SENAO NOA-3570 User Manual Download Page 89

Page: 89 / 123

NOA-3570 User’s Guide

Chapter 9 Certificates

9.1.1 Advantages of Certificates

Certificates offer the following benefits.

• The NOA-3570 only has to store the certificates of the certification authorities that you

decide to trust, no matter how many devices you need to authenticate.

• Key distribution is simple and very secure since you can freely distribute public keys and

you never need to transmit private keys.

9.2 Self-signed Certificates

Until public-key infrastructure becomes more mature, it may not be available in some areas.
You can have the NOA-3570 act as a certification authority and sign its own certificates.

9.3 Configuration Summary

This section summarizes how to manage certificates on the NOA-3570.

Figure 43

Certificate Configuration Overview

Use the

My Certificate

screens to generate and export self-signed certificates or certification

requests and import the NOA-3570s’ CA-signed certificates.

Use the

Trusted CA

screens to save CA certificates to the NOA-3570.

9.4 My Certificates

Click

CERTIFICATES

My Certificates

to open the NOA-3570’s summary list of

certificates and certification requests. Certificates display in black and certification requests
display in gray. See the following figure.

Summary of Contents for NOA-3570

Page 1: ...NOA 3570 Outdoor Access Point User s Guide Version 3 50 12 2005...

Page 2: ...Certifications 1 Select the certification you wish to view from this page...

Page 3: ...turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation...

Page 4: ...radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance 20cm between the radiator your body This transmitter must not...

Page 5: ...a or 230V AC in Europe Do NOT use the device if the power supply is damaged as it might cause electrocution If the power supply is damaged remove it from the power outlet Do NOT attempt to repair the...

Page 6: ...ions for the NOA 3570 33 1 3 1 Access Point 33 1 3 2 AP Bridge 34 1 3 3 Bridge Repeater 35 Chapter 2 Introducing the Web Configurator 37 2 1 Web Configurator Overview 37 2 2 Accessing the NOA 3570 Web...

Page 7: ...LAN on the NOA 3570 56 5 3 Spanning Tree Protocol STP 57 5 3 1 Rapid STP 57 5 3 2 STP Terminology 57 5 3 3 How STP Works 58 5 3 4 STP Port States 58 5 4 WEP Encryption 58 5 5 Configuring the Wireless...

Page 8: ...Defaults 91 8 2 IP Address and Subnet Mask 91 8 2 1 IP Address Assignment 92 8 3 Configuring IP 92 Chapter 9 Certificates 95 9 1 Certificates Overview 95 9 1 1 Advantages of Certificates 96 9 2 Self s...

Page 9: ...cessing the SMT via the Console Port 131 12 2 1 Initial Screen 131 12 2 2 Entering the Password 132 12 3 Accessing the SMT via Telnet 133 12 4 Navigating the SMT Interface 133 12 4 1 System Management...

Page 10: ...formation 165 19 2 2 Console Port Speed 166 19 3 Log and Trace 166 19 3 1 Viewing Error Log 167 19 4 Diagnostic 167 Chapter 20 Firmware and Configuration File Maintenance 169 20 1 Filename Conventions...

Page 11: ...de 181 21 2 Time and Date Setting 182 21 2 1 Resetting the Time 183 Chapter 22 Troubleshooting 185 22 1 Problems Starting Up the NOA 3570 185 22 2 Problems with Console Port Access 185 22 3 Problems w...

Page 12: ...NOA 3570 User s Guide Table of Contents 17 Appendix I Command Interpreter 245 Appendix J Brute Force Password Guessing Protection 247 Appendix K Log Descriptions 249 Index 253...

Page 13: ...NOA 3570 User s Guide 18 Table of Contents...

Page 14: ...tem General 50 Figure 18 Password 51 Figure 19 Time Setting 52 Figure 20 Wireless Access Point 59 Figure 21 Bridging Example 62 Figure 22 Bridge Loop Two Bridges Connected to Hub 63 Figure 23 Bridge L...

Page 15: ...etwork Temporarily Disconnected 125 Figure 60 Firmware Upload Error 126 Figure 61 Configuration 127 Figure 62 Configuration Upload Successful 128 Figure 63 Network Temporarily Disconnected 128 Figure...

Page 16: ...Maintenance Backup Configuration 173 Figure 103 System Maintenance Starting Xmodem Download Screen 173 Figure 104 Backup Configuration Example 173 Figure 105 Successful Backup Confirmation Screen 174...

Page 17: ...otocol TCP IP Properties 209 Figure 129 Macintosh OS 8 9 Apple Menu 210 Figure 130 Macintosh OS 8 9 TCP IP 210 Figure 131 Macintosh OS X Apple Menu 211 Figure 132 Macintosh OS X Network 212 Figure 133...

Page 18: ...e 17 Wireless LAN 802 1x WPA 74 Table 18 Wireless LAN 802 1x WPA for 802 1x Protocol 76 Table 19 Wireless LAN 802 1x WPA for WPA Protocol 79 Table 20 Wireless LAN 802 1x WPA for WPA PSK Protocol 80 Ta...

Page 19: ...59 Menu 24 1 System Maintenance Status 164 Table 60 Menu 24 2 1 System Maintenance Information 166 Table 61 Menu 24 4 System Maintenance Menu Diagnostic 168 Table 62 Filename Conventions 170 Table 63...

Page 20: ...rnative Subnet Mask Notation 215 Table 92 Two Subnets Example 215 Table 93 Subnet 1 216 Table 94 Subnet 2 216 Table 95 Subnet 1 217 Table 96 Subnet 2 217 Table 97 Subnet 3 217 Table 98 Subnet 4 218 Ta...

Page 21: ...NOA 3570 User s Guide 26 List of Tables...

Page 22: ...ws remote configuration and management of your NOA 3570 The Power over Ethernet PoE feature means that power can be delivered to the NOA 3570 over an Ethernet line This allows you to mount the NOA 357...

Page 23: ...WPA and WEP are user authentication and improved data encryption WDS Functionality A Distribution System DS is a wired connection between two or more APs while a Wireless Distribution System WDS is a...

Page 24: ...niques are shown in the table below STP Spanning Tree Protocol RSTP Rapid STP R STP detects and breaks network loops and provides backup links between switches bridges or routers It allows a bridge to...

Page 25: ...ne external RADIUS server Use the embedded RADIUS server to authenticate up to 32 users You can also use an external RADIUS server to authenticate a potentially unlimited number of users Backup RADIUS...

Page 26: ...eless LAN Channel Usage The Wireless Channel Usage screen displays which radio channels are being used by other wireless devices within the transmission range of the NOA 3570 This allows you to select...

Page 27: ...570 Figure 3 Access Point Application 1 3 2 AP Bridge In AP Bridge mode the NOA 3570 supports both AP connections A and B can connect to the wired network through X and bridge connections X can commun...

Page 28: ...nd establish wireless links with other APs In bridge mode the NOA 3570s see A and B in Figure 5 on page 35 are connected to independent wired networks and have a bridge A can communicate with B connec...

Page 29: ...NOA 3570 User s Guide 36 Chapter 1 Getting to Know Your NOA 3570 Figure 6 Repeater Application...

Page 30: ...to 1024 by 768 pixels 2 2 Accessing the NOA 3570 Web Configurator 1 Make sure your NOA 3570 hardware is properly connected refer to the Quick Start Guide 2 Prepare your computer computer network to co...

Page 31: ...e Administrator Inactivity Timer field expires default five minutes Simply log back into the NOA 3570 if this happens to you 2 3 Resetting the NOA 3570 If you forget your password or cannot access the...

Page 32: ...oad on your terminal 3 This is an example Xmodem configuration upload using HyperTerminal Click Transfer then Send File to display the following screen Figure 9 Example Xmodem Upload 4 After a success...

Page 33: ...EM General This screen contains administrative and system related information Password Use this screen to change your password Time Setting Use this screen to change your NOA 3570 s time and date sett...

Page 34: ...o view the logs for the categories that you selected Log Settings Use this screen to change your NOA 3570 s log settings MAINTENANCE Status This screen contains administrative and system related infor...

Page 35: ...NOA 3570 User s Guide 42 Chapter 2 Introducing the Web Configurator...

Page 36: ...wizard helps you configure your NOA 3570 for wireless stations to access your wired LAN Note Click Next in each screen to continue or click Back to return to the previous screen Your settings are not...

Page 37: ...Panel Network Click the Identification tab note the entry for the Computer Name field and enter it as the System Name In Windows 2000 click Start Settings Control Panel and then double click System C...

Page 38: ...The channel only can setup in Channel 01 11 The following table describes the labels in this screen Table 5 Wizard Wireless LAN Setup...

Page 39: ...ters or 26 hexadecimal characters 0 9 A F You must configure all four keys but only one key can be activated at any one time The default key is key 1 Back Click Back to return to the previous screen N...

Page 40: ...ED screens to configure other features the congratulations screen shows next IP Address Enter the IP address of your NOA 3570 in dotted decimal notation Note If you changed the NOA 3570 s IP address y...

Page 41: ...NOA 3570 User s Guide 48 Chapter 3 Wizard Setup Figure 16 Wizard Setup Complete Well done You have set up your NOA 3570 to operate on your network and access the Internet...

Page 42: ...en double click System Click the Network Identification tab and then the Properties button Note the entry for the Computer name field and enter it as the System Name In Windows XP click Start My Compu...

Page 43: ...characters long Spaces are not allowed but dashes and underscores _ are accepted Domain Name This is not a required field Leave this field blank or enter the domain name here if you know it Administr...

Page 44: ...ght displays the read only DNS server IP address that the DHCP assigns Select User Defined if you have the IP address of a DNS server Enter the DNS server s IP address in the field to the right If you...

Page 45: ...Figure 19 Time Setting Table 8 Password LABEL DESCRIPTIONS Old Password Type in your existing system password 1234 is the default password New Password Type your new system password up to 31 character...

Page 46: ...isplays the last updated time from the time server When you select None in the Time Protocol field enter the new time in this field and then click Apply Current Date yyyy mm dd This field displays the...

Page 47: ...NOA 3570 User s Guide 54 Chapter 4 System Screens...

Page 48: ...570 are data encryption wireless client authentication restricting access by device MAC address and hiding the NOA 3570 identity 5 2 1 Encryption Use WPA security if you have WPA aware wireless client...

Page 49: ...ESSID and WEP in the Wireless screen 2 Use the MAC Filter screen to restrict access to your wireless network by MAC address 3 Configure WPA or WPA PSK in the 802 1x WPA screen You can also configure...

Page 50: ...is the bridge with the lowest identifier value MAC address Path cost is the cost of transmitting a frame onto a LAN through that port It is assigned according to the speed of the link to which a port...

Page 51: ...network topology 5 3 4 STP Port States STP assigns five port states see next table to eliminate packet looping A bridge port is not allowed to go directly from blocking state to forwarding state so as...

Page 52: ...5 5 1 Access Point Mode Select Access Point in the Operating Mode drop down list box to display the screen as shown next Channel selection only can choose 1 11ch Figure 20 Wireless Access Point 21dBm...

Page 53: ...NOA 3570 to use a channel select a channel from the drop down list box Click MAINTENANCE and then the Channel Usage tab to open the Channel Usage screen to make sure the channel is not already used b...

Page 54: ...ut power of the NOA 3570 to reduce interference with other APs The options are 21dBm 19dBm 17dBm or 15dBm Preamble Preamble is used to signal that data is coming to the receiver Short preamble increas...

Page 55: ...adcast traffic to circle the network endlessly resulting in possible throughput degradation and disruption of communications The following examples show two network topologies that can lead to this pr...

Page 56: ...d to the same wired LAN as shown next Figure 23 Bridge Loop Bridge Connected to Wired LAN To prevent bridge loops ensure that you enable STP in the Wireless screen or your NOA 3570 is not set to bridg...

Page 57: ...first WLAN adapter for AP functions and use the second WLAN adapter for bridge functions Operating Mode Select Bridge Repeater in this field to display the screen shown above Enable WDS Security A Wir...

Page 58: ...ise clear the check box to disable it Remote Bridge MAC Address Type the MAC address of the peer device in a valid MAC address format that is six hexadecimal character pairs for example 12 34 56 78 9a...

Page 59: ...apter 5 Wireless LAN Figure 25 Wireless AP Bridge See Table 13 on page 60 and Table 14 on page 64 descriptions of the fields in the Access Point and Bridge Repeater operating modes for descriptions of...

Page 60: ...es Allow Association or exclude up to 32 devices from accessing the NOA 3570 Deny Association Every Ethernet device has a unique MAC Media Access Control address The MAC address is assigned at the fac...

Page 61: ...he following table describes the labels in this screen Table 15 MAC Address Filter NOA 3570 LABEL DESCRIPTION WLAN Adapter Select the WLAN adapter for which you want to configure MAC address filtering...

Page 62: ...n in Figure 27 on page 70 With roaming a wireless LAN mobile user enjoys a continuous connection to the wired network through an access point while moving around the wireless LAN Enable roaming to exc...

Page 63: ...P 2 for reauthentication 5 7 1 Requirements for Roaming The following requirements must be met in order for wireless stations to roam between the coverage areas 1 All the access points must be on the...

Page 64: ...ords into the AP and all wireless clients The Pre Shared Key PSK must consist of between 8 and 63 ASCII characters including spaces and symbols Table 16 Roaming LABEL DESCRIPTION Active Select Yes fro...

Page 65: ...port number default is 1812 and the RADIUS shared secret A WPA application example with an external RADIUS server looks as follows A is the RADIUS server DS is the distribution system 1 The AP passes...

Page 66: ...ouse Data Communications AEGIS client The Windows XP patch is a free download that adds WPA capability to Windows XP s built in Zero Configuration wireless client However you must run Windows XP to us...

Page 67: ...cess to the wired network select a control method from the drop down list box Choose from No Access Allowed No Authentication Required and Authentication Required No Access Allowed blocks all wireless...

Page 68: ...NOA 3570 User s Guide Chapter 5 Wireless LAN 75 Figure 32 Wireless LAN 802 1x WPA for 802 1x Protocol...

Page 69: ...wireless station from the wired network after a period of inactivity The wireless station needs to enter the username and password again before access to the wired network is allowed This field is act...

Page 70: ...word up to 31 alphanumeric characters as the key to be shared between the external authentication server and the NOA 3570 The key must be the same on the external authentication server and your NOA 35...

Page 71: ...Required WPA Select Authentication Required in the Wireless Port Control field and WPA in the Key Management Protocol field to display the next screen Figure 33 Wireless LAN 802 1x WPA for WPA Protoco...

Page 72: ...dynamic WEP key exchange with IEEE 802 1x in the same Wi Fi network Select Enable to activate WPA mixed mode Otherwise select Disable WPA Group Key Update Timer The WPA Group Key Update Timer is the r...

Page 73: ...in this field Pre Shared Key The encryption mechanisms used for WPA and WPA PSK are the same The only difference between the two is that WPA PSK uses a simple common password instead of user specific...

Page 74: ...verview The NOA 3570 has a built in RADIUS server that can authenticate wireless clients or other APs that are configured as trusted APs The NOA 3570 can function as an AP and as a RADIUS server at th...

Page 75: ...password check box When authentication begins a pop up dialog box requests you to type a Name Password and Domain of the RADIUS server Specify a name and password only do not specify a domain Click t...

Page 76: ...factory default certificate common to all NOA 3570 s that use certificates Note ZyXEL recommends that you replace the factory default certificate with one that uses your NOA 3570 s MAC address Do this...

Page 77: ...With self signed certificates this is the same information as in the Subject field Valid From This field displays the date that the certificate becomes applicable The text displays in red and includes...

Page 78: ...r 6 4 Configuring Trusted AP To specify APs as trusted APs so they can use the NOA 3570 s internal RADIUS server to authenticate wireless clients click the AUTH SERVER link under ADVANCED and then the...

Page 79: ...et Enter a password up to 31 alphanumeric characters no spaces as the key for encrypting communications between the AP and the NOA 3570 The key is not sent over the network This key must be the same o...

Page 80: ...for this user account This name can be up to 31 alphanumeric characters long including spaces The wireless client s utility must use this name as its login name Password Type a password up to 31 ASCII...

Page 81: ...NOA 3570 User s Guide 88 Chapter 6 Internal RADIUS Server...

Page 82: ...e MAC header of a frame to identify VLAN membership The NOA 3570 can identify VLAN tags for incoming Ethernet frames and add VLAN tags to outgoing Ethernet frames 7 1 1 Management VLAN ID The manageme...

Page 83: ...up in order to manage the NOA 3570 This can be done in the following ways The management computer could be a wireless client of the NOA 3570 if the NOA 3570 s WLAN adapter is set to add the add the ma...

Page 84: ...ve a single user account and the ISP will assign you a dynamic IP address when the connection is established The Internet Assigned Number Authority IANA reserved this block of addresses specifically f...

Page 85: ...all organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization...

Page 86: ...is using a static IP address When you select this option fill in the fields below IP Address Enter the IP address of your NOA 3570 in dotted decimal notation Note If you change the NOA 3570 s IP addre...

Page 87: ...NOA 3570 User s Guide 94 Chapter 8 IP Screen...

Page 88: ...ust be kept secure Public key encryption in general works as follows 1 Tim wants to send a private message to Jenny Tim generates a public key pair What is encrypted with one key can only be decrypted...

Page 89: ...e available in some areas You can have the NOA 3570 act as a certification authority and sign its own certificates 9 3 Configuration Summary This section summarizes how to manage certificates on the N...

Page 90: ...er deleting expired or unnecessary certificates before adding more certificates Replace This button displays when the NOA 3570 has the factory default certificate The factory default certificate is co...

Page 91: ...able Valid To This field displays the date that the certificate expires The text displays in red and includes an Expiring or Expired message if the certificate is about to expire or has already expire...

Page 92: ...Enhanced Mail PEM format uses 64 ASCII characters to convert a binary PKCS 7 certificate into a printable form 9 6 Importing a Certificate Click CERTIFICATES My Certificates and then Import to open th...

Page 93: ...rtificate with a certification authority or generate a certification request see the following figure Table 29 My Certificate Import LABEL DESCRIPTION File Path Type in the location of the file you wa...

Page 94: ...in every field although the Common Name is mandatory The certification authority may add fields such as a serial number to the subject information when it issues a certificate It is recommended that e...

Page 95: ...request and enroll for a certificate immediately online to have the NOA 3570 generate a request for a certificate and apply to a certification authority for a certificate You must have the certificati...

Page 96: ...cate Create screen Make sure that the certification authority information is correct and that your Internet connection is working properly if you want the NOA 3570 to enroll a certificate online 9 8 M...

Page 97: ...NOA 3570 User s Guide 104 Chapter 9 Certificates Figure 47 My Certificate Details...

Page 98: ...he certification path Certificate Information These read only fields display detailed information about the certificate Type This field displays general information about the certificate CA signed mea...

Page 99: ...ingerprint This is the certificate s message digest that the NOA 3570 calculated using the MD5 algorithm SHA1 Fingerprint This is the certificate s message digest that the NOA 3570 calculated using th...

Page 100: ...information about the certificate s owner such as CN Common Name OU Organizational Unit or department O Organization or company and C Country It is recommended that each certificate have unique subje...

Page 101: ...certificates issued by the certification authority Otherwise the field displays No Details Select a certificate s radio button and click Details to open a screen with an in depth list of information...

Page 102: ...rity s certificate change the certificate s name and set whether or not you want the NOA 3570 to check a certification authority s list of revoked certificates before trusting a certificate issued by...

Page 103: ...NOA 3570 User s Guide 110 Chapter 9 Certificates Figure 50 Trusted CA Details...

Page 104: ...rtification Authority signed the certificate Self signed means that the certificate s owner signed the certificate not a certification authority X 509 means that this certificate was created and signe...

Page 105: ...he phone for example that this is actually their certificate SHA1 Fingerprint This is the certificate s message digest that the NOA 3570 calculated using the SHA1 algorithm You can use this value to v...

Page 106: ...ator allows you to look at all of the NOA 3570 s logs in one location Click LOGS to open the View Log screen The View Log screen displays logs for the categories that you selected in the Log Settings...

Page 107: ...he number of categories shown in the drop down list box depends on the selection in the Log Settings page Email Log Now Click Email Log Now to send the log screen to the e mail address specified in th...

Page 108: ...ch logs and or immediate alerts the NOA 3570 is to send An alert is a type of log that warrants more serious attention Some categories such as System Errors consist of both logs and alerts You may dif...

Page 109: ...NOA 3570 LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e mail addresses specified below If this field is left blank logs and alert mess...

Page 110: ...ly Hourly When Log is Full None If the Weekly or the Daily option is selected specify a time of day when the E mail should be sent If the Weekly option is selected then also specify which day of the w...

Page 111: ...NOA 3570 User s Guide 118 Chapter 10 Log Screens...

Page 112: ...MAINTENANCE to open the System Status screen where you can use to monitor your NOA 3570 Note that these labels are READ ONLY and are meant to be used for diagnostic purposes Figure 53 System Status T...

Page 113: ...is is the Ethernet port DHCP role Client or None Show Statistics Click Show Statistics to see router performance statistics such as number of packets sent and number of packets received for each port...

Page 114: ...ime the line has been up Bridge Link This is the index number of the bridge connection Active This shows whether the bridge connection is activated or not Remote Bridge MAC Address This is the MAC add...

Page 115: ...formation Figure 56 Channel Usage The following table describes the labels in this screen Table 39 Association List NOA 3570 LABEL DESCRIPTION WLAN 1 2 This identifies the WLAN adapter to which the li...

Page 116: ...ndependent Basic Service Set IBSS as one that doesn t See Chapter 5 on page 55 for more information on basic service sets BSS and extended service sets ESS MAC Address This field displays the MAC addr...

Page 117: ...ess screen wait two minutes before logging into the NOA 3570 again Table 41 Firmware Upload LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Brows...

Page 118: ...rary network disconnect In some operating systems you may see the following icon on your desktop Figure 59 Network Temporarily Disconnected After two minutes log in again and check your new firmware v...

Page 119: ...6 Configuration Screen See Chapter 20 on page 169 for transferring configuration files using FTP TFTP commands Click MAINTENANCE and then the Configuration tab Information related to backing up config...

Page 120: ...onfiguration to a file on your computer Once your NOA 3570 is configured and functioning properly it is highly recommended that you back up your configuration file before making configuration changes...

Page 121: ...ng icon on your desktop Figure 63 Network Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as tha...

Page 122: ...ration information and returns the NOA 3570 to its factory defaults as shown on the screen The following warning screen will appear Figure 65 Reset Warning Message 11 7 Restart Screen System restart a...

Page 123: ...NOA 3570 User s Guide 130 Chapter 11 Maintenance Figure 66 Restart Screen...

Search results

Summary of Contents for NOA-3570

Reviews:

Brands by name

Popular brands

SENAO NOA-3570, User Manual

Search results

Summary of Contents for NOA-3570

Reviews:

Brands by name

Popular brands