ZYXEL NWA50AX User guide

Default Login Details
User’s Guide

NWA50AX

802.11ax (WiFi6) Dual-Radio PoE Access Point
Management IP Address
User Name admin
Password 1234
http://DHCP-assigned IP
OR
http://192.168.1.2
Version 6.20 Edition 1, 5/2021
Copyright © 2021 Zyxel and/ or its affiliates. All rights reserved.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product hardware, firmware, or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
Some screens or options in this book may not be available for your product (see the product feature tables in Section 1.4 on page 18).
Related Documentation
•Quick Start Guide The Quick Start Guide shows how to connect the Zyxel Device and access the Web Configurator.
•CLI Reference Guide The CLI Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands
to configure the Zyxel Device.
Note: It is recommended you use the Web Configurator to configure the Zyxel Device.
• Web Configurator Online Help Click the help icon in any screen for help in configuring that screen and supplementary information.
• Nebula Control Center User’s Guide This User’s Guide shows how to manage the Zyxel Device remotely. The features of these devices can
be managed through Nebula Control Center. It also offers features that are not available when the Zyxel Device is in standalone mode (see Section 2.1.2 on page 20).
• NXC Series User’s Guide See this User’s Guide for instructions on using the NXC as an AP Controller (AC) for the Zyxel Device.
This is used when the Zyxel Device is set to be managed by a Zyxel AC.
•More Information Go to support.zyxel.com to find other information on the Zyxel Device
NWA50AX User’s Guide
.
2

Document Conventions

Warnings and Notes
These are how warnings and notes are shown in this guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may need to
configure or helpful tips) or recommendations.
Syntax Conventions
• All models in this series may be referred to as the “Zyxel Device” in this guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Configuration > Network > IP Setting means you first click Configuration in the navigation panel, then the Network sub menu and finally the IP Setting tab to get to that screen.
Icons Used in Figures
Figures in this guide may use the following generic icons. The Zyxel Device icon is not an exact representation of your device.
Zyxel Device Router Switch Internet
Server Desktop Laptop AP Controller
Printer Nebula Switch Nebula Gateway Smart T.V.
IP Phone
NWA50AX User’s Guide
3

Contents Overview

Contents Overview
Introduction ........................................................................................................................................... 12
AP Management .................................................................................................................................. 20
Hardware ............................................................................................................................................... 28
Web Configurator ................................................................................................................................. 30
Standalone Configuration ................................................................................................................41
Standalone Configuration ................................................................................................................... 42
Dashboard ............................................................................................................................................ 44
Setup Wizard ......................................................................................................................................... 49
Monitor ................................................................................................................................................... 54
Network ................................................................................................................................................. 69
Wireless ................................................................................................................................................... 75
User ......................................................................................................................................................... 86
AP Profile ................................................................................................................................................ 93
MON Profile ......................................................................................................................................... 117
WDS Profile ........................................................................................................................................... 120
Certificates .......................................................................................................................................... 122
System .................................................................................................................................................. 138
Log and Report ................................................................................................................................... 157
File Manager ....................................................................................................................................... 167
Diagnostics .......................................................................................................................................... 178
LEDs ...................................................................................................................................................... 180
Reboot ................................................................................................................................................. 183
Shutdown ............................................................................................................................................. 184
Local Configuration in Cloud Mode ..............................................................................................185
Cloud Mode ........................................................................................................................................ 186
Network ............................................................................................................................................... 189
Maintenance ...................................................................................................................................... 192
Appendices and Troubleshooting .................................................................................................197
Troubleshooting .................................................................................................................................. 198
NWA50AX User’s Guide
4

Table of Contents

Table of Contents
Document Conventions ... .... .... ................................................... .... ....................................................3
Contents Overview .............................................................................................................................4
Table of Contents.................................................................................................................................5
Chapter 1
Introduction ........................................................................................................................................12
1.1 Overview ......................................................................................................................................... 12
1.2 Zyxel Device Roles .......................................................................................................................... 12
1.2.1 Root AP ................................................................................................................................... 13
1.2.2 Wireless Repeater .................................................................................................................. 13
1.2.3 Radio Frequency (RF) Monitor .............................................................................................14
1.3 Sample Feature Applications ........................................................................................................ 16
1.3.1 MBSSID .................................................................................................................................... 16
1.3.2 Dual-Radio ............................................................................................................................. 17
1.4 Zyxel Device Product Feature ....................................................................................................... 18
Chapter 2
AP Management................................................................................................................................20
2.1 Management Mode ...................................................................................................................... 20
2.1.1 Standalone ............................................................................................................................ 20
2.1.2 Nebula Control Center ......................................................................................................... 20
2.2 Switching Management Modes ................................................................................................... 22
2.3 Zyxel One Network (ZON) Utility .................................................................................................... 22
2.3.1 Requirements ......................................................................................................................... 22
2.3.2 Run the ZON Utility ................................................................................................................. 23
2.4 Ways to Access the Zyxel Device ................................................................................................. 26
2.5 Good Habits for Managing the Zyxel Device ............................................................................. 27
Chapter 3
Hardware............................................................................................................................................28
3.1 Zyxel Device Single LED .................................................................................................................. 28
3.1.1 Zyxel Device LED ................................................................................................................... 28
Chapter 4
Web Configurator...............................................................................................................................30
4.1 Overview ......................................................................................................................................... 30
4.2 Accessing the Web Configurator ................................................................................................. 30
4.3 Navigating the Web Configurator ............................................................................................... 33
NWA50AX User’s Guide
5
Table of Contents
4.3.1 Title Bar ................................................................................................................................... 34
4.3.2 Navigation Panel .................................................................................................................. 35
4.3.3 Standalone Mode Navigation Panel Menus ..................................................................... 35
4.3.4 Cloud Mode Navigation Panel Menus ............................................................................... 37
4.3.5 Tables and Lists ...................................................................................................................... 38
Part I: Standalone Configuration...................................................................41
Chapter 5
Standalone Configuration.................................................................................................................42
5.1 Overview ......................................................................................................................................... 42
5.2 Starting and Stopping the Zyxel Device ...................................................................................... 42
Chapter 6
Dashboard..........................................................................................................................................44
6.1 Overview ......................................................................................................................................... 44
6.1.1 CPU Usage ............................................................................................................................. 47
6.1.2 Memory Usage ...................................................................................................................... 48
Chapter 7
Setup Wizard.......................................................................................................................................49
7.1 Accessing the Wizard ..................................................................................................................... 49
7.2 Using the Wizard ............................................................................................................................. 49
7.2.1 Step 1 Time Settings .............................................................................................................. 49
7.2.2 Step 2 Password and Uplink Connection ........................................................................... 50
7.2.3 Step 3 Radio .......................................................................................................................... 51
7.2.4 Step 4 SSID .............................................................................................................................. 52
7.2.5 Summary ................................................................................................................................ 52
Chapter 8
Monitor................................................................................................................................................54
8.1 Overview ......................................................................................................................................... 54
8.1.1 What You Can Do in this Chapter ....................................................................................... 54
8.2 What You Need to Know ............................................................................................................... 54
8.3 Network Status ................................................................................................................................ 55
8.3.1 Port Statistics Graph .............................................................................................................. 56
8.4 Radio List .......................................................................................................................................... 57
8.4.1 AP Mode Radio Information ................................................................................................59
8.5 Station List ........................................................................................................................................ 61
8.6 WDS Link Info ................................................................................................................................... 62
8.7 Detected Device ............................................................................................................................ 63
NWA50AX User’s Guide
6
Table of Contents
8.8 View Log .......................................................................................................................................... 66
Chapter 9
Network...............................................................................................................................................69
9.1 Overview ......................................................................................................................................... 69
9.1.1 What You Can Do in this Chapter ....................................................................................... 69
9.2 IP Setting .......................................................................................................................................... 69
9.3 VLAN ................................................................................................................................................ 71
9.4 NCC Discovery ................................................................................................................................ 73
Chapter 10
Wireless...............................................................................................................................................75
10.1 Overview ....................................................................................................................................... 75
10.1.1 What You Can Do in this Chapter ..................................................................................... 75
10.1.2 What You Need to Know ...................................................................................................76
10.2 AP Management .......................................................................................................................... 76
10.3 Rogue AP ....................................................................................................................................... 79
10.3.1 Add/Edit Rogue/Friendly List .............................................................................................. 83
10.4 DCS ................................................................................................................................................ 83
10.5 Technical Reference .................................................................................................................... 84
Chapter 11
User......................................................................................................................................................86
11.1 Overview ....................................................................................................................................... 86
11.1.1 What You Can Do in this Chapter ..................................................................................... 86
11.1.2 What You Need To Know ...................................................................................................86
11.2 User Summary ................................................................................................................................ 87
11.2.1 Add/Edit User ....................................................................................................................... 87
11.3 Setting ............................................................................................................................................ 89
11.3.1 Edit User Authentication Timeout Settings ........................................................................ 91
Chapter 12
AP Profile.............................................................................................................................................93
12.1 Overview ....................................................................................................................................... 93
12.1.1 What You Can Do in this Chapter ..................................................................................... 93
12.1.2 What You Need To Know ...................................................................................................93
12.2 Radio .............................................................................................................................................. 94
12.2.1 Add/Edit Radio Profile ........................................................................................................ 95
12.3 SSID ............................................................................................................................................... 100
12.3.1 SSID List ............................................................................................................................... 101
12.3.2 Add/Edit SSID Profile ......................................................................................................... 102
12.4 Security List .................................................................................................................................. 105
12.4.1 Add/Edit Security Profile ................................................................................................... 105
NWA50AX User’s Guide
7
Table of Contents
12.5 MAC Filter List .............................................................................................................................. 115
12.5.1 Add/Edit MAC Filter Profile ............................................................................................... 115
Chapter 13
MON Profile.......................................................................................................................................117
13.1 Overview ..................................................................................................................................... 117
13.1.1 What You Can Do in this Chapter ................................................................................... 117
13.2 MON Profile ................................................................................................................................. 117
13.2.1 Add/Edit MON Profile ....................................................................................................... 118
Chapter 14
WDS Profile........................................................................................................................................120
14.1 Overview ..................................................................................................................................... 120
14.1.1 What You Can Do in this Chapter ................................................................................... 120
14.2 WDS Profile ................................................................................................................................... 120
14.2.1 Add/Edit WDS Profile ........................................................................................................ 121
Chapter 15
Certificates .......................................................................................................................................122
15.1 Overview ..................................................................................................................................... 122
15.1.1 What You Can Do in this Chapter ................................................................................... 122
15.1.2 What You Need to Know ................................................................................................. 122
15.1.3 Verifying a Certificate ...................................................................................................... 124
15.2 My Certificates ............................................................................................................................ 125
15.2.1 Add My Certificates .......................................................................................................... 126
15.2.2 Edit My Certificates ........................................................................................................... 128
15.2.3 Import Certificates ............................................................................................................ 131
15.3 Trusted Certificates ..................................................................................................................... 132
15.3.1 Edit Trusted Certificates .................................................................................................... 133
15.3.2 Import Trusted Certificates ............................................................................................... 136
15.4 Technical Reference .................................................................................................................. 137
Chapter 16
System...............................................................................................................................................138
16.1 Overview ..................................................................................................................................... 138
16.1.1 What You Can Do in this Chapter ................................................................................... 138
16.2 Host Name ................................................................................................................................... 138
16.3 Date and Time ........................................................................................................................... 139
16.3.1 Pre-defined NTP Time Servers List ..................................................................................... 141
16.3.2 Time Server Synchronization ............................................................................................ 142
16.4 WWW Overview .......................................................................................................................... 143
16.4.1 Service Access Limitations ............................................................................................... 143
16.4.2 System Timeout .................................................................................................................. 143
NWA50AX User’s Guide
8
Table of Contents
16.4.3 HTTPS ................................................................................................................................... 143
16.4.4 Configuring WWW Service Control ................................................................................. 144
16.4.5 HTTPS Example ................................................................................................................... 145
16.5 SSH ................................................................................................................................................ 151
16.5.1 How SSH Works .................................................................................................................. 152
16.5.2 SSH Implementation on the Zyxel Device ...................................................................... 153
16.5.3 Requirements for Using SSH ..............................................................................................153
16.5.4 Configuring SSH ................................................................................................................. 153
16.5.5 Examples of Secure Telnet Using SSH .............................................................................. 154
16.6 FTP ............................................................................................................................................... 155
Chapter 17
Log and Report....... .... ... .................................................... ...............................................................157
17.1 Overview ..................................................................................................................................... 157
17.1.1 What You Can Do In this Chapter .................................................................................. 157
17.2 Log Setting .................................................................................................................................. 157
17.2.1 Log Setting Screen ............................................................................................................ 157
17.2.2 Edit System Log Settings ................................................................................................... 159
17.2.3 Edit Remote Server ............................................................................................................ 163
17.2.4 Active Log Summary ........................................................................................................ 164
Chapter 18
File Manager ....................................................................................................................................167
18.1 Overview ..................................................................................................................................... 167
18.1.1 What You Can Do in this Chapter ................................................................................... 167
18.1.2 What you Need to Know .................................................................................................. 167
18.2 Configuration File ....................................................................................................................... 168
18.2.1 Example of Configuration File Download Using FTP ...................................................... 172
18.3 Firmware Package ..................................................................................................................... 173
18.3.1 Example of Firmware Upload Using FTP .......................................................................... 174
18.4 Shell Script .................................................................................................................................... 175
Chapter 19
Diagnostics.......................................................................................................................................178
19.1 Overview ..................................................................................................................................... 178
19.1.1 What You Can Do in this Chapter ................................................................................... 178
19.2 Diagnostics .................................................................................................................................. 178
19.3 Remote Capture ........................................................................................................................ 179
Chapter 20
LEDs ...................................................................................................................................................180
20.1 Overview ..................................................................................................................................... 180
20.1.1 What You Can Do in this Chapter ................................................................................... 180
NWA50AX User’s Guide
9
Table of Contents
20.2 Suppression Screen .................................................................................................................... 180
20.3 Locator Screen ........................................................................................................................... 181
Chapter 21
Reboot...............................................................................................................................................183
21.1 Overview ..................................................................................................................................... 183
21.1.1 What You Need To Know ................................................................................................. 183
21.2 Reboot ......................................................................................................................................... 183
Chapter 22
Shutdown..........................................................................................................................................184
22.1 Overview ..................................................................................................................................... 184
22.1.1 What You Need To Know ................................................................................................. 184
22.2 Shutdown ..................................................................................................................................... 184
Part II: Local Configuration in Cloud Mode................................................185
Chapter 23
Cloud Mode .....................................................................................................................................186
23.1 Overview ..................................................................................................................................... 186
23.2 Cloud Mode Web Configurator Screens ................................................................................. 186
23.3 Dashboard .................................................................................................................................. 187
Chapter 24
Network.............................................................................................................................................189
24.1 Overview ..................................................................................................................................... 189
24.1.1 What You Can Do in this Chapter ................................................................................... 189
24.2 IP Setting ...................................................................................................................................... 189
24.3 VLAN ............................................................................................................................................ 191
Chapter 25
Maintenance....................................................................................................................................192
25.1 Overview ..................................................................................................................................... 192
25.1.1 What You Can Do in this Chapter ................................................................................... 192
25.2 Shell Script .................................................................................................................................... 192
25.3 Diagnostics .................................................................................................................................. 193
25.4 View Log ...................................................................................................................................... 194
Part III: Appendices and Troubleshooting.................................................. 197
NWA50AX User’s Guide
10
Table of Contents
Chapter 26
Troubleshooting................................................................................................................................198
26.1 Overview ..................................................................................................................................... 198
26.2 Power, Hardware Connections, and LED ................................................................................ 198
26.3 Zyxel Device Management, Access, and Login ..................................................................... 199
26.4 Internet Access ........................................................................................................................... 202
26.5 WiFi Network ................................................................................................................................ 203
26.6 Resetting the Zyxel Device ........................................................................................................ 205
26.7 Getting More Troubleshooting Help .........................................................................................205
Appendix A Importing Certificates ............................................................................................... 206
Appendix B IPv6............................................................................................................................... 230
Appendix C Customer Support ..................................................................................................... 238
Appendix D Legal Information ...................................................................................................... 244
Index.................................................................................................................................................251
NWA50AX User’s Guide
11

1.1 Overview

The Zyxel Device can be managed in one of the following methods: remote management through Nebula Control Center (NCC) or local management in Standalone Mode. The Zyxel Device runs in standalone mode by default, but it is recommended to use NCC management if it is available for your device. For more information about Access Point (AP) management, see Section 2.1 on page 20.
Use the Zyxel Device to set up a wireless network with other IEEE 802.11a/b/g/n/ac/ax compatible devices in either 2.4 GHz and 5 GHz networks or both at the same time.
When two or more APs are interconnected, this network is called a Wireless Distribution System (WDS). See Section 1.2.2 on page 13 for more information on root and repeater APs and how to set them up.
CHAPTER 1

Introduction

1.2 Zyxel Device Roles

This section describes some of the different roles that your Zyxel Device can take up within a network. Not all roles are supported by all models (see Section 1.4 on page 18). The Zyxel Device can serve as a:
Access Point (AP) - This is used to allow wireless clients to connect to the Internet.
Radio Frequency (RF) monitor - An RF monitor searches for rogue APs to help eliminate network
threats if it supports monitor mode and rogue APs detection/containment. An RF monitor cannot simultaneously act as an AP.
Root AP - A root AP connects to the gateway or switch through a wired Ethernet connection and
has wireless repeaters connected to it to extend its range.
Wireless repeater - A wireless repeater wirelessly connects to a root AP and extends the network’s
wireless range.
The following figure shows a network setup that uses these different roles to create a secure Wireless Distribution System (WDS). The root AP (Y) is connected to a network with Internet access and has a wireless repeater (X) connected to it to expand the wireless network’s range. Clients (A, B, and C) can access the wired network through the wireless repeater and/or root AP.
If a client (D) tries to set up his own AP (R) with weak security settings, the network becomes exposed to threats. The RF monitor (M) scans the area to detect all APs, which can help the network administrator discover these rogue APs and remove them or use the NXC to quarantine them.
NWA50AX User’s Guide
12
Figure 1 Sample Network Setup
1.2.1 Root AP
Chapter 1 Introduction
In Root AP mode, you can have multiple SSIDs active for regular wireless connections and one SSID for the connection with a repeater (repeater SSID). Wireless clients can use either SSID to associate with the Zyxel Device in Root AP mode. A repeater must use the repeater SSID to connect to the Zyxel Device in Root AP mode.
When the Zyxel Device is in Root AP mode, repeater security between the Zyxel Device and other repeaters is independent of the security between the wireless clients and the AP or repeater. When repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section
10.2 on page 76 and Section 14.2 on page 120 for more details.
Unless specified, the term “security settings” refers to the traffic between the wireless clients and the AP. At the time of writing, repeater security is compatible with the Zyxel Device only.
1.2.2 Wireless Repeater
Using Repeater mode, your Zyxel Device can extend the range of the WLAN. In the figure below, the Zyxel Device in Repeater mode (Z) has a wireless connection to the Zyxel Device in Root AP mode (X) which is connected to a wired network and also has a wireless connection to another Zyxel Device in Repeater mode (Y) at the same time. Z and Y act as repeaters that forward traffic between associated wireless clients and the wired LAN. Clients A and B access the AP and the wired network behind the AP through repeaters Z and Y.
NWA50AX User’s Guide
13
Figure 2 Repeater Application
Chapter 1 Introduction
When the Zyxel Device is in Repeater mode, repeater security between the Zyxel Device and other repeater is independent of the security between the wireless clients and the AP or repeater. When repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section
10.2 on page 76 and Section 14.2 on page 120 for more details.
For NCC managed devices, you only need to enable AP Smart Mesh to automatically create wireless links between APs. See the NCC User’s Guide for more details.
To set up a WDS in standalone mode APs, do the following steps. You should already have the root AP set up (see the Quick Start Guide for hardware connections).
1 Go to Configuration > Object > WDS Profile in your root AP Web Configurator and click Add.
2 Enter a profile name, an SSID for the WDS, and a pre-shared key.
3 Do steps 1 and 2 for the wireless repeater using the same SSID and pre-shared key.
4 Once the security settings of peer sides match one another, the connection between the root and
repeater Zyxel Devices is made.
To set up a WDS in NXC managed Zyxel Devices, see the NXC User’s Guide.
1.2.3 Radio Frequency (RF) Monitor
The Zyxel Device can be set to work as an RF monitor to discover nearby Access Points. The information it obtains from other APs is used to tag possible rogue APs and quarantine them if the Zyxel Device is managed by the NXC (see Section 2.2 on page 22). If the Zyxel Device’s radio setting is set to MON Mode (RF Monitor mode), it will serve as a dedicated RF monitor and its AP clients are disconnected.
NWA50AX User’s Guide
14
Chapter 1 Introduction
The models that do not support MON Mode support Rogue AP Detection (see Section 10.3 on page 79). Rogue AP Detection allows the AP to scan all channels similar to MON Mode except that the Zyxel Device still works as an AP while it scans the environment for wireless signals. To see which Zyxel Devices support the RF Monitor feature, see Section 1.4 on page 18.
The Zyxel Device in MON Mode scans a range of WiFi channels that you specify in a MON Profile, either in the 2.4 GHz or 5 GHz band. To scan both bands, you need to set both radio 1 and radio 2 in MON Mode. Once a rogue AP is detected, the network administrator can manually change the network settings to limit its access to the network using its MAC address or have the device physically removed. If the Zyxel Device is managed by an NXC, the network administrator can also use Rogue AP Containment through the NXC.
MON Mode in Standalone Mode
To use an RF monitor in standalone mode, do the following steps:
1 Create a MON Profile in Configuration > Object > MON Profile > Add. Specify a Channel dwell time to
determine how long the RF monitor scans a specific channel before moving to the next one.
2 To scan all 2.4 GHz and 5 GHz channels, select auto in Scan Channel Mode. Make sure that the Activate
check box is selected and click OK.
3 Go to the Configuration > Wireless > AP Management screen and set Radio 1 OP Mode (2.4 GHz) and/or
Radio 2 OP Mode (5 GHz) to MON Mode.
4 Select the Radio 1(2) Profile that you created in the previous step. Make sure that the Radio 1(2)
Activate check box is selected and click Apply.
5 Go to Monitor > Wireless > Detected Device to see a list of APs scanned by the RF monitor.
6 Select an AP or APs in the list and click Mark as Rogue AP or Mark as Friendly AP.
MON Mode in NXC-Managed Zyxel Devices
For NXC-managed Zyxel Devices, do the following steps in the NXC Web Configurator:
1 Create a MON Profile in CONFIGURATION > Object > MON Profile > Add. Specify a Channel dwell time to
determine how long the RF monitor scans a specific channel before moving to the next one.
2 To scan all 2.4 GHz and 5 GHz channels, select auto in Scan Channel Mode. Make sure that the Activate
check box is selected and click OK.
3 Go to the CONFIGURATION > Wireless > AP Management > Mgmt. AP List > Edit screen and/or set Radio
1 OP Mode (2.4 GHz) and Radio 2 OP Mode (5 GHz) to MON Mode.
4 Select the Radio 1(2) Profile that you created in the previous step. Select Override Group Radio Setting
and click OK.
5 Go to MONITOR > Wireless > Detected Device to see a list of APs scanned by the RF monitor.
6 Select an AP or APs in the list and click Mark as Rogue AP or Mark as Friendly AP.
NWA50AX User’s Guide
15
Chapter 1 Introduction
7 To quarantine a rogue AP, go to CONFIGURATION > Wireless > Rogue AP, select the APs you want to
quarantine, and click Containment. Make sure the Enable Rogue AP Containment check box is selected, and click Apply.

1.3 Sample Feature Applications

This section describes some possible scenarios and topologies that you can set up using your Zyxel Device.
1.3.1 MBSSID
A Basic Service Set (BSS) is the set of devices forming a single wireless network (usually an access point and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS. In Multiple BSS (MBSSID) mode, the Zyxel Device provides multiple virtual APs, each forming its own BSS and using its own individual SSID profile.
You can configure multiple SSID profiles, and have all of them active at any one time.
You can assign different wireless and security settings to each SSID profile. This allows you to compartmentalize groups of users, set varying access privileges, and prioritize network traffic to and from certain BSSs.
To the wireless clients in the network, each SSID appears to be a different access point. As in any wireless network, clients can associate only with the SSIDs for which they have the correct security settings.
For example, you might want to set up a wireless network in your office where Internet telephony (VoIP) users have priority. You also want a regular wireless network for standard users, as well as a ‘guest’ wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority, SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for guest users. In this example, the guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access only the Internet.
NWA50AX User’s Guide
16
Figure 3 Multiple BSSs
Chapter 1 Introduction
1.3.2 Dual-Radio
Some of the Zyxel Device models are equipped with dual wireless radios. This means you can configure two different wireless networks to operate simultaneously.
Note: A different channel should be configured for each WLAN interface to reduce the
effects of radio interference.
You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming.
NWA50AX User’s Guide
17
Figure 4 Dual-Radio Application
Chapter 1 Introduction

1.4 Zyxel Device Product Feature

The following table lists the features of the Zyxel Device..
Table 1 Zyxel Device Product Feature Table
FEATURES NWA50AX
Supported Wireless Standards
Supported Frequency Bands 2.4 GHz
Available Security Modes None
Number of SSID Profiles 64
Number of Wireless Radios 2
Monitor Mode & Rogue APs Containment
Rogue AP Detection Yes
WDS (Wireless Distribution System) - Root AP & Repeater Modes
Tunnel Forwarding Mode No
Layer-2 Isolation No
Supported PoE Standards
Power Detection Yes
External Antennas No
Internal Antennas Yes
A
IEEE 802.11a
IEEE802.11b IEEE 802.11g IEEE 802.11n
IEEE 802.11ac
IEEE802.11ax
5 GHz
WPA2-MIX WPA2-PSK
WEP
WPA2-PSK-MIX
Enhanced-open
WPA3-personal
No
Yes
IEEE 802.3at
NWA50AX User’s Guide
18
Chapter 1 Introduction
Table 1 Zyxel Device Product Feature Table (continued)
FEATURES NWA50AX
Antenna Switch No
Console Port 4-Pin Serial
LED Locator Yes
LED Suppression Yes
AC (AP Controller) Discovery No
NebulaFlex PRO No
NCC Discovery Yes
802.11r Fast Roaming Support Yes
802.11k/v Assisted Roaming Yes
Bluetooth Low Energy (BLE) No
USB Port for BLE No
Ethernet Storm Control No
Grounding No
Power Jack Yes
Maximum number of log messages 512 event logs
A. For NXC managed devices only. See the NXC User’s Guide for details.
NWA50AX User’s Guide
19
Chapter 2 AP Management

2.1 Management Mode

The Zyxel Device is a unified AP and can be managed by the NCC or work as a standalone device. We recommend you use NCC to manage multiple APs (see the NCC User’s Guide).
Note: Not all models can be managed by NCC or an AC. See Section 1.4 on page 18 to
check whether your product supports these.
The following table shows the default IP addresses and firmware upload methods for different management modes.
CHAPTER 2

AP Management

Table 2 Zyxel Device Management Mode Comparison
MANAGEMENT MODE DEFAULT IP ADDRESS UPLOAD FIRMWARE VIA
Nebula Control Center Dynamic NCC Portal
Standalone Dynamic or
When the Zyxel Device is in standalone mode and connects to a DHCP server, it uses the IP address assigned by the DHCP server. Otherwise, the Zyxel Device uses the default static management IP address (192.168.1.2). You can use the NCC Discovery screen to allow the Zyxel Device to be managed by the NCC.
When the Zyxel Device is managed by the NCC, it acts as a DHCP client and obtains an IP address from the NCC. It can be configured ONLY by the NCC. To change the Zyxel Device back to standalone mode, use the Reset button to restore the default configuration. Alternatively, you need to check the NCC for the Zyxel Device’s IP address and use FTP to upload the default configuration file at conf/ system-default.conf to the Zyxel Device and reboot the device.
2.1.1 Standalone
When working in standalone mode, the Zyxel Device is configured mainly with its built-in Web Configurator. You can only connect to and set up one Zyxel Device at a time in this mode.
See Chapter 5 on page 42 for detailed information about the standalone Web Configurator screens.
Static (192.168.1.2)
Built-in Web Configurator
2.1.2 Nebula Control Center
In this mode, which is also called cloud mode, you can manage and monitor the Zyxel Device through the Zyxel Nebula cloud-based network management system. This means you can manage devices remotely without the need of connecting to each device directly. It offers many features to better manage and monitor not just the Zyxel Device, but your network as a whole, including supported
NWA50AX User’s Guide
20
Chapter 2 AP Management
switches and gateways. Your network can also be managed through your smartphone using the Nebula Mobile app. See Section 23.1 on page 186 for an example NCC managed network topology.
NCC allows different levels of management. You can configure each device on its own or configure a set of devices together as a site. You can also monitor groups of sites called organizations, as shown below.
Table 3 NCC Management Levels
Organization
Site A Site B
Device A-1 Device A-2 Device B-1 Device B-2
It graphically presents your device/network statistics and shows an overview of your network topology, as shown in the following figure. It also sends reports, alerts, and notifications for events, such as when a site goes offline.
Figure 5 Traffic Monitoring Graph From NCC
NWA50AX User’s Guide
21
Chapter 2 AP Management
See the NCC (Nebula Control Center) User’s Guide for how to configure Nebula managed devices. See
Chapter 24 on page 189 if you want to change the Zyxel Device’s VLAN setting or manually set its IP
address.
Note: Make sure your network firewall allows TCP ports 443, 4335, and 6667 as well as UDP port
123 so the device can connect to and sync with the NCC.

2.2 Switching Management Modes

The Zyxel Device is in standalone mode by default, with NCC and/or AC discovery enabled.
Standalone-to-NCC
Register the Zyxel Device at the NCC website and then turn on the Zyxel Device. Make sure that NCC Discovery is enabled (see Section 9.4 on page 73). The NCC manages the Zyxel Device automatically
when it is discovered.
NCC-to-Standalone
Unregister the Zyxel Device from the NCC organization/site. Reset the Zyxel Device to factory defaults (see Section 26.6 on page 205).

2.3 Zyxel One Network (ZON) Utility

ZON Utility is a program designed to help you deploy and manage a network more efficiently. It detects devices automatically and allows you to do basic settings on devices in the network without having to be near it.
The ZON Utility issues requests via Zyxel Discovery Protocol (ZDP) and in response to the query, the device responds back with basic information including IP address, firmware version, location, system and model name in the same broadcast domain. The information is then displayed in the ZON Utility screen and you can perform tasks like basic configuration of the devices and batch firmware upgrade in it. You can download the ZON Utility at www.zyxel.com and install it on your computer (Windows operating system).
2.3.1 Requirements
Before installing the ZON Utility on your PC, please make sure it meets the requirements listed below.
Operating System
At the time of writing, the ZON Utility is compatible with:
• Windows 7 (both 32-bit / 64-bit versions)
• Windows 8 (both 32-bit / 64-bit versions)
• Windows 8.1 (both 32-bit / 64-bit versions)
• Window 10 (both 32-bit / 64-bit versions)
NWA50AX User’s Guide
22
Note: To check for your Windows operating system version, right-click on My Computer >
Properties. You should see this information in the General tab.
Note: It is suggested that you install Npcap, the packet capture library for Windows operating
systems, and remove WinPcap or any other installed packet capture tools before you install the ZON utility.
Hardware
Here are the minimum hardware requirements to use the ZON Utility on your PC.
• Core i3 processor
•2 GB RAM
• 100 MB free hard disk
• WXGA (Wide XGA 1280x800)
2.3.2 Run the ZON Utility
1 Double-click the ZON Utility to run it.
2 The first time you run the ZON Utility, you will see if your device and firmware version support the ZON
Utility. Click the OK button to close this screen. Figure 6 Supported Devices and Versions
If you want to check the supported models and firmware versions later, you can click the Show information about ZON icon in the upper right hand corner of the screen. Then select the Supported
NWA50AX User’s Guide
23
Chapter 2 AP Management
model and firmware version link. If your device is not listed here, see the device release notes for ZON utility support. The release notes are in the firmware zip file on the Zyxel web site.
Figure 7 ZON Utility Screen
3 Select a network adapter to which your supported devices are connected.
Figure 8 Network Adapter
4 Click the Go button for the ZON Utility to discover all supported devices in your network.
Figure 9 Discovery
5 The ZON Utility screen shows the devices discovered.
NWA50AX User’s Guide
24
Chapter 2 AP Management
Figure 10 ZON Utility Screen
6 Select a device and then use the icons to perform actions. Some functions may not be available for
your devices.
Note: You must know the selected device admin password before taking actions on the
device using the ZON utility icons.
Figure 11 Password Prompt
The following table describes the icons numbered from left to right in the ZON Utility screen.
Table 4 ZON Utility Icons
ICON DESCRIPTION
1 IP Configuration Change the selected device’s IP address.
2 Renew IP Address Update a DHCP-assigned dynamic IP address.
3 Reboot Device Use this icon to restart the selected device(s). This may be useful when troubleshooting
or upgrading new firmware.
4 Reset Configuration to Default
5 Locator LED Use this icon to locate the selected device by causing its Locator LED to blink.
6 Web GUI Use this to access the selected device Web Configurator from your browser. You will
7 Firmware Upgrade Use this icon to upgrade new firmware to selected device(s) of the same model. Make
8 Change Password Use this icon to change the admin password of the selected device. You must know
Use this icon to reload the factory-default configuration file. This means that you will lose all previous configurations.
need a username and password to log in.
sure you have downloaded the firmware from the Zyxel website to your computer and unzipped it in advance.
the current admin password before changing to a new one.
NWA50AX User’s Guide
25
Chapter 2 AP Management
Table 4 ZON Utility Icons (continued)
ICON DESCRIPTION
9 Configure NCC Discovery
10 ZAC Use this icon to run the Zyxel AP Configurator of the selected AP.
11 Clear and Rescan Use this icon to clear the list and discover all devices on the connected network again.
12 Save Configuration Use this icon to save configuration changes to permanent memory on a selected
13 Settings Use this icon to select a network adapter for the computer on which the ZON utility is
You must have Internet access to use this feature. Use this icon to enable or disable the Nebula Control Center (NCC) discovery feature on the selected device. If it is enabled, the selected device will try to connect to the NCC. Once the selected device is connected to and has registered in the NCC, it will go into the Nebula cloud management mode.
device.
installed, and the utility language.
The following table describes the fields in the ZON Utility main screen.
Table 5 ZON Utility Fields
LABEL DESCRIPTION
Type This field displays an icon of the kind of device discovered.
Model This field displays the model name of the discovered device.
Firmware Version This field displays the firmware version of the discovered device.
MAC Address This field displays the MAC address of the discovered device.
IP Address This field displays the IP address of an internal interface on the discovered device that
first received an ZDP discovery request from the ZON utility.
System Name This field displays the system name of the discovered device.
Location This field displays where the discovered device is.
Status This field displays whether changes to the discovered device have been done
successfully. As the Zyxel Device does not support IP Configuration, Renew IP address and Flash Locator LED, this field displays “Update failed”, “Not support Renew IP address” and “Not support Flash Locator LED” respectively.
NCC Discovery This field displays if the discovered device supports the Nebula Control Center (NCC)
discovery feature. If it’s enabled, the selected device will try to connect to the NCC. Once the selected device is connected to and has registered in the NCC, it’ll go into the Nebula cloud management mode.
Serial Number Enter the admin password of the discovered device to display its serial number.
Hardware Version This field displays the hardware version of the discovered device.

2.4 Ways to Access the Zyxel Device

You can use the following ways to configure the Zyxel Device.
Web Configurator
The Web Configurator allows easy Zyxel Device setup and management using an Internet browser. If your Zyxel Device is managed by the NCC or an AC, use this only for troubleshooting if you cannot connect to the Internet. This User’s Guide provides information about the Web Configurator.
NWA50AX User’s Guide
26
Chapter 2 AP Management
NCC
This is the primary means by which you manage the Zyxel Device in cloud (NCC) mode. With the NCC, you can remotely manage and monitor the Zyxel Device through a cloud-based network management system. See the NCC User’s Guide for more information.
ZON Utility
Zyxel One Network (ZON) Utility is a utility tool that assists you to set up and maintain network devices in a simple and efficient way. You can download the ZON Utility at www.zyxel.com and install it on your computer (Windows operating system). For more information on ZON Utility see Section 2.3 on page 22.
Command-Line Interface (CLI)
The CLI allows you to use text-based commands to configure the Zyxel Device. You can access it using remote management (for example, SSH or Telnet) or via the console port. See the Command Reference Guide for more information.
File Transfer Protocol (FTP)
This protocol can be used for firmware upgrades and configuration backup and restore.

2.5 Good Habits for Managing the Zyxel Device

Do the following things regularly to make the Zyxel Device more secure and to manage it more effectively.
• Change the password often. Use a password that’s not easy to guess and that consists of different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working configuration may be useful if the Zyxel Device becomes unstable or even crashes. If you forget your password, you will have to reset the Zyxel Device to its factory default settings. If you backed up an earlier configuration file, you will not have to totally re-configure the Zyxel Device; you can simply restore your last configuration.
NWA50AX User’s Guide
27
Chapter 3 Hardware
See the Quick Start Guide for hardware installation and connections.

3.1 Zyxel Device Single LED

The LED of the Zyxel Device can be controlled by using the suppression feature such that the LEDs stay lit (ON) or OFF after the Zyxel Device is ready. Refer to Chapter 20 on page 180 for the LED Suppression and Locator menus in standalone mode.
CHAPTER 3

Hardware

3.1.1 Zyxel Device LED
Figure 12 NWA50AX LED
NWA50AX User’s Guide
28
Chapter 3 Hardware
The following are the LED descriptions for your Zyxel Device.
Table 6 Zyxel Device LED
COLOR STATUS DESCRIPTION
Amber Blinks amber for 1 second
Green
Amber Blinks amber and green
Green
Amber Blinks amber and green
Green
Green Slow Blinking (On for 1
Green Steady On The Zyxel Device is ready for use, the Zyxel Device’s wireless
Bright Blue Steady On The Zyxel Device’s wireless interface is activated, but there
Blue Slow Blinking (Blink for 1
Red On The Zyxel Device failed to boot up or is experiencing system
and green for 1 second alternatively.
alternatively 3 times and then turns solid green for 3 seconds.
alternatively 2 times and then turns solid green for 3 seconds.
second, Off for 1 second)
time, Off for 1 second)
Fast Blinking (On for 50 milliseconds, Off for 50 milliseconds)
Slow Blinking (Blink for 3 times, Off for 3 seconds)
The Zyxel Device is booting up or is connecting with NCC.
The Zyxel Device is discovering the NCC or an AC.
The Zyxel Device is managed by an AC but the uplink is disconnected.
The wireless module of the Zyxel Device is disabled or fails, the Zyxel Device is using default wireless settings, or the Zyxel Device is configured to be managed by NCC but is not yet registered with the NCC.
interface is activated, and/or wireless clients are connected to the Zyxel Device.
are no wireless clients connected.
The Zyxel Device is performing a Channel Availability Check (CAC) with Dynamic Frequency Selection (DFS) to monitor a channel for radar signals.
failure.
The Zyxel Device is undergoing firmware upgrade.
The Uplink port of the Zyxel Device in standalone mode is disconnected.
NWA50AX User’s Guide
29

4.1 Overview

The Web Configurator is an HTML-based management interface that allows easy system setup and management via internet browser. Use a browser that supports HTML5, such Internet Explorer 11, Mozilla Firefox, or Google Chrome. The recommended screen resolution is 1024 by 768 pixels.
In order to use the Web Configurator you need to allow:
• Web browser pop-up windows from your device.
• JavaScript (enabled by default).
• Java permissions (enabled by default).
CHAPTER 4

Web Configurator

4.2 Accessing the Web Configurator

1 Make sure your Zyxel Device hardware is properly connected. See the Quick Start Guide.
2 If the Zyxel Device and your computer are not connected to a DHCP server, make sure your computer’s
IP address is in the range between "192.168.1.3" and "192.168.1.254".
3 Browse to the Zyxel Device’s DHCP-assigned IP address or http://192.168.1.2. The Login screen appears. If
you are in NCC mode, check the NCC’s AP > Monitor > Access Point screen for the Zyxel Device’s LAN IP address.
NWA50AX User’s Guide
30
Loading...
+ 226 hidden pages