Zebra WING EXPRESS 5.8.2 User Manual
WiNG Express 5.8.2
MN-002676-01
Access Point
User Guide
Zebra and the Zebra head graphic are registered trademarks of ZIH Corp. The Symbol logo is a
registered trademark of Symbol Technologies, Inc., a Zebra Technologies company.
© 2015 Symbol Technologies, Inc.
Contents
Introduction to WiNG Express ..................................................................................5
Basic WiNG Express Access Point Configuration ...................................................9
Dashboard ...............................................................................................................17
Dashboard ..................................................................................................................................... 17
Monitor......................................................................................................................19
Radios ............................................................................................................................................. 19
Details................................................................................................................................... 22
WLANs ............................................................................................................................................. 23
Details................................................................................................................................... 25
Clients ............................................................................................................................................. 26
Details................................................................................................................................... 27
Application Visibilty ...................................................................................................................... 29
Application ......................................................................................................................... 29
Category ............................................................................................................................. 31
Configuration ...........................................................................................................33
Basic ................................................................................................................................................ 33
LAN .................................................................................................................................................. 36
WAN ................................................................................................................................................ 38
Wireless ........................................................................................................................................... 41
Security ........................................................................................................................................... 51
Firewall ................................................................................................................................. 52
WIPS ...................................................................................................................................... 55
Application Visibil ity ........................................................................................................... 57
Schedule Policy .................................................................................................................. 59
Services .......................................................................................................................................... 60
DHCP .................................................................................................................................... 60
RADIUS .................................................................................................................................. 62
Management ................................................................................................................................ 65
Access Points ................................................................................................................................. 68
Event History .............................................................................................................73
Event History .................................................................................................................................. 73
Customer-Support ...................................................................................................75
INTRODUCTION TO
Chapter 1
WING EXPRESS
Zebra’s WiNG Express Access Points are specifically designed to meet the wireless deployment
and radio coverage needs of small and mid-size businesses without compromising on Zebra’s
WLAN enterprise-class feature set and functionality.
WiNG Express is a simplified version of the existing operating system currently shipping with the
WiNG family of controllers, service platforms and Access Points. WiNG Express Access Points
utilize an easy-to-use, easy-to-understand graphic user interface that simplifies end-to-end
WLAN management. WiNG Express enables the creation of a fully network-aware WLAN with
the intelligence required to route wireless transmissions as efficiently and securely as possible.
Within a WiNG Express managed network, a single Access Point can manage a network of up to
24 peer model Access Points, eliminating the need for a managing controller resource, thus
simplifying initial deployments and their costs. Express Access Points can automatically
discover, connect and provision peer model Access Points with a pre-defined network profile in
just minutes.
Zebra’s WiNG Express Access Point portfolio consists of two dual radio 802.11ac Access Points
(AP 7502E and AP 7522E) and four 802.11n Access Points (AP 6511E, AP 6521E, AP 6522E
and AP 6562E).
WiNG Express is designed for single-site Access Point deployments not exceeding more than 24
Access Points of the same model. The following network deployment cases are specifically
targeted:
WiNG Express Version 5.8.2 Users Guide 6
WiNG Express Version 5.8.2 Users Guide 7
BASIC WING EXPRESS ACCESS
Chapter 2
POINT CONFIGURATION
For a WiNG Express SKU Access Point, both the WiNG Express UI and an Over The Air (OTA)
provisioning configuration are required for a basic setup and network connection.
To provide the Access Point a basic configuration and access WiNG Express management
functions:
1 Power up the Access Point.
The Access Point can be powered using an appropriately rated power adapter, POE injector
or POE switch resource.
2 Connect to the Access Point.
Connect to the WiNG Express SSID. For Windows systems, locate the SSID by selecting
the network icon on the bottom right corner of the screen. For MAC systems, locate the
SSID by selecting the network icon on the top right corner of the screen.
Open a browser (Chrome, Firefox or Internet Explorer) and enter
https://express.zebra.com (https://express.zebra.com).
The login screen displays.
3 Enter the default username admin in the Username field.
4 Enter the default password admin123 in the Password field.
5 Select the Login button to load the management interface.
If this is the first time the WiNG Express interface has been accessed, a screen displays
prompting for the Access Point’s country code.
6 Select the Country Code specific to this Access Point’s deployment location.
WiNG Express Version 5.8.2 Users Guide 10
Selecting the correct country is central to legal operation. Each country has its own
regulatory restrictions concerning electromagnetic emissions and the maximum RF signal
strength that can be transmitted. Select Apply to implement the selected Country Code.
SKU's only support certain countries (for example: a US SKU only includes US, Guam,
Puerto Rico, American Samoa, US Virgin Islands and Mariana Island).
The Access Point automatically displays a Dashboard where users can assess network
health and conduct a diagnostic review of Access Point performance.
Note: At some point in the Access Point’s initial setup, the default password should be changed
to enhance the security of the network. Refer to the Configuration > Management screen to
change the default password to a more secure password.
7 Expand the Configuration menu item and select Basic.
8 Set the following Basic Configuration Settings for this Access Point:
WiNG Express Version 5.8.2 Users Guide 11
AP Name - Provide an AP Name used as this Access Point’s WiNG Express network
identifier. If setting this Access Point as a Virtual Controller, each Access Point managed
by this Virtual Controller lists this Access Point’s AP Name as its own. The AP Name is a
required parameter.
Country Code - If the Country Code was not set when the Access Point was initially
powered on, set the country now to ensure the Access Point’s legal operation. The
Access Point’s wireless capabilities are disabled until the required country code is set.
Virtual Controller - Select this option to define this Access Point as a Virtual Controller
capable of managing and provisioning up to 24 Access Points of the same model. If
selecting this Access Point as a Virtual Controller, those Access Points managed by this
Virtual Controller will list this Access Point’s AP Name as its own. Only one Virtual
Controller can be designated.
Timezone - Use the drop-down menu to specify the geographic timezone where the
Access Point is deployed. Different geographic time zones have daylight savings clock
adjustments, so specifying the timezone correctly is important to account for geographic
time changes.
Date & Time - Set the date, hour and minute for the Access Point’s current system time.
Specify whether the current time is in the AM or PM.
NTP Server - Optionally provide the IP address of a NTP server resource. Network Time
Protocol (NTP) manages time and/or network clock synchronization within the WiNG
Express network. NTP is a client/server implementation. Access Points (NTP clients)
periodically synchronize their clock with a master clock (an NTP server). For example, an
Access Point resets its clock to 07:04:59 upon reading a time of 07:04:59 from its
designated NTP server.
Controller Adoption - To adopt a controller enter the IP address in the Host filed and
select a Level from the drop-down menu.
9 Select Apply to implement the updates. Select Apply to implement the updates.
10 Expand the Configuration menu item and select WAN.
11 Refer to the WAN Settings field and set the following:
Enable - Select this option to allow a connection between the Access Point and a larger
network or outside world through the WAN port. Disable this option to isolate the WAN
connection. No connections to a larger network or Internet are possible. Clients cannot
communicate beyond configured subnets. Both the physical Port used to connect to the
WAN and the virtual Interface (VLAN) are also listed and fixed.
WiNG Express Version 5.8.2 Users Guide 12
DHCP Client - Select this option to enable DHCP for the Access Point WAN connection.
This is useful, if the target network or Internet Service Provider (ISP) uses DHCP. DHCP
is a protocol that includes mechanisms for IP address allocation and delivery of host-
specific configuration parameters from a DHCP server to a host. Some of these
parameters are IP address, network mask, and gateway. The WAN and LAN ports should
not both be configured as DHCP clients.
Static IP - Select this option to bypass DHCP address allocation resources and manually
set the IP address for the Access Point’s WAN connection. Manually provide the Access
Point’s Static IP/Mask and Default Gateway.
PPPoE Settings - Optionally enable Point-to-Point Protocol over Ethernet (PPPoE) on the
WAN network. If PPPoE is enabled, provide the required Auth Type, Login Name and
Login Password. Server Name and Default Gateway are optional settings. PPP is a data-
link protocol for dialup connections allowing an Access Point to use a broadband modem
(DSL, cable modem, etc.) for access to high-speed data and broadband networks. Most
DSL providers support (or deploy) the PPPoE protocol. PPPoE uses standard encryption,
authentication, and compression as specified by the PPPoE protocol. PPPoE enables the
Access Point to establish a point-to-point connection to an ISP over an existing Ethernet
interface.
Static IP / Mask - Specify an IP address for the WAN connection if using static address
assignment for the WAN port. An IP address uses a series of four numbers expressed in
dot notation, for example, 190.188.12.1. Additionally, specify a Mask for the Access
Point’s WAN connection. This number is available from the ISP for a DSL or cable-
modem connection, or from an administrator if the Access Point connects to a larger
network.
Primary/Secondary DNS/Default Gateway - If using a static IP or DHCP, enter the
Primary and Secondary DNS server resource’s numerical IP address and Default
Gateway.
Note: If segmenting traffic between the Access Point’s WAN and LAN, you’ll need to create a
VLAN. Complete steps 13 and 14 to define the required VLAN. Otherwise, proceed to step 15.
12 Select Apply to implement the updates.
13 Expand the Configuration menu item and select Access Points. Each AP Name displays
as a link that can be selected to update the configuration of that specific Access Point. Select
a target AP Name link from amongst those displayed in the Access Points screen.
WiNG Express Version 5.8.2 Users Guide 13
Refer to the LAN IP Interface Settings field, and add a VLAN and Static IP as required for
enabling DHCP (within the Configuration > Services screen) for client IP address requests
and ensuring routable traffic.
14 Select Apply to commit the updates to the selected Access Point’s configuration.
15 Expand the Configuration menu item and select Wireless.
The Wireless screen displays fields where Radio Settings and Wireless LAN settings can be
defined. Default radio settings remain as is for the Access Point’s basic setup.
In respect to the Radio Settings, the professional installer should be aware of the following:
Note: The above example includes a field for setting the antenna gain. This setting is only
available for external antenna model Access Points and does not display for internal antenna
model Access Points.
The Channels available for configuration are channels for which the product is approved
in its selected country. The professional installer must ensure the product is set to
operate under conditions, and on channels, approved by country regulations.
Selecting Smart as the Power setting automatically configures radio power to not exceed
the maximum power allowed by the defined country. For static power settings, the
professional installer must ensure the configured power levels are compliant with local
and regional regulations. The county selected automatically limits the maximum output
power that can be set.
For external antenna model Access Points, configure the Antenna Gain based on the
antenna used in the deployment. The set gain value should include the antenna gain,
along with any additional components, such as extension cables used between the
Access Point and the antenna.
In respect to the Wireless LAN settings, the professional installer should be aware WiNG
Express Access Points ship with a default WLAN (WINGExpress). However, this WLAN does
not provide adequate authentication to protect from unauthorized user access. An additional
WLAN configuration can be created and validated before deleting default WLAN.
WiNG Express Version 5.8.2 Users Guide 14
16 To create a new WLAN, select + Add from the upper, left-hand side of the Wireless LAN
field.
17 Set the following configuration attributes for the new WLAN:
Name - Provide a unique name for the WLAN as its network identifier. This is a required
setting.
Enable - Select this setting to enable this WLAN within the Access Point managed
network and to provide some measure of data protection not available in the default
WLAN.
SSID - Specify the WLAN's SSID. The WLAN SSID is case sensitive and alphanumeric.
SSID length should not exceed 32 characters. This is a required setting. Select Client-
To-Client Communication to enable client interoperability within this WLAN. The default
is disabled, meaning clients are not allowed to exchange packets with other clients. It
does not necessarily prevent clients on other WLANs from sending packets to this WLAN,
but if this setting is disabled on the other WLAN, clients are not permitted to interoperate
at all.
Security - The screen displays with the Open option selected. Naming and saving such a
policy (as is) would provide no security and might only make sense in a network wherein
no sensitive data is either transmitted or received. This default setting is not
recommended.
If selecting Secure-PSK, select an encryption type of WEP-64, WEP-128, TKIP-CCMP or
WPA2-CCMP. When the encryption type is selected, enter an encryption key. Define
whether the key is entered in ASCII or HEX characters. Detailed security and encryption
information is available in the Configuration > Wireless section of the documentation.
If selecting Secure-802.1x, provide an IP address (or hostname) and a shared secret
(password) used to access an external RADIUS server resource designated to validate
user requests to the Access Point’s WLAN resources.
Selecting Guest displays fields for captive portal Web page creation, and is beyond the
scope of this basic Access Point configuration.
Band - Select the 2.4 GHz and/or 5 GHz (if supported) radio bands supports by the
Access Point and its connected client traffic. If this Access Point is designated as a Virtual
Controller AP, both radio bands should be enabled.
VLAN - Use the spinner control to specify a VLAN from 1 - 4,094 for this WLAN. When a
client associates with a WLAN, the client is assigned a VLAN by load balance distribution.
Do not use VLAN 1 with the WLAN if the WAN port has been enabled.
Description - Optionally enter a WLAN description to further describe the WLAN’s
deployment objective within the WiNG Express managed network.
WiNG Express Version 5.8.2 Users Guide 15
18 Select Apply to commit the updates to the Access Point’s WLAN configuration.
19 Expand the Configuration menu item and select Services.
20 Select Enable DHCP Server to ensure the Access Point can provision IP addresses to
requesting clients over the specified interface.
Note: A VLAN must be already configured and available to the DHCP server as a viable
interface between the Access Point and requesting client. Refer to the LAN IP Interface
Settings field (within the Edit Access Point screen), and add a VLAN.
Select + Add and provide a default gateway, primary dns server, and a starting and ending
IP range of addresses that constitute a pool of addresses available to requesting clients.
Additional DHCP options are available and are documented in the Configuration > Services
> DHCP section.
21 Select Apply to commit the updates to the Access Point’s DHCP configuration.
22 At this point, you’re ready to connect to the network using the security restrictions applied to
the newly created WLAN. Ensure the new secure WLAN has been enabled, and check
whether a client is able to access the network.
Note: Only when the new WLAN configuration is validated as accessible should the existing
WiNG Express default WLAN be deleted.
DASHBOARD
Chapter 3
In This Chapter
Dashboard ................................................................. 17
Dashboard
The dashboard enables administrators to review and troubleshoot Access Point managed
network operation. Additionally, the dashboard allows an administrator to assess network
component health and conduct a diagnostic review of device performance.
To review high-level Access Point dashboard information:
1 Select Dashboard in the main menu.
WiNG Express Version 5.8.2 Users Guide 18
2 Review the following to assess the health of the network:
System
Information
Displays the administrator assigned Name, software Version, required
Country Name for legal geographic deployment in specific regions, number
of detected Online and Offlline Devices, whether the Access Point has been
enabled as a Virtual Controller to manage peer Access Points, the
designated Virtual Controller IP and MAC addresses, Current Time and Up
Time listing when the Access Point was last offline.
Client
Segmentation
Displays a set of pie charts segregating WLAN utilization amongst peer
Access Points and client types. Use this information to help assess whether
client loads exceed the number and type of WLANs currently deployed with
managed Access Points.
Network Usage
Displays the network throughput (both in the transmit and receive
directions) for the selected Radio or WLAN over the defined trending period
of 30 minutes, 2 hours or 24 hours.
Client Count
Displays total network client count for the selected trending period of 30
minutes, 2 hours or 24 hours. Clients are partitioned into their current
2.4Ghz and 5Ghz radio bands to help assess whether the client load is
adequately supported in each band.
MONITOR
Chapter 4
The Monitor screens provide detailed, real-time information about the network and RF health for
Access Point Radios, WLANs and wireless Clients. Use the information on these screens to
track RF traffic, throughput, signal to noise ratio and client health.
In This Chapter
Radios ....................................................................... 19
WLANs ...................................................................... 23
Clients ....................................................................... 26
Application Visibilty .................................................... 29
Radios
Use the Radios screen to assess the quality of the Access Point radio's utilization, power
consumption, and client connections.
To monitor managed Access Point radios:
1 Select Monitor from the main menu and click on Radios.
WiNG Express Version 5.8.2 Users Guide 20
2 Select a time interval of 30 minutes, 2 hours or 24 hours from the radio buttons at the top
of the page. The graph updates accordingly with the radio's Throughput.
3 Review the following Access Point Radio Details:
Radio MAC
Address
Access Point
Name
Radio
Displays the Media Access Control (MAC) address factory assigned to
each radio as its hardware identifier on the network.
Displays the Access Point's unique administrator assigned name provided
upon initial configuration.
Displays the radio number for each Access Point radio on the network.
AP6511 and AP6521 models are single radio models, other models support
at least two radios.
Channel:
Current / Config
Displays the current channel number each listed Access Point radio is set
to transmit and receive on, as well as its configured channel number. The
Channels available for configuration are channels for which the product is
approved in its selected country. The professional installer must ensure the
product is set to operate under conditions, and on channels, approved by
country regulations.
WiNG Express Version 5.8.2 Users Guide 21
Power (dBm):
Current / Config
Displays the current power level in dBm for each Access Point radio as well
as its configured power level. If Smart is the defined power setting, the
radio automatically configures power to not exceed the maximum power
allowed by the defined country. For static power settings, the professional
installer must ensure the configured power levels are compliant with local
and regional regulations. The country selected automatically limits the
maximum output power that can be set.
Status
Displays the current operational status for each Access Point. If an Access
Point is online, two green up arrows display. If an Access Point is offline,
two green down arrows display.
Clients
Displays the number of clients currently associated to each Access Point
radio on the network. AP6511 and AP6521 single radio Access Points
support 128 clients, the other models support up to 256 client connections.
Retry (%)
Displays the retry percentage for packets sent on each Access Point radio.
The retry rate helps assess the overall effectiveness of the RF environment
(as displayed as a percentage) and a function of the connection rate in both
directions.
SNR
Displays the connected client's signal to noise ratio (SNR). SNR is a
measure that compares the level of a desired signal to the level of
background noise. It is defined as the ratio of signal power to the noise
power. A SNR of 45 or higher indicates excellent RF performance. A SNR
of less than 15 indicates poor RF performance. A low SNR could warrant a
different Access Point connection to improve performance.
4 Select Details to assess individual Access point radio utilization data in greater detail.
WiNG Express Version 5.8.2 Users Guide 22
Details
Access Point radio data can be analyzed to define periods where the radio's transmit and
receive capabilities are jeopardized, or whether noise detected on the network is excessive and
warrants administration. Client connections can also be reviewed to determine if the radio has an
optimal number of connected client devices in respect to periods when the radio is over/under
utilized.
To review Access Point radio details:
1 Select Monitor from the main menu and select Radios. Select a radio, then Details.
2 Select a reporting interval of 30 minutes, 2 hours or 24 hours from the radio buttons at the
top of the page. The graph updates accordingly with the radio's Throughput, SNR and
Client Count.
3 Review the Throughput (bps) table to assess periods of heavy or light transmission and
receive utilization over trended periods.
Transmitted packets display in blue, received packets in green.
4 Refer to the SNR field to assess periods where the Access Point's radio quality could be
compromised due to excessive noise on the network.
Signal to noise ratio (SNR) is an interference measurement to help administrators assess
whether an Access Point needs load balancing with the assistance of neighbor radios.
Additionally, a low SNR could warrant power compensation to account for poorly performing
radios. A SNR of 45 or higher indicates excellent RF performance. A SNR of less than 15
indicates poor RF performance.
5 Use the Client Count table to help determine whether the client load should be increased or
decreased based on radio under/over utilization (throughput) and the level of interference
detected on the managed network.
WiNG Express Version 5.8.2 Users Guide 23
AP6511 and AP6521 single radio Access Points support 128 clients, other models support
up to 256 client connections.
6 To return to the parent radio screen, select << Summary in the upper, right-hand, side of the
graph.
WLANs
A WLAN can be advertised from a single Access Point radio or can span multiple Access Points
and radios. WLAN configurations can be defined to only support specific areas of a site. For
example, a guest access WLAN may only be mapped to a 2.4GHz radio in a lobby or conference
room providing limited coverage, while a data WLAN is mapped to all 2.4GHz and 5GHz radios
at the branch site providing complete coverage.
Periodically refer to the WLANs screen to monitor an Access Point's WLAN utilization and
whether WLAN usage is consistent with an Access Point's deployment objective and the security
needs of its connected clients.
To review Access Point's WLAN utilzation:
1 Select Monitor from the main menu and select WLANs.
2 Select a reporting interval of 30 minutes, 2 hours or 24 hours from the radio buttons at the
top of the page. The graph updates accordingly with the radio's Throughput.
3 Review the following WLAN information to help determine whether the Access Point's WLAN
utilization is optimally set for its deployment objective:
Loading...