IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features.
Screenshots and graphics in this book may differ slightly from your product due to differences in
your product firmware or your computer operating system. Every effort has been made to ensure
that the information in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the NWA and access the Web Configurator.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) and CLI
commands to configure the NWA.
Note: It is recommended you use the Web Configurator to configure the NWA.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary
User .........................................................................................................................................................69
AP Profile ................................................................................................................................................76
System .................................................................................................................................................. 117
Log and Report .....................................................................................................................................142
4.1.1 What You Can Do in this Chapter ............................................................................................36
4.2 What You Need to Know ...................................................................................................................36
4.3 Network Status ..................................................................................................................................37
4.3.1 Network Status Graph ............................................................................................................38
4.4 Radio List .........................................................................................................................................39
4.4.1 AP Mode Radio Information ....................................................................................................40
4.5 Station List ........................................................................................................................................42
4.6 WDS Link Info ...................................................................................................................................43
6.1.1 What You Can Do in this Chapter ............................................................................................53
6.2 IP Setting ..........................................................................................................................................53
8.3.1 Edit User Authentication Timeout Settings ..............................................................................74
Chapter 9
AP Profile.............................................................................................................................................76
9.1.1 What You Can Do in this Chapter ............................................................................................76
9.1.2 What You Need To Know .........................................................................................................76
9.2 Radio .................................................................................................................................................77
9.2.1 Add/Edit Radio Profile .............................................................................................................78
9.4 Security List .......................................................................................................................................85
9.5 MAC Filter List ...................................................................................................................................89
9.5.1 Add/Edit MAC Filter Profile ......................................................................................................90
9.6 Layer-2 Isolation List .........................................................................................................................91
13.1.1 What You Can Do in this Chapter ........................................................................................ 117
13.2 Host Name .................................................................................................................................... 117
13.3 Date and Time .............................................................................................................................. 118
13.3.1 Pre-defined NTP Time Servers List .....................................................................................120
13.3.2 Time Server Synchronization ...............................................................................................120
19.6 Resetting the NWA ........................................................................................................................175
19.7 Getting More Troubleshooting Help ..............................................................................................175
Appendix A Importing Certificates ...................................................................................................176
Appendix B IPv6 ..............................................................................................................................189
Appendix C Customer Support........................................................................................................198
Appendix D Legal Information .........................................................................................................204
Index ..................................................................................................................................................210
NWA5120 Series User’s Guide
9
PART I
User’s Guide
10
1.1 Overview
This User’s Guide covers the following models: NWA5121-N, NWA5121-NI, and NWA5123-NI. Your
NWA is a wireless AP (Access Point). It extends the range of your existing wired network without
additional wiring, providing easy network access to mobile users.
Table 1 NWA Series Comparison Table
FEATURESNWA5121-NNWA5121-NINWA5123-NI
Supported Wireless Standards
Supported Frequency Bands
Available Security ModesNone
Number of SSID Profiles323232
Number of Wireless Radios112
Layer-2 IsolationYesYesYes
External AntennasYesNoNo
Maximum number of log messages 512 event logs or 1024 debug logs
You can set the NWA to operate in either standalone AP or managed AP mode. When the NWA is in
standalone AP mode, it can serve as a normal AP, as an RF monitor to search for rouge APs to help
eliminate network threats, or even as a root AP or a wireless repeater to establish wireless links
with other APs in a WDS (Wireless Distribution System). A WDS is a wireless connection between
two or more APs.
Your NWA’s business-class reliability, SMB features, and centralized wireless management make it
ideally suited for advanced service delivery in mission-critical networks. It uses Multiple BSSID and
VLAN to provide simultaneous independent virtual APs. Additionally, innovations in roaming
technology and QoS features eliminate voice call disruptions.
The NWA controls network access with Media Access Control (MAC) address filtering, and rogue
Access Point (AP) detection. It also provides a high level of network traffic security, supporting IEEE
802.1x, Wi-Fi Protected Access (WPA), WPA2 and Wired Equivalent Privacy (WEP) data encryption.
NWA5120 Series User’s Guide
11
Your NWA is easy to install, configure and use. The embedded Web-based configurator enables
simple, straightforward management and maintenance. See the Quick Start Guide for how to make
hardware connections.
1.1.1 Management Mode
An AP controller can use Control And Provisioning of Wireless Access Points (CAPWAP, see RFC
5415) to discover and configure multiple managed APs.
The NWA is a standalone AP by default. You can switch the NWA from being a standalone AP to
acting as a managed AP to allow it to be managed by an AP controller, such as the NXC2500. To
change between management modes, see Chapter 5 on page 49.
Table 2 NWA Management Mode Comparison
MANAGEMENT MODEDEFAULT IP ADDRESSUPLOAD FIRMWARE VIA
Standalone AP
Managed APDynamicFTP
When the NWA is in standalone AP mode, the NWA is set to have a static management IP address
(192.168.1.2) by default. You can use either the web configurator or FTP to upload firmware. See
Section 15.3 on page 160 for more information about firmware uploading.
Chapter 1 Introduction
Static (192.168.1.2)Web Configurator or FTP
When the NWA is in managed AP mode, it acts as a DHCP client and obtains an IP address from the
AP controller. It can be configured ONLY by the AP controller. To change the NWA back to standalone
AP mode, you need to check the AP controller for the NWA’s IP address and use FTP to upload
firmware for standalone AP mode.
1.1.2 MBSSID
A Basic Service Set (BSS) is the set of devices forming a single wireless network (usually an access
point and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS. In
Multiple BSS (MBSSID) mode, the NWA provides multiple virtual APs, each forming its own BSS and
using its own individual SSID profile.
You can configure multiple SSID profiles, and have all of them active at any one time.
You can assign different wireless and security settings to each SSID profile. This allows you to
compartmentalize groups of users, set varying access privileges, and prioritize network traffic to
and from certain BSSs.
To the wireless clients in the network, each SSID appears to be a different access point. As in any
wireless network, clients can associate only with the SSIDs for which they have the correct security
settings.
For example, you might want to set up a wireless network in your office where Internet telephony
(VoIP) users have priority. You also want a regular wireless network for standard users, as well as a
‘guest’ wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority,
SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for
guest users. In this example, the guest user is forbidden access to the wired Land Area Network
(LAN) behind the AP and can access only the Internet.
NWA5120 Series User’s Guide
12
Figure 1 Multiple BSSs
Chapter 1 Introduction
1.1.3 Dual-Radio
The NWA5123-NI is equipped with dual wireless radios. This means you can configure two different
wireless networks to operate simultaneously.
Note: A different channel should be configured for each WLAN interface to reduce the
effects of radio interference.
You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz
band for time sensitive traffic like high-definition video, music, and gaming.
NWA5120 Series User’s Guide
13
Figure 2 Dual-Radio Application
1.1.4 Root AP
Chapter 1 Introduction
In Root AP mode, the NWA (Z) can act as the root AP in a wireless network and also allow repeaters
(X and Y) to extend the range of its wireless network at the same time. In the figure below, both
clients A, B and C can access the wired network through the root AP.
Figure 3 Root AP Application
On the NWA in Root AP mode, you can have multiple SSIDs active for reqular wireless connections
and one SSID for the connection with a repeater (repeater SSID). Wireless clients can use either
NWA5120 Series User’s Guide
14
SSID to associate with the NWA in Root AP mode. A repeater must use the repeater SSID to
connect to the NWA in Root AP mode.
When the NWA is in Root AP mode, repeater security between the NWA and other repeater is
independent of the security between the wireless clients and the AP or repeater. When repeater
security is enabled, both APs and repeaters must use the same pre-shared key. See Section 7.2 on
page 58 and Section 11.2 on page 98 for more details.
Unless specified, the term “security settings” refers to the traffic between the wireless clients and
the AP. At the time of writing, repeater security is compatible with the NWA only.
1.1.5 Repeater
The NWA can act as a wireless network repeater to extend a root AP’s wireless network range, and
also establish wireless connections with wireless clients.
Using Repeater mode, your NWA can extend the range of the WLAN. In the figure below, the NWA
in Repeater mode (Z) has a wireless connection to the NWA in Root AP mode (X) which is
connected to a wired network and also has a wireless connection to another NWA in Repeater mode
(Y) at the same time. Z and Y act as repeaters that forward traffic between associated wireless
clients and the wired LAN. Clients A and B access the AP and the wired network behind the AP
throught repeaters Z and Y.
Chapter 1 Introduction
Figure 4 Repeater Application
When the NWA is in Repeater mode, repeater security between the NWA and other repeater is
independent of the security between the wireless clients and the AP or repeater. When repeater
security is enabled, both APs and repeaters must use the same pre-shared key. See Section 7.2 on
page 58 and Section 11.2 on page 98 for more details.
Once the security settings of peer sides match one another, the connection between devices is
made.
NWA5120 Series User’s Guide
15
Chapter 1 Introduction
At the time of writing, repeater security is compatible with the NWA only.
1.2 Ways to Manage the NWA
You can use the following ways to manage the NWA.
Web Configurator
The Web Configurator allows easy NWA setup and management using an Internet browser. This
User’s Guide provides information about the Web Configurator.
Command-Line Interface (CLI)
The CLI allows you to use text-based commands to configure the NWA. You can access it using
remote management (for example, SSH or Telnet). See the Command Reference Guide for more
information.
File Transfer Protocol (FTP)
This protocol can be used for firmware upgrades and configuration backup and restore.
Simple Network Management Protocol (SNMP)
The NWA can be monitored by an SNMP manager. See the SNMP chapter in this User’s Guide.
1.3 Good Habits for Managing the NWA
Do the following things regularly to make the NWA more secure and to manage it more effectively.
• Change the password often. Use a password that’s not easy to guess and that consists of
different types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier
working configuration may be useful if the device becomes unstable or even crashes. If you
forget your password, you will have to reset the NWA to its factory default settings. If you backed
up an earlier configuration file, you won’t have to totally re-configure the NWA; you can simply
restore your last configuration.
1.4 Hardware Connections
See your Quick Start Guide for information on making hardware connections.
NWA5120 Series User’s Guide
16
1.5 LEDs
The following are the LED descriptions for your NWA.
Figure 5 LED
Chapter 1 Introduction
Table 3 LED
COLORSTATUSDESCRIPTION
AmberOnThere is system error and the NWA cannot boot up, or the NWA doesn’t
have an Ethernet connection with the LAN.
FlashingThe NWA is starting up.
OffThe NWA is receiving power and ready for use.
GreenOnThe WLAN is active.
BlinkingThe WLAN is active, and transmitting or receiving data.
OffThe WLAN is not active.
1.6 Starting and Stopping the NWA
Here are some of the ways to start and stop the NWA.
NWA5120 Series User’s Guide
17
Chapter 1 Introduction
Always use Maintenance > Shutdown or the shutdown command before
you turn off the NWA or remove the power. Not doing so can cause the
firmware to become corrupt.
Table 4 Starting and Stopping the NWA
METHODDESCRIPTION
Turning on the powerA cold start occurs when you turn on the power to the NWA. The NWA powers up,
checks the hardware, and starts the system processes.
Rebooting the NWAA warm start (without powering down and powering up again) occurs when you use
the Reboot button in the Reboot screen or when you use the reboot command. The
NWA writes all cached data to the local storage, stops the system processes, and then
does a warm start.
Using the RESET
button
Clicking
Maintenance >
Shutdown >
Shutdown or using
the shutdown
command
Disconnecting the
power
If you press the RESET button on the back of the NWA, the NWA sets the
configuration to its default values and then reboots. See Section 19.6 on page 175 for
more information.
Clicking Maintenance > Shutdown > Shutdown or using the shutdown command
writes all cached data to the local storage and stops the system processes. Wait for
the device to shut down and then manually turn off or remove the power. It does not
turn off the power.
Power off occurs when you turn off the power to the NWA. The NWA simply turns off.
It does not stop the system processes or write cached data to local storage.
The NWA does not stop or start the system processes when you apply configuration files or run
shell scripts although you may temporarily lose access to network resources.
NWA5120 Series User’s Guide
18
2.1 Overview
The NWA Web Configurator allows easy management using an Internet browser.
In order to use the Web Configurator, you must:
• Use Internet Explorer 7.0 and later versions, Mozilla Firefox 9.0 and later versions, Safari 4.0 and
later versions, or Google Chrome 10.0 and later versions.
• Allow pop-up windows.
• Enable JavaScript (enabled by default).
• Enable Java permissions (enabled by default).
• Enable cookies.
CHAPTER 2
The Web Configurator
The recommended screen resolution is 1024 x 768 pixels and higher.
2.2 Access
1Make sure your NWA is working in standalone AP mode (seeSection 1.1.1 on page 12) and
hardware is properly connected. See the Quick Start Guide.
2Browse to https://192.168.1.2. The Login screen appears.
3Enter the user name (default: “admin”) and password (default: “1234”).
NWA5120 Series User’s Guide
19
Chapter 2 The Web Configurator
4Click Login. If you logged in using the default user name and password, the Update Admin Info
screen appears. Otherwise, the dashboard appears.
The Update Admin Info screen appears every time you log in using the default user name and
default password. If you change the password for the default user account, this screen does not
appear anymore.
2.3 Navigating the Web Configurator
The following summarizes how to navigate the web configurator from the Dashboard screen. This
guide uses the NWA5123-NI screens as an example. The screens may vary slightly for different
models.
NWA5120 Series User’s Guide
20
Chapter 2 The Web Configurator
A
C
B
Figure 6 The Web Configurator’s Main Screen
2.3.1 Title Bar
The Web Configurator’s main screen is divided into these parts:
• A - Title Bar
• B - Navigation Panel
• C - Main Window
The title bar provides some useful links that always appear over the screens below, regardless of
how deep into the Web Configurator you navigate.
Figure 7 Title Bar
The icons provide the following functions.
Table 5 Title Bar: Web Configurator Icons
LABELDESCRIPTION
LogoutClick this to log out of the Web Configurator.
HelpClick this to open the help page for the current screen.
AboutClick this to display basic information about the NWA.
Site MapClick this to see an overview of links to the Web Configurator screens.
NWA5120 Series User’s Guide
21
Chapter 2 The Web Configurator
Table 5 Title Bar: Web Configurator Icons (continued)
LABELDESCRIPTION
Object
Reference
CLIClick this to open a popup window that displays the CLI commands sent by the Web
Click this to open a screen where you can check which configuration items reference an
object.
Configurator.
About
Click About to display basic information about the NWA.
Figure 8 About
The following table describes labels that can appear in this screen.
Table 6 About
LABELDESCRIPTION
Boot ModuleThis shows the version number of the software that handles the booting process of the
Current VersionThis shows the firmware version of the NWA.
Released DateThis shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released.
OKClick this to close the screen.
NWA.
Site Map
Click Site MAP to see an overview of links to the Web Configurator screens. Click a screen’s link to
go to that screen.
NWA5120 Series User’s Guide
22
Figure 9 Site Map
Chapter 2 The Web Configurator
Object Reference
Click Object Reference to open the Object Reference screen. Select the type of object and the
individual object and click Refresh to show which configuration settings reference the object.
Figure 10 Object Reference
NWA5120 Series User’s Guide
23
Chapter 2 The Web Configurator
The fields vary with the type of object. The following table describes labels that can appear in this
screen.
Table 7 Object References
LABELDESCRIPTION
Object NameThis identifies the object for which the configuration settings that use it are displayed. Click
#This field is a sequential value, and it is not associated with any entry.
ServiceThis is the type of setting that references the selected object. Click a service’s name to
PriorityIf it is applicable, this field lists the referencing configuration item’s position in its list,
NameThis field identifies the configuration item that references the object.
DescriptionIf the referencing configuration item has a description configured, it displays here.
RefreshClick this to update the information in this screen.
CancelClick Cancel to close the screen.
the object’s name to display the object’s configuration screen in the main window.
display the service’s configuration screen in the main window.
otherwise N/A displays.
CLI Messages
Click CLI to look at the CLI commands sent by the Web Configurator. These commands appear in a
popup window, such as the following.
Figure 11 CLI Messages
Click Clear to remove the currently displayed information.
Note: See the Command Reference Guide for information about the commands.
2.3.2 Navigation Panel
Use the menu items on the navigation panel to open screens to configure NWA features. Click the
arrow in the middle of the right edge of the navigation panel to hide the navigation panel menus or
drag it to resize them. The following sections introduce the NWA’s navigation panel menus and their
screens.
NWA5120 Series User’s Guide
24
Chapter 2 The Web Configurator
Figure 12 Navigation Panel
Dashboard
The dashboard displays general device information, system status, system resource usage, and
interface status in widgets that you can re-arrange to suit your needs.
For details on the Dashboard’s features, see Chapter 3 on page 31.
Monitor Menu
The monitor menu screens display status and statistics information.
Table 8 Monitor Menu Screens Summary
FOLDER OR LINKTABFUNCTION
Network StatusDisplay general LAN interface information and packet statistics.
Wireless
AP InformationRadio ListDisplay information about the radios of the connected APs.
Station InfoDisplay information about the connected stations.
WDS Link InfoDisplay statistics about the NWA’s WDS connections.
Detected DeviceDisplay information about suspected rogue APs.
LogView LogDisplay log entries for the NWA.
Configuration Menu
Use the configuration menu screens to configure the NWA’s features.
Table 9 Configuration Menu Screens Summary
FOLDER OR LINKTABFUNCTION
MGNT ModeConfigure the NWA as a standalone AP, or a managed AP
NetworkIP SettingConfiguer the IP address for the NWA Ethernet interface.
VLANManage the Ethernet interface VLAN settings.
Wireless
NWA5120 Series User’s Guide
25
Chapter 2 The Web Configurator
Table 9 Configuration Menu Screens Summary (continued)
FOLDER OR LINKTABFUNCTION
AP Management WLAN SettingEdit wireless AP information, remove APs, and reboot them.
MON ModeRogue/Friendly AP
List
Load BalancingConfigure load balancing for traffic moving to and from wireless
DCSConfigure dynamic wireless channel selection.
Object
UsersUserCreate and manage users.
SettingManage default settings for all users, general settings for user
AP ProfileRadioCreate and manage wireless radio settings files that can be
SSIDCreate and manage wireless SSID, security, MAC filtering, and
MON ProfileCreate and manage rogue AP monitoring files that can be
WDS ProfileCreate and manage WDS profiles that can be used to connect to
CertificateMy CertificatesCreate and manage the NWA’s certificates.
Trusted Certificates Import and manage certificates from trusted sources.
System
Host NameConfigure the system and domain name for the NWA.
Date/TimeConfigure the current date, time, and time zone in the NWA.
WWWConfigure HTTP, HTTPS, and general authentication.
SSHConfigure SSH server and SSH service settings.
TELNETConfigure telnet server settings for the NWA.
FTPConfigure FTP server settings.
SNMPConfigure SNMP communities and services.
Log & Report
Email Daily
Report
Log SettingConfigure the system log, e-mail logs, and remote syslog servers.
Configure how the NWA monitors for rogue APs.
clients.
sessions, and rules to force user authentication.
associated with different APs.
layer-2 isolation files that can be associated with different APs.
associated with different APs.
different APs in WDS.
Configure where and how to send daily reports and what reports
to send.
Maintenance Menu
Use the maintenance menu screens to manage configuration and firmware files, run diagnostics,
and reboot or shut down the NWA.
Table 10 Maintenance Menu Screens Summary
FOLDER OR LINKTABFUNCTION
File ManagerConfiguration FileManage and upload configuration files for the NWA.
Firmware PackageView the current firmware version and to upload firmware.
Shell ScriptManage and run shell script files for the NWA.
Table 10 Maintenance Menu Screens Summary (continued)
FOLDER OR LINKTABFUNCTION
RebootRestart the NWA.
ShutdownTurn off the NWA.
2.3.3 Warning Messages
Warning messages, such as those resulting from misconfiguration, display in a popup window.
Figure 13 Warning Message
2.3.4 Tables and Lists
Chapter 2 The Web Configurator
The Web Configurator tables and lists are quite flexible and provide several options for how to
display their entries.
2.3.4.1 Manipulating Table Display
Here are some of the ways you can manipulate the Web Configurator tables.
1Click a column heading to sort the table’s entries according to that column’s criteria.
2Click the down arrow next to a column heading for more options about how to display the entries.
The options available vary depending on the type of fields in the column. Here are some examples
of what you can do:
• Sort in ascending alphabetical order
• Sort in descending (reverse) alphabetical order
• Select which columns to display
• Group entries by field
• Show entries in groups
NWA5120 Series User’s Guide
27
Chapter 2 The Web Configurator
• Filter by mathematical operators (<, >, or =) or searching for text.
3Select a column heading cell’s right border and drag to re-size the column.
4Select a column heading and drag and drop it to change the column order. A green check mark
displays next to the column’s title when you drag the column to a valid new location.
5Use the icons and fields at the bottom of the table to navigate to different pages of entries and
control how many entries display at a time.
NWA5120 Series User’s Guide
28
Chapter 2 The Web Configurator
2.3.4.2 Working with Table Entries
The tables have icons for working with table entries. A sample is shown next. You can often use the
[Shift] or [Ctrl] key to select multiple entries to remove, activate, or deactivate.
Tab le 11 Common Table Icons
Here are descriptions for the most common table icons.
Table 12 Common Table Icons
LABELDESCRIPTION
AddClick this to create a new entry. For features where the entry’s position in the numbered
list is important (features where the NWA applies the table’s entries in order like the
firewall for example), you can select an entry and click Add to create a new entry after
the selected entry.
EditDouble-click an entry or select it and click Edit to open a screen where you can modify
the entry’s settings. In some tables you can just click a table entry and edit it directly in
the table. For those types of tables small red triangles display for table entries with
changes that you have not yet applied.
RemoveTo remove an entry, select it and click Remove. The NWA confirms you want to remove
it before doing so.
ActivateTo turn on an entry, select it and click Activate.
InactivateTo turn off an entry, select it and click Inactivate.
Object ReferenceSelect an entry and click Object Reference to open a screen that shows which settings
use the entry.
2.3.4.3 Working with Lists
When a list of available entries displays next to a list of selected entries, you can often just doubleclick an entry to move it from one list to the other. In some lists you can also use the [Shift] or
[Ctrl] key to select multiple entries, and then use the arrow button to move them to the other list.
Figure 14 Working with Lists
NWA5120 Series User’s Guide
29
PART II
Technical Reference
30
Loading...
+ 185 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.