![background image](http://html1.mh-extra.com/html/amx/nxa-wapzd1000/nxa-wapzd1000_operation-reference-manual_2937893063.webp)
Configure Tab
59
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
provided during the Zero-IT Wireless Activation process to complete this task. Once this is done, users can
connect to the internal WLAN using 802.1X/EAP authentication.
Authenticating with an External RADIUS Server
You can also use an external RADIUS server for your wireless client 802.1X/EAP authentication. An EAP-
aware RADIUS server is required for this application. Also, you might need to deploy your own certificates for
wireless client devices and for the RADIUS server you are using. In this case, the NXA-WAPZD1000 works
as a bridge between your wireless clients and the RADIUS server during the wireless authentication process.
The NXA-WAPZD1000 allows wireless clients to access the networks only after successful authentication of
the wireless clients by the RADIUS server. For information on configuring a RADIUS server for client
authentication, please refer to the RADIUS / RADIUS Accounting section on page 99.
If You Change the Internal WLAN to WEP or 802.1X
If you replace the default WPA configuration of the internal WLAN, your users must reconfigure the wireless
LAN connection settings on their devices. This process is described in detail below and can be performed
when logging into the WLAN as a new user.
If you are switching to WEP-based security:
1.
Each user should be able to repeat the Zero-IT Wireless Activation process and install the WEP key by
executing the activation script.
2.
Alternatively, they can manually enter the WEP key text into their wireless device connection settings.
If you are switching to 802.1X-based security
1.
1. (Applies only to the use of the built-in EAP server.) Each user should be able to repeat the Zero-IT
Wireless Activation process and download the certificates and an activation script generated by the NXA-
WAPZD1000.
2.
Each user must first install certificates to his/her computer.
3.
Each user must then execute the activation script, in order to configure the correct wireless setting on his/
her computer.
4.
To manually configure 802.1X/EAP settings for non-EAP capable client use, use the wireless settings
generated by the NXA-WAPZD1000.
Working with WLAN Groups
If your wireless network covers a large physical environment (for example, multi-floor or multi-building
office) and you want to provide different WLAN services to different areas of your environment, you can use
WLAN groups to do this. For example, if your wireless network covers three building floors (1st Floor to 3rd
Floor) and you need to provide wireless access to visitors on the 1st Floor, you can do the following:
Create a WLAN service (for example, “Guest Only Service”) that provides guest-level access only.
Create a WLAN group (for example, “Guest Only Group”), and then assign “Guest Only Service”
(WLAN service) to “Guest Only Group” (WLAN group).
Assign APs on the 1st Floor (where visitors need wireless access) to your “Guest Only Group”.
Any wireless client that associates with APs assigned to the “Guest Only Group” will get the guest-level
access privileges defined in your “Guest Only Service.” APs on the 2nd and 3rd Floors can remain assigned to
the Default WLAN Group and provide normal-level access.
If your wireless network is using EAP/external RADIUS server for client
authentication and you have Windows Vista clients, make sure that they are
upgraded to Vista Service Pack 1 (SP1). SP1 includes fixes for client authentication
issues when using EAP external RADIUS server.
Creating WLAN groups is optional. If you do not need to provide different WLAN
services to different areas in your environment, you do not need to create a WLAN
group.
Summary of Contents for NXA-WAPZD1000
Page 4: ......
Page 12: ...viii NXA WAPZD1000 ZoneDirector Smart WLAN Controller Table of Contents ...
Page 16: ...Introduction 12 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 130: ...Blocking Client Devices 126 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 146: ...Smart Mesh Networking Best Practices 142 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 153: ...Troubleshooting 149 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...