ZDC ZN-7200-2EI-O User Manual Download

Page: 91 / 110

VAP Profile Settings

Available in AP mode, the IEEE 802.11n ZAC Access Point allows up to 8 virtual SSIDs on a single

BSSID and to

configure different profile settings such as security and VLAN ID to each SSID.

To create a

virtual AP, you may check the

Enable

box of the profile and click on the profile (eg. Profile 2) to

configure wireless and security settings. Hit

Apply

to active the profile.

Summary of Contents for ZN-7200-2EI-O

Page 1: ...1 ZN 7200 2EI O ZN 7200 2AEI O ZAC Wireless Access Point User s Manual V1 1 Sep 2014 ...

Page 2: ...o guide professional installer to install the IEEE 802 11n ZAC Access Point series and how to build the infrastructure centered on it It includes procedures to assist you in avoiding unforeseen problems Conventions For your attention on important parts special characters and patterns are used in this manual This indicates an important note that you must pay attention to This indicates a warning or...

Page 3: ...n reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an exper...

Page 4: ... a distance of at least 100cm between you and the antenna of the installed equipment This transmitter must not be co located or operating in conjunction with any other antenna or transmitter The availability of some specific channels and or operational frequency bands are country dependent and are firmware programmed at the factory to match the intended destination The firmware setting is not acce...

Page 5: ...UTOR BE LIABLE TO YOU OR ANY OTHER PARTY FOR ANY DIRECT INDIRECT GENERAL SPECIAL INCIDENTAL CONSEQUENTIAL EXEMPLARY OR OTHER DAMAGE RISING OUT OF THE USE OR INABILITY TO USE THE PRODUCT INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF BUSINESS PROFITS BUSINESS INTERRUPTION LOSS OF BUSINESS INFORMATION OR ANY OTHER PECUNIARY LOSS OR FROM ANY BREACH OF WARRANTY EVEN IF DISTRIBUTOR HAS BEEN ADVISED O...

Page 6: ...ion 14 Professional Installation Required 14 Safety Precautions 14 Installation Precautions 15 Product Package 15 Hardware Installation 17 Connect up 17 Using the Grounding Wire 18 Install External Antennas 18 Mount the AP on a Pole 22 Power Up 23 Connect to the Access Point 24 Chapter 2 Quick Setup Tutorial 27 Access the Web Configurator 27 Configure the AC Thin AP mode 29 Chapter 3 Navigate the ...

Page 7: ...tocols 50 Access Control 52 Traffic Shaping 53 Radius Settings 54 TCP IP Settings 55 Captive Portal 56 Firewall Settings 58 Management 61 AP Management 61 System Settings 63 Time Settings 66 Firmware Upgrade 66 Backup Retrieve Settings 67 Restore Factory Default Settings 67 Reboot 68 Password Settings 69 Syslog Setting 69 System Log 70 System Alert 71 Tools 71 Ping 71 Trace Route 72 ...

Page 8: ... 77 View Bridge Table 77 View Active DHCP Client Table 77 View Network Activities 78 System 78 Basic System Settings 78 TCP IP Settings 79 Time Settings 82 RADIUS Settings 83 Firewall Settings 84 UDP Pass Through 87 DMZ 87 Wireless 88 VAP Profile Settings 91 VLAN 94 Advanced Settings 95 Access Control 97 Traffic Shaping 98 Captive Portal 99 WDS Settings 101 Management 102 ...

Page 9: ...e Firmware 102 Backup Retrieve Settings 103 Restore Factory Default Settings 103 Reboot 104 Remote Management 104 SNMP Management 105 Certificate Settings 107 Tools 108 System Log 108 Ping Watch Dog 108 Appendix A ASCII 110 ...

Page 10: ...toring of all the managed APs on the network In addition the easy to install ZAC Access Point is also a high performance last mile broadband solution that provides reliable wireless network coverage for broadband application Key Features Centralized configuration control for your network Compliant with IEEE 802 11n standard Support passive PoE supplied with 24V High reliable watertight housing end...

Page 11: ...11 Hardware Overview Front View Back View ...

Page 12: ... device has the Ethernet connection Off The device has no Ethernet connection Blinking Transmitting receiving Ethernet packets WLAN Green On The WLAN is active Off The WLAN is inactive Blinking Transmitting receiving wireless packets Signal 3 Green 3 LED On The signal strength is excellent 2 LED On The signal strength is good 1 LED On The signal strength is weak ...

Page 13: ...ng figure illustrates a ZAC wireless network When a thin AP mode joins a wired network it will start to look for a ZAC Access Point in AC mode If the thin AP founds the AP controller on the network it will send the registration request to the AP controller Once the registration is successfully made the AP that acts as the AP controller will add the thin AP to its management list and provides it co...

Page 14: ...f you are installing the ZAC Access Point for the first time for your safety as well as others please seek assistance from a professional installer who has received safety training on the hazards involved 3 Keep safety as well as performance in mind when selecting your installation site especially where there are electric power and phone lines 4 When installing the ZAC Access Point please note the...

Page 15: ... 3 Users MUST power off the ZAC Access Point first before connecting the external antenna to it Do not switch from built in antenna to the external antenna from WEB management without physically attaching the external antenna onto the unit otherwise damage might be caused to the ZAC Access Point itself Product Package The product package you have received should contain the following items If any ...

Page 16: ...rrite Suppression Core 24VDC Power Cord PoE Injector Users MUST use the Power cord PoE Injector shipped in the box with the IEEE 802 11n ZAC Wireless Access Point Use of other options will likely cause damage to the AP Warning ...

Page 17: ... Access Point is a movable cover Grab the cover and pull it back harder to take it out as the figure shown below 2 Plug a standard Ethernet cable into the RJ45 port 3 Slide the cover back and press down the lock button to seal the bottom of the ZAC Access Point ...

Page 18: ...use against surges or ESD 1 Remove the screw on the grounding point at the bottom of the ZAC Access Point 2 Put the grounding wire on the grounding point at the bottom of the ZAC Access Point Then screw the grounding wire to tighten up 3 Connect the grounding wire to earth ground Install External Antennas The ZAC Access Point provides two reverse SMA antenna connectors for connecting external ante...

Page 19: ...d that higher gain antennas be used to best suit the application Users MUST power off the Access Point first before connecting the external antenna to it Do not power on the device for a certain of time without physically attaching the external antenna otherwise damage might be caused to the unit itself 2 Bend the antennas to 90 degree or 45 degree Warning ...

Page 20: ...if the antennas are fairly close together since they couple together much less than if they are both pointed in the same direction parallel The polarization of antennas should be properly aligned Maximum signal strength between bridges occurs when both bridges are using identical polarization 4 Tighten up the connector joint clockwise to fix the antennas Note ...

Page 21: ...onnector joint counterclockwise first then adjust antenna to the desired position DO NOT bend or turn the antennas without loosening the connector joint otherwise damage might be caused to the antennas 6 Antenna installation is complete ...

Page 22: ...nting ring through the middle hole of it Note that you should unlock the pole mounting ring with a screw driver before putting it through the device as the following right picture shows 2 Mount the ZAC Access Point steadily to the pole by locking the pole mounting ring tightly ...

Page 23: ...23 Power Up 1 Connect power cord to the PoE injector as the following right picture shows 2 Connect the Ethernet cable that connects the Access Point to the POE port of the PoE injector as figured below ...

Page 24: ...age the ZAC Access Point please do the followings 1 Open the ferrite core by unsnapping the connector latches The core will open revealing a concave surface 2 Lay the Ethernet cable into the core usually within 2 to 3 inches of the connector You may have to experiment with the final location depending on the effectiveness of the high frequency abatement ...

Page 25: ... core This helps lock the core in place and may be required in circumstances with severe interference 4 Close the core and snap the halves back together 5 Connect the Ethernet cable with suppression core to the Data In port of the PoE injector ...

Page 26: ...26 6 Connect the other end of Ethernet cable to a PC or a switch hub The hardware installation is complete To configure the Access Point please refer to Chapter 2 Quick Setup Tutorial ...

Page 27: ...terface to easily manage the access point Configure the computer with a static IP address of 192 168 1 x as the default IP address of the ZAC Access Point is 192 168 1 1 X cannot be 0 1 nor 255 Open Web browser and enter the IP address Default 192 168 1 1 of the ZAC Access Point into the address field You will see the login page as below ...

Page 28: ...Default admin and password Default password respectively and click Login to login the main page of the ZAC Access Point The username and password are case sensitive and the password should be no more than 19 characters Note ...

Page 29: ...AP go to Basic Settings From Device Mode drop down list select Virtual AC mode If you would like the Access Point to perform as a virtual controller and access point concurrently please select Virtual AC Thin AP mode Then assign an IP address to the ZAC Access Point and specify subnet mask gateway and DNS address respectively Hit Apply and wait for about 50 seconds to take effect AC Thin AP mode a...

Page 30: ...iguration is made click Save to save the settings A dialog message will pop up to remind you changes will also apply to other managed Thin APs Click Apply to apply the configuration immediately To make profile setting on the ZAC Access Point itself take effect you need to reboot the AP in controller mode as well To reboot the ZAC Access Point go to Management Configuration File and click the Reboo...

Page 31: ...managed Access Points to your network with Ethernet cables Power them up respectively They will automatically discover the ZAC Access Point in controller mode and register themselves To check whether the thin APs are successfully registered or not enter the web page of the ZAC Access Point master access controller and go to Management AP Management You will see Registered in Status column Besides ...

Page 32: ...32 Moving the mouse over MAC address of each managed AP will also display relevant RF information such as channel mode current channel antenna being used together with transmit output power ...

Page 33: ... controller mode and go to Management AP Management the following screen shows up The ZAC Access Point AP in Virtual AC Thin AP mode on the list is highlighted in bold font By selecting it and hitting Radio button you may configure its radio setting such as channel bandwidth channel antenna and output power ...

Page 34: ...u may choose to upgrade the selected managed AP by hitting Upgrade Selected or do the group upgrade by hitting Upgrade All Before upgrading the managed AP you need to locate the new firmware in the ZAC Access Point Go to Management Firmware Upload browse the firmware file where it is located click Upload and Click OK Then go back to Management AP Management to do single or group update ...

Page 35: ...lso monitor the wireless clients that are currently associated with the managed APs as well as packets statistics Configure the Fat AP mode Fat AP mode operates as standalone AP that cannot be managed by the ZAC Access Point To switch from Virtual AC mode to Fat AP mode go to Management System Settings From the Device Mode drop down list select Fat AP and hit YES to make the change take effect ...

Page 36: ...ge take effect The Fat AP covers AP mode Wireless Client mode Bridge mode as well as AP Repeater mode For details please refer to the next Chapter AP Mode 1 Choose Wireless Basic Settings The default is AP mode already Here you can change wireless parameters such as SSID operating channel transmit output power etc After the configuration is made click Apply to save the parameters Note ...

Page 37: ...legal levels to comply the regulation you need to enter the Web GUI and to specify the gain of the antenna after the external antenna is installed onto the Access Point 2 If security is required open Wireless Profile Setting and click on Profile 1 Settings as below 3 You may configure the parameters like Network Authentication and Data Encryption for more secure network communication in your appli...

Page 38: ...ecifying the distance go to Wireless Advanced Setting and fill in the number in the Distance field If the distance is below 1000 meters remain the number unchanged Wireless Client Mode 1 Go to Wireless Basic Settings and choose Wireless Client from Wireless Mode Specify the SSID that you would like connect and enter the gain of the external antenna Click Apply to save the configuration ...

Page 39: ...d the wireless client will scan all the available access points within coverage Select the one you prefer to connect and click Select AP to establish the connection 3 If the AP you connect to require authentication or encryption keys click Profile Settings in the left column select the corresponding authentication and encryption options and click Apply to save configuration ...

Page 40: ... with the Access Point has been successfully made go to Status Connections If the connection is established it will display association information of the Access Point including MAC address wireless mode signal strength and connection time ...

Page 41: ...Remote AP MAC Address 1 field and click Apply Bridge uses the WDS protocol that is not defined as the standard thus compatibility issues between equipment from different vendors may arise Moreover Tree or Star shape network topology should be used in all WDS use cases i e if AP2 and AP3 are specified as the WDS peers of AP1 AP2 should not be specified as the WDS peer of AP3 and AP3 should not be s...

Page 42: ...eters enter 3000 in the field Click Apply to save configuration 5 Use ping to check whether the link between the two bridges is OK 6 To check the wireless connectivity go to Status Connections If the connection is established it will display association information of the remote bridge including MAC address wireless mode signal strength and connection time AP Repeater Mode 1 Go to Wireless Basic S...

Page 43: ... To establish point to point bridge connection please follow the procedures described in Bridge mode To connect the wireless client to the AP please follow the procedures described in Wireless Client mode ...

Page 44: ...only Information includes system information IP settings and wireless network setting Click Refresh at the bottom to have the real time information View Managed APs Open Managed APs in Status to check information of managed AP such as device name MAC address IP address numbers of associated clients and uploaded downloaded packets All is read only Click Refresh at the bottom to update the list ...

Page 45: ...anaged APs that are associated with signal strength connection up time and uploaded downloaded packets All is read only Click Refresh at the bottom to update the list View DHCP Client Table Open DHCP Clients in Status as below to check the assigned IP address MAC address and lease time for each DHCP client Click Refresh to update the table ...

Page 46: ...the other managed APs Wireless Networks VAP Profiles Settings The IEEE 802 11n ZAC Access Point allows up to 8 virtual SSIDs on a single BSSID and to configure different profile settings such as security and VLAN ID to each SSID To create a virtual AP you may check the Enable box of the profile and click on the profile eg Profile 2 to configure wireless and security settings Hit Apply to active th...

Page 47: ...to enhance the security of network transmission By enabling Wireless Separation can prevent the communication among associated wireless clients WMM Support WMM Wi Fi Multimedia is a subset of 802 11e It allows wireless communication to define a priority limit on the basis of data type under AP mode only thus those time sensitive data like video audio data may own a higher priority than common one ...

Page 48: ...f wireless network to the lowest To serve the 802 1x at least one EAP type should be supported by the RADIUS Server AP and wireless client WPA with RADIUS Wi Fi Protected Access WPA is a subset of the IEEE 802 11i standard With warrant username password and etc offered by user this kind of authentication can be realized with specific RADIUS server This is the common way to be adopted in large ente...

Page 49: ...cryption can only be TKIP AES and the passphrase is required Data Encryption If data encryption is enabled the key is required and only sharing the same key with other wireless devices can the communication be established None Available only when the authentication type is open system 64 bits WEP It is made up of 10 hexadecimal numbers 128 bits WEP It is made up of 26 hexadecimal numbers 152 bits ...

Page 50: ...work mode It includes Bridge and Router When switch to Router mode the LAN IP address for web page access will become 192 168 0 99 Wireless Protocols Allow the user to change country code 802 11 mode and other advanced parameters for the ZAC Access Point ...

Page 51: ...e for compromise of a long distance by fixing the data rate Advanced Settings A MPDU A MSDU Aggregation The data rate of your AP except wireless client mode could be enhanced greatly with this option enabled however if your wireless clients don t support A MPDU A MSDU aggregation it is not recommended to enable it Short GI Under 802 11n mode enable it to obtain better data rate if there is no nega...

Page 52: ...packets Setting it too low may result in poor network performance Leave it at its default of 2346 is recommended Beacon Interval Specify the frequency interval to broadcast packets Enter a value between 20 and 1024 DTIM Interval DTIM which stands for Delivery Traffic Indication Message is contained in the data packets It is for enhancing the wireless transmission efficiency The default is set to 1...

Page 53: ... wireless clients on the list will not be able to connect the AP MAC Address Enter the MAC address of the wireless client that you would like to list into the access control list click Apply then it will be added into the table at the bottom Delete Selected All Check the box before one or more MAC addresses of wireless client s that you would like to cancel and click Delete Selected or Delete All ...

Page 54: ...ere and then the connection will be bound to the traffic shaping rule at all times You may decrease it to smaller value if the incoming traffic limit is smaller Radius Settings RADIUS Remote Authentication Dial In User Service is a server for remote user authentication and accounting playing a central role in the network in providing the capabilities of authenticating authorizing accounting auditi...

Page 55: ... Shared Secret This secret which is composed of no more than 31 characters is shared by the IEEE 802 11n ZAC Access Point and RADIUS during authentication Global Key Update Check this option and specify the time interval between two global key updates Default is 3600 seconds TCP IP Settings When the Router mode is activated the TCP IP Settings will show up in Wireless Settings for user to configur...

Page 56: ... the managed Access Point For wireless clients who want to access the unit s web page in Router mode please type the IP address here in the browser s address bar to enter the web page Captive Portal Captive portal is a management which allows WLAN users to easily and securely access the Internet Under Router mode when captive portal is enabled the IEEE 802 11n ZAC Access Point will redirect the cl...

Page 57: ...ort number for authentication Radius Acct Port Enter the port number for billing Radius Shared Secret Enter the secret key of the radius server Radius NAS ID Enter the name of the radius server if any Radius Administrative User Radius Admin Username Enter the username of the Radius Administrator Radius Admin Password Enter the password of the Radius Administrator Captive Portal UAM Portal URL Ente...

Page 58: ...his is available only under Router Mode Source IP Filtering You may create and activate a rule that filters a packet based on the source IP address from your local network to Internet Check Enable Source IP Filtering to activate rule Local IP Address Enter the IP address you would like to restrict Comment Make comments to record your filtering rule Click Apply and the IP address will be added in t...

Page 59: ...ck Apply and the IP address will be added in the list To delete the IP address from filtering click Select checkbox of the designated destination IP address and click the Delete Selected button You may delete all the IP addresses in the list by clicking Delete All Source Port Filtering You may create and activate a rule that filters a packet based on the source port from your local network to Inte...

Page 60: ... a rule that filters a packet based on the destination port from your local network to Internet Check Enable Destination Port Filtering to activate rule Port Range Enter the port range you would like to restrict Protocol Select port protocol Both TCP UDP Comment Make comments to record your filtering rule Click Apply and the IP address will be added in the list To delete the restricted destination...

Page 61: ...il server on the private local network behind IEEE 802 11n Wireless ZAC Access Point s NAT firewall Management The IEEE 802 11n ZAC Access Points can manage up to 20 managed APs The ZAC Access Point provides thin AP management for editing the managed AP settings upgrading the firmware and monitoring etc AP Management AP Management allows you to configure and upgrade the managed APs Select the mana...

Page 62: ...ain the IP address from ZAC Access Point in AC mode Default is DHCP client Radio Allows to configure the channel bandwidth operating channel antenna and output power for the selected managed Access Point From the AP Management list move the mouse cursor to the MAC address of the selected managed AP the screen will pop up radio configuration information ...

Page 63: ... AC mode Device Settings Device Mode Three modes are provided AC Thin AP Thin AP FAT AP Select AC Thin AP to have the device act as virtual access controller to manage other managed APs on your network Select Thin AP to have the ZAC Access Point managed by the ZAC AP in AC mode Select FAT AP to perform as a standalone AP neither managing nor managed by other ZAC APs Device Name Specify the device ...

Page 64: ...heck this option thus the IEEE 802 11n ZAC Access Pioint is able to obtain IP settings automatically from the DHCP server Use Fixed IP Address Check this option You have to specify a static IP address subnet mask default gateway and DNS server for the ZAC Access Point manually Make sure the specified IP address is unique on your network in order to prevent IP conflict DHCP Server The ZAC Access Po...

Page 65: ...65 ...

Page 66: ...t the time server from the NTP Server dropdown list or manually input the IP address of available time server into Manual IP Firmware Upgrade Besides upgrading firmware for the ZAC Access Point in AC mode it also provides firmware update for the managed APs Upload AC Firmware Allows the network administrator to upgrade firmware for the ZAC Access Point in AC mode Upload TAP Firmware Before updatin...

Page 67: ...ation file of ZAC Access Point in AC mode Then the configuration file ac cfg will be generated and saved to the specified location Save TAP Settings to File Click Save to export the configuration file of managed AP Then the configuration file tap cfg will be generated and saved to the specified location Load Settings from File Import ac cfg load into the ZAC Access Point in AC mode Restore Factory...

Page 68: ...a the reset button Press and hold the button for at least 5 seconds and then release it until the PWR LED gives a blink The hardware reset will take about 2 minutes to complete Reboot You can software reboot your ZAC Access Point from Configuration File in Management as below Click Reboot and hit Yes upon the appeared prompt to start reboot process This takes a few minutes ...

Page 69: ...rm Password Enter the new password again for confirmation The password is case sensitive and its length cannot exceed 19 characters Syslog Setting The ZAC Access Point provides remote syslog management by sending logs to an external syslog server The log can be also sent through Email Remote Syslog Server Enable Remote Syslog Enable to send log to remote syslog server Note ...

Page 70: ...og Time for Sending Log Specify the time of the day to send the log Clear Log To clear log after sending logs via email check the After Sending Mail checkbox Mail Server Setting Send Log From Enter the email address of the mail server Mail Subject Type a title to be presented in the subject line of the log email message SMTP Server Enter the IP address of the SMTP sever SMTP Authentication If you ...

Page 71: ...AP in this page Once the log entries are all used the log will wrap around and the old logs will be deleted You may click Clear to delete logs manually as well Tools The IEEE 802 11n ZAC Access Points provide two tools to test the link status with other managed Access Points or anyone on the network Ping ...

Page 72: ... Enter the number of pings Packet Size Specify ping packet size Trace Route This tool is used to discover the routes that packets take when traveling to the destination destination Destination IP Address Enter IP address of the remote destination and click Start to start ...

Page 73: ... may see some managed AP s basic information such as model name firmware version MAC address current up time registration status as well as MAC address Basic Settings Allows you to configure device and IP settings for the managed AP ...

Page 74: ...ssignment Obtain IP Address Automatically If a DHCP server exists in your network you can check this option thus the IEEE 802 11n ZAC Access Pioint is able to obtain IP settings automatically from the DHCP server Use Fixed IP Address Check this option You have to specify a static IP address subnet mask default gateway and DNS server for the ZAC Access Point manually Make sure the specified IP addr...

Page 75: ...ace status Click Refresh at the bottom to have the real time information View Association List Open Connections in Status to check the information of associated wireless devices such as MAC address signal strength connection time IP address etc All is read only Click Refresh at the bottom to update the current association list By clicking on the MAC address of the selected device on the web you ma...

Page 76: ...low Statistics Open Statistics in Status to check the data packets received on and transmitted from the wireless and Ethernet ports Click Refresh to view current statistics Poll Interval Specify the refresh time interval in the box beside Poll Interval and click Set Interval to save settings Stop helps to stop the auto refresh of network flow statistics ...

Page 77: ...ew Bridge Table Open Bridge Table in Status as below Click Refresh to view current connected status View Active DHCP Client Table Open DHCP Clients in Status as below to check the assigned IP address MAC address and time expired for each DHCP leased client Click Refresh to view current table ...

Page 78: ...cale and throughput dimension Bps Kbps Mbps changes dynamically according to the mean throughput value Throughput statistics can be updated manually using the Refresh button System Basic System Settings Device Settings Device Mode Three modes are provided AC Thin AP Thin AP FAT AP Select AC Thin AP to have the device act as virtual access controller to manage other managed APs on your network ...

Page 79: ...onal frequency bands is country dependent Spanning Tree Spanning Tree Protocol STP is a link management protocol for AP which provides path redundancy while preventing loops in a network STP allows only one active path at a time between the access points but establish the redundant link as a backup if the initial link fails STP Forward Delay STP Forward Delay is the time spent in detecting and lea...

Page 80: ...by running the nbtstat r command before using the device name of the ZAC Access Point to access its Web Management page In case the IEEE 802 11n ZAC Access Point is unable to obtain an IP address from a valid DHCP server it will fall back to default static IP address Use Fixed IP Address Check this option You have to specify a static IP address subnet mask default gateway and DNS server for the ZA...

Page 81: ...physical subnet To enable the DHCP relay agent check the Enable DHCP Relay checkbox and enter the IP address of the DHCP server In AP mode the IEEE 802 11n ZAC Access Point must establish connection with another wireless device before it is set to Router mode To access the unit in Router mode via wired port please type the WAN IP address to enter the web page for WAN is on wired port and LAN is on...

Page 82: ...ZAC Access Point is capable of keeping its time in accord with the Internet time To use this feature check Enable NTP Client Update in advance Current Time Display the present time in Yr Mon Day Hr Min and Sec Time Zone Select Select the time zone from the dropdown list NTP Server Select the time server from the NTP Server dropdown list or manually input the IP address of available time server int...

Page 83: ...d to configure radius settings Open RADIUS Settings in System to make RADIUS configuration Authentication RADIUS Server This is for RADIUS authentication It can communicate with RADIUS through IP Address Port and Shared Secret IP Address Enter the IP address of the Radius Server Port Enter the port number of the Radius Server Shared Secret This secret which is composed of no more than 31 character...

Page 84: ...ble only under Router Mode Source IP Filtering You may create and activate a rule that filters a packet based on the source IP address from your local network to Internet Check Enable Source IP Filtering to activate rule Local IP Address Enter the IP address you would like to restrict Comment Make comments to record your filtering rule Click Apply and the IP address will be added in the list To de...

Page 85: ...ick the Delete Selected button You may delete all the IP addresses in the list by clicking Delete All Source Port Filtering You may create and activate a rule that filters a packet based on the source port from your local network to Internet Check Enable Source Port Filtering to activate rule Port Range Enter the port range you would like to restrict Protocol Select port protocol Both TCP UDP Comm...

Page 86: ... added in the list To delete the restricted destination ports click Select checkbox of the designated ports and click the Delete Selected button You may delete all the IP addresses in the list by clicking Delete All Port Forwarding The port forwarding allows you to automatically redirect common network services to a specific machine behind the NAT firewall These settings ne are only necessary if y...

Page 87: ...s through the firewall Note that opening all the UDP ports will be very likely to expose the network to intruders DMZ A Demilitarized Zone is used to provide Internet services without sacrificing unauthorized access to its local private network Typically the DMZ host contains devices accessible to the Internet traffic such as Web HTTP servers FTP servers SMTP e mail servers and DNS servers To acti...

Page 88: ...1n ZAC Access Point establishes a wireless coverage and receives connectivity from other wireless devices Wireless Client The IEEE 802 11n ZAC Access Point is able to connect to the AP and thus join the wireless network around it Bridge The IEEE 802 11n ZAC Access Point establishes wireless connectivity with other APs by keying in remote MAC address Please refer to the WDS Settings for detailed co...

Page 89: ...Under 802 11n mode wireless client can be divided into HT STA and Non HT STA among which the one with HT protect enabled gets higher throughput Frequency Channel Channel varies much as the available band differs from country to country Select a proper operating channel in the drop down list according to your situation Extension Channel Only applicable to AP AP Repeater and 40MHz channel width indi...

Page 90: ...mise of a long distance Extension Channel Protection Mode This is to avoid conflict with other wireless network and boost the ability of your device to catch all 802 11g transmissions However it may decrease wireless network performance Compared to CTS Self the transmission amount of CTS RTS is much lower Enable MAC Clone Available only under wireless client mode it hides the MAC address of the AP...

Page 91: ...irtual SSIDs on a single BSSID and to configure different profile settings such as security and VLAN ID to each SSID To create a virtual AP you may check the Enable box of the profile and click on the profile eg Profile 2 to configure wireless and security settings Hit Apply to active the profile ...

Page 92: ...nication among associated wireless clients WMM Support WMM Wi Fi Multimedia is a subset of 802 11e It allows wireless communication to define a priority limit on the basis of data type under AP mode only thus those time sensitive data like video audio data may own a higher priority than common one To enable WMM the wireless client should also support it Max Station Number By checking the Max Stati...

Page 93: ...e adopted in large enterprise network WPA2 with RADIUS WPA2 IEEE 802 11i is a wireless security standard that defines stronger encryption authentication and key management than WPA If it is selected AES encryption and RADIUS server are required WPA WPA2 with RADIUS It provides options of WPA TKIP or WPA2 AES for the client If it is selected the data encryption type must be TKIP AES and the RADIUS ...

Page 94: ...ncryption Standard it is usually co used with WPA2 PSK WPA WPA2 etc TKIP AES It allows for backwards compatibility with devices using TKIP We strongly recommend you enable wireless security on your network Only the same Authentication Data Encryption and Key among the IEEE 802 11n ZAC Access Point and wireless clients can the communication be established VLAN If your network uses VLANs you can ass...

Page 95: ...he data rate of your AP except wireless client mode could be enhanced greatly with this option enabled however if your wireless clients don t support A MPDU A MSDU aggregation it is not recommended to enable it Short GI Under 802 11n mode enable it to obtain better data rate if there is no negative compatibility issue ...

Page 96: ...Delivery Traffic Indication Message is contained in the data packets It is for enhancing the wireless transmission efficiency The default is set to 1 Enter a value between 1 and 255 Preamble Type It defines some details on the 802 11 physical layer Long and Auto are available IGMP Snooping Available in AP Router mode IGMP snooping is the process of listening to IGMP network traffic By enabling IGM...

Page 97: ...ng distance the IEEE 802 11n ZAC Access Point can automatically adjust proper ACK timeout value by specifying distance of the two nodes Flow Control It allows the administrator to specify the incoming and outgoing traffic limit by checking Enable Traffic Shaping This is only available in Router mode We strongly recommend you leave most advanced settings at their defaults except Distance in Meters ...

Page 98: ... list will not be able to connect the AP MAC Address Enter the MAC address of the wireless client that you would like to list into the access control list click Apply then it will be added into the table at the bottom Delete Selected All Check the box before one or more MAC addresses of wireless client s that you would like to cancel and click Delete Selected or Delete All to cancel that access co...

Page 99: ...c Shaping Check this box to control the overall bandwidth for a specific VAP network Incoming Traffic Limit To specify maximum incoming bandwidth to a certain rate in kbit s Incoming Traffic Burst To specify the buffer size for incoming traffic that can be sent within a given unit of time The suggested value is 20KBytes You may just leave the default value there and then the connection will be bou...

Page 100: ...port number for authentication Radius Acct Port Enter the port number for billing Radius Shared Secret Enter the secret key of the radius server Radius NAS ID Enter the name of the radius server if any Radius Administrative User Radius Admin Username Enter the username of the Radius Administrator Radius Admin Password Enter the password of the Radius Administrator Captive Portal UAM Portal URL Ent...

Page 101: ...gs WDS Settings is available only under Bridge and AP Repeater Mode Bridge uses the WDS protocol that is not defined as the standard thus compatibility issues between equipment from different vendors may arise Moreover Tree or Star shape network topology should be used in all WDS use cases i e if AP2 and AP3 are specified as the WDS peers of AP1 AP2 should not be specified as the WDS peer of AP3 a...

Page 102: ...word again for confirmation The password is case sensitive and its length cannot exceed 19 characters Upgrade Firmware Open Firmware Upload in Management and follow the steps below to upgrade firmware locally or remotely through IEEE 802 11n ZAC Access Point s Web Click Browse to select the firmware file you would like to load Click Upload to start the upload process Wait a few minutes the ZAC Acc...

Page 103: ...ve a dialog box will pop up Save it then the configuration file ap cfg will be generated and saved to your local computer Load Settings from File By clicking Browse a file selection menu will appear select the file you want to load like ap cfg Click Upload to load the file After automatically rebooting new settings are applied Restore Factory Default Settings The IEEE 802 11n ZAC Access Point prov...

Page 104: ... and then release it until the PWR LED gives a blink Reboot You can reboot your IEEE 802 11n ZAC Access Point from Configuration File in Management as below Click Reboot and hit Yes upon the appeared prompt to start reboot process This takes a few minutes Remote Management The IEEE 802 11n ZAC Access Point provides a variety of remotes managements including Telnet SNMP FTP SSH HTTPS and exclusive ...

Page 105: ...ss Point and the SNMP manager The IEEE 802 11n ZAC Access Point supports SNMP v2 v3 Server Port Change the server port for a service if needed however you have to use the same port to use that service for remote management Get Community Specify the password for the incoming Get and GetNext requests from the management station By default it is set to public and allows all requests Set Community Spe...

Page 106: ...ying this user name are allowed to access the IEEE 802 11n ZAC Access Point Password Specify a password for the SNMPv3 administrator or user Only the SNMP commands carrying this password are allowed to access the IEEE 802 11n Wireless ZAC Access Point Confirm Password Input that password again to make sure it is your desired one Access Type Select Read Only or Read and Write accordingly Authentica...

Page 107: ... trust The Server can trust all certificates issued by a given CA To import a user certificate from Import User Certificates click Browse and specify the location where the user certificate is placed Click Import Delete User Certificate Delete the selected user certificate Import User Certificates Imported the user certificate ...

Page 108: ...System Log in Tools as below Remote Syslog Server Enable Remote Syslog Enable System log to alert remote server IP Address Specify the IP address of the remote server Port Specify the port number of the remote server Ping Watch Dog If you mess your connection up and cut off your ability the log in to the unit the ping watchdog has a chance to reboot due to loss of connectivity ...

Page 109: ...emote unit to ping Ping Interval Specify the interval time to ping the remote unit Startup Delay Specify the startup delay time to prevent reboot before the IEEE 802 11n ZAC Access Point is fully initialized Failure Count To Reboot If the ping timeout packets reached the value the IEEE 802 11n ZAC Access Point will reboot automatically ...

Page 110: ...uivalent ASCII Character Hex Equivalent ASCII Character Hex Equivalent ASCII Character Hex Equivalent 21 9 39 Q 51 i 69 22 3A R 52 j 6A 23 3B S 53 k 6B 24 3C T 54 l 6C 25 3D U 55 m 6D 26 3E V 56 n 6E 27 3F W 57 o 6F 28 40 X 58 p 70 29 A 41 Y 59 q 71 2A B 42 Z 5A r 72 2B C 43 5B s 73 2C D 44 5C t 74 2D E 45 5D u 75 2E F 46 5E v 76 2F G 47 _ 5F w 77 0 30 H 48 60 x 78 1 31 I 49 a 61 y 79 2 32 J 4A b ...

Search results

Summary of Contents for ZN-7200-2EI-O

Reviews:

Related manuals for ZN-7200-2EI-O

Brands by name

Popular brands

ZDC ZN-7200-2EI-O, User Manual

Search results

Summary of Contents for ZN-7200-2EI-O

Reviews:

Related manuals for ZN-7200-2EI-O

Brands by name

Popular brands