215
- The following table describes the labels in this screen 215
- You can upload and download the nwa3000 n series ap s firmware and configuration files using ftp to use this feature your computer must have an ftp client see chapter 17 on page 241 for more information about firmware and configuration files 215
- Chapter 15 system 216
- Ftp tab the screen appears as shown use this screen to specify ftp settings 216
- Label description 216
- Nwa3000 n series user s guide 216
- The following table describes the labels in this screen 216
- Figure 102 snmp management model 217
- Snmp traps 218
- Supported mibs 218
- Table 77 snmp traps 218
- Chapter 15 system 219
- Configuring snmp 219
- Label description 219
- Nwa3000 n series user s guide 219
- Snmp tab the screen appears as shown use this screen to configure your snmp settings you can also configure profiles that define allowed snmpv3 access 219
- The following table describes the labels in this screen 219
- Adding or editing an snmpv3 user profile 220
- Chapter 15 system 220
- Label description 220
- Nwa3000 n series user s guide 220
- Snmp continued 220
- Snmp screen s add button or select a snmpv3 user profile from the list and click the edit button 220
- Chapter 15 system 221
- Internal radius server 221
- Label description 221
- Nwa3000 n series user s guide 221
- The following table describes the labels in this screen 221
- The nwa3000 n series ap can use its internal remote authentication dial in user service radius server to authenticate the wireless clients of trusted aps radius is a protocol that enables you to control access to a network by authenticating user credentials 221
- Configuring the internal radius server 222
- Figure 105 trusted aps overview 222
- Note the nwa3000 n series ap can function as an ap and as a radius server at the same time 222
- Auth server 223
- Auth server the following screen displays 223
- Chapter 15 system 223
- Label description 223
- My certificates screen 223
- Nwa3000 n series user s guide 223
- The following table describes the labels in this screen 223
- Adding or editing a trusted ap profile 224
- Auth server 224
- Auth server continued 224
- Auth server screen s add button or select a trusted ap profile from the list and click the edit button 224
- Chapter 15 system 224
- Label description 224
- Nwa3000 n series user s guide 224
- The following table describes the labels in this screen 224
- Auth server continued 225
- Internal radius server 225
- Note the internal radius server does not support domain accounts domain user when you configure your windows xp sp2 wireless zero configuration peap ms chapv2 settings clear the use windows logon name and password check box when authentication begins a pop up dialog box requests you to type a name password and domain of the radius server specify a name and password only do not specify a domain 225
- Technical reference 225
- Email daily report 227
- Hapter 227
- Log and report 227
- Overview 227
- What you can do in this chapter 227
- Email daily report standalone mode 228
- Chapter 16 log and report 229
- Email daily report 229
- Label description 229
- Log setting 229
- Nwa3000 n series user s guide 229
- The following table describes the labels in this screen 229
- The nwa3000 n series ap provides a system log and supports e mail profiles and remote syslog servers the system log is available on the view log tab the e 229
- These screens control log messages and alerts a log message stores the information for viewing for example in the view log tab or regular e mailing later and an alert is e mailed immediately usually alerts are used for events that require more serious attention such as system errors and attacks 229
- Log setting 230
- Log setting summary 230
- Chapter 16 log and report 231
- Label description 231
- Log setting 231
- Nwa3000 n series user s guide 231
- The following table describes the labels in this screen 231
- Edit log settings 232
- Chapter 16 log and report 233
- Label description 233
- Nwa3000 n series user s guide 233
- The following table describes the labels in this screen 233
- Chapter 16 log and report 234
- Edit continued 234
- Label description 234
- Nwa3000 n series user s guide 234
- Chapter 16 log and report 235
- Edit continued 235
- Label description 235
- Nwa3000 n series user s guide 235
- Edit remote server 236
- Chapter 16 log and report 237
- Edit remote server 237
- Label description 237
- Nwa3000 n series user s guide 237
- The following table describes the labels in this screen 237
- Active log summary 238
- Figure 112 active log summary 238
- Active log summary 239
- Chapter 16 log and report 239
- Label description 239
- Nwa3000 n series user s guide 239
- The following table describes the fields in this screen 239
- Active log summary 240
- Chapter 16 log and report 240
- Label description 240
- Nwa3000 n series user s guide 240
- File manager 241
- Hapter 241
- Overview 241
- What you can do in this chapter 241
- What you need to know 241
- Chapter 17 file manager 242
- Comments in configuration files or shell scripts 242
- In a configuration file or shell script use or as the first character of a command line to have the nwa3000 n series ap treat the line as a comment 242
- Note exit or must follow sub commands if it is to make the nwa3000 n series ap exit sub command mode 242
- Nwa3000 n series user s guide 242
- Table 87 configuration files and shell scripts in the nwa3000 n series ap 242
- These files have the same syntax which is also identical to the way you run cli commands manually an example is shown below 242
- While configuration files and shell scripts have the same syntax the nwa3000 n series ap applies configuration files differently than it runs shell scripts this is explained below 242
- You have to run the aforementioned example as a shell script because the first command is run in privilege mode if you remove the first command you have to run the example as a configuration file because the rest of the commands are executed in configuration mode 242
- Your configuration files or shell scripts can use exit or a command line consisting of a single to have the nwa3000 n series ap exit sub command mode 242
- Configuration file 243
- Configuration file flow at restart 243
- Errors in configuration files or shell scripts 243
- Configuration file 244
- Do not turn off the nwa3000 n series ap while configuration file upload is in progress 244
- Chapter 17 file manager 245
- Configuration file 245
- Label description 245
- Nwa3000 n series user s guide 245
- The following table describes the labels in this screen 245
- Chapter 17 file manager 246
- Configuration file continued 246
- Label description 246
- Nwa3000 n series user s guide 246
- Chapter 17 file manager 247
- Configuration file continued 247
- Label description 247
- Nwa3000 n series user s guide 247
- Firmware package 248
- Note the web configurator is the recommended method for uploading firmware you only need to use the command line interface if you need to recover the firmware see the cli reference guide for how to determine if you need to recover the firmware and how to recover it 248
- The firmware update can take up to five minutes do not turn off or reset the nwa3000 n series ap while the firmware update is in progress 248
- Command the changes will be lost when the nwa3000 n series ap restarts you could use multiple 249
- Commands in a long script 249
- Commands in your scripts if you do not use the 249
- Figure 115 network temporarily disconnected 249
- Note the nwa3000 n series ap automatically reboots after a successful upload 249
- Note you should include 249
- Shell script 249
- Chapter 17 file manager 250
- Each field is described in the following table 250
- Label description 250
- Nwa3000 n series user s guide 250
- Shell script 250
- Chapter 17 file manager 251
- Label description 251
- Nwa3000 n series user s guide 251
- Shell script continued 251
- Diagnostics 253
- Hapter 253
- Overview 253
- What you can do in this chapter 253
- Diagnostics 254
- Packet capture 254
- Capture 255
- Chapter 18 diagnostics 255
- Label description 255
- Note new capture files overwrite existing files of the same name change the file suffix field s setting to avoid this 255
- Nwa3000 n series user s guide 255
- Packet capture 255
- The following table describes the labels in this screen 255
- Chapter 18 diagnostics 256
- Files to open the packet capture files screen this screen lists the files of packet captures the nwa3000 n series ap has performed you can download the files to your 256
- Label description 256
- Note if you have existing capture files you may need to set this size larger or delete existing capture files 256
- Nwa3000 n series user s guide 256
- Packet capture continued 256
- Packet capture files 256
- Chapter 18 diagnostics 257
- Computer where you can study them using a packet analyzer also known as a network or protocol analyzer such as wireshark 257
- Example of viewing a packet capture file 257
- Here is an example of a packet capture file viewed in the wireshark packet analyzer notice that the size of frame 15 on the wire is 1514 bytes while the captured size is only 1500 bytes the nwa3000 n series ap truncated the frame 257
- Label description 257
- Nwa3000 n series user s guide 257
- The following table describes the labels in this screen 257
- Figure 120 packet capture file example 258
- Wireless frame capture 258
- Capture 259
- Chapter 18 diagnostics 259
- Label description 259
- Note new capture files overwrite existing files of the same name change the file suffix field s setting to avoid this 259
- Nwa3000 n series user s guide 259
- The following table describes the labels in this screen 259
- Capture 260
- Chapter 18 diagnostics 260
- Label description 260
- Note if you have existing capture files you may need to set this size larger or delete existing capture files 260
- Nwa3000 n series user s guide 260
- Chapter 18 diagnostics 261
- Files to open this screen this screen lists the files of wireless frame captures the nwa3000 n series ap has performed you can download the files to your computer where you can study them using a packet analyzer also known as a network or protocol analyzer such as wireshark 261
- Label description 261
- Nwa3000 n series user s guide 261
- The following table describes the labels in this screen 261
- Wireless frame capture files 261
- Hapter 263
- Overview 263
- Reboot 263
- What you need to know 263
- Hapter 265
- Overview 265
- Shutdown 265
- What you need to know 265
- Hapter 267
- Overview 267
- Power hardware connections and leds 267
- Troubleshooting 267
- I cannot see or access the login screen in the web configurator 268
- I forgot the ip address for the nwa3000 n series ap 268
- Nwa3000 n series ap access and login 268
- One of the leds does not behave as expected 268
- I can see the login screen but i cannot log in to the nwa3000 n series ap 269
- I forgot the password 269
- I cannot access the internet 270
- I cannot access the nwa3000 n series ap via the console port 270
- I cannot use ftp to upload download the configuration file i cannot use ftp to upload new firmware 270
- Internet access 270
- I cannot access the internet anymore i had access to the internet with the nwa3000 n series ap but my internet connection is not available anymore 271
- The internet connection is slow or intermittent 271
- Hackers have accessed my wep encrypted wireless lan 272
- I cannot access the nwa3000 n series ap or ping any computer from the wlan 272
- The wireless security is not following the re authentication timer setting i specified 272
- Wireless ap troubleshooting 272
- A broadcast storm results when i turn on device ha 273
- Device ha is not working 273
- I cannot get the device ha synchronization to work 273
- I can only see newer logs older logs are missing 274
- I cannot get a certificate to import into the nwa3000 n series ap 274
- Note be careful not to convert a binary file to text during the transfer process it is easy for this to occur since many programs use text files by default 274
- I cannot get the firmware uploaded using the commands 275
- My earlier packet capture files are missing 275
- My packet capture captured less than i wanted or failed 275
- Note exit or must follow sub commands if it is to make the nwa3000 n series ap exit sub command mode 275
- The commands in my configuration file or shell script are not working properly 275
- The ap status is registered as offline even though it is on 276
- Wireless clients cannot connect to an ap 276
- In the 277
- Note this procedure removes the current configuration 277
- Page there is no load balancing indicator associated with any aps assigned to the load balancing task 277
- Resetting the nwa3000 n series ap 277
- Wireless clients are not being load balanced among my aps 277
- Getting more troubleshooting help 278
- Hapter 279
- Product specifications 279
- Chapter 22 product specifications 280
- Nwa3000 n series user s guide 280
- Table 96 hardware specifications 280
- Table 97 firmware specifications 280
- Chapter 22 product specifications 281
- Nwa3000 n series user s guide 281
- Table 97 firmware specifications 281
- Be careful to avoid damaging pipes or cables located inside the wall when drilling holes for the screws 282
- Figure 125 wall mounting example 282
- Note see table 96 on page 279 for the size of screws to use and how far apart to place them 282
- Wall mounting instructions 282
- Figure 126 masonry plug and m4 tap screw 283
- Log descriptions 285
- Ppendix 285
- Appendix a log descriptions 286
- Log message description 286
- Nwa3000 n series user s guide 286
- Table 98 zysh logs continued 286
- Appendix a log descriptions 287
- Log message description 287
- Nwa3000 n series user s guide 287
- Table 99 user logs 287
- Appendix a log descriptions 288
- Log message description 288
- Nwa3000 n series user s guide 288
- Table 100 built in services logs 288
- Table 99 user logs continued 288
- Appendix a log descriptions 289
- Log message description 289
- Nwa3000 n series user s guide 289
- Table 100 built in services logs continued 289
- Appendix a log descriptions 290
- Log message description 290
- Nwa3000 n series user s guide 290
- Table 100 built in services logs continued 290
- Table 101 system logs 290
- Appendix a log descriptions 291
- Log message description 291
- Nwa3000 n series user s guide 291
- Table 101 system logs continued 291
- Appendix a log descriptions 292
- Log message description 292
- Nwa3000 n series user s guide 292
- Table 101 system logs continued 292
- Table 102 device ha logs 292
- Appendix a log descriptions 293
- Log message description 293
- Nwa3000 n series user s guide 293
- Table 102 device ha logs continued 293
- Appendix a log descriptions 294
- Log message description 294
- Nwa3000 n series user s guide 294
- Table 102 device ha logs continued 294
- Appendix a log descriptions 295
- Code description 295
- Log message description 295
- Nwa3000 n series user s guide 295
- Table 102 device ha logs continued 295
- Appendix a log descriptions 296
- Log message description 296
- Nwa3000 n series user s guide 296
- Table 103 wlan logs 296
- Appendix a log descriptions 297
- Log message description 297
- Nwa3000 n series user s guide 297
- Table 103 wlan logs continued 297
- Table 104 account logs 297
- Table 105 file manager logs 297
- Appendix a log descriptions 298
- Log message description 298
- Nwa3000 n series user s guide 298
- Table 105 file manager logs continued 298
- Table 106 dhcp logs 298
- Table 107 e mail daily report logs 298
- Appendix a log descriptions 299
- Log message description 299
- Nwa3000 n series user s guide 299
- Table 107 e mail daily report logs continued 299
- Table 108 capwap server logs 299
- Appendix a log descriptions 300
- Log message description 300
- Nwa3000 n series user s guide 300
- Table 108 capwap server logs 300
- Appendix a log descriptions 301
- Log message description 301
- Nwa3000 n series user s guide 301
- Table 108 capwap server logs 301
- Appendix a log descriptions 302
- Log message description 302
- Nwa3000 n series user s guide 302
- Table 109 capwap client logs 302
- Appendix a log descriptions 303
- Log message description 303
- Nwa3000 n series user s guide 303
- Table 109 capwap client logs 303
- Table 110 ap load balancing logs 303
- Table 111 rogue ap logs 303
- Appendix a log descriptions 304
- Log message description 304
- Nwa3000 n series user s guide 304
- Table 112 wireless frame capture logs 304
- Table 113 dcs logs 304
- Importing certificates 305
- Ppendix 305
- Internet explorer 306
- Installing a stand alone certificate file in internet explorer 310
- Removing a certificate in internet explorer 311
- Firefox 313
- Installing a stand alone certificate file in firefox 314
- Removing a certificate in firefox 316
- Ppendix 319
- Wireless lan topologies 319
- Wireless lans 319
- Figure 128 basic service set 320
- Channel 321
- Figure 129 infrastructure wlan 321
- Rts cts 321
- Figure 130 rts cts 322
- Note enabling the rts threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy 322
- Fragmentation threshold 323
- Ieee 802 1g wireless lan 323
- Note the wireless devices must use the same preamble mode in order to communicate 323
- Preamble type 323
- Appendix c wireless lans 324
- Data rate mbps modulation 324
- Note you must enable the same wireless security settings on the nwa3000 n series ap and on all wireless clients that you want to associate with it 324
- Nwa3000 n series user s guide 324
- Security level security type 324
- Several intermediate rate steps between the maximum and minimum data rates the ieee 802 1g data rate and modulation are as follows 324
- Table 114 ieee 802 1g 324
- Table 115 wireless security levels 324
- The following figure shows the relative effectiveness of these wireless security methods available on your nwa3000 n series ap 324
- Wireless security is vital to your network to protect wireless communication between wireless clients access points and the wired network 324
- Wireless security methods available on the nwa3000 n series ap are data encryption wireless client authentication restricting access by device mac address and hiding the nwa3000 n series ap identity 324
- Wireless security overview 324
- Ieee 802 x 325
- Radius 325
- Types of radius messages 325
- Eap md5 message digest algorithm 5 326
- Types of eap authentication 326
- Eap tls transport layer security 327
- Eap ttls tunneled transport layer service 327
- Peap protected eap 327
- Appendix c wireless lans 328
- Dynamic wep key exchange 328
- Eap md5 eap tls eap ttls peap leap 328
- For added security certificate based authentications eap tls eap ttls and peap use dynamic keys for data encryption they are often deployed in corporate environments but for public deployment a simple user name and password pair is more practical the following table is a comparison of the features of authentication types 328
- If both an ap and the wireless clients support wpa2 and you have an external radius server use wpa2 for stronger data encryption if you don t have an external radius server you should use wpa2 psk wpa2 pre shared key that only requires a single identical password entered into each access point wireless gateway and wireless client as long as the passwords match a wireless client will be granted access to a wlan 328
- If this feature is enabled it is not necessary to configure a default encryption key in the wireless security configuration screen you may still configure and store keys but they will not be used while dynamic wep is enabled 328
- Key differences between wpa or wpa2 and wep are improved data encryption and user authentication 328
- Note eap md5 cannot be used with dynamic wep key exchange 328
- Nwa3000 n series user s guide 328
- Table 116 comparison of eap authentication types 328
- The ap maps a unique key that is generated with the radius server this key expires when the wireless connection times out disconnects or reauthentication times out a new wep key is generated each time reauthentication is performed 328
- Wi fi protected access wpa is a subset of the ieee 802 1i standard wpa2 ieee 802 1i is a wireless security standard that defines stronger encryption authentication and key management than wpa 328
- Wpa and wpa2 328
- Encryption 329
- User authentication 330
- Wireless client wpa supplicants 330
- Wpa 2 with radius application example 330
- Figure 131 wpa 2 with radius application example 331
- Wpa 2 psk application example 331
- Appendix c wireless lans 332
- Authentication method key management protocol 332
- Encryptio n method 332
- Enter manual key ieee 802 x 332
- Figure 132 wpa 2 psk authentication 332
- Nwa3000 n series user s guide 332
- Refer to this table to see what other security parameters you should configure for each authentication method or key management protocol type mac address filters are not dependent on how you configure these security features 332
- Security parameters summary 332
- Table 117 wireless security relational matrix 332
- The ap and wireless clients use the tkip or aes encryption process the pmk and information exchanged in a handshake to create temporal encryption keys they use these keys to encrypt data exchanged between them 332
- Open software announcements 333
- Ppendix 333
- Appendix d open software announcements 334
- Nwa3000 n series user s guide 334
- Appendix d open software announcements 335
- Nwa3000 n series user s guide 335
- Appendix d open software announcements 336
- Nwa3000 n series user s guide 336
- Appendix d open software announcements 337
- Nwa3000 n series user s guide 337
- Appendix d open software announcements 338
- Nwa3000 n series user s guide 338
- Appendix d open software announcements 339
- Nwa3000 n series user s guide 339
- Appendix d open software announcements 340
- Nwa3000 n series user s guide 340
- Appendix d open software announcements 341
- Nwa3000 n series user s guide 341
- Appendix d open software announcements 342
- Nwa3000 n series user s guide 342
- Appendix d open software announcements 343
- Nwa3000 n series user s guide 343
- Appendix d open software announcements 344
- Nwa3000 n series user s guide 344
- Appendix d open software announcements 345
- Nwa3000 n series user s guide 345
- Appendix d open software announcements 346
- Nwa3000 n series user s guide 346
- Appendix d open software announcements 347
- Nwa3000 n series user s guide 347
- Appendix d open software announcements 348
- Nwa3000 n series user s guide 348
- Appendix d open software announcements 349
- Nwa3000 n series user s guide 349
- Appendix d open software announcements 350
- Nwa3000 n series user s guide 350
- Appendix d open software announcements 351
- Nwa3000 n series user s guide 351
- Appendix d open software announcements 352
- Nwa3000 n series user s guide 352
- Appendix d open software announcements 353
- Nwa3000 n series user s guide 353
- Appendix d open software announcements 354
- Nwa3000 n series user s guide 354
- Appendix d open software announcements 355
- Nwa3000 n series user s guide 355
- Appendix d open software announcements 356
- Nwa3000 n series user s guide 356
- Appendix d open software announcements 357
- Nwa3000 n series user s guide 357
- Appendix d open software announcements 358
- Nwa3000 n series user s guide 358
- Appendix d open software announcements 359
- Nwa3000 n series user s guide 359
- Appendix d open software announcements 360
- Nwa3000 n series user s guide 360
- Appendix d open software announcements 361
- Nwa3000 n series user s guide 361
- Appendix d open software announcements 362
- Nwa3000 n series user s guide 362
- Appendix d open software announcements 363
- Nwa3000 n series user s guide 363
- Appendix d open software announcements 364
- Nwa3000 n series user s guide 364
- Appendix d open software announcements 365
- Nwa3000 n series user s guide 365
- Appendix d open software announcements 366
- Nwa3000 n series user s guide 366
- Appendix d open software announcements 367
- Nwa3000 n series user s guide 367
- Appendix d open software announcements 368
- Nwa3000 n series user s guide 368
- Appendix d open software announcements 369
- Nwa3000 n series user s guide 369
- Appendix d open software announcements 370
- Nwa3000 n series user s guide 370
- Appendix d open software announcements 371
- Nwa3000 n series user s guide 371
- Certifications 373
- Copyright 373
- Legal information 373
- Ppendix 373
- Fcc radiation exposure statement 374
- Industry canada statement 374
- Ic radiation exposure statement 375
- Important note 375
- Notices 375
- 注意 375
- Viewing certifications 376
- Zyxel limited warranty 376
- Registration 377
- Nwa3000 n series user s guide 379
- Symbols 379
- Nwa3000 n series user s guide 380
- Nwa3000 n series user s guide 381
- Nwa3000 n series user s guide 382
- Nwa3000 n series user s guide 383
- Nwa3000 n series user s guide 384
- Nwa3000 n series user s guide 385
Похожие устройства
- Zyxel NWA3000-N series Технические характеристики
- HP probook 4540s, h5j04ea Инструкция по эксплуатации
- HP envy dv6-7263er, c5u12ea Инструкция по эксплуатации
- Zyxel NWA5123-NI Инструкция по эксплуатации
- Zyxel NWA5123-NI Инструкция по установке
- Zyxel NWA5123-NI Технические характеристики
- HP in-ear headphone h1000 Инструкция по эксплуатации
- HP probook 4540s, h4r27es Инструкция по эксплуатации
- Zyxel NWA5121-NI Инструкция по эксплуатации
- Zyxel NWA5121-NI Инструкция по установке
- Zyxel NWA5121-NI Технические характеристики
- HP webcam hd 2300 Инструкция по эксплуатации
- Zyxel NWA5121-N Инструкция по эксплуатации
- Zyxel NWA5121-N Инструкция по установке
- Zyxel NWA5121-N Технические характеристики
- HP pavilion 15-n071sr, f4b06ea Инструкция по эксплуатации
- HP pavilion 15-n067sr, f2v33ea Инструкция по эксплуатации
- Zyxel NWA5301-NJ Инструкция по эксплуатации
- Zyxel NWA5301-NJ Инструкция по установке
- Zyxel NWA5301-NJ Технические характеристики