manualshive.com logo in svg

ZyXEL Communications NWA5121-N, Руководство пользователя

Поделиться
Скачать
ZyXEL Communications NWA5121-N Скачать руководство пользователя страница 193

 Appendix A Importing Certificates

NWA5000 / WAC6500 Series User’s Guide

193

12

The next time you start Internet Explorer and go to a ZyXEL Web Configurator page, a sealed 
padlock icon appears in the address bar. Click it to view the page’s 

Website Identification

 

information.

Installing a Stand-Alone Certificate File in Internet Explorer

Rather than browsing to a ZyXEL Web Configurator and installing a public key certificate when 
prompted, you can install a stand-alone certificate file if one has been issued to you.

1

Double-click the public key certificate file.

2

In the security warning dialog box, click 

Open

.

3

Refer to steps 4-12 in the Internet Explorer procedure beginning on 

page 188

 to complete the 

installation process.

Содержание NWA5121-N

Страница 1: ...A5123 NI NWA5301 NJ WAC6502D E WAC6502D S WAC6503D S WAC6553D E 802 11 a b g n ac Unified Access Point Version 4 20 Edition 1 10 2014 Copyright 2014 ZyXEL Communications Corporation User s Guide Defau...

Страница 2: ...em Every effort has been made to ensure that the information in this manual is accurate Related Documentation Quick Start Guide The Quick Start Guide shows how to connect the NWA WAC and access the We...

Страница 3: ...roduction 11 The Web Configurator 27 Technical Reference 38 Dashboard 39 Monitor 44 Network 57 Wireless 65 User 77 AP Profile 84 MON Profile 102 WDS Profile 106 Certificates 108 System 125 Log and Rep...

Страница 4: ...r Managing the NWA WAC 17 1 4 Hardware Connections 17 1 5 NWA5301 NJ Hardware 18 1 5 1 110 Punch Down Block 18 1 5 2 Phone Port 19 1 5 3 Console Port 19 1 6 LEDs 20 1 6 1 WAC6502D E WAC6502D S WAC6503...

Страница 5: ...atus Graph 46 4 4 Radio List 47 4 4 1 AP Mode Radio Information 48 4 5 Station List 50 4 6 WDS Link Info 51 4 7 Detected Device 52 4 8 View Log 53 Chapter 5 Network 57 5 1 Overview 57 5 1 1 Management...

Страница 6: ...What You Need To Know 84 8 2 Radio 85 8 2 1 Add Edit Radio Profile 86 8 3 SSID 89 8 3 1 SSID List 90 8 3 2 Add Edit SSID Profile 90 8 4 Security List 92 8 4 1 Add Edit Security Profile 93 8 5 MAC Filt...

Страница 7: ...24 Chapter 12 System 125 12 1 Overview 125 12 1 1 What You Can Do in this Chapter 125 12 2 Host Name 125 12 3 Date and Time 126 12 3 1 Pre defined NTP Time Servers List 128 12 3 2 Time Server Synchron...

Страница 8: ...erview 162 14 1 1 What You Can Do in this Chapter 162 14 1 2 What you Need to Know 162 14 2 Configuration File 163 14 2 1 Example of Configuration File Download Using FTP 167 14 3 Firmware Package 168...

Страница 9: ...Overview 180 19 2 Power Hardware Connections and LED 180 19 3 NWA WAC Access and Login 181 19 4 Internet Access 182 19 5 Wireless Connections 184 19 6 Resetting the NWA WAC 187 19 7 Getting More Trou...

Страница 10: ...10 PART I User s Guide...

Страница 11: ...WPA2 MIX WPA2 PSK WPA2 PSK MIX None WEP WPA2 WPA2 MIX WPA2 PSK WPA2 PSK MIX Number of SSID Profiles 32 32 32 32 Number of Wireless Radios 1 1 2 1 Monitor Mode Rogue APs Detection Yes Yes Yes No Layer...

Страница 12: ...and maintenance See the Quick Start Guide for how to make hardware connections 1 1 1 Management Mode The NWA WAC is a unified AP and can work either in standalone AP mode or in managed AP mode If the...

Страница 13: ...ual SSID profile You can configure multiple SSID profiles and have all of them active at any one time You can assign different wireless and security settings to each SSID profile This allows you to co...

Страница 14: ...s means you can configure two different wireless networks to operate simultaneously Note A different channel should be configured for each WLAN interface to reduce the effects of radio interference Yo...

Страница 15: ...o allow repeaters X and Y to extend the range of its wireless network at the same time In the figure below both clients A B and C can access the wired network through the root AP Figure 3 Root AP Appl...

Страница 16: ...range and also establish wireless connections with wireless clients Using Repeater mode your NWA WAC can extend the range of the WLAN In the figure below the NWA WAC in Repeater mode Z has a wireless...

Страница 17: ...Protocol SNMP The NWA WAC can be monitored by an SNMP manager See the SNMP chapter in this User s Guide 1 3 Good Habits for Managing the NWA WAC Do the following things regularly to make the NWA WAC m...

Страница 18: ...An 8 pin Ethernet cable has four pairs of color coded wires 1 Cut out one and a half inches of the jacket from the Ethernet cable to expose the wires 2 Untwist the wire pairs no more than one inch 3...

Страница 19: ...he NWA to forward voice traffic to from the telephone switchboard that is connected to the RJ 45 PHONE port on the back of the NWA The NWA does not support VoIP Voice over Internet Protocol and the PH...

Страница 20: ...and pin assignment for the console cable 1 6 LEDs The LEDs of your WAC6500 and NWA5301 can be controlled by using the Suppression feature such that the LEDs stay lit ON or OFF after the device is read...

Страница 21: ...00 WAC6500 Series User s Guide 21 1 6 1 WAC6502D E WAC6502D S WAC6503D S and WAC6553D E The LEDs will stay ON when the WAC is ready You can change this setting in the Maintenance LEDs Suppression scre...

Страница 22: ...Blinking blink for 2 times Off for 3s The wireless module of the WAC is disabled or failed Green Off Management Green On The WAC AP is managed by a controller Blinking The WAC AP is searching discove...

Страница 23: ...5301 NJ Side Panel LAN Amber Green On Amber The port is operating as a 100 Mbps connection Green The port is operating as a Gigabit connection 1000 Mbps Blinking The LAN port is sending receiving data...

Страница 24: ...Off Amber Fast Blinking On for 50ms times Off for 50ms The NWA is undergoing firmware upgrade Green Off Amber Slow Blinking blink for 3 times Off for 3s Uplink is disconnected Green Off Amber Slow Bli...

Страница 25: ...he NWA s wireless interface is activated Green On Amber Off The NWA s receiving sending wireless traffic Green Blink Amber Slow Blinking blink for 3 times Off for 3s The NWA is discovering an AP contr...

Страница 26: ...re and starts the system processes Rebooting the NWA WAC A warm start without powering down and powering up again occurs when you use the Reboot button in the Reboot screen or when you use the reboot...

Страница 27: ...r versions or Google Chrome 10 0 and later versions Allow pop up windows Enable JavaScript enabled by default Enable Java permissions enabled by default Enable cookies The recommended screen resolutio...

Страница 28: ...ars every time you log in using the default user name and default password If you change the password for the default user account this screen does not appear anymore 2 3 Navigating the Web Configurat...

Страница 29: ...t Click About to display basic information about the NWA WAC Figure 10 About Table 10 Title Bar Web Configurator Icons LABEL DESCRIPTION Logout Click this to log out of the Web Configurator Help Click...

Страница 30: ...bject Reference to open the Object Reference screen Select the type of object and the individual object and click Refresh to show which configuration settings reference the object Table 11 About LABEL...

Страница 31: ...ect s name to display the object s configuration screen in the main window This field is a sequential value and it is not associated with any entry Service This is the type of setting that references...

Страница 32: ...onfigure NWA WAC features Click the arrow in the middle of the right edge of the navigation panel to hide the navigation panel menus or drag it to resize them The following sections introduce the NWA...

Страница 33: ...oller settings Wireless AP Management WLAN Setting Edit wireless AP information remove APs and reboot them MON Mode Rogue Friendly AP List Configure how the NWA WAC monitors for rogue APs Load Balanci...

Страница 34: ...ces Log Report Email Daily Report Configure where and how to send daily reports and what reports to send Log Setting Configure the system log e mail logs and remote syslog servers Table 15 Maintenance...

Страница 35: ...Click a column heading to sort the table s entries according to that column s criteria 2 Click the down arrow next to a column heading for more options about how to display the entries The options av...

Страница 36: ...to the column s title when you drag the column to a valid new location 5 Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries dis...

Страница 37: ...tures where the NWA WAC applies the table s entries in order like the firewall for example you can select an entry and click Add to create a new entry after the selected entry Edit Double click an ent...

Страница 38: ...38 PART II Technical Reference...

Страница 39: ...urce usage and interface status You can also display other status screens for more information 3 2 Dashboard This screen is the first thing you see when you log into the NWA WAC It also appears every...

Страница 40: ...cent CPU usage Memory Usage This field displays what percentage of the NWA WAC s RAM is currently being used Hover your cursor over this field to display the Show Memory Usage icon that takes you to a...

Страница 41: ...startup config conf configuration file and fell back to the lastgood conf configuration file Fallback to system default configuration The NWA WAC was unable to apply the lastgood conf configuration f...

Страница 42: ...est to a DHCP server WLAN Interface Status Summary This displays status information for the WLAN interface Status This displays whether or not the WLAN interface is activated MAC Address This displays...

Страница 43: ...Enter how often you want this window to be automatically updated Refresh Now Click this to update the information in the window right away Table 19 Dashboard CPU Usage continued LABEL DESCRIPTION Tabl...

Страница 44: ...e NWA WAC s WDS Wireless Distribution System connections The Detected Device screen Section 4 7 on page 52 displays information about suspected rogue APs The View Log screen Section 4 8 on page 53 dis...

Страница 45: ...Name This field displays the name of the interface Status This field displays the current status of the interface Inactive The Ethernet interface is disabled Down The Ethernet interface is enabled but...

Страница 46: ...a line graph Status This field displays the current status of the physical port Down The physical port is not connected Speed Duplex The physical port is connected This field displays the port speed...

Страница 47: ...is window to be automatically updated Refresh Now Click this to update the information in the window right away Switch to Grid View Click this to display the port statistics as a table bps The y axis...

Страница 48: ...WAC Otherwise it shows when load balancing is disabled or the radio is in monitor mode MAC Address This displays the MAC address of the radio Radio This indicates the radio number on the NWA WAC to wh...

Страница 49: ...Chapter 4 Monitor NWA5000 WAC6500 Series User s Guide 49 Figure 23 Monitor Wireless AP Information Radio List More Information...

Страница 50: ...o eight maximum BSSID This displays a BSSID associated with this radio The BSSID is tied to the SSID Security Mode This displays the security mode in which the SSID is operating VLAN This displays the...

Страница 51: ...number on the NWA WAC to which the station is connected SSID Name This indicates the name of the wireless network to which the station is connected A single AP can have multiple SSIDs or networks Secu...

Страница 52: ...hen the NWA WAC is in repeater mode and connected to a root AP and other repeater s both the uplink and downlink information would be displayed This is the index number of the root AP or repeater in t...

Страница 53: ...ected AP as a friendly AP For more on managing friendly APs see the Configuration Wireless MON Mode screen Section 6 3 on page 69 This is the detected device s index number in this list Status This in...

Страница 54: ...messages new log messages automatically overwrite existing log messages starting with the oldest existing log message first Events that generate an alert as well as a log message display in red Regula...

Страница 55: ...lter Select a service protocol whose log messages you would like to see Keyword This displays when you show the filter Type a keyword to look for in the Message Source Destination and Note fields If a...

Страница 56: ...Chapter 4 Monitor NWA5000 WAC6500 Series User s Guide 56 The Web Configurator saves the filter settings if you leave the View Log screen and return to it later...

Страница 57: ...2 default but if the NWA WAC is assigned an IP address by a DHCP server the default 192 168 1 2 will not be used The gateway and the NWA WAC must belong in the same IP subnet to be able to communicat...

Страница 58: ...s Accept mode it automatically adds the AP to its Managed Access Points list and provides the managed AP with default configuration information as well as securely transmitting the DTLS pre shared key...

Страница 59: ...following figure Figure 30 CAPWAP and DHCP Option 138 Notes on CAPWAP This section lists some additional features of ZyXEL s implementation of the CAPWAP protocol When the AP controller uses its inter...

Страница 60: ...et the IP address subnet mask and gateway address from a DHCP server Use Fixed IP Address Select this if you want to specify the IP address subnet mask and gateway manually IP Address Enter the IP add...

Страница 61: ...going gateway using colon hexadecimal notation Metric Enter the priority of the gateway if any on the LAN interface The NWA WAC decides which gateway to use based on this priority The lower the number...

Страница 62: ...l broadcast packets go to each and every individual port With VLAN all broadcasts are confined to a specific broadcast domain IEEE 802 1Q Tag The IEEE 802 1Q standard defines an explicit VLAN tag in t...

Страница 63: ...lick this to create a new entry For features where the entry s position in the numbered list is important features where the NWA WAC applies the table s entries in order like the SSID for example you...

Страница 64: ...get the AP controller s IP address Manual Select this option and enter the IP address of the AP controller manually This is necessary when the AP Controller is not in the same subnet and you want it...

Страница 65: ...less clients use the access point AP to interact with other devices such as the printer or with the Internet Your NWA WAC is the AP 6 1 1 What You Can Do in this Chapter The AP Management screen Secti...

Страница 66: ...P to automatically select the radio channel upon which it broadcasts by scanning the area around it and determining what channels are currently being used by other devices Load Balancing Wireless Wire...

Страница 67: ...Figure 36 Configuration Wireless AP Management Each field is described in the following table Table 32 Configuration Wireless AP Management LABEL DESCRIPTION Radio 1 Setting Radio 1 Activate Select t...

Страница 68: ...io uses to connect to a root AP or repeater Uplink Selection Mode This field is available only when the radio is in Repeater mode Select AUTO to have the NWA WAC automatically use the settings in the...

Страница 69: ...ofile to radio 2 Otherwise the second radio will not be working Radio 2 WDS Profile This field is available only when the radio is in Root AP or Repeater mode Select the WDS profile the radio uses to...

Страница 70: ...ndly ap To change the AP s role click the Edit button MAC Address This field indicates the AP s radio MAC address Description This field displays the AP s description You can modify this by clicking t...

Страница 71: ...Wireless Load Balancing to access this screen Figure 39 Configuration Wireless Load Balancing Table 34 Configuration Wireless MON Mode Add Edit Rogue Friendly AP List LABEL DESCRIPTION MAC Enter the M...

Страница 72: ...association request and authentication request packets from any new station that attempts to make a connection This allows the station to automatically attempt to connect to another less burdened AP...

Страница 73: ...dth to spare Figure 40 Delaying a Connection The second response your AP can take is to kick the connections that are pushing it over its balanced bandwidth allotment Figure 41 Kicking a Connection Co...

Страница 74: ...configuration options and manually change the channel to one that no other AP is using or at least a channel that has a lower level of interference in order to give the connected stations a minimum de...

Страница 75: ...her and the three so called safe channels 1 6 and 11 that interference becomes inevitable the severity of it is dependent upon other factors proximity to the affected AP signal strength activity and s...

Страница 76: ...connections to the AP based on maximum bandwidth available If you are uncertain as to the exact number of wireless connections you will have then choose this option By setting a maximum bandwidth cap...

Страница 77: ...is chapter User Account A user account defines the privileges of a user logged into the NWA WAC User accounts are used in controlling access to configuration and services in the NWA WAC User Types The...

Страница 78: ...ect it and click Edit to open a screen where you can modify the entry s settings Remove To remove an entry select it and click Remove The NWA WAC confirms you want to remove it before doing so Object...

Страница 79: ...u enter a user bob but use BOB when connecting via CIFS or FTP it will use the account settings used for BOB not bob User names have to be different than user group names Here are the reserved user na...

Страница 80: ...d to make sure you have entered it correctly Description Enter the description of each user if any You can use up to 60 printable ASCII characters Default descriptions are provided Authentication Time...

Страница 81: ...uble click an entry or select it and click Edit to open a screen where you can modify the entry s settings This field is a sequential value and it is not associated with a specific entry User Type The...

Страница 82: ...t on the number of simultaneous logins by admin users If you do not select this admin users can login as many times as they want at the same time using the same or different IP addresses Maximum numbe...

Страница 83: ...ke the number of minutes unlimited Admin users renew the session every time the main screen refreshes in the Web Configurator Access users can renew the session by clicking the Renew button on their s...

Страница 84: ...single AP can broadcast up to 8 SSIDs You can have a maximum of 32 SSID profiles on the NWA WAC Security This profile type defines the security settings used by a single SSID It controls the encrypti...

Страница 85: ...E 802 1x standard outlines enhanced security methods for both the authentication of wireless stations and encryption key management Authentication is done using an external RADIUS server 8 2 Radio Thi...

Страница 86: ...ry select it and click Inactivate Object Reference Click this to view which other objects are linked to the selected radio profile This field is a sequential value and it is not associated with a spec...

Страница 87: ...nt WLAN devices to associate with the NWA WAC The transmission rate of your NWA WAC might be reduced ac allows IEEE 802 11ac compliant WLAN devices to associate with the WAC Channel Width Select the c...

Страница 88: ...channels the NWA WAC switches between for 5 GHz operation Select Auto to have the NWA WAC automatically select the best channel Advanced Settings Guard Interval Set the guard interval for this radio p...

Страница 89: ...than the specified threshold 20 dBm is the strongest signal you can require and 76 is the weakest Disassociate Station Threshold Set a minimum kick off signal strength When a wireless client s signal...

Страница 90: ...SSID profile from the list and click the Edit button Table 44 Configuration Object AP Profile SSID List LABEL DESCRIPTION Add Click this to add a new SSID profile Edit Click this to edit the selected...

Страница 91: ...can use the Create new Object menu to create one Note It is highly recommended that you create security profiles for all of your SSIDs to enhance your network security MAC Filtering Profile Select a M...

Страница 92: ...ties like video conferencing WMM_BEST_EFFORT All wireless traffic to the SSID is tagged as best effort meaning the data travels the best route it can without displacing higher priority traffic This is...

Страница 93: ...ecurity Mode selected Only the default screen is displayed here Table 46 Configuration Object AP Profile SSID Security List LABEL DESCRIPTION Add Click this to add a new security profile Edit Click th...

Страница 94: ...n this screen Table 47 SSID Security Profile Add Edit Security Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric characters for the profile name This name is only visible in the Web C...

Страница 95: ...the NWA WAC The key must be the same on the external accounting server and your NWA WAC The key is not sent over the network 802 1X Select this to enable 802 1x secure authentication ReAuthenticatio n...

Страница 96: ...ter the interval in seconds that a client can be idle before authentication is discontinued Group Key Update Timer Enter the interval in seconds at which the AP updates the group WPA2 encryption key M...

Страница 97: ...clude a maximum of 512 MAC addresses Table 48 Configuration Object AP Profile SSID MAC Filter List LABEL DESCRIPTION Add Click this to add a new MAC filtering profile Edit Click this to edit the selec...

Страница 98: ...only for management purposes Spaces and underscores are allowed Filter Action Select allow to permit the wireless client with the MAC addresses in this profile to connect to the network through the a...

Страница 99: ...sociated with the same AP Intra BSS traffic allows wireless clients associated with the same AP to communicate with each other This screen allows you to specify devices you want the users on your wire...

Страница 100: ...ation profile Table 50 Configuration Object AP Profile SSID Layer 2 Isolation List continued LABEL DESCRIPTION Table 51 SSID MAC Filter List Add Edit Layer 2 Isolation Profile LABEL DESCRIPTION Profil...

Страница 101: ...Series User s Guide 101 OK Click OK to save your changes back to the NWA WAC Cancel Click Cancel to exit this screen without saving your changes Table 51 SSID MAC Filter List Add Edit Layer 2 Isolatio...

Страница 102: ...Profile screen Section 9 2 on page 102 creates preset monitor mode configurations that can be used by the NWA WAC 9 2 MON Profile This screen allows you to create monitor mode configurations that can...

Страница 103: ...Activate To turn on an entry select it and click Activate Inactivate To turn off an entry select it and click Inactivate Object Reference Click this to view which other objects are linked to the selec...

Страница 104: ...profile Channel dwell time Enter the interval in milliseconds before the NWA WAC switches to another channel for monitoring Scan Channel Mode Select auto to have the NWA WAC switch to the next sequent...

Страница 105: ...attacker X running readily available encryption cracking software In this example the attacker now has access to the company network including sensitive data stored on the file server C Friendly APs I...

Страница 106: ...create WDS profiles that can be used by the APs To access this screen click Configuration Object WDS Profile Figure 64 Configuration Object WDS Profile The following table describes the labels in this...

Страница 107: ...Table 55 Configuration Object WDS Profile Add Edit WDS Profile LABEL DESCRIPTION Profile Name Enter up to 31 alphanumeric characters for the profile name WDS SSID Enter the SSID with which you want t...

Страница 108: ...penly available The other key is private and must be kept secure These keys work like a handwritten signature in fact certificates are often referred to as digital signatures Only you can write your s...

Страница 109: ...Certificates Certificates offer the following benefits The NWA WAC only has to store the certificates of the certification authorities that you decide to trust no matter how many devices you need to...

Страница 110: ...WAC you should verify that you have the correct certificate You can do this using the certificate s fingerprint A certificate s fingerprint is a message digest calculated using the MD5 or SHA1 algori...

Страница 111: ...ur certificates unless you specifically delete them Uploading a new firmware or default configuration file does not delete your certificates To remove an entry select it and click Remove The NWA WAC c...

Страница 112: ...ique subject information Issuer This field displays identifying information about the certificate s issuing certification authority such as a common name organizational unit or department organization...

Страница 113: ...Chapter 11 Certificates NWA5000 WAC6500 Series User s Guide 113 Figure 67 Configuration Object Certificate My Certificates Add...

Страница 114: ...icate owner belongs You can use up to 31 characters You can use alphanumeric characters the hyphen and the underscore Town City Identify the town or city where the certificate owner is located You can...

Страница 115: ...ocol CMP is a TCP based enrollment protocol that was developed by the Public Key Infrastructure X 509 working group of the Internet Engineering Task Force IETF and is specified in RFC 2510 CA Server A...

Страница 116: ...cates Click Configuration Object Certificate My Certificates and then the Edit icon to open the My Certificate Edit screen You can use this screen to view in depth certificate information and change t...

Страница 117: ...s information that identifies the owner of the certificate such as Common Name CN Organizational Unit OU Organization O State ST and Country C Issuer This field displays identifying information about...

Страница 118: ...t into a certification authority s web page an e mail that you send to the certification authority or a text editor and save the file on a management computer for later manual enrollment You can copy...

Страница 119: ...thus you do not need to import any certificate that is signed by one of these certificates Table 59 Configuration Object Certificate My Certificates Import LABEL DESCRIPTION File Path Type in the loc...

Страница 120: ...gured to use Select an entry and click Object Reference to open a screen that shows which settings use the entry This field displays the certificate index number The certificates are listed in alphabe...

Страница 121: ...n to open the Trusted Certificates Edit screen Use this screen to view in depth information about the certificate change the certificate s name and set whether or not you want the NWA WAC to check a c...

Страница 122: ...server usually a certification authority LDAP Server Select this check box if the directory server uses LDAP Lightweight Directory Access Protocol LDAP is a protocol over TCP that specifies how clien...

Страница 123: ...eans that the key can be used to sign certificates and KeyEncipherment means that the key can be used to encrypt text Basic Constraint This field displays general information about the certificate For...

Страница 124: ...ges over a CRL The first is real time status information The second is a reduction in network traffic since the NWA WAC only gets information on the certificates that it needs to verify not a huge lis...

Страница 125: ...securely accessing the NWA WAC s command line interface The Telnet screen Section 12 6 on page 144 configures Telnet for accessing the NWA WAC s command line interface The FTP screen Section 12 7 on p...

Страница 126: ...he NWA WAC get the date and time from a time server Figure 74 Configuration System Date Time Table 63 Configuration System Host Name LABEL DESCRIPTION System Name Choose a descriptive name to identify...

Страница 127: ...rvals after starting up Time Server Address Enter the IP address or URL of your time server Check with your ISP network administrator if you are unsure of this information Sync Now Click this button t...

Страница 128: ...Time ends if you selected Enable Daylight Saving The at field uses the 24 hour format Here are a couple of examples Daylight Saving Time ends in the United States on the first Sunday of November Each...

Страница 129: ...te in the New Date field 5 Under Time Zone Setup select your Time Zone from the list 6 As an option you can select the Enable Daylight Saving check box to adjust the NWA WAC clock for daylight savings...

Страница 130: ...Secure Socket Layer or HTTP over SSL is a web protocol that encrypts and decrypts web pages Secure Socket Layer SSL is an application level protocol that enables secure transactions of data by ensuri...

Страница 131: ...t 443 by default on the NWA WAC s web server 2 HTTP connection requests from a web browser go to port 80 by default on the NWA WAC s web server Figure 77 HTTP HTTPS Implementation Note If you disable...

Страница 132: ...WAC Web Configurator to use https NWA WAC IP Address 8443 as the URL Authenticate Client Certificates Select Authenticate Client Certificates optional to require the SSL client to authenticate itself...

Страница 133: ...ge to block the access 12 4 5 2 Mozilla Firefox Warning Messages When you attempt to access the NWA WAC HTTPS server a The Connection is Untrusted screen appears as shown in the following screen Click...

Страница 134: ...ur browser displays warnings about the NWA WAC s HTTPS server certificate and what you can do to avoid seeing the warnings The issuing certificate authority of the NWA WAC s HTTPS server certificate i...

Страница 135: ...and Importing SSL Client Certificates The SSL client needs a certificate if Authenticate Client Certificates is selected on the NWA WAC You must have imported at least one trusted CA to the NWA WAC in...

Страница 136: ...o the one shown next 2 Click Install Certificate and follow the wizard as shown earlier in this appendix 12 4 5 6 Installing a Personal Certificate You need a password in advance The CA may issue the...

Страница 137: ...Series User s Guide 137 1 Click Next to begin the wizard 2 The file name and path of the certificate you double clicked should automatically appear in the File name text box Click Browse if you wish...

Страница 138: ...ries User s Guide 138 3 Enter the password given to you by the CA 4 Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following s...

Страница 139: ...izard and begin the import process 6 You should see the following screen when the certificate is correctly installed on your computer 12 4 5 7 Using a Certificate When Accessing the NWA WAC To access...

Страница 140: ...use SSH Secure SHell to securely access the NWA WAC s command line interface SSH is a secure communication protocol that combines authentication and data encryption to provide secure encrypted commun...

Страница 141: ...the client computer 2 Encryption Method Once the identification is verified both the client and server must agree on the type of encryption method to use 3 Authentication and Data Transmission After t...

Страница 142: ...e similar for most SSH client programs Refer to your SSH client program user s guide Table 67 Configuration System SSH LABEL DESCRIPTION Enable Select the check box to allow or disallow the computer w...

Страница 143: ...ing the OpenSSH client program that comes with most Linux distributions 1 Test whether the SSH service is available on the NWA WAC Enter telnet 192 168 1 2 22 at a terminal prompt and press ENTER The...

Страница 144: ...tion System FTP tab The screen appears as shown Use this screen to specify FTP settings ssh 1 192 168 1 2 The authenticity of host 192 168 1 2 192 168 1 2 can t be established RSA1 key fingerprint is...

Страница 145: ...allow or disallow the computer with the IP address that matches the IP address es in the Service Control table to access the NWA WAC using this service TLS required Select the check box to use FTP ove...

Страница 146: ...managed objects SNMP allows a manager and agents to communicate for the purpose of accessing these objects SNMP itself is a simple request response protocol based on the manager agent model The manag...

Страница 147: ...nts occurs 12 8 3 Configuring SNMP To change your NWA WAC s SNMP settings click Configuration System SNMP tab The screen appears as shown Use this screen to configure your SNMP settings You can also c...

Страница 148: ...d allows all requests Set Community Enter the Set community which is the password for incoming Set requests from the management station The default is private and allows all requests SNMPv3 Select thi...

Страница 149: ...quire the SNMPv3 user s password be encrypted by MD5 for authentication Select SHA to require the SNMPv3 user s password be encrypted by SHA for authentication Privacy Select the type of encryption th...

Страница 150: ...The Log Setting screens Section 13 3 on page 152 specify which logs are e mailed where they are e mailed and how often they are e mailed 13 2 Email Daily Report Use this screen to start or stop data c...

Страница 151: ...g Report Email Daily Report LABEL DESCRIPTION Enable Email Daily Report Select this to send reports by e mail every day Mail Server Type the name or IP address of the outgoing SMTP server Mail Subject...

Страница 152: ...ctive Log Summary screen to edit this information for all logs at the same time 13 3 1 Log Setting To access this screen click Configuration Log Report Log Setting Mail From Type the e mail address fr...

Страница 153: ...d is a sequential value and it is not associated with a specific log Status This field shows whether the log is active or not Name This field displays the name of the log system log or one of the remo...

Страница 154: ...System Log Settings This screen controls the detailed settings for each log in the system log which includes the e mail profiles Select a system log entry in the Log Setting screen and click the Edit...

Страница 155: ...on SMTP Authentication Select this check box if it is necessary to provide a user name and password to the SMTP server User Name This box is effective when you select the SMTP Authentication check box...

Страница 156: ...l debugging information however even if this setting is selected E mail Server 1 Select whether each category of events should be included in the log messages when it is e mailed green check mark and...

Страница 157: ...Chapter 13 Log and Report NWA5000 WAC6500 Series User s Guide 157 Figure 97 Configuration Log Report Log Setting Edit Remote Server...

Страница 158: ...to different files in the syslog server Please see the documentation for your syslog program for more information Active Log Selection Use the Selection drop down list to change the log settings for a...

Страница 159: ...r s Guide 159 Figure 98 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert The Default category includes...

Страница 160: ...mail Server 2 Use the E Mail Server 2 drop down list to change the settings for e mailing logs to e mail server 2 for all log categories Using the System Log drop down list to disable all logs overrid...

Страница 161: ...ied in E Mail Server 2 The NWA WAC does not e mail debugging information even if it is recorded in the System log Remote Server 1 4 Syslog For each remote server select what information you want to lo...

Страница 162: ...ection 14 3 on page 168 checks your current firmware version and uploads firmware to the NWA WAC The Shell Script screen Section 14 4 on page 170 stores names downloads uploads and runs shell script f...

Страница 163: ...5 wlan ssid profile default ssid Joe AP qos wmm security default Errors in Configuration Files or Shell Scripts When you apply a configuration file or run a shell script the NWA WAC processes the file...

Страница 164: ...f there is a startup config conf the NWA WAC checks it for errors and applies it If there are no errors the NWA WAC uses it and copies it to the lastgood conf configuration file as a back up file If t...

Страница 165: ...duplicate of the configuration file Remove Click a configuration file s row to select it and click Remove to delete it from the NWA WAC You can only delete manually saved configuration files You canno...

Страница 166: ...d with a fully valid configuration file as quickly as possible Ignore errors and finish applying the configuration file this applies the valid parts of the configuration file and generates error logs...

Страница 167: ...nagement session the changes are applied to this configuration file The NWA WAC applies configuration changes made in the Web Configurator to the configuration file when you click Apply or OK It appli...

Страница 168: ...yxel com in a file that usually uses a bin extension The firmware update can take up to five minutes Do not turn off or reset the NWA WAC while the firmware update is in progress C ftp 192 168 1 2 Con...

Страница 169: ...nnected After five minutes log in again and check your new firmware version in the Dashboard screen Table 80 Maintenance File Manager Firmware Package LABEL DESCRIPTION Boot Module This is the version...

Страница 170: ...bytes of data you upload so that you can watch the file transfer progress 7 Enter bin to set the transfer mode to binary 8 Transfer the firmware file from your computer to the NWA WAC Type put followe...

Страница 171: ...0 9 _ Click OK to save the duplicate or click Cancel to close the screen without saving a duplicate of the configuration file Remove Click a shell script file s row to select it and click Delete to de...

Страница 172: ...ividual shell script files were last changed or saved Upload Shell Script The bottom part of the screen allows you to upload a new or previously saved shell script file from your computer to your NWA...

Страница 173: ...nerate a file containing the NWA WAC s configuration and diagnostic information You may need to generate this file and send it to customer support during troubleshooting Click Maintenance Diagnostics...

Страница 174: ...WAC6500 Series User s Guide 174 Collect Now Click this to have the NWA WAC create a new diagnostic file Download Click this to save the most recent diagnostic file to a computer Table 82 Maintenance...

Страница 175: ...after it s ready The deafult LED suppression setting of your AP is different depending on your NWA WAC model You can go to Maintenance LEDs Suppression screen to see the default of the LED behavior If...

Страница 176: ...k Turn On button to have the WAC find its location The Locator LED will start to blink for the number of minutes set in the Locator screen The default setting is 10 minutes While the locator is runnin...

Страница 177: ...button to activate the locator The Locator function will show the actual location of the WAC between several devices in the network Automatically extinguish after Enter a time interval between 1 and...

Страница 178: ...ion before you reboot Otherwise the changes are lost when you reboot Reboot is different to reset reset returns the device to its default configuration 17 2 Reboot This screen allows remote users can...

Страница 179: ...d To Know Shutdown writes all cached data to the local storage and stops the system processes Shutdown is different to reset reset returns the device to its default configuration 18 2 Shutdown To acce...

Страница 180: ...r a PoE power injector 2 Make sure the power adaptor or PoE power injector is connected to the NWA WAC and plugged in to an appropriate power source Make sure the power source is turned on 3 Disconnec...

Страница 181: ...default IP address in standalone AP mode is 192 168 1 2 If you changed the IP address use the new IP address If you changed the IP address and have forgotten it see the troubleshooting suggestions for...

Страница 182: ...entered the user name and password correctly The default password is 1234 This fields are case sensitive so make sure Caps Lock is not on 2 You cannot log in to the web configurator while someone is...

Страница 183: ...e sure the LED is behaving as expected See the Quick Start Guide and Section 1 6 on page 20 2 Reboot the NWA WAC 3 If the problem continues contact your ISP The Internet connection is slow or intermit...

Страница 184: ...cryption can be broken by an attacker using widely available software It is strongly recommended that you use a more effective security mechanism Use the strongest security mechanism that all the wire...

Страница 185: ...ort the file into the NWA WAC Note Be careful not to convert a binary file to text during the transfer process It is easy for this to occur since many programs use text files by default I can only see...

Страница 186: ...less AP Information Radio List screen there is no load balancing indicator associated with any APs assigned to the load balancing task Check to be sure that the AP profile which contains the load bala...

Страница 187: ...ble afterwards Use the following procedure to reset the NWA WAC to its factory default settings This overwrites the settings in the startup config conf file with the settings in the system default con...

Страница 188: ...ate Many ZyXEL products such as the NWA WAC issue their own public key certificates These can be used by web browsers on a LAN or WAN to verify that they are in fact connecting to the legitimate devic...

Страница 189: ...e 189 1 If your device s Web Configurator is set to use SSL certification then the first time you browse to it you are presented with a certification error 2 Click Continue to this website not recomme...

Страница 190: ...Appendix A Importing Certificates NWA5000 WAC6500 Series User s Guide 190 4 In the Certificate dialog box click Install Certificate 5 In the Certificate Import Wizard click Next...

Страница 191: ...utomatically select certificate store based on the type of certificate click Next again and then go to step 9 7 Otherwise select Place all certificates in the following store and then click Browse 8 I...

Страница 192: ...0 Series User s Guide 192 9 In the Completing the Certificate Import Wizard screen click Finish 10 If you are presented with another Security Warning click Yes 11 Finally click OK when presented with...

Страница 193: ...ormation Installing a Stand Alone Certificate File in Internet Explorer Rather than browsing to a ZyXEL Web Configurator and installing a public key certificate when prompted you can install a stand a...

Страница 194: ...194 Removing a Certificate in Internet Explorer This section shows you how to remove a public key certificate in Internet Explorer 7 on Windows XP 1 Open Internet Explorer and click Tools Internet Op...

Страница 195: ...Root Certificates Authorities tab select the certificate that you want to delete and then click Remove 4 In the Certificates confirmation click Yes 5 In the Root Certificate Store dialog box click Yes...

Страница 196: ...device s Web Configurator is set to use SSL certification then the first time you browse to it you are presented with a certification error 2 Select Accept this certificate permanently and click OK 3...

Страница 197: ...e File in Firefox Rather than browsing to a ZyXEL Web Configurator and installing a public key certificate when prompted you can install a stand alone certificate file if one has been issued to you 1...

Страница 198: ...e the Select File dialog box to locate the certificate and then click Open 5 The next time you visit the web site click the padlock in the address bar to open the Page Info Security window to see the...

Страница 199: ...Appendix A Importing Certificates NWA5000 WAC6500 Series User s Guide 199 1 Open Firefox and click Tools Options 2 In the Options dialog box click Advanced Encryption View Certificates...

Страница 200: ...Manager dialog box select the Web Sites tab select the certificate that you want to remove and then click Delete 4 In the Delete Web Site Certificates dialog box click OK 5 The next time you go to the...

Страница 201: ...1a2f 0000 0000 0015 can be written as 2001 0db8 1a2f 0000 0000 0015 2001 0db8 0000 0000 1a2f 0015 2001 db8 1a2f 0 0 15 or 2001 db8 0 0 1a2f 15 Prefix and Prefix Length Similar to an IPv4 subnet mask...

Страница 202: ...cast group Multicast scope allows you to determine the size of the multicast group A multicast address has a predefined prefix of ff00 8 The following table describes some of the predefined multicast...

Страница 203: ...enth bit of the first byte of the MAC address See the following example Stateless Autoconfiguration With stateless autoconfiguration in IPv6 addresses can be uniquely and automatically generated Unlik...

Страница 204: ...in the IA Each IA holds one type of address IA_NA means an identity association for non temporary addresses and IA_TA is an identity association for temporary addresses An IA_NA option contains the T1...

Страница 205: ...ypes Neighbor solicitation A request from a host to determine a neighbor s link layer address MAC address and detect if the neighbor is still reachable A neighbor being reachable means it responds to...

Страница 206: ...Protocol version 2 IGMPv2 MLD uses ICMPv6 message types rather than IGMP message types MLDv1 is equivalent to IGMPv2 and MLDv2 is equivalent to IGMPv3 MLD allows an IPv6 switch or router to discover t...

Страница 207: ...es DHCPv6 for IP address assignment you have to additionally install a DHCPv6 client software on your Windows XP Note If you use static IP addresses or Router Advertisement for IPv6 address assignment...

Страница 208: ...rver Example Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer To enable IPv6 in Windows 7 1 Select Control Panel Networ...

Страница 209: ...your dynamic IPv6 address This example shows a global address 2001 b021 2d 1000 obtained from a DHCP server C ipconfig Windows IP Configuration Ethernet adapter Local Area Connection Connection speci...

Страница 210: ...Please have the following information ready when you contact an office Required Information Product model and serial number Warranty Information Date that you received your device Brief description of...

Страница 211: ...zyxel com pk Philipines ZyXEL Philippines http www zyxel com ph Singapore ZyXEL Singapore Pte Ltd http www zyxel com sg Taiwan ZyXEL Communications Corporation http www zyxel com Thailand ZyXEL Thail...

Страница 212: ...ommunications Czech s r o http www zyxel cz Denmark ZyXEL Communications A S http www zyxel dk Estonia ZyXEL Estonia http www zyxel com ee et Finland ZyXEL Communications http www zyxel fi France ZyXE...

Страница 213: ...ay ZyXEL Communications http www zyxel no Poland ZyXEL Communications Poland http www zyxel pl Romania ZyXEL Romania http www zyxel com ro ro Russia ZyXEL Russia http www zyxel ru Slovakia ZyXEL Commu...

Страница 214: ...com Latin America Argentina ZyXEL Communication Corporation http www zyxel com ec es Ecuador ZyXEL Communication Corporation http www zyxel com ec es Middle East Egypt ZyXEL Communication Corporation...

Страница 215: ...Appendix C Customer Support NWA5000 WAC6500 Series User s Guide 215 Oceania Australia ZyXEL Communications Corporation http www zyxel com au en Africa South Africa Nology Pty Ltd http www zyxel co za...

Страница 216: ...evice must accept any interference received including interference that may cause undesired operation Changes or modifications not expressly approved by the party responsible for compliance could void...

Страница 217: ...ustrie Canada pour fonctionner avec les types d antenne num r s ci dessous et ayant un gain admissible maximal et l imp dance requise pour chaque type d antenne Les types d antenne non inclus dans cet...

Страница 218: ...s a general authorization Please check http www sviluppoeconomico gov it for more details Questo prodotto conforme alla specifiche di Interfaccia Radio Nazionali e rispetta il Piano Nazionale di ripar...

Страница 219: ...vice Connect it to the right supply voltage for example 110V AC in North America or 230V AC in Europe Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyo...

Страница 220: ...equipment should be treated separately INFORMAZIONI AGLI UTENTI Ai sensi della Direttiva 2012 19 UE del Parlamento europeo e del Consiglio del 4 luglio 2012 sui rifiuti di apparecchiature elettriche e...

Страница 221: ...Appendix D Legal Information NWA5000 WAC6500 Series User s Guide 221 Environmental Product Declaration...

Страница 222: ...all not apply if the product has been modified misused tampered with damaged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is...

Страница 223: ...evocation List CRL 109 vs OCSP 124 certificates 108 advantages of 109 and CA 109 and FTP 145 and HTTPS 130 and SSH 142 and WWW 132 certification path 109 117 122 expired 109 factory default 109 file f...

Страница 224: ...t savings 127 DCS 66 DHCP 126 and domain name 126 diagnostics 173 Digital Signature Algorithm public key algorithm see DSA disclaimer 216 documentation related 2 domain name 126 DSA 114 DTLS 57 dual r...

Страница 225: ...v6 201 addressing 201 EUI 64 203 global address 202 interface ID 203 link local address 201 Neighbor Discovery Protocol 201 ping 201 prefix 201 prefix length 201 stateless autoconfiguration 203 unspec...

Страница 226: ...4 vs CRL 124 operating mode 12 other documentation 2 overview 11 P packet statistics 46 physical ports packet statistics 46 pop up windows 27 power off 26 power on 26 product registration 222 Public K...

Страница 227: ...t requirements 142 encryption methods 141 for secure Telnet 142 how connection is established 140 versions 141 with Linux 143 with Microsoft Windows 143 SSID 13 SSID profile pre configured 13 SSID pro...

Страница 228: ...e Report VRPT 153 158 Virtual Local Area Network 62 VLAN 62 introduction 62 VoIP 13 VRPT Vantage Report 153 158 W warm start 26 warning message popup 34 warranty 222 note 222 WDS 12 16 Web Configurato...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды