background image

 

Default Login Details

User’s Guide

WAP6906

Tri-band WiFi Repeater

Copyright © 2018 Zyxel Communications Corporation

Web Address

http://zyxelsetup 

(Windows)

http://zyxelsetup.local 

(Mac)

LAN IP Address

http://192.168.1.5

Password

(See the device label)

Version 1.0 Edition 1, 03/2018

Summary of Contents for WAP6906

Page 1: ...e WAP6906 Tri band WiFi Repeater Copyright 2018 Zyxel Communications Corporation Web Address http zyxelsetup Windows http zyxelsetup local Mac LAN IP Address http 192 168 1 5 Password See the device label Version 1 0 Edition 1 03 2018 ...

Page 2: ...om what you see due to differences in release versions or your computer operating system Every effort has been made to ensure that the information in this manual is accurate Related Documentation Quick Start Guide The Quick Start Guide shows how to connect the managed device More Information Go to support zyxel com to find other information on the WAP6906 ...

Page 3: ...e WAP6906 in this guide Product labels screen names field labels and field choices are all in bold font A right angle bracket within a screen name denotes a mouse click For example Configuration Wireless Network 2 4G MAC Filter means you first click Configuration in the navigation panel then the Wireless Network 2 4G sub menu and finally the MAC Filter tab to get to that screen Icons Used in Figur...

Page 4: ... Guide 4 Contents Overview User s Guide 9 Introduction 10 The Web Configurator 15 Easy Mode 22 Expert Mode 25 Tutorials 30 Technical Reference 36 Monitor 37 Network 44 Wireless LAN 47 AP Connection 55 Maintenance 59 Troubleshooting 66 ...

Page 5: ...sing the WPS Button 14 1 7 The RESET Button 14 1 7 1 Using the RESET Button 14 Chapter 2 The Web Configurator 15 2 1 Overview 15 2 2 Accessing the Web Configurator 15 2 3 Web Configuration Modes 16 2 4 Preparing your Computer to Access the Web Configurator 17 2 4 1 Static IP Configuration in Microsoft Windows 17 2 4 2 Static IP Configuration in MAC OS X 19 Chapter 3 Easy Mode 22 3 1 Overview 22 3 ...

Page 6: ...e WAP6906 to an AP 33 5 4 1 Selecting an AP from an Automatically Detected List 34 5 4 2 Selecting an AP by Manually Entering Security Information 34 Part II Technical Reference 36 Chapter 6 Monitor 37 6 1 Overview 37 6 2 What You Can Do 37 6 3 Log 37 6 4 Wireless Monitor 38 6 5 MBSS Monitor 41 6 6 Multicast Monitor 43 Chapter 7 Network 44 7 1 Overview 44 7 2 What You Can Do 44 7 3 What You Need T...

Page 7: ...view 59 10 2 What You Can Do 59 10 3 Password Screen 59 10 4 Time Screen 60 10 5 Firmware Upgrade Screen 61 10 6 Telnet Screen 62 10 7 Restore Screen 63 10 7 1 Backup Configuration 63 10 7 2 Restore Configuration 64 10 7 3 Back to Factory Defaults 64 10 7 4 Restore but retain IP settings 64 10 8 Restart Screen 65 Chapter 11 Troubleshooting 66 11 1 Power Hardware Connections and LEDs 66 11 2 WAP690...

Page 8: ...Table of Contents WAP6906 User s Guide 8 Appendix C Legal Information 89 Index 97 ...

Page 9: ...9 PART I User s Guide ...

Page 10: ...ct to the network through it This helps you expand wireless coverage when you have an access point or wireless router already in your network After the WAP6906 and the access point connect the WAP6906 acquires its IP address from the access point The clients of the WAP6906 can now surf the Internet In the example below the WAP6906 has two clients in its 2 4GHz network two clients in its 5GHz netwo...

Page 11: ...d make sure you know how to restore it Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes If you forget your password you will have to reset the WAP6906 to its factory default settings If you backed up an earlier configuration file you would not have to totally re configure the WAP6906 You could simply restore your last configuration 1 4 Front P...

Page 12: ... connected and the received signal strength is good Amber On The LED is on for 5 minutes indicating the wireless router or AP and WAP6906 are connected and the received signal strength is too strong This may cause interference with the wireless router or AP s signal Move the WAP6906 away from the wireless router or AP for a larger range Blinking The LED is blinking for 1 minute indicating the WPS ...

Page 13: ...e 2 Rear Panel Ports LABEL DESCRIPTION WPS Press the WPS button to establish a secure wireless connection using WiFi Protected Setup WPS See Section 1 6 on page 13 RESET Press the button to return the WAP6906 to the factory default settings See Section 1 7 on page 14 PWR DC IN Connect the power cable to the DC IN and press the power button to start the device LAN1 LAN2 Connect computers or other E...

Page 14: ...r within range of the WAP6906 Downlink Press the WPS button twice within three seconds Press the WPS button on a WPS aware client within range of the WAP6906 Note You must activate WPS in the WAP6906 and in another wireless device within two minutes of each other Note With WPS wireless clients can only connect to the 5GHz or 2 4GHz wireless network using the first 5GHz or 2 4GHz SSID on the WAP690...

Page 15: ...re your WAP6906 hardware is properly connected and prepare your computer or computer network to connect to the WAP6906 refer to the Quick Start Guide 2 Launch your web browser 3 Type http zyxelsetup for Windows or http zyxelsetup local for Mac as the website address to access any of the modes The WAP6906 is a DHCP client by default Alternatively check the connected gateway for the WAP6906 s curren...

Page 16: ...yed See Chapter 3 on page 22 for more information about the easy mode 2 3 Web Configuration Modes This refers to the configuration interface of the Web Configurator which has two modes Easy Mode The Web Configurator shows this mode by default Refer to Chapter 3 on page 22 for more information on the screens in this mode This shows how the WAP6906 s network is currently laid out Expert Mode Advance...

Page 17: ...ms For other operating systems go to Appendix C on page 108 2 4 1 Static IP Configuration in Microsoft Windows Follow these steps to change your computer s IP address in Windows 7 operating system 1 Click on the Network Icon located in the System Tray of your Task Bar After you have clicked the icon a small message window will appear select Open Network and Sharing Center Note You can also access ...

Page 18: ... Internet Protocol Version 4 TCP IPv4 item then click on the Properties button 5 Once you have accessed the Internet Protocol Version 4 TCP IPv4 properties click on the Use the following IP address radio button and type your new IP address Your computer must be in the same subnet in order to access this website address You must give it a fixed IP address in the range between 192 168 1 6 and 192 16...

Page 19: ...Obtain an IP address automatically radio button and click OK 2 4 2 Static IP Configuration in MAC OS X Follow these steps to change your computer s IP address in MAC OS X 10 11 operating system 1 Open your System Preferences then click on Network 2 Once the Network screen is open it is recommended you click on Location Edit Locations to create a new profile Use the button to add a new profile in t...

Page 20: ...on the Configure IPv4 scroll button and select Manually Then modify your IP Address your computer must be in the same subnet in order to access this website address You must give it a fixed IP address in the range between 192 168 1 8 and 192 168 1 254 Then type 255 255 255 0 as your subnet mask and click Apply to save your changes ...

Page 21: ...igured your WAP6906 you must remember to change your static IP back to obtaining it automatically to be able to access the Internet If you want to change the IP address to automatic default repeat step 1 then on Location select Automatic or a different profile you have configured ...

Page 22: ...sy Mode Network Map 3 1 1 What You Can Do You can do the following in this mode Use the Navigation Panel to opt out of the Easy mode Section 3 2 on page 22 Use the Network Map screen to check if your WAP6906 can ping the gateway and whether it is connected to the Internet Section 3 3 on page 23 Use the Status screen to view read only information about the WAP6906 including the WAN IP MAC address o...

Page 23: ...ing the gateway It becomes red when the ping initiating from the WAP6906 does not get a response from the gateway The same rule applies to the line connecting the gateway to the Internet You can also view the devices represented by icons indicating the kind of network device such as Android device iOS device or Windows OS connected to the WAP6906 including those connecting wirelessly Right click o...

Page 24: ...plays the time in minutes the WAP6906 s system has been working IP Address This shows the LAN port s IP address MAC Address This shows the MAC address of the WAP6906 s LAN port Software Version This is the firmware version Downlink Name SSID This shows a descriptive name used to identify the WAP6906 in the wireless LAN Downlink Encryption This shows the data encryption method the WAP6906 uses for ...

Page 25: ...4 1 Overview Click Expert Mode located in the Easy Mode s navigation panel 4 2 Web Configurator Layout in Expert Mode The Web Configurator in Expert Mode is divided into these parts Figure 9 Web Configurator Expert Mode A Title Bar B Navigation Panel C Main Window B A C ...

Page 26: ...exit the Web Configurator Click this icon to view copyright and a link for related product information Select a number of seconds or None from the drop down list box to refresh all screen statistics automatically at the end of every time interval or to not refresh the screen statistics Click this button to refresh the status screen statistics Click this icon to see the Status page The information ...

Page 27: ...s shows the LAN port s subnet mask Gateway IP This shows the LAN port s gateway IP address IPv6 Address This shows the LAN port s IPv6 address IPv6 Link Local Address This shows the LAN port s current IPv6 link local address IPv6 Gateway This shows the LAN port s gateway IPv6 address Wireless Network Information 5 GHz 2 4 GHz MAC Address This shows the MAC address of the WAP6906 s wireless interfa...

Page 28: ...on your WAP6906 MAC Filter Use this screen to configure the WAP6906 to block access to devices or block the devices from accessing the WAP6906 MBSS Use this screen to configure multiple BSSs on the WAP6906 AP Connection Station Use this screen to enter the SSID and configure the wireless security between the WAP6906 and the wireless network to which you want to connect AP List Use this screen to s...

Page 29: ...lnet allows you to access the WAP6906 s command line interface Restore Restore Use this screen to backup and restore the configuration or reset your WAP6906 to the factory defaults Restart Restart Use this screen to reboot the WAP6906 without turning the power off Table 7 Navigation Panel LINK TAB FUNCTION ...

Page 30: ...on to the Internet 5 3 Connecting to the WAP6906 s Wireless Network Using WPS This section gives you an example of how to set up wireless networks using WPS The following example uses the WAP6906 as the AP and a WPS enabled Android smartphone as the wireless client The following WPS methods for creating a secure connection are described in the tutorial Push Button Configuration PBC create a secure...

Page 31: ...Networking Wireless Network 2 4G or Wireless Network 5G WPS and press the Push Button Note Your WAP6906 has a WPS button located on its panel as well as a WPS button in its configuration utility Both buttons have exactly the same function you can use one or the other Note It doesn t matter which button is pressed first You must press the second button within two minutes of pressing the first one T...

Page 32: ...eless Network 2 4G or Wireless Network 5G WPS screen on the WAP6906 3 Click the WPS PIN button or button next to the PIN field on the WAP6906 s WPS screen within two minutes The WAP6906 authenticates the wireless client and sends the proper configuration settings to the wireless client This may take up to two minutes Then the wireless client is able to communicate with the WAP6906 securely The fol...

Page 33: ...y selecting an AP from a list of detected APs See Section 5 4 1 on page 34 This is the easier method Selecting an AP by Manually Entering Security Information create a secure wireless network by manually entering the AP s wireless security settings in the WAP6906 s interface See Section 5 4 2 on page 34 This is useful when the AP is hidden Authentication by PIN SECURITY INFO WITHIN 2 MINUTES Wirel...

Page 34: ...eless security is enabled on the selected AP and click Connect Check the connection status to see if your WAP6906 is successfully connected to the AP 5 4 2 Selecting an AP by Manually Entering Security Information This example shows you how to configure wireless security settings with the following parameters on your WAP6906 Follow the steps below to create a secure wireless network by manually en...

Page 35: ...1 Open the Networking AP Connection Station or Basic screen Type the SSID of the AP into the Wireless Name SSID field set the security settings and click Apply Check the connection status to see if your WAP6906 is successfully connected to the AP ...

Page 36: ...36 PART II Technical Reference ...

Page 37: ... screen Section 6 5 on page 41 to view the Multiple Basic Server Sets MBSS on the WAP6906 A MBSS allows you to use one access point to provide several BSSs simultaneously You can then assign varying security types to different SSIDs Wireless clients can use different SSIDs to associate with the same access point Use the Multicast Monitor screen Section 6 6 on page 43 to view the multicast group in...

Page 38: ...reless client for example your network or computer with a wireless network card has connected successfully to the AP or wireless router using the same SSID channel and security settings Table 8 Monitor Log LABEL DESCRIPTION This field is a sequential value and is not associated with a specific entry Time This field displays the time the log was recorded Message This field states the reason for the...

Page 39: ...Chapter 6 Monitor WAP6906 User s Guide 39 Figure 16 Monitor Wireless Monitor Downlink ...

Page 40: ...nts or the WAP6906 when the WAP6906 is connected to an AP AP MAC Address BSSID This shows the MAC Address of your WAP6906 or the AP to which the WAP6906 is connected Channel This shows the current channel the WAP6906 uses to associate with the wireless client or AP Association Status This shows whether the WAP6906 is connected to an AP Associated Devices Count This shows the number of devices conn...

Page 41: ... is associated with the WAP6906 VAP This shows the SSID name of the wireless network to which the WAP6906 is connecting RSSI dbm This shows the RSSI Received Signal Strength Indicator of the WAP6906 s wireless connection TX PHY Data Rate Mbps This shows the current data rate of the connected AP or client SNR This Signal to Noise Ratio SNR is the ratio between the received signal power and the rece...

Page 42: ...er the MBSS Summary table Association Table The table displays after you click the Detail button Access Point This shows the SSID name for each BSS RSSI dbm This shows the RSSI Received Signal Strength Indicator of the wireless connection Rx Bytes This shows the number of bytes that have been received by the connected client Tx Bytes This shows the number of bytes that have been transmitted by the...

Page 43: ...s IP packets to just a group of hosts on the network This screen shows a summary of the multicast group IP addresses Figure 19 Monitor Multicast Monitor The following table describes the labels in this screen Table 11 Monitor Multicast Monitor LABEL DESCRIPTION Multicast IP This field displays the multicast group IP address Interface This field displays the interface that belongs to the multicast ...

Page 44: ...ilding or floor of a building The LAN screens can help you configure the WAP6906 s IPv4 and IPv6 addresses on the LAN Figure 20 LAN Setup 7 2 What You Can Do Use the Networking screen Section 7 4 on page 45 to change the LAN IP address for your WAP6906 7 3 What You Need To Know The actual physical connection determines whether the WAP6906 ports are LAN or WAN ports There are two separate IP networ...

Page 45: ...e WAP6906 gets its IP address from the network s DHCP server for example your ISP or router Users connected to the WAP6906 can now access the network i e the Internet if the IP address is given by the ISP or a router with Internet access When you select this you cannot enter an IP address for your WAP6906 in the field below Select Static IP if you want to specify the IP address of your WAP6906 Or ...

Page 46: ...o configure a fixed IPv6 address for the WAP6906 WAN IPv6 Address Enter an IPv6 IP address that your ISP gave to you for the WAN interface Prefix Length Enter the address prefix length to specify how many most significant bits in an IPv6 address compose the network address IPv6 Gateway Enter the IP address of the next hop gateway The gateway is a router or switch on the same segment as your WAP690...

Page 47: ...network Figure 23 Example of a Wireless Network The wireless network is the part in the blue circle In this wireless network devices A and B are called wireless clients The wireless clients use the access point AP to interact with other devices such as the printer or with the Internet Your WAP6906 is the AP in the above example 8 2 What You Can Do Wireless screens vary according to the device mode...

Page 48: ...etwork uses a specific channel or frequency to send and receive information Every wireless client in the same wireless network must use security compatible with the AP Security stops unauthorized devices from using the wireless network It can also protect the information that is sent in the wireless network 8 3 1 Wireless Security Overview The following sections introduce different types of wirele...

Page 49: ...ithout having to configure security settings manually Depending on the devices in your network you can either press a button on the device itself or in its configuration utility or enter a PIN Personal Identification Number in the devices Then they connect and set up a secure network by themselves 8 3 5 WDS Wireless Distribution System or WDS security is used between bridged APs It is independent ...

Page 50: ...lect Auto and the WAP6906 selects a channel automatically Select Smart Channel Selection SCS and the WAP6906 decides to switch channels monitors several channels and chooses the one with higher capacity Current Channel This displays the channel the WAP6906 is currently using Encryption Select the data encryption method the WAP6906 uses Select WPA2 AES or WPA2 WPA mixed mode to add security on this...

Page 51: ...width you want to use for your wireless network Select whether the WAP6906 uses a wireless channel width of 20MHz or 40MHz A standard 20MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300 Mbps Beacon Interval This is the time lag between each of the beacons sent by the wireless network DTIM Period The Delivery Traffi...

Page 52: ...S connection is established Select Unconfigured to enable WPS but change the wireless security key after the WPS connection is established Select Disabled to turn off WPS WPS PBC Click the Push Button to perform wireless security information synchronization using the Push Button Configuration PBC Method WPS PIN Use this field to type the same PIN number generated in the wireless station s utility ...

Page 53: ...ON Interface Select the SSID for which you want to configure MAC filtering Policy Define the filter action for the list of specified MAC addresses Select None to deactivate the MAC filtering rule you configure below Select Allow to permit access to the WAP6906 MAC addresses not listed will be denied access to the WAP6906 Select Reject to block access to the WAP6906 MAC addresses not listed will be...

Page 54: ...x next to each Network Name to enable the BSS You can enable up to 4 simultaneous BSSs on your WAP6906 Broadcast SSID Click on the check box if you want your SSID to be broadcasted to users in the area Encryption Select the type of security to protect the information through the wireless network Pre Shared Key Type the password users need to connect to this BSS Apply Click Apply to save your chang...

Page 55: ...page 49 Use the AP List screen to scan the wireless networks in the WAP6906 s area Section 8 7 on page 52 You can also select an AP from the list and enter its WiFi password to connect the wireless network Use the WPS screen to quickly set up a wireless network with strong security between your WAP6906 and the AP without having to configure security settings manually Section 8 6 on page 51 9 3 Sta...

Page 56: ... Connection AP List Table 19 Networking AP Connection Station LABEL DESCRIPTION Network Name SSID Enter the name of the wireless network to which the WAP6906 is connecting Connection Status This shows whether the WAP6906 is already connected attempting to connect or not connected to a wireless network Encryption Select the data encryption method the wireless network uses Pre Shared Key Enter the p...

Page 57: ...ty This shows Yes if the WAP6906 needs a security password to connect to the AP It shows No if the WAP6906 does not need a password to connect AP This shows the name of the AP you click and try to connect Passphrase The Passphrase input box displays when the Security column is Yes for the selected SSID Enter the password for this wireless network in the Passphrase input box Connect The Connect but...

Page 58: ...onnection WAP6906 User s Guide 58 Apply Click Apply to save your changes back to the WAP6906 Cancel Click Cancel to get this screen information afresh Table 21 Networking AP Connection WPS continued LABEL DESCRIPTION ...

Page 59: ...Upgrade screen to update firmware Section 10 5 on page 61 Use the Telnet screen to enable or disable access to the WAP6906 using Telnet Section 10 6 on page 62 Use the Restore screen to back up and restore device configurations Section 10 7 on page 63 Use the Restart screen to reboot the WAP6906 without turning the power off Section 10 8 on page 65 10 3 Password Screen Use this screen to set the w...

Page 60: ...s Note that as you type a password the screen displays an asterisk for each character you type Retype to Confirm Type the new password again in this field Apply Click Apply to save your changes back to the WAP6906 Cancel Click Cancel to reload the previous configuration for this screen Table 23 Maintenance Time LABEL DESCRIPTION Manual Select this radio button to enter the time and date manually I...

Page 61: ...arch Each time zone in the United States starts using Daylight Saving Time at 2 A M local time So in the United States you would select Second Sunday March and select 2 in the at field Daylight Saving Time starts in the European Union on the last Sunday of March All of the time zones in the European Union start using Daylight Saving Time at the same moment 1 A M GMT or UTC So in the European Union...

Page 62: ... restarts log in again and check your new firmware version in the Status screen 10 6 Telnet Screen The WAP6906 can be managed either locally or remotely via a Telnet connection You can use Telnet to access the WAP6906 s command line interface Click Maintenance Telnet Select Enable to allow users to access the WAP6906 s CLI using Telnet and click Apply Table 24 Maintenance Firmware Upgrade LABEL DE...

Page 63: ... 7 1 Backup Configuration Backup configuration allows you to back up save the WAP6906 s current configuration to a file on your computer Once your WAP6906 is configured and functioning properly it is highly recommended that you back up your configuration file before making configuration changes The backup configuration file will be useful in case you need to return to your previous settings Click ...

Page 64: ...906 IP address 192 168 1 2 Refer to your operating system s help files for details on how to set up your computer s IP address 10 7 3 Back to Factory Defaults Click the Reset button to clear all user entered configuration information and return the WAP6906 to its factory defaults The following warning screen appears Figure 39 Reset Warning Message You can also press the RESET button on the rear pa...

Page 65: ... Screen System restart allows you to reboot the WAP6906 without turning the power off Click Maintenance Restart The following screen displays Click Reboot to have the WAP6906 restart This does not affect the WAP6906 s configuration Figure 40 Maintenance Restart ...

Page 66: ...an appropriate power source Make sure the power source is turned on 2 Disconnect and re connect the WAP6906 3 Remove the WAP6906 from the outlet Then connect an electrical device that you know works into the same power outlet This checks the status of the power outlet 4 If the problem continues contact the vendor One of the LEDs does not behave as expected 1 Make sure you understand the normal beh...

Page 67: ...n page 11 3 Make sure your Internet browser does not block pop up windows and has JavaScript and Java enabled 4 Reset the device to its factory defaults and try to access the WAP6906 with the default address 5 If the problem continues contact the network administrator or vendor or try one of the advanced suggestions Advanced Suggestions If your computer is connected wirelessly use a computer that ...

Page 68: ...onnections and make sure the LEDs are behaving as expected See the Quick Start Guide and Section 1 4 on page 11 2 Reboot the WAP6906 3 Try to connect directly to the gateway If you can access the Internet check that the WAP6906 has connected to the gateway by checking the Status screen See Section 3 4 on page 24 4 If the problem continues contact the network administrator or vendor The Internet co...

Page 69: ...log in to the Web Configurator The password is in the device label If the WAP6906 does not restart automatically disconnect and reconnect the WAP6906 Then follow the directions above again 11 5 Wireless Problems I cannot access the WAP6906 or ping any computer from the WLAN 1 Make sure the WAP6906 is working and the wireless LAN is enabled on the WAP6906 2 Make sure the wireless adapter on the wir...

Page 70: ...ndent Basic Service Set IBSS The following diagram shows an example of notebook computers using wireless adapters to form an ad hoc wireless LAN Figure 41 Peer to Peer Communication in an Ad hoc Network BSS A Basic Service Set BSS exists when all communications between wireless clients or between a wireless client and a wired network client go through one access point AP Intra BSS traffic is traff...

Page 71: ...d connection between APs is called a Distribution System DS This type of wireless LAN topology is called an Infrastructure WLAN The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood An ESSID ESS IDentification uniquely identifies each ESS All access points and their associated wireless clients within the same...

Page 72: ...lly overlap however To avoid interference due to overlap your AP should be on a channel at least five channels away from a channel that an adjacent AP is using For example if your region has 11 channels and an adjacent AP is using channel 1 then you need to select a channel between 6 or 11 RTS CTS A hidden node occurs when two stations are within range of the same access point but are not within r...

Page 73: ... the time frame for the requested transmission Stations can send frames smaller than the specified RTS CTS directly to the AP without the RTS Request To Send CTS Clear to Send handshake You should only configure RTS CTS if the possibility of hidden nodes exists on your network and the cost of resending large frames is more than the extra network overhead involved in the RTS Request To Send CTS Cle...

Page 74: ...ly use short preamble when all wireless devices on the network support it otherwise the WAP6906 uses long preamble Note The wireless devices MUST use the same preamble mode in order to communicate IEEE 802 11g Wireless LAN IEEE 802 11g is fully compatible with the IEEE 802 11b standard This means an IEEE 802 11b adapter can interface directly with an IEEE 802 11g access point and vice versa at 11 ...

Page 75: ... for EAP Extensible Authentication Protocol RFC 2486 that allows additional authentication methods to be deployed with no changes to the access point or the wireless clients RADIUS RADIUS is based on a client server model that supports authentication authorization and accounting The access point is the client and the server is the RADIUS server The RADIUS server handles the following tasks Authent...

Page 76: ...tect the network from unauthorized access Types of EAP Authentication This section discusses some popular authentication types EAP MD5 EAP TLS EAP TTLS PEAP and LEAP Your wireless LAN device may not support all authentication types EAP Extensible Authentication Protocol is an authentication protocol that runs on top of the IEEE 802 1x transport mechanism in order to support multiple types of user ...

Page 77: ...uthentications to establish a secure connection Client authentication is then done by sending username and password through the secure connection thus client identity is protected For client authentication EAP TTLS supports EAP methods and legacy authentication methods such as PAP CHAP MS CHAP and MS CHAP v2 PEAP Protected EAP Like EAP TTLS server side certificate authentication is used to establi...

Page 78: ...ral Key Integrity Protocol TKIP Message Integrity Check MIC and IEEE 802 1x WPA2 also uses TKIP when required for compatibility reasons but offers stronger encryption than TKIP with Advanced Encryption Standard AES in the Counter mode with Cipher block chaining Message authentication code Protocol CCMP TKIP uses 128 bit keys that are dynamically generated and distributed by the authentication serv...

Page 79: ...base WPA2 reduces the number of key exchange messages from six to four CCMP 4 way handshake and shortens the time required to connect to a network Other WPA2 authentication features that are different from WPA include key caching and pre authentication These two features are optional and may not be supported in all wireless devices Key caching allows a wireless client to store the PMK it derived t...

Page 80: ...xample A WPA 2 PSK application looks as follows 1 First enter identical passwords into the AP and all wireless clients The Pre Shared Key PSK must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters including spaces and symbols 2 The AP checks each wireless client s password and allows it to join the network only if the password matches 3 The AP and wireless clients generate ...

Page 81: ...propagates the signal through the air The antenna also operates in reverse by capturing RF signals from the air Positioning the antennas properly increases the range and coverage area of a wireless LAN Table 29 Wireless Security Relational Matrix AUTHENTICATION METHOD KEY MANAGEMENT PROTOCOL ENCRYPTION METHOD ENTER MANUAL KEY IEEE 802 1X Open None No Disable Enable without Dynamic WEP Key Open WEP...

Page 82: ... used for wireless LAN applications Omni directional antennas send the RF signal out in all directions on a horizontal plane The coverage area is torus shaped like a donut which makes these antennas ideal for a room environment With a wide coverage area it is possible to make circular overlapping coverage areas with multiple access points Directional antennas concentrate the RF signal in a beam li...

Page 83: ...rmation Please have the following information ready when you contact an office Required Information Product model and serial number Warranty Information Date that you received your device Brief description of the problem and the steps you took to solve it Corporate Headquarters Worldwide Taiwan Zyxel Communications Corporation http www zyxel com Asia China Zyxel Communications Shanghai Corp Zyxel ...

Page 84: ...pk Philippines Zyxel Philippines http www zyxel com ph Singapore Zyxel Singapore Pte Ltd http www zyxel com sg Taiwan Zyxel Communications Corporation http www zyxel com tw zh Thailand Zyxel Thailand Co Ltd http www zyxel co th Vietnam Zyxel Communications Corporation Vietnam Office http www zyxel com vn vi Europe Austria Zyxel Deutschland GmbH http www zyxel de Belarus Zyxel BY http www zyxel by ...

Page 85: ...ch Republic Zyxel Communications Czech s r o http www zyxel cz Denmark Zyxel Communications A S http www zyxel dk Estonia Zyxel Estonia http www zyxel com ee et Finland Zyxel Communications http www zyxel fi France Zyxel France http www zyxel fr Germany Zyxel Deutschland GmbH http www zyxel de Hungary Zyxel Hungary SEE http www zyxel hu Italy Zyxel Communications Italy http www zyxel it ...

Page 86: ...x http www zyxel nl Norway Zyxel Communications http www zyxel no Poland Zyxel Communications Poland http www zyxel pl Romania Zyxel Romania http www zyxel com ro ro Russia Zyxel Russia http www zyxel ru Slovakia Zyxel Communications Czech s r o organizacna zlozka http www zyxel sk Spain Zyxel Communications ES Ltd http www zyxel es Sweden Zyxel Communications http www zyxel se Switzerland Studeru...

Page 87: ...ne http www ua zyxel com Latin America Argentina Zyxel Communication Corporation http www zyxel com ec es Brazil Zyxel Communications Brasil Ltda https www zyxel com br pt Ecuador Zyxel Communication Corporation http www zyxel com ec es Middle East Israel Zyxel Communication Corporation http il zyxel com homepage shtml Middle East Zyxel Communication Corporation http www zyxel com me en ...

Page 88: ...er s Guide 88 North America USA Zyxel Communications Inc North America Headquarters http www zyxel com us en Oceania Australia Zyxel Communications Corporation http www zyxel com au en Africa South Africa Nology Pty Ltd http www zyxel co za ...

Page 89: ... device This product has been tested and complies with the specifications for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This device generates uses and can radiate radio frequency energy and if not installed and used according to the instructions may cause harmfu...

Page 90: ...Hz the following attention must be paid For devices with detachable antenna s the maximum antenna gain permitted for devices in the bands 5250 5350 MHz and 5470 5725 MHz shall be such that the equipment still complies with the e i r p limit Le présent appareil est conforme aux CNR d Industrie Canada applicables aux appareils radio exempts de licence L exploitation est autorisée aux deux conditions...

Page 91: ...t et votre corps EUROPEAN UNION The following information applies if you use the product within the European Union Declaration of Conformity with Regard to EU Directive 2014 53 EU Radio Equipment Directive RED Compliance information for 2 4GHz and or 5GHz wireless products relevant to the EU and other Countries following the EU Directive 2014 53 EU RED And this product may be used in all EU countr...

Page 92: ...autres dispositions pertinentes de la directive 2014 53 UE Hrvatski Croatian Zyxel ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 2014 53 UE Íslenska Icelandic Hér með lýsir Zyxel því yfir að þessi búnaður er í samræmi við grunnkröfur og önnur viðeigandi ákvæði tilskipunar 2014 53 UE Italiano Italian Con la presente Zyxel dichiara che questo attrezzatura è conforme ai requisiti ...

Page 93: ... where anyone can walk on the power adaptor or cord Please use the provided or designated connection cables power cables adaptors Connect it to the right supply voltage for example 110V AC in North America or 230V AC in Europe If the power adaptor or cord is damaged it might cause electrocution Remove it from the device and the power source repairing the power adapter or cord is prohibited Contact...

Page 94: ...erie gemäß den örtlichen Bestimmungen getrennt vom Hausmüll entsorgt werden muss Wenden Sie sich an eine Recyclingstation wenn dieses Produkt das Ende seiner Lebensdauer erreicht hat Zum Zeitpunkt der Entsorgung wird die getrennte Sammlung von Produkt und oder seiner Batterie dazu beitragen natürliche Ressourcen zu sparen und die Umwelt und die menschliche Gesundheit zu schützen El símbolo de abaj...

Page 95: ...mentation and certifications Zyxel Limited Warranty Zyxel warrants to the original end user purchaser that this product is free from any defects in material or workmanship for a specific period the Warranty Period from the date of purchase The Warranty Period varies by region Check with your vendor and or the authorized Zyxel local distributor for details about the Warranty Period of this product ...

Page 96: ...tial damages of any kind to the purchaser To obtain the services of this warranty contact your vendor You may also refer to the warranty policy for the region in which you bought the device at http www zyxel com web support_warranty_info php Registration Register your product online to receive e mail notices of firmware upgrades and information at www zyxel com for global products or at www us zyx...

Page 97: ... CA certifications 93 viewing 95 channel 48 72 interference 72 configuration backup 63 reset factory defaults 64 restore 64 connection AP 33 contact information 83 copyright 89 CTS Clear to Send 73 customer support 83 D Daylight saving 61 disclaimer 89 dynamic WEP key exchange 77 E EAP Authentication 76 encryption 49 78 key 49 ESS 71 Extended Service Set See ESS 71 F factory defaults restore 64 fi...

Page 98: ...ring 52 MAC filter 52 MAC OS X 19 managing the device good habits 11 Media access control 52 Message Integrity Check MIC 78 Microsoft Windows 17 N Navigation Panel 27 navigation panel 27 O overview 10 P Pairwise Master Key PMK 78 80 PIN configuration 30 32 preamble mode 74 PSK 79 push button configuration 30 31 Q Quality of Service QoS 51 R RADIUS 75 message types 76 messages 76 shared secret key ...

Page 99: ...idelines 47 55 channel 48 encryption 49 example 47 MAC address filter 48 overview 47 security 48 SSID 48 Wireless security 48 overview 48 type 48 wireless security 74 troubleshooting 69 wireless tutorial 30 WLAN interference 72 security parameters 81 WPA 78 key caching 79 pre authentication 79 user authentication 79 vs WPA PSK 79 wireless client supplicant 79 with RADIUS application example 79 WPA...

Reviews: