IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots
and graphics in this book may differ slightly from your product due to differences in your product
firmware or your computer operating system. Every effort has been made to ensure that the information
in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the NWA1123 and access the Web Configurator.
•CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands
to configure the NWA1123.
Note: It is recommended you use the Web Configurator to configure the NWA1123.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary information.
•More Information
Go to support.zyxel.com to find other information on the NWA1123
.
NWA1123 Series User’s Guide
2
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may need to
configure or helpful tips) or recommendations.
Syntax Conventions
• All models in this series may be referred to as the “NWA1123” in this guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Configuration > Network > IP Setting means you first click Configuration in the navigation panel, then the Network sub
menu and finally the IP Setting tab to get to that screen.
Icons Used in Figures
Figures in this guide may use the following generic icons. The NWA1123 icon is not an exact
representation of your device.
User ......................................................................................................................................................... 81
AP Profile ................................................................................................................................................ 88
System .................................................................................................................................................. 125
Log and Report ................................................................................................................................... 150
6.1.1 What You Can Do in this Chapter ....................................................................................... 49
6.2 What You Need to Know ............................................................................................................... 49
6.3 Network Status ................................................................................................................................ 50
6.3.1 Port Statistics Graph .............................................................................................................. 52
6.4 Radio List ........................................................................................................................................ 53
6.4.1 AP Mode Radio Information ................................................................................................54
6.5 Station List ....................................................................................................................................... 56
6.6 WDS Link Info ................................................................................................................................... 57
7.1.1 What You Can Do in this Chapter ....................................................................................... 63
7.2 IP Setting ......................................................................................................................................... 63
8.1.1 What You Can Do in this Chapter ....................................................................................... 69
8.1.2 What You Need to Know ..................................................................................................... 70
8.2 AP Management ............................................................................................................................ 70
8.3 Rogue AP ......................................................................................................................................... 73
8.3.1 Add/Edit Rogue/Friendly List ................................................................................................ 75
9.3.1 Edit User Authentication Timeout Settings .......................................................................... 86
Chapter 10
AP Profile.............................................................................................................................................88
10.1.1 What You Can Do in this Chapter ..................................................................................... 88
10.1.2 What You Need To Know ...................................................................................................88
10.2 Radio .............................................................................................................................................. 89
10.2.1 Add/Edit Radio Profile ........................................................................................................ 90
10.4 Security List .................................................................................................................................... 99
10.5 MAC Filter List .............................................................................................................................. 103
10.5.1 Add/Edit MAC Filter Profile ............................................................................................... 103
10.6 Layer-2 Isolation List .................................................................................................................... 104
24.1.1 What You Can Do in this Chapter ................................................................................... 194
24.2 IP Setting ..................................................................................................................................... 194
This User’s Guide covers the following models: NWA1123-ACv2, NWA1123-AC PRO, and NWA1123-AC
HD. Your NWA1123 is a wireless AP (Access Point). It extends the range of your existing wired network
without additional wiring, providing easy network access to mobile users.
Table 1 NWA1123 Series Comparison Table
FEATURESNWA1123-ACV2NWA1123-AC PRONWA1123-AC HD
Supported Wireless
Standards
Supported Frequency
Bands
Available Security ModesNone
Number of SSID Profiles646464
Number of Wireless Radios222
Rogue APs DetectionYesYesYes
WDS (Wireless Distribution
System) - Root AP &
Repeater Modes
You can set the NWA1123 to operate in either standalone AP or managed AP mode. When the
NWA1123 is in standalone AP mode, it can serve as a normal AP, or even as a root AP or a wireless
repeater to establish wireless links with other APs in a WDS (Wireless Distribution System). A WDS is a
wireless connection between two or more APs.
NWA1123 Series User’s Guide
12
Your NWA1123’s business-class reliability, SMB features, and centralized wireless management make it
ideally suited for advanced service delivery in mission-critical networks. It uses Multiple BSSID and VLAN
to provide simultaneous independent virtual APs. Additionally, innovations in roaming technology and
QoS features eliminate voice call disruptions.
The NWA1123 controls network access with Media Access Control (MAC) address filtering, and rogue
Access Point (AP) detection. It also provides a high level of network traffic security, supporting IEEE
802.1x, Wi-Fi Protected Access 2 and Wired Equivalent Privacy (WEP) data encryption.
Your NWA1123 is easy to install, configure and use. The embedded Web-based configurator enables
simple, straightforward management and maintenance. See the Quick Start Guide for how to make
hardware connections.
1.1.1 Management Mode
The NWA1123 is a hybrid AP and can work either in standalone AP mode or in managed AP mode
(cloud management mode).
Standalone AP
By default, the NWA1123 serves as a normal AP and is to be configured using its built-in web configurator
or CLI (Command Line Interface), See Chapter 2 on page 20 for detailed information about the web
configurator screens.
Chapter 1 Introduction
Nebula Cloud Management
In this mode, you can manage and monitor the NWA1123 through the Zyxel Nebula cloud-based
network management system. See the NCC (Nebula Control Center) User’s Guide for how to configure
Nebula managed devices. See Chapter 21 on page 182 if you want to change the NWA1123’s VLAN
setting or manually set its IP address.
1.1.2 Mode Changing
This section describes how to change the NWA1123’s management mode.
From Standalone to Cloud
To manage your NWA1123 via the Zyxel NCC, connect the NWA1123 to the Internet and register it to a
site and organization in the NCC (http://nebula.zyxel.com) first using its serial number and MAC address
or its QR code. The serial number, MAC address and QR code can be found in the web configurator
dashboard or the label on the device. See the corresponding Quick Start Guide for how to do hardware
connections and device registration.
Note: The NWA1123 goes into cloud management mode automatically after it can access
the NCC through the specified proxy server (if any) and is successfully registered in the
NCC. Its login password and wireless settings are then overwritten with what you have
configured in the NCC.
NWA1123 Series User’s Guide
13
From Cloud to Standalone
To return to the default standalone AP mode, just click Unregister to remove the NWA1123 from the
organization in the NCC. The NWA1123 will reboot and restore the factory default settings.
1.1.3 MBSSID
A Basic Service Set (BSS) is the set of devices forming a single wireless network (usually an access point
and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS. In Multiple BSS
(MBSSID) mode, the NWA1123 provides multiple virtual APs, each forming its own BSS and using its own
individual SSID profile.
You can configure multiple SSID profiles, and have all of them active at any one time.
You can assign different wireless and security settings to each SSID profile. This allows you to
compartmentalize groups of users, set varying access privileges, and prioritize network traffic to and
from certain BSSs.
To the wireless clients in the network, each SSID appears to be a different access point. As in any wireless
network, clients can associate only with the SSIDs for which they have the correct security settings.
Chapter 1 Introduction
For example, you might want to set up a wireless network in your office where Internet telephony (VoIP)
users have priority. You also want a regular wireless network for standard users, as well as a ‘guest’
wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority, SSID01 is the wireless
network for standard users, and Guest_SSID is the wireless network for guest users. In this example, the
guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access
only the Internet.
NWA1123 Series User’s Guide
14
Figure 1 Multiple BSSs
Chapter 1 Introduction
1.1.4 Dual-Radio
Some of the NWA1123 models are equipped with dual wireless radios. This means you can configure two
different wireless networks to operate simultaneously.
Note: A different channel should be configured for each WLAN interface to reduce the
effects of radio interference.
You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz
band for time sensitive traffic like high-definition video, music, and gaming.
NWA1123 Series User’s Guide
15
Figure 2 Dual-Radio Application
Chapter 1 Introduction
1.1.5 Root AP
In Root AP mode, the NWA1123 (Z) can act as the root AP in a wireless network and also allow repeaters
(X and Y) to extend the range of its wireless network at the same time. In the figure below, both clients A,
B and C can access the wired network through the root AP.
Figure 3 Root AP Application
NWA1123 Series User’s Guide
16
On the NWA1123 in Root AP mode, you can have multiple SSIDs active for regular wireless connections
and one SSID for the connection with a repeater (repeater SSID). Wireless clients can use either SSID to
associate with the NWA1123 in Root AP mode. A repeater must use the repeater SSID to connect to the
NWA1123 in Root AP mode.
When the NWA1123 is in Root AP mode, repeater security between the NWA1123 and other repeater is
independent of the security between the wireless clients and the AP or repeater. When repeater
security is enabled, both APs and repeaters must use the same pre-shared key. See Section 8.2 on page
70 and Section 11.2 on page 107 for more details.
Unless specified, the term “security settings” refers to the traffic between the wireless clients and the AP.
At the time of writing, repeater security is compatible with the NWA1123 only.
1.1.6 Repeater
The NWA1123 can act as a wireless network repeater to extend a root AP’s wireless network range, and
also establish wireless connections with wireless clients.
Using Repeater mode, your NWA1123 can extend the range of the WLAN. In the figure below, the
NWA1123 in Repeater mode (Z) has a wireless connection to the NWA1123 in Root AP mode (X) which is
connected to a wired network and also has a wireless connection to another NWA1123 in Repeater
mode (Y) at the same time. Z and Y act as repeaters that forward traffic between associated wireless
clients and the wired LAN. Clients A and B access the AP and the wired network behind the AP through
repeaters Z and Y.
Chapter 1 Introduction
Figure 4 Repeater Application
When the NWA1123 is in Repeater mode, repeater security between the NWA1123 and other repeater is
independent of the security between the wireless clients and the AP or repeater. When repeater
security is enabled, both APs and repeaters must use the same pre-shared key. See Section 8.2 on page
70 and Section 11.2 on page 107 for more details.
NWA1123 Series User’s Guide
17
Chapter 1 Introduction
Once the security settings of peer sides match one another, the connection between devices is made.
At the time of writing, repeater security is compatible with the NWA1123 only.
NWA1123 Series User’s Guide
18
PART I
Standalone
Configuration
19
2.1 Overview
The NWA1123 extends the range of your existing wired network without additional wiring, providing easy
network access to mobile users. You can set up a wireless network with other IEEE 802.11a/b/g/n/ac
compatible devices. The NWA1123 is able to function both 2.4GHz and 5GHz networks at the same time.
Wireless clients can connect to the NWA1123 (A) to access network resources.
CHAPTER 2
Standalone AP Mode
2.2 Ways to Manage the NWA1123
You can use the following ways to manage the NWA1123.
Web Configurator
The Web Configurator allows easy NWA1123 setup and management using an Internet browser. This
User’s Guide provides information about the Web Configurator.
Command-Line Interface (CLI)
The CLI allows you to use text-based commands to configure the NWA1123. You can access it using
remote management (for example, SSH or Telnet). See the Command Reference Guide for more
information.
NWA1123 Series User’s Guide
20
Chapter 2 Standalone AP Mode
File Transfer Protocol (FTP)
This protocol can be used for firmware upgrades and configuration backup and restore.
Simple Network Management Protocol (SNMP)
The NWA1123 can be monitored by an SNMP manager. See the SNMP chapter in this User’s Guide.
2.3 Good Habits for Managing the NWA1123
Do the following things regularly to make the NWA1123 more secure and to manage it more effectively.
• Change the password often. Use a password that’s not easy to guess and that consists of different
types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your
password, you will have to reset the NWA1123 to its factory default settings. If you backed up an
earlier configuration file, you won’t have to totally re-configure the NWA1123; you can simply restore
your last configuration.
2.4 Hardware Connections
See your Quick Start Guide for information on making hardware connections.
2.5 LEDs
The LEDs of your NWA1123 can be controlled by using the Suppression feature such that the LEDs stay lit
(ON) or OFF after the device is ready.
Following are LED descriptions for the NWA1123 series models.
2.5.1 NWA1123-AC PRO
The LEDs will stay ON when the NWA1123-AC PRO is ready. You can change this setting in the
Maintenance > LEDs > Suppression screen.
NWA1123 Series User’s Guide
21
Chapter 2 Standalone AP Mode
Figure 5 NWA1123-AC PRO LEDs
The following table describes the LEDs.
Table 2 NWA1123-AC PRO LEDs
LEDCOLORSTATUSDESCRIPTION
PWR/SYS RedSlow Blinking (On for 1s,
Off for 1s)
GreenOn
RedOffThe NWA1123 is ready for use.
GreenOn
RedOnThere is system error and the NWA1123 cannot boot up,
GreenOff
RedFast Blinking (On for
50ms, Off for 50ms)
GreenOff
Red Slow Blinking (Blink for 3
times, Off for 3s)
GreenOff
RedOffThe wireless module of the NWA1123 is disabled or failed.
GreenSlow Blinking (On for 1s,
Off for 1s)
ManagementGreenOffThe NWA1123 is in standalone mode.
GreenOnThe NWA1123 is in cloud management mode.
AmberSlow Blinking (On for 1s,
Off for 1s)
WLANGreenOnThe antenna switch is set to “Ceiling” for the radio.
AmberOnThe antenna switch is set to “Wall” for the radio.
OffThe 2.4 GHz WLAN is not active.
The NWA1123 is booting up.
or the NWA1123 suffered a system failure.
The NWA1123 is doing firmware upgrade.
The Uplink port is disconnected.
The 2.4 GHz WLAN is active.
The 2.4 GHz WLAN is active.
NWA1123 Series User’s Guide
22
Chapter 2 Standalone AP Mode
Table 2 NWA1123-AC PRO LEDs (continued)
LEDCOLORSTATUSDESCRIPTION
WLANGreenOnThe antenna switch is set to “Ceiling” for the radio.
The 5 GHz WLAN is active.
AmberOnThe antenna switch is set to “Wall” for the radio.
The 5 GHz WLAN is active.
OffThe 5 GHz WLAN is not active.
UPLINKAmber/
Green
LANAmber/
Green
LocatorWhiteBlinkingThe Locator is activated and will show the actual location
OnAmber - The port is operating as a 100-Mbps connection.
Green - The port is operating as a Gigabit connection
(1000 Mbps).
BlinkingThe NWA1123 is sending/receiving data through the port.
OffThe port is not connected.
OnAmber - The port is operating as a 100-Mbps connection.
Green - The port is operating as a Gigabit connection
(1000 Mbps).
BlinkingThe LAN port is sending/receiving data through the port.
OffThe LAN port is not connected.
of the NWA1123 between several devices in the network.
OffThe Locator function is off.
2.5.2 NWA1123-ACv2
The following are the LED descriptions for your NWA1123-ACv2.
Figure 6 NWA1123-ACv2 LED
NWA1123 Series User’s Guide
23
Chapter 2 Standalone AP Mode
The following are the LED descriptions for your NWA1123.
Table 3 NWA1123-ACv2 LED
COLORSTATUSDESCRIPTION
AmberSlow Blinking (On for 1s,
Off for 1s)
GreenOn
AmberOffThe NWA1123 is ready for use.
GreenOn
AmberOffThe NWA1123’s wireless interface is activated.
GreenOn
AmberOnThe NWA1123 failed to boot up or is experience system failure.
GreenOff
AmberFast Blinking (On for
50ms, Off for 50ms)
GreenOff
AmberSlow Blinking (Blink for 3
times, Off for 3s)
GreenOff
AmberOffThe wireless LAN is disabled or fails.
GreenSlow Blinking (On for 1s,
Off for 1s)
The NWA1123 is booting up.
The NWA1123 is undergoing firmware upgrade.
The Uplink port is disconnected.
2.5.3 NWA1123-AC HD
The following are the LED descriptions for your NWA1123-AC HD.
Figure 7 NWA1123-AC HD LED
NWA1123 Series User’s Guide
24
Chapter 2 Standalone AP Mode
The following are the LED descriptions for your NWA1123.
Table 4 NWA1123-AC HD LED
COLORSTATUSDESCRIPTION
AmberSlow Blinking (On for 1s,
Off for 1s)
GreenOn
GreenOnThe NWA1123 is ready for use, the NWA1123’s wireless interface is
Bright BlueOnThe NWA1123’s wireless interface is activated, but there are no wireless
RedOnThe NWA1123 failed to boot up or is experience system failure.
RedFast Blinking (On for
50ms, Off for 50ms)
RedSlow Blinking (blink for 3
times, Off for 3s)
GreenSlow Blinking (blink for 1
time, Off for 1s)
BlueSlow Blinking (blink for 1
time, Off for 1s)
The NWA1123 is booting up.
activated, and/or wireless clients are connected to the NWA1123.
clients connected.
The NWA1123 is undergoing firmware upgrade.
The Uplink port is disconnected.
The wireless LAN is disabled or fails.
The NWA1123 is checking for an available 5GHz channel.
2.6 Starting and Stopping the NWA1123
Here are some of the ways to start and stop the NWA1123.
Always use Maintenance > Shutdown or the shutdown command
before you turn off the NWA1123 or remove the power. Not doing so can
cause the firmware to become corrupt.
Table 5 Starting and Stopping the NWA1123
METHODDESCRIPTION
Turning on the powerA cold start occurs when you turn on the power to the NWA1123. The NWA1123 powers
Rebooting the
NWA1123
Using the RESET buttonIf you press the RESET button on the back of the NWA1123, the NWA1123 sets the
Clicking Maintenance
> Shutdown >
Shutdown or using the
shutdown command
Disconnecting the
power
up, checks the hardware, and starts the system processes.
A warm start (without powering down and powering up again) occurs when you use the
Reboot button in the Reboot screen or when you use the reboot command. The
NWA1123 writes all cached data to the local storage, stops the system processes, and
then does a warm start.
configuration to its default values and then reboots. See Section 25.6 on page 205 for
more information.
Clicking Maintenance > Shutdown > Shutdown or using the shutdown command writes all
cached data to the local storage and stops the system processes. Wait for the device to
shut down and then manually turn off or remove the power. It does not turn off the
power.
Power off occurs when you turn off the power to the NWA1123. The NWA1123 simply turns
off. It does not stop the system processes or write cached data to local storage.
The NWA1123 does not stop or start the system processes when you apply configuration files or run shell
scripts although you may temporarily lose access to network resources.
NWA1123 Series User’s Guide
25
The Web Configurator
3.1 Overview
The NWA1123 Web Configurator allows easy management using an Internet browser. Browsers
supported are:
• Firefox 36.0.1 or later
• Chrome 41.0 or later
• IE 10 or later
The recommended screen resolution is 1024 x 768 pixels and higher.
3.2 Accessing the Web Configurator
CHAPTER 3
1Make sure your NWA1123 is working in standalone AP mode (see Section 1.1.1 on page 13) and
hardware is properly connected. See the Quick Start Guide.
2If the NWA1123 and your computer are not connected to a DHCP server, make sure your computer’s IP
address is in the range between "192.168.1.3" and "192.168.1.254".
3Browse to the NWA1123’s DHCP-assigned IP address or http://192.168.1.2. The Login screen appears.
4Enter the user name (default: “admin”) and password (default: “1234”). Click Login.
When the NWA1123 is connected to the Internet, a Visit button will also display. Click the button to open
the NCC web site login page in a new tab or window.
NWA1123 Series User’s Guide
26
Chapter 3 The Web Configurator
5If you logged in using the default user name and password, the Update Admin Info screen appears.
Otherwise, the dashboard appears.
The Update Admin Info screen appears every time you log in using the default user name and default
password. If you change the password for the default user account, this screen does not appear
anymore.
6Each time you log into the web configurator, a Message center screen will pop up showing the QR
code of the NWA1123. Use the Zyxel Nebula Mobile app to scan the QR code. The NWA1123 will be
registered and assigned to an existing site/organization in the NCC automatically. Click OK to close the
screen,
NWA1123 Series User’s Guide
27
Chapter 3 The Web Configurator
A
C
B
3.3 Navigating the Web Configurator
The following summarizes how to navigate the web configurator from the Dashboard screen. This guide
uses the NWA1123-ACv2 screens as an example. The screens may vary slightly for different models.
Figure 8 The Web Configurator’s Main Screen
The Web Configurator’s main screen is divided into these parts:
• A - Title Bar
• B - Navigation Panel
• C - Main Window
3.3.1 Title Bar
The title bar provides some useful links that always appear over the screens below, regardless of how
deep into the Web Configurator you navigate.
Figure 9 Title Bar
The icons provide the following functions.
Table 6 Title Bar: Web Configurator Icons
LABELDESCRIPTION
LogoutClick this to log out of the Web Configurator.
WizardClick this to open the wizard. See Chapter 4 on page 37 for more information.
NWA1123 Series User’s Guide
28
Chapter 3 The Web Configurator
Table 6 Title Bar: Web Configurator Icons (continued)
LABELDESCRIPTION
HelpClick this to open the help page for the current screen.
AboutClick this to display basic information about the NWA1123.
Site MapClick this to see an overview of links to the Web Configurator screens.
Object
Reference
CLIClick this to open a popup window that displays the CLI commands sent by the Web
nebulaClick this to open the NCC web site login page in a new tab or window.
Click this to open a screen where you can check which configuration items reference an
object.
Configurator.
About
Click About to display basic information about the NWA1123.
Figure 10 About
The following table describes labels that can appear in this screen.
Table 7 About
LABELDESCRIPTION
Boot ModuleThis shows the version number of the software that handles the booting process of the
NWA1123.
Current VersionThis shows the firmware version of the NWA1123.
Released DateThis shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released.
OKClick this to close the screen.
Site Map
Click Site MAP to see an overview of links to the Web Configurator screens. Click a screen’s link to go to
that screen.
NWA1123 Series User’s Guide
29
Figure 11 Site Map
Object Reference
Chapter 3 The Web Configurator
Click Object Reference to open the Object Reference screen. Select the type of object and the
individual object and click Refresh to show which configuration settings reference the object.
Figure 12 Object Reference
The fields vary with the type of object. The following table describes labels that can appear in this
screen.
Table 8 Object References
LABELDESCRIPTION
Object NameThis identifies the object for which the configuration settings that use it are displayed. Click the
object’s name to display the object’s configuration screen in the main window.
#This field is a sequential value, and it is not associated with any entry.
ServiceThis is the type of setting that references the selected object. Click a service’s name to display
the service’s configuration screen in the main window.
NWA1123 Series User’s Guide
30
Loading...
+ 218 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.