IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
Graphics in this book may differ slightly from the product due to differences in operating systems,
operating system versions, or if you installed updated firmware/software for your device. Every
effort has been made to ensure that the information in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guid is designed to help you get up and running right away.
LAN .........................................................................................................................................................94
System ..................................................................................................................................................101
5.2 What You Can Do ..................................... ... .... ... ... ... .... ... ... ..............................................................49
5.5 Association List ................................................ ............................................. ... ... .... ..........................51
6.2 What You Can Do in this Chapter .....................................................................................................55
6.3 What You Need To Know ................. ... ............................................. ... ... .... ... ... ... .... ... ... ... .................56
LAN ......................................................................................................................................................94
9.2 What You Can Do in this Chapter ...................................................................................................101
9.3 What You Need To Know ................. ... ............................................. ... ... .... ... ... ... .... ... ... ... ...............102
12.2 NWA1121-NI Access and Login ....................................................................................................128
12.3 Internet Access .............................................................................................................................129
Appendix A Setting Up Your Computer’s IP Address ......................................................................131
Appendix B Pop-up Windows, JavaScript and Java Permissions...................................................159
Appendix C IP Addresses and Subnetting.......................................................................................171
Appendix D Wireless LANs..............................................................................................................179
Appendix E Legal Information..........................................................................................................193
Index ..................................................................................................................................................201
8
NWA1121-NI User’s Guide
PART I
User’s Guide
9
10
CHAPTER 1
Introducing the NWA1121-NI
This chapter introduces the main applications and features of the NWA1121-NI. It also discusses
the ways you can manage your NWA1121-NI.
1.1 Introducing the NWA1121-NI
Your NWA1121-NI is an IPv6 wireless AP (Access Point) that can function in several wireless modes.
It extends the range of your existing wired network without additional wiring, providing easy
network access to mobile users.
The NWA1121-NI controls network access with MAC address filtering and RADIUS server
authentication. It also provides a high level of network traffic security, supporting IEEE 802.1x, WiFi Protected Access (WPA), WPA2 and WEP data encryption. Its Quality of Service (QoS) features
allow you to prioritize time-sensitive or highly important applications such as VoIP.
Your NWA1121-NI is easy to install, configure and use. The embedded Web-based configurator
enables simple, straightforward management and maintenance.
See the Quick Start Guide for instructions on how to make hardware connections.
1.2 Wireless Modes
The NWA1121-NI can be configured to use the following WLAN operating modes:
Applications for each operating mode are shown below.
1.2.1 MBSSID
NUMBER OF
SUPPORTED SSID
UNIVERSAL
REPEATER FUNCTION
AP FUNCTION
A Basic Service Set (BSS) is the set of devices forming a single wireless network (usually an access
point and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS. In
NWA1121-NI User’s Guide11
Chapter 1 Introducing the NWA1121-NI
Multiple BSS (MBSSID) mode, the NWA1121-NI provides multiple virtual APs, each forming its own
BSS and using its own individual SSID profile.
You can configure multiple SSID profiles, and have all of them active at any one time.
You can assign different wireless and security settings to each SSID profile. This allows you to
compartmentalize groups of users, set varying access privileges, and prioritize network traffic to
and from certain BSSs.
To the wireless clients in the network, each SSID appears to be a different access point. As in any
wireless network, clients can associate only with the SSIDs for which they have the correct security
settings.
For example, you might want to set up a wireless network in your office where Internet telephony
(VoIP) users have priority. You also want a regular wireless network for standard users, as well as a
‘guest’ wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority,
SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for
guest users. In this example, the guest user is forbidden access to the wired Land Area Network
(LAN) behind the AP and can access only the Internet.
Figure 1 Multiple BSSs
12
NWA1121-NI User’s Guide
1.2.2 Wireless Client
The NWA1121-NI can be used as a wireless client to communicate with an existing network. In the
figure below, the printer can receive requests from the wired computer clients A and B via the
NWA1121-NI in Client mode (Z).
Figure 2 Wireless Client Application
Chapter 1 Introducing the NWA1121-NI
NWA1121-NI User’s Guide
13
Chapter 1 Introducing the NWA1121-NI
1.2.3 Root AP
In Root AP mode, the NWA1121-NI (Z) can act as the root AP in a wireless network and also allow
repeaters (X and Y) to extend the range of its wireless network at the same time. In the figure
below, both clients A, B and C can access the wired network through the root AP.
Figure 3 Root AP Application
On the NWA1121-NI in Root AP mode, you can have multiple SSIDs active for reqular wireless
connections and one SSID for the connection with a repeater (universal repeater SSID). Wireless
clients can use either SSID to associate with the NWA1121-NI in Root AP mode. A repeater must
use the universal repeater SSID to connect to the NWA1121-NI in Root AP mode.
When the NWA1121-NI is in Root AP mode, universal repeater security between the NWA1121-NI
and other repeater is independent of the security between the wireless clients and the AP or
repeater. If you do not enable universal repeater security, traffic between APs is not encrypted.
When universal repeater security is enabled, both APs and repeaters must use the same pre-shared
key. See Section 6.6 on page 74 for more details.
Unless specified, the term “security settings” refers to the traffic between the wireless clients and
the AP. At the time of writing, universal repeater security is compatible with the NWA1121-NI only.
1.2.4 Repeater
The NWA can act as a wireless network repeater to extend a root AP’s wireless network range, and
also establish wireless connections with wireless clients.
Using Repeater mode, your NWA1121-NI can extend the range of the WLAN. In the figure below,
the NWA1121-NI in Repeater mode (Z) has a wireless connection to the NWA1121-NI in Root AP
mode (X) which is connected to a wired network and also has a wireless connection to another
NWA1121-NI in Repeater mode (Y) at the same time. Z and Y act as repeaters that forward traffic
14
NWA1121-NI User’s Guide
Chapter 1 Introducing the NWA1121-NI
between associated wireless clients and the wired LAN. Clients A, B and C access the AP and the
wired network behind the AP throught repeaters Z and Y.
Figure 4 Repeater Application
When the NWA1121-NI is in Repeater mode, universal repeater security between the NWA1121-NI
and other repeater is independent of the security between the wireless clients and the AP or
repeater. If you do not enable universal repeater security, traffic between APs is not encrypted.
When universal repeater security is enabled, both APs and repeaters must use the same pre-shared
key. See Section 6.6 on page 74 for more details.
Once the security settings of peer sides match one another, the connection between devices is
made.
At the time of writing, universal repeater security is compatible with the NWA1121-NI only.
1.3 Ways to Manage the NWA1121-NI
Use any of the following methods to manage the NWA1121-NI.
• Web Configurator. This is recommended for everyday management of the NWA1121-NI using a
(supported) web browser.
• FTP (File Transfer Protocol) for firmware upgrades and configuration backup and restore.
• SNMP (Simple Network Management Protocol). The device can be monitored by an SNMP
manager.
NWA1121-NI User’s Guide
15
Chapter 1 Introducing the NWA1121-NI
1.4 Configuring Your NWA1121-NI’s Security Features
Your NWA1121-NI comes with a variety of security features. This section summarizes these
features and provides links to sections in the User’s Guide to configure security settings on your
NWA1121-NI. Follow the suggestions below to improve security on your NWA1121-NI and network.
1.4.1 Control Access to Your Device
Ensure only people with permission can access your NWA1121-NI.
• Control physical access by locating devices in secure areas, such as locked rooms. Most
NWA1121-NIs have a reset button. If an unauthorized person has access to the reset button,
they can then reset the device’s password to its default password, log in and reconfigure its
settings.
• Change any default passwords on the NWA1121-NI, such as the password used for accessing the
NWA1121-NI’s web configurator (if it has a web configurator). Use a password with a
combination of letters and numbers and change your password regularly. Write down the
password and put it in a safe place.
•See Section 11.5 on page 121 for instructions on changing your password.
• Configure remote management to control who can manage your NWA1121-NI. See Chapter 9 on
page 101 for more information. If you enable remote management, ensure you have enabled
remote management only on the IP addresses, services or interfaces you intended and that other
remote management settings are disabled.
1.4.2 Wireless Security
Wireless devices are especially vulnerable to attack. Take the following measures to improve
wireless security.
• Enable wireless security on your NWA1121-NI. Choose the most secure encryption method that
all devices on your network support. See Section 6.6 on page 74 for directions on configuring
encryption. If you have a RADIUS server, enable IEEE 802.1x or WPA(2) user identification on
your network so users must log in. This method is more common in business environments.
• Hide your wireless network name (SSID). The SSID can be regularly broadcast and unauthorized
users may use this information to access your network. See Section 6.5 on page 72 for directions
on using the web configurator to hide the SSID.
• Enable the MAC filter to allow only trusted users to access your wireless network or deny
unwanted users access based on their MAC address. See Section 6.8 on page 89 for directions on
configuring the MAC filter.
1.5 Good Habits for Managing the NWA1121-NI
Do the following things regularly to make the NWA1121-NI more secure and to manage it more
effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different
types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
16
NWA1121-NI User’s Guide
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier
working configuration may be useful if the device becomes unstable or even crashes. If you
forget your password, you will have to reset the NWA1121-NI to its factory default settings. If
you backed up an earlier configuration file, you would not have to totally re-configure the
NWA1121-NI. You could simply restore your last configuration.
1.6 Hardware Connections
See your Quick Start Guide for information on making hardware connections.
1.7 LED
Figure 5 LED
Chapter 1 Introducing the NWA1121-NI
Table 1 LED
COLORSTATUSDESCRIPTION
AmberOnThere is system error and the NWA1121-NI cannot boot up, or the
GreenOnThe WLAN is active.
NWA1121-NI User’s Guide
NWA1121-NI doesn’t have an Ethernet connection with the LAN.
FlashingThe NWA1121-NI is starting up.
OffThe NWA1121-NI is receiving power and ready for use.
BlinkingThe WLAN is active, and transmitting or receiving data.
OffThe WLAN is not active.
17
Chapter 1 Introducing the NWA1121-NI
18
NWA1121-NI User’s Guide
CHAPTER 2
Introducing the Web Configurator
This chapter describes how to access the NWA1121-NI’s web configurator and provides an overview
of its screens.
2.1 Accessing the Web Configurator
1Make sure your hardware is properly connected and prepare your computer or computer network to
connect to the NWA1121-NI (refer to the Quick Start Guide).
2Launch your web browser.
3Type "192.168.1.2" as the URL (default). The login screen appears.
Figure 6 The Login Screen
4Type “admin” as the (default) username and “1234” as the (default) password. Click Login.
5You should see a screen asking you to change your password (highly recommended) as shown
next. Type a new password (and retype it to confirm) then click Apply. Alternatively, click Ignore.
NWA1121-NI User’s Guide19
Chapter 2 Introducing the Web Configurator
Note: If you do not change the password, the following screen appears every time you
login.
Figure 7 Change Password Screen
You should now see the Dashboard screen. See Chapter 2 on page 19 for details about the
Dashboard screen.
2.2 Resetting the NWA1121-NI
If you forget your password or cannot access the web configurator, you will need to use the RESET
button at the rear panel of the NWA1121-NI. This replaces the current configuration file with the
20
NWA1121-NI User’s Guide
Chapter 2 Introducing the Web Configurator
factory-default configuration file. This means that you will lose all the settings you previously
configured. The password will be reset to “1234”.
Figure 8 The RESET Button
2.2.1 Methods of Restoring Factory-Defaults
You can erase the current configuration and restore factory defaults in two ways:
Use the RESET button to upload the default configuration file. Hold this button in for about 3
seconds (the light will begin to blink). Use this method for cases when the password or IP address
of the NWA1121-NI is not known.
Use the web configurator to restore defaults (refer to Section 11.8 on page 124).
NWA1121-NI User’s Guide
21
Chapter 2 Introducing the Web Configurator
A
B
C
2.3 Navigating the Web Configurator
The following summarizes how to navigate the web configurator from the Dashboard screen.
Figure 9 Status Screen of the Web Configurator
As illustrated above, the Web Configurator screen is divided into these parts:
• A - title bar
• B - navigation panel
• C - main window
2.3.1 Title Bar
Click Logout at any time to exit the Web Configurator.
Click ZAbout to open the about window, which provides information of the boot module and driver
versions.
22
NWA1121-NI User’s Guide
2.3.2 Navigation Panel
Use the menu items on the navigation panel to open screens to configure NWA1121-NI features.
The following tables describe each menu item.
Table 2 Navigation Panel Summary
LINKTABFUNCTION
DashboardThis screen shows the NWA1121-NI’s general device and network
Monitor
LogsView LogUse this screen to view the logs for the categories that you selected.
StatisticsUse this screen to view port status, packet specific statistics, the
Association ListUse this screen to view the wireless stations that are currently
Channel UsageUse this screen to know whether a channel is used by another
Configuration
Network
Wireless LANWireless
Settings
SSIDUse this screen to configure up to eight SSID profiles for your
SecurityUse this screen to configure wireless security profiles on the
RADIUSUse this screen to configure up to four RADIUS profiles.
MAC FilterUse this screen to configure MAC filtering profiles.
LANUse this screen to configure the NWA1121-NI’s LAN IP address.
VLANUse this screen to configure the NWA1121-NI’s VLAN settings.
SystemWWWUse this screen to configure through which interface(s) and from
CertificatesUse this screen to import or remove a certificate from the NWA1121-
TelentUse this screen to configure through which interface(s) and from
SNMPUse this screen to configure the NWA1121-NI for SNMP management.
FTPUse this screen to configure through which interface(s) and from
Log SettingsUse this screen to change your log settings.
Maintenance
GeneralUse this screen to configure your device’s name.
PasswordUse this screen to configure your device’s password.
TimeUse this screen to change your NWA1121-NI’s time and date.
Firmware UpgradeUse this screen to upload firmware to your device.
Chapter 2 Introducing the Web Configurator
status information. Use this screen to access the statistics and client
list.
"system up time" and so on.
associated to the NWA1121-NI.
wireless network or not.
Use this screen to configure the wireless LAN settings and NWA1121NI’s operation mode.
NWA1121-NI.
NWA1121-NI.
which IP address(es) users can use HTTP to manage the NWA1121NI.
NI.
which IP address(es) users can use Telnet to manage the NWA1121NI.
which IP address(es) users can use FTP to access the NWA1121-NI.
NWA1121-NI User’s Guide
23
Chapter 2 Introducing the Web Configurator
Table 2 Navigation Panel Summary
LINKTABFUNCTION
Configuration FileUse this screen to backup and restore your device’s configuration
RestartUse this screen to reboot the NWA1121-NI without turning the power
2.3.3 Main Window
The main window displays information and configuration fields. It is discussed in the rest of this
document.
(settings) or reset the factory default settings.
off.
24
NWA1121-NI User’s Guide
The Dashboard screens display when you log into the NWA1121-NI, or click Dashboard in the
navigation menu.
Use the Dashboard screen to look at the current status of the device, system resources, and
interfaces. The Dashboard screens also provide detailed information about system statistics,
associated wireless clients, and logs.
3.1 The Dashboard Screen
Use this screen to get a quick view of system, Ethernet, WLAN and other information regarding
your NWA1121-NI.
Click Dashboard. The following screen displays.
CHAPTER 3
Dashboard
Figure 10 The Dashboard Screen
NWA1121-NI User’s Guide25
Chapter 3 Dashboard
The following table describes the labels in this screen.
Table 3 The Dashboard Screen
LABELDESCRIPTION
Refresh IntervalSelect how often you want the NWA1121-NI to update this screen.
Refresh NowClick this to update this screen immediately.
System Information
System NameThis field displays the NWA1121-NI system name. It is used for identification. You
WLAN Operating
Mode
Firmware VersionThis field displays the current version of the firmware inside the device. It also
Serial NumberThis field displays the serial number of the NWA1121-NI.
Ethernet Information
LAN MAC AddressThis displays the MAC (Media Access Control) address of the NWA1121-NI on the
IPv4 AddressThis field displays the current IPv4 address of the NWA1121-NI on the network.
Subnet MaskSubnet masks determine the maximum number of possible hosts on a network.
Gateway IP AddressThis is the IP address of the gateway. The gateway is a router or switch on the
IPv6 AddressThis field displays the current IPv6 address(es) of the NWA1121-NI on the
Link LocalThis is the IPv6 link-local address that the NWA1121-NI generates automatically.
GlobalThis is the NWA1121-NI’s IPv6 global address that you specify manually in the
WLAN Information
SSIDThis field displays the SSID (Service Set Identifier). This is available only when the
ChannelThe channel or frequency used by the NWA1121-NI to send and receive
StatusThis shows the current status of the wireless LAN. This is available only when the
Security ModeThis displays the security mode the NWA1121-NI is using. This is available only
Summary
StatisticsClick this link to view port status and packet specific statistics. See Section 5.4 on
Association ListClick this to see a list of wireless clients currently associated to each of the
View LogClick this to see a list of logs produced by the NWA1121-NI. See Section 5.3 on
System Status
System Up TimeThis field displays the elapsed time since the NWA1121-NI was turned on.
can change this in the Maintenance > General screen’s System Name field.
This field displays the current operating mode of the wireless module (Root AP,
Repeater, Client, or MBSSID). You can change the operating mode in the
Configuration > Wireless LAN > Wireless Settings screen.
shows the date the firmware version was created. You can change the firmware
version by uploading new firmware in Maintenance > Firmware Upgrade.
LAN. Every network device has a unique MAC address which identifies it across the
network.
You can also use subnet masks to divide one network into multiple sub-networks.
same network segment as the device's LAN port. The gateway helps forward
packets to their destinations.
network.
Configuration > LAN screen.
WLAN operation mode is Client.
information.
WLAN operation mode is Client.
when the WLAN operation mode is Client.
page 50.
NWA1121-NI’s wireless modules. See Section 5.5 on page 51.
page 49.
26
NWA1121-NI User’s Guide
Chapter 3 Dashboard
Table 3 The Dashboard Screen (continued)
LABELDESCRIPTION
Current Date/TimeThis field displays the date and time configured on the NWA1121-NI. You can
change this in the Maintenance > Time screen.
System Resource
CPU UsageThis field displays what percentage of the NWA1121-NI’s processing ability is
currently being used. The higher the CPU usage, the more likely the NWA1121-NI
is to slow down.
Memory UsageThis field displays what percentage of the NWA1121-NI’s volatile memory is
currently in use. The higher the memory usage, the more likely the NWA1121-NI is
to slow down. Some memory is required just to start the NWA1121-NI and to run
the web configurator.
Interface Status
InterfaceThis column displays each interface of the NWA1121-NI.
StatusThis field indicates whether or not the NWA1121-NI is using the interface.
For each interface, this field displays Up when the NWA1121-NI is using the
interface and Down when the NWA1121-NI is not using the interface.
ChannelThis shows the channel number which the NWA1121-NI is currently using over the
RateFor the LAN port this displays the port speed and duplex setting.
SSID StatusThis section is not available when the WLAN operation mode is Client.
InterfaceThis column displays each of the NWA1121-NI’s wireless interfaces.
SSIDThis field displays the SSID(s) currently used by each wireless module.
BSSIDThis field displays the MAC address of the wireless module.
SecurityThis field displays the type of wireless security used by each SSID.
VLANThis field displays the VLAN ID of each SSID in use, or Disabled if the SSID does
wireless LAN.
For the WLAN interface, it displays the downstream and upstream transmission
rate or N/A if the interface is not in use.
not use VLAN.
NWA1121-NI User’s Guide
27
Chapter 3 Dashboard
28
NWA1121-NI User’s Guide
CHAPTER 4
This chapter first provides an overview of how to configure the wireless LAN on your NWA1121-NI,
and then gives step-by-step guidelines showing how to configure your NWA1121-NI for some
example scenarios.
4.1 How to Configure the Wireless LAN
This section illustrates how to choose which wireless operating mode to use on the NWA1121-NI
and how to set up the wireless LAN in each wireless mode. See Section 4.1.2 on page 29 for links to
more information on each step.
4.1.1 Choosing the Wireless Mode
Tutorial
•Use MBSSID (Multiple Basic Service Set Identifier) operating mode if you want to use the
NWA1121-NI as an access point with some groups of users having different security or QoS
settings from other groups of users. See Section 1.2.1 on page 11 for details.
•Use Client operating mode if you want to use the NWA1121-NI to access a wireless network. See
Section 1.2.2 on page 13 for details.
•Use Root AP operating mode if you want to allow wireless clients to access your wired network
through the NWA1121-NI and also have repeaters communicate with the NWA1121-NI to expand
wireleass coverage. See Section 1.2.3 on page 14 for details.
•Use Repeater operating mode if you want to use the NWA1121-NI to communicate with the root
AP or other repeaters. See Section 1.2.4 on page 14 for details.
4.1.2 Further Reading
Use these links to find more information on the steps:
• Choosing 802.11 Mode: see Section 6.4 on page 60.
• Choosing a wireless Channel ID: see Section 6.4 on page 60.
• Choosing a Security mode: see Section 6.6 on page 74.
• Configuring an external RADIUS server: see Section 6.7 on page 87.
•Configuring MAC Filtering: see Section 6.8 on page 89.
4.2 How to Configure Multiple Wireless Networks
In this example, you have been using your NWA1121-NI as an access point for your office network.
Now your network is expanding and you want to make use of the MBSSID feature (see Section
NWA1121-NI User’s Guide29
Chapter 4 Tutorial
Z
A
B
6.4.4 on page 69) to provide multiple wireless networks. Each wireless network will cater to a
different type of user.
You want to make three wireless networks: one standard office wireless network with all the same
settings you already have, another wireless network with high priority QoS settings for Voice over
IP (VoIP) users, and a guest network that allows visitors to access only the Internet and the
network printer.
To do this, you will take the following steps:
1Edit the SSID profiles.
2Change the operating mode from Root AP to MBSSID and reactivate the standard network.
3Configure different security modes for the networks.
4Configure a wireless network for standard office use.
5Configure a wireless network for VoIP users.
6Configure a wireless network for guests to your office.
The following figure shows the multiple networks you want to set up. Your NWA1121-NI is marked
Z, the main network router is marked A, and your network printer is marked B.
30
The standard network (SSID01) has access to all resources. The VoIP network (VoIP_SSID) has
access to all resources and a high QoS priority. The guest network (Guest_SSID) has access to the
Internet and the network printer only, and a low QoS priority.
NWA1121-NI User’s Guide
Loading...
+ 176 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.