IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots
and graphics in this book may differ slightly from your product due to differences in your product
hardware, firmware, or your computer operating system. Every effort has been made to ensure that the
information in this manual is accurate.
Some screens or options in this book may not be available for your product (see the product feature
tables in Section 1.2 on page 14).
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the Zyxel Device and access the Web Configurator.
•CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands
to configure the Zyxel Device.
Note: It is recommended you use the Web Configurator to configure the Zyxel Device.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary information.
• Nebula Control Center User’s Guide
This User’s Guide shows how to manage the Zyxel Device remotely. The features of these devices can
be managed through Nebula Control Center. It also offers features that are not available when the
Zyxel Device is in standalone mode (see Section 2.1.2 on page 31).
• AC (AP Controller) User’s Guide
See the ZyWALL ATP, ZyWALL VPN, USG FLEX, or NXC User’s Guide for instructions on using the
gateways or NXC as an AP Controller (AC) for the Zyxel Device. This is used when the Zyxel Device is
set to be managed by a Zyxel AC.
•More Information
Go to support.zyxel.com to find other information on the Zyxel Device
NWA/WAC/WAX Series User’s Guide
.
2
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may need to
configure or helpful tips) or recommendations.
Syntax Conventions
• All models in this series may be referred to as the “Zyxel Device” in this guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Configuration > Network > IP Setting means you first click Configuration in the navigation panel, then the Network sub
menu and finally the IP Setting tab to get to that screen.
Icons Used in Figures
Figures in this guide may use the following generic icons. The Zyxel Device icon is not an exact
representation of your device.
Bluetooth ............................................................................................................................................. 134
User ....................................................................................................................................................... 137
AP Profile .............................................................................................................................................. 144
System .................................................................................................................................................. 198
Log and Report ................................................................................................................................... 220
8.1.1 What You Can Do in this Chapter ....................................................................................... 89
8.2 What You Need to Know ............................................................................................................... 89
8.3 Network Status ................................................................................................................................ 90
8.3.1 Port Statistics Graph .............................................................................................................. 91
8.4 Radio List .......................................................................................................................................... 92
8.4.1 AP Mode Radio Information ................................................................................................94
8.5 Station List ........................................................................................................................................ 96
8.6 WDS Link Info ................................................................................................................................... 97
9.1.1 AP Controller Management .............................................................................................. 104
9.1.2 What You Can Do in this Chapter ..................................................................................... 106
9.2 IP Setting ........................................................................................................................................ 107
10.1.1 What You Can Do in this Chapter ................................................................................... 117
10.1.2 What You Need to Know ................................................................................................. 118
10.2 AP Management ........................................................................................................................ 118
10.3 Rogue AP ..................................................................................................................................... 124
10.3.1 Add/Edit Rogue/Friendly List ............................................................................................127
12.3.1 Edit User Authentication Timeout Settings ...................................................................... 142
Chapter 13
AP Profile...........................................................................................................................................144
13.1.1 What You Can Do in this Chapter ................................................................................... 144
13.1.2 What You Need To Know ................................................................................................. 144
13.2 Radio ............................................................................................................................................ 147
13.2.1 Add/Edit Radio Profile ...................................................................................................... 148
13.4 Security List .................................................................................................................................. 159
13.5 MAC Filter List .............................................................................................................................. 172
13.5.1 Add/Edit MAC Filter Profile ............................................................................................... 173
13.6 Layer-2 Isolation List .................................................................................................................... 174
26.1.1 What You Can Do in this Chapter ................................................................................... 257
26.2 IP Setting ...................................................................................................................................... 257
This User’s Guide covers the models listed in the following table. They can be managed in one of the
following methods: remote management through Nebula Control Center (NCC) or an AP Controller
(AC) such as the ZyWALL ATP, or local management in Standalone Mode. Each Zyxel Device runs in
standalone mode by default, but it is recommended to use NCC management if it is available for your
device.
CHAPTER 1
Introduction
NCC, AC or Standalone
(NebulaFlex PRO)
• NWA5123-AC HD• NWA1123-ACv2• NWA5123-AC
• WAC6103D-I• NWA1123-AC PRO• WAC5302D-S
• WAC6303D-S• NWA1123-AC HD
• WAC6502D-E• NWA1302-AC
• WAC6502D-S• NWA110AX
• WAC6503D-S• NWA210AX
• WAC6552D-S• NWA220AX-6E
• WAC6553D-E• NWA1123ACv3
• WAC500
• WAC500H
• WAC5302D-Sv2
• WAX510D
• WAX610D
• WAX620D-6E
• WAX630S
• WAX640S-6E
• WAX650S
NCC or Standalone
(NebulaFlex)
AC or Standalone
For more information about Access Point (AP) management, see Section 2.1 on page 30.
When two or more APs are interconnected, this network is called a Wireless Distribution System (WDS).
See Section 1.3.2 on page 24 for more information on root and repeater APs and how to set them up.
The screens you see in the web configurator may be different depending on the Zyxel Device model
you’re using.
NWA/WAC/WAX Series User’s Guide
13
Chapter 1 Introduction
1.2 Zyxel Device Product Feature Comparison
The following tables show the differences between each Zyxel Device model. You can find the feature
introductions in the later sections.
WDS (Wireless
Distribution System) Root AP & Repeater
Modes
Wireless BridgeYesYesNo
Tunnel Forwarding
Mode
Layer-2 IsolationYesYesYes
Supported PoE
Standards
Power DetectionYesYesYes
External AntennasNoNoNo
Internal AntennasYesYesYes
Antenna SwitchYes
Smart Antenna NoYesNo
Console Port4-Pin Serial4-Pin Serial4-Pin Serial
LED LocatorYesYesYes
LED SuppressionYesYesYes
AC (AP Controller)
Discovery
NebulaFlex PROYesYesNo
NCC DiscoveryYesYesYes
802.11r Fast Roaming
Support
802.11k/v Assisted
Roaming
Bluetooth Low Energy
(BLE)
USB Port for BLENoNoNo
Ethernet Storm ControlYesYesYes
Wireless Remote
Capture
GroundingNoYesNo
Power JackYesYesYes
Latest Firmware Version
Supported
Maximum number of
log messages
NoNoNo
YesYesYes
YesYesNo
IEEE 802.3af
IEEE 802.3at
(per AP)
YesYesNo
YesYesYes
YesYesYes
NoYesNo
YesYesYes
6.406.406.40
IEEE 802.3at
IEEE 802.3bt
NoNo
512 event logs
IEEE 802.3af
IEEE 802.3at
NWA/WAC/WAX Series User’s Guide
21
1.3 Zyxel Device Roles
This section describes some of the different roles that your Zyxel Device can take up within a network.
Not all roles are supported by all models (see Section 1.2 on page 14). The Zyxel Device can serve as a:
•Access Point (AP) - This is used to allow WiFi clients to connect to the Internet.
•Radio Frequency (RF) monitor - An RF monitor searches for rogue APs to help eliminate network
threats if it supports monitor mode and rogue APs detection/containment. An RF monitor cannot
simultaneously act as an AP.
•Root AP - A root AP connects to the gateway or switch through a wired Ethernet connection and
has wireless repeaters connected to it to extend its range.
•Wireless repeater - A wireless repeater wirelessly connects to a root AP and extends the network’s
wireless range. A wireless repeater can also be a wireless bridge that connects to a root AP and
extends the network to wired client devices.
If a client (D) tries to set up his own AP (R) with weak security settings, the network becomes exposed to
threats. The RF monitor (M) scans the area to detect all APs, which can help the network administrator
discover these rogue APs and remove them or use the AC (Zyxel’s AP controller) to quarantine them.
Figure 1 Zyxel Device Application in a Network
Chapter 1 Introduction
Wireless Distribution System (WDS) and Wireless Bridge
Wireless Distribution System (WDS) is a network system that allows you to distribute the network to areas
that require Internet connections. You can extend your network to unreachable areas with wireless
repeaters, or with wireless repeaters acting as wireless bridges.
The following figure shows you how to create a secure WDS with two wireless repeaters. The root AP (Y) is
connected to a network with Internet access and has wireless repeaters (X and Z) connected to it to
expand the WiFi network’s range. Clients (A and B) can access the wired network through the wireless
repeaters (X and Z) and/or root AP.
NWA/WAC/WAX Series User’s Guide
22
Chapter 1 Introduction
Figure 2 Wireless Distribution System Network Example
The following figure shows an example of a WDS with a repeater acting as a wireless bridge. A wireless
bridge can connect two wired networks through a wireless connection. The root AP (X) is connected to
a network with Internet access. The wireless repeater (Y) is connected to the root AP (X) to expand the
network. Clients (A and B) are connected to the wireless repeater through the switch/gateway/router
(G). They can access the network with the extended wired network the wireless bridge (wireless
repeater) provides.
NWA/WAC/WAX Series User’s Guide
23
Chapter 1 Introduction
Figure 3 Wireless Bridge Network Example
1.3.1 Root AP
In Root AP mode, you can have multiple SSIDs active for regular WiFi connections and one SSID for the
connection with a repeater (repeater SSID). WiFi clients can use either SSID to associate with the Zyxel
Device in Root AP mode. A repeater must use the repeater SSID to connect to the Zyxel Device in Root
AP mode.
When the Zyxel Device is in Root AP mode, repeater security between the Zyxel Device and other
repeaters is independent of the security between the WiFi clients and the AP or repeater. When
repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section
10.2 on page 118 and Section 15.2 on page 180 for more details.
Unless specified, the term “security settings” refers to the traffic between the WiFi clients and the AP. At
the time of writing, repeater security is compatible with the Zyxel Device only.
1.3.2 Wireless Repeater
Using Repeater mode, your Zyxel Device can extend the range of the WLAN. In the figure below, the
Zyxel Device in Repeater mode (Z) has a wireless connection to the Zyxel Device in Root AP mode (X)
which is connected to a wired network and also has a wireless connection to another Zyxel Device in
Repeater mode (Y) at the same time. Z acts as a repeater that forwards traffic between associated WiFi
clients and the wired LAN. Y acts as a wireless bridge (repeater with WDS wireless bridging enabled) that
forwards traffic between wired clients and the wired LAN. Clients A and B access the AP and the wired
network behind the AP through repeaters Z and Y.
NWA/WAC/WAX Series User’s Guide
24
Figure 4 Repeater Application
Chapter 1 Introduction
When the Zyxel Device is in Repeater mode, repeater security between the Zyxel Device and other
repeater is independent of the security between the WiFi clients and the AP or repeater. When repeater
security is enabled, both APs and repeaters must use the same pre-shared key. See Section 10.2 on
page 118 and Section 15.2 on page 180 for more details.
For NCC managed devices, you only need to enable AP Smart Mesh to automatically create wireless
links between APs. See the NCC User’s Guide for more details.
To set up a WDS in standalone mode APs, do the following steps. You should already have the root AP
set up (see the Quick Start Guide for hardware connections).
1Go to Configuration > Object > WDS Profile in your root AP Web Configurator and click Add.
2Enter a profile name, a WDS SSID, and a pre-shared key.
3Go to Configuration > Wireless > AP Management, select the Radio WDS Profile of the radio on which
you are setting the WDS connection to use the WDS profile you set, and click Apply.
4Do steps 1 and 3 for the wireless repeater using the same WDS SSID and pre-shared key.
5Once the security settings of peer sides match one another, the connection between the root and
repeater Zyxel Devices is made.
(Optional) If your Zyxel Device supports wireless bridging, you can extend a wired network from the port
on the wireless repeater, do the following step:
6Go to Configuration > Wireless > AP Management, select Setup WDS Wireless Bridging to enable wireless
bridge on the wireless repeater.
7Connect the client device to the Zyxel Device’s port with an Ethernet cable.
NWA/WAC/WAX Series User’s Guide
25
Chapter 1 Introduction
Note: Make sure the VLAN settings on both the root AP and the wireless repeater are exactly
the same so they can communicate.
Note: When wireless bridge is enabled, wireless interfaces for client devices will be disabled.
You can only transmit data through the wireless repeater’s ports.
To set up a WDS in AC (AP Controller)-managed Zyxel Devices, see the ZyWALL ATP, ZyWALL VPN, USG
FLEX, or NXC User’s Guide.
1.3.3 Radio Frequency (RF) Monitor
The Zyxel Device can be set to work as an RF monitor to discover nearby Access Points. The information
it obtains from other APs is used to tag possible rogue APs and quarantine them if the Zyxel Device is
managed by an AP controller (see Section 2.1.3 on page 32). If the Zyxel Device’s radio setting is set to
MON Mode (RF Monitor mode), it will serve as a dedicated RF monitor and its AP clients are
disconnected.
The models that do not support MON Mode support Rogue AP Detection (see Section 10.3 on page 124).
Rogue AP Detection allows the AP to scan all channels similar to MON Mode except that the Zyxel
Device still works as an AP while it scans the environment for wireless signals. To see which Zyxel Devices
support the RF Monitor feature, see Section 1.2 on page 14.
The Zyxel Device in MON Mode scans a range of WiFi channels that you specify in a MON Profile, either in
the 2.4 GHz or 5 GHz band. To scan both bands, you need to set both radio 1 and radio 2 in MON Mode.
Once a rogue AP is detected, the network administrator can manually change the network settings to
limit its access to the network using its MAC address or have the device physically removed. If the Zyxel
Device is managed by an AP controller, the network administrator can also use Rogue AP Containment
through the AP controller.
MON Mode in Standalone Mode
To use an RF monitor in standalone mode, do the following steps:
1Create a MON Profile in Configuration > Object > MON Profile > Add. Specify a Channel dwell time to
determine how long the RF monitor scans a specific channel before moving to the next one.
2To scan all 2.4 GHz and 5 GHz channels, select auto in Scan Channel Mode. Make sure that the Activate
check box is selected and click OK.
3Go to the Configuration > Wireless > AP Management screen and set Radio 1 OP Mode (2.4 GHz) and/or
Radio 2 OP Mode (5 GHz) to MON Mode.
4Select the Radio 1(2) Profile that you created in the previous step. Make sure that the Radio 1(2)
Activate check box is selected and click Apply.
5Go to Monitor > Wireless > Detected Device to see a list of APs scanned by the RF monitor.
6Select an AP or APs in the list and click Mark as Rogue AP or Mark as Friendly AP.
MON Mode in AC (AP Controller)-Managed Zyxel Devices
For AP controller-managed Zyxel Devices, do the following steps in the AP Controller Web Configurator:
NWA/WAC/WAX Series User’s Guide
26
Chapter 1 Introduction
1Create a MON Profile in CONFIGURATION > Object > MON Profile > Add. Specify a Ch annel dwell time to
determine how long the RF monitor scans a specific channel before moving to the next one.
2To scan all 2.4 GHz and 5 GHz channels, select auto in Scan Channel Mode. Make sure that the Activate
check box is selected and click OK.
3Go to the CONFIGURATION > Wireless > AP Management > Mgmt. AP List > Edit screen and/or set Radio
1 OP Mode (2.4 GHz) and Radio 2 OP Mode (5 GHz) to MON Mode.
4Select the Radio 1(2) Profile that you created in the previous step. Select Override Group Radio Setting
and click OK.
5Go to MONITOR > Wireless > Detected Device to see a list of APs scanned by the RF monitor.
6Select an AP or APs in the list and click Mark as Rogue AP or Mark as Friendly AP.
7To quarantine a rogue AP, go to CONFIGURATION > Wireless > Rogue AP, select the APs you want to
quarantine, and click Containment. Make sure the Enable Rogue AP Containment check box is
selected, and click Apply.
1.4 Sample Feature Applications
This section describes some possible scenarios and topologies that you can set up using your Zyxel
Device.
1.4.1 MBSSID
A Basic Service Set (BSS) is the set of devices forming a single WiFi network (usually an access point and
one or more WiFi clients). The Service Set IDentifier (SSID) is the name of a BSS. In Multiple BSS (MBSSID)
mode, the Zyxel Device provides multiple virtual APs, each forming its own BSS and using its own
individual SSID profile.
You can configure multiple SSID profiles, and have all of them active at any one time.
You can assign different wireless and security settings to each SSID profile. This allows you to
compartmentalize groups of users, set varying access privileges, and prioritize network traffic to and
from certain BSSs.
To the WiFi clients in the network, each SSID appears to be a different access point. As in any WiFi
network, clients can associate only with the SSIDs for which they have the correct security settings.
For example, you might want to set up a WiFi network in your office where Internet telephony (VoIP)
users have priority. You also want a regular WiFi network for standard users, as well as a ‘guest’ WiFi
network for visitors. In the following figure, VoIP_SSID users have QoS priority, SSID01 is the WiFi network for
standard users, and Guest_SSID is the WiFi network for guest users. In this example, the guest user is
forbidden access to the wired Local Area Network (LAN) behind the AP and can access only the
Internet.
NWA/WAC/WAX Series User’s Guide
27
Figure 5 Multiple BSSs
Chapter 1 Introduction
1.4.2 Dual-Radio/Triple-Radio and BandFlex
The Zyxel Device models are equipped with two or even three WiFi radios. The Zyxel Device uses the WiFi
radios to transmit WiFi signals. This means you can configure two to three different WiFi networks to
operate simultaneously.
BandFlex allows you to select the frequency bands operating on the radios by configuration. A
frequency band is a range of frequency divided into channels which carry the WiFi signals for data
transmission. If your Zyxel Device supports BandFlex, you can configure the second radio on the Zyxel
Device to use the 5 GHz or 6 GHz bands, while the first radio is always set to use the 2.4 GHz band. The 6
GHz band provides less coverage but has the highest amount of channels among the three frequency
bands. Use the 6 GHz band for the most congestion-free transmission if your client devices supports WiFi
6E (see Section 13.1.2 on page 144).
Note: Due to each country’s regulations on frequency band usage, the available radio
bands (2.4 GHz, 5 GHz, and 6 GHz) may differ by countries or markets the Zyxel Device
products are sold to.
Note: A different channel should be configured for each WLAN interface to reduce the
effects of radio interference.
You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz or 6
GHz band for time sensitive traffic like high-definition video, music, and gaming.
See Section 1.2 on page 14 for the supported number of radios, frequency bands, and see if your Zyxel
Device supports BandFlex.
NWA/WAC/WAX Series User’s Guide
28
Figure 6 Dual-Radio Application
Figure 7 Triple-Radio Application
Chapter 1 Introduction
NWA/WAC/WAX Series User’s Guide
29
Chapter 2 AP Management
2.1 Management Mode
The Zyxel Device is a unified AP and can be managed by the NCC or an AP controller (AC), or work as a
standalone device. We recommend you use NCC to manage multiple APs (see the NCC User’s Guide).
An AP Controller, such as the ZyWALL ATP/VPN, USG FLEX, or NXC, can only manage multiple APs in the
same location.
Note: Not all models can be managed by NCC or an AC. See Section 1.2 on page 14 to
check whether your product supports these.
CHAPTER 2
AP Management
The following table shows the default IP addresses and firmware upload methods for different
management modes.
Table 6 Zyxel Device Management Mode Comparison
MANAGEMENT MODEDEFAULT IP ADDRESSUPLOAD FIRMWARE VIA
Nebula Control CenterDynamicNCC Portal
AP ControllerDynamicAP Controller using CAPWAP
StandaloneDynamic or
Static (192.168.1.2)
When the Zyxel Device is in standalone mode and connects to a DHCP server, it uses the IP address
assigned by the DHCP server. Otherwise, the Zyxel Device uses the default static management IP
address (192.168.1.2). You can use the NCC Discovery or AC Discovery screen to allow the Zyxel Device
to be managed by the NCC or an AC, respectively.
When the Zyxel Device is managed by the NCC or an AC, it acts as a DHCP client and obtains an IP
address from the NCC/AC. It can be configured ONLY by the NCC/AC. To change the Zyxel Device
back to standalone mode, use the Reset button to restore the default configuration. Alternatively, you
need to check the NCC/AC for the Zyxel Device’s IP address and use FTP to upload the default
configuration file at conf/system-default.conf to the Zyxel Device and reboot the device.
Note: Not all models can be managed by NCC or an AC. See Section 1.2 on page 14 to
check whether your product supports these.
Built-in Web Configurator
2.1.1 Standalone
When working in standalone mode, the Zyxel Device is configured mainly with its built-in Web
Configurator. You can only connect to and set up one Zyxel Device at a time in this mode.
See Chapter 5 on page 74 for detailed information about the standalone Web Configurator screens.
NWA/WAC/WAX Series User’s Guide
30
Loading...
+ 303 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.