ZYXEL WAC500-5 Instructions

Default Login Details
User’s Guide

NWA/WAC/WAX Series

802.11 a/b/g/n/ac/ax Access Point
Management IP Address
User Name admin
Password 1234
http://DHCP-assigned IP
OR
http://192.168.1.2
Version 6.10-6.20 Edition 1, 5/2021
Copyright © 2021 Zyxel and/ or its affiliates. All rights reserved.
IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots and graphics in this book may differ slightly from your product due to differences in your product hardware, firmware, or your computer operating system. Every effort has been made to ensure that the information in this manual is accurate.
Some screens or options in this book may not be available for your product (see the product feature tables in Section 1.4 on page 18).
Related Documentation
•Quick Start Guide The Quick Start Guide shows how to connect the Zyxel Device and access the Web Configurator.
•CLI Reference Guide The CLI Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands
to configure the Zyxel Device.
Note: It is recommended you use the Web Configurator to configure the Zyxel Device.
• Web Configurator Online Help Click the help icon in any screen for help in configuring that screen and supplementary information.
• Nebula Control Center User’s Guide This User’s Guide shows how to manage the Zyxel Device remotely. The features of these devices can
be managed through Nebula Control Center. It also offers features that are not available when the Zyxel Device is in standalone mode (see Section 2.1.2 on page 26).
• NXC Series User’s Guide See this User’s Guide for instructions on using the NXC as an AP Controller (AC) for the Zyxel Device.
This is used when the Zyxel Device is set to be managed by a Zyxel AC.
•More Information Go to support.zyxel.com to find other information on the Zyxel Device
NWA/WAC/WAX Series User’s Guide
.
2

Document Conventions

Warnings and Notes
These are how warnings and notes are shown in this guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may need to
configure or helpful tips) or recommendations.
Syntax Conventions
• All models in this series may be referred to as the “Zyxel Device” in this guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Configuration > Network > IP Setting means you first click Configuration in the navigation panel, then the Network sub menu and finally the IP Setting tab to get to that screen.
Icons Used in Figures
Figures in this guide may use the following generic icons. The Zyxel Device icon is not an exact representation of your device.
Zyxel Device Router Switch Internet
Server Desktop Laptop AP Controller
Printer Nebula Switch Nebula Gateway Smart T.V.
IP Phone
NWA/WAC/WAX Series User’s Guide
3

Contents Overview

Contents Overview
Introduction ........................................................................................................................................... 12
AP Management .................................................................................................................................. 20
Hardware ............................................................................................................................................... 28
Web Configurator ................................................................................................................................. 30
Standalone Configuration ................................................................................................................41
Standalone Configuration ................................................................................................................... 42
Dashboard ............................................................................................................................................ 44
Setup Wizard ......................................................................................................................................... 49
Monitor ................................................................................................................................................... 54
Network ................................................................................................................................................. 69
Wireless ................................................................................................................................................... 75
User ......................................................................................................................................................... 86
AP Profile ................................................................................................................................................ 93
MON Profile ......................................................................................................................................... 117
WDS Profile ........................................................................................................................................... 120
Certificates .......................................................................................................................................... 122
System .................................................................................................................................................. 138
Log and Report ................................................................................................................................... 157
File Manager ....................................................................................................................................... 167
Diagnostics .......................................................................................................................................... 178
LEDs ...................................................................................................................................................... 180
Reboot ................................................................................................................................................. 183
Shutdown ............................................................................................................................................. 184
Local Configuration in Cloud Mode ..............................................................................................185
Cloud Mode ........................................................................................................................................ 186
Network ............................................................................................................................................... 189
Maintenance ...................................................................................................................................... 192
Appendices and Troubleshooting .................................................................................................197
Troubleshooting .................................................................................................................................. 198
NWA/WAC/WAX Series User’s Guide
4

Table of Contents

Table of Contents
Document Conventions ... .... .... ................................................... .... ....................................................3
Contents Overview .............................................................................................................................4
Table of Contents.................................................................................................................................5
Chapter 1
Introduction ........................................................................................................................................12
1.1 Overview ......................................................................................................................................... 12
1.2 Zyxel Device Roles .......................................................................................................................... 12
1.2.1 Root AP ................................................................................................................................... 13
1.2.2 Wireless Repeater .................................................................................................................. 13
1.2.3 Radio Frequency (RF) Monitor .............................................................................................14
1.3 Sample Feature Applications ........................................................................................................ 16
1.3.1 MBSSID .................................................................................................................................... 16
1.3.2 Dual-Radio ............................................................................................................................. 17
1.4 Zyxel Device Product Feature ....................................................................................................... 18
Chapter 2
AP Management................................................................................................................................20
2.1 Management Mode ...................................................................................................................... 20
2.1.1 Standalone ............................................................................................................................ 20
2.1.2 Nebula Control Center ......................................................................................................... 20
2.2 Switching Management Modes ................................................................................................... 22
2.3 Zyxel One Network (ZON) Utility .................................................................................................... 22
2.3.1 Requirements ......................................................................................................................... 22
2.3.2 Run the ZON Utility ................................................................................................................. 23
2.4 Ways to Access the Zyxel Device ................................................................................................. 26
2.5 Good Habits for Managing the Zyxel Device ............................................................................. 27
Chapter 3
Hardware............................................................................................................................................28
3.1 Zyxel Device Single LED .................................................................................................................. 28
3.1.1 Zyxel Device LED ................................................................................................................... 28
Chapter 4
Web Configurator...............................................................................................................................30
4.1 Overview ......................................................................................................................................... 30
4.2 Accessing the Web Configurator ................................................................................................. 30
4.3 Navigating the Web Configurator ............................................................................................... 33
NWA/WAC/WAX Series User’s Guide
5
Table of Contents
4.3.1 Title Bar ................................................................................................................................... 34
4.3.2 Navigation Panel .................................................................................................................. 35
4.3.3 Standalone Mode Navigation Panel Menus ..................................................................... 35
4.3.4 Cloud Mode Navigation Panel Menus ............................................................................... 37
4.3.5 Tables and Lists ...................................................................................................................... 38
Part I: Standalone Configuration...................................................................41
Chapter 5
Standalone Configuration.................................................................................................................42
5.1 Overview ......................................................................................................................................... 42
5.2 Starting and Stopping the Zyxel Device ...................................................................................... 42
Chapter 6
Dashboard..........................................................................................................................................44
6.1 Overview ......................................................................................................................................... 44
6.1.1 CPU Usage ............................................................................................................................. 47
6.1.2 Memory Usage ...................................................................................................................... 48
Chapter 7
Setup Wizard.......................................................................................................................................49
7.1 Accessing the Wizard ..................................................................................................................... 49
7.2 Using the Wizard ............................................................................................................................. 49
7.2.1 Step 1 Time Settings .............................................................................................................. 49
7.2.2 Step 2 Password and Uplink Connection ........................................................................... 50
7.2.3 Step 3 Radio .......................................................................................................................... 51
7.2.4 Step 4 SSID .............................................................................................................................. 52
7.2.5 Summary ................................................................................................................................ 52
Chapter 8
Monitor................................................................................................................................................54
8.1 Overview ......................................................................................................................................... 54
8.1.1 What You Can Do in this Chapter ....................................................................................... 54
8.2 What You Need to Know ............................................................................................................... 54
8.3 Network Status ................................................................................................................................ 55
8.3.1 Port Statistics Graph .............................................................................................................. 56
8.4 Radio List .......................................................................................................................................... 57
8.4.1 AP Mode Radio Information ................................................................................................59
8.5 Station List ........................................................................................................................................ 61
8.6 WDS Link Info ................................................................................................................................... 62
8.7 Detected Device ............................................................................................................................ 63
NWA/WAC/WAX Series User’s Guide
6
Table of Contents
8.8 View Log .......................................................................................................................................... 66
Chapter 9
Network...............................................................................................................................................69
9.1 Overview ......................................................................................................................................... 69
9.1.1 What You Can Do in this Chapter ....................................................................................... 69
9.2 IP Setting .......................................................................................................................................... 69
9.3 VLAN ................................................................................................................................................ 71
9.4 NCC Discovery ................................................................................................................................ 73
Chapter 10
Wireless...............................................................................................................................................75
10.1 Overview ....................................................................................................................................... 75
10.1.1 What You Can Do in this Chapter ..................................................................................... 75
10.1.2 What You Need to Know ...................................................................................................76
10.2 AP Management .......................................................................................................................... 76
10.3 Rogue AP ....................................................................................................................................... 79
10.3.1 Add/Edit Rogue/Friendly List .............................................................................................. 83
10.4 DCS ................................................................................................................................................ 83
10.5 Technical Reference .................................................................................................................... 84
Chapter 11
User......................................................................................................................................................86
11.1 Overview ....................................................................................................................................... 86
11.1.1 What You Can Do in this Chapter ..................................................................................... 86
11.1.2 What You Need To Know ...................................................................................................86
11.2 User Summary ................................................................................................................................ 87
11.2.1 Add/Edit User ....................................................................................................................... 87
11.3 Setting ............................................................................................................................................ 89
11.3.1 Edit User Authentication Timeout Settings ........................................................................ 91
Chapter 12
AP Profile.............................................................................................................................................93
12.1 Overview ....................................................................................................................................... 93
12.1.1 What You Can Do in this Chapter ..................................................................................... 93
12.1.2 What You Need To Know ...................................................................................................93
12.2 Radio .............................................................................................................................................. 94
12.2.1 Add/Edit Radio Profile ........................................................................................................ 95
12.3 SSID ............................................................................................................................................... 100
12.3.1 SSID List ............................................................................................................................... 101
12.3.2 Add/Edit SSID Profile ......................................................................................................... 102
12.4 Security List .................................................................................................................................. 105
12.4.1 Add/Edit Security Profile ................................................................................................... 105
NWA/WAC/WAX Series User’s Guide
7
Table of Contents
12.5 MAC Filter List .............................................................................................................................. 115
12.5.1 Add/Edit MAC Filter Profile ............................................................................................... 115
Chapter 13
MON Profile.......................................................................................................................................117
13.1 Overview ..................................................................................................................................... 117
13.1.1 What You Can Do in this Chapter ................................................................................... 117
13.2 MON Profile ................................................................................................................................. 117
13.2.1 Add/Edit MON Profile ....................................................................................................... 118
Chapter 14
WDS Profile........................................................................................................................................120
14.1 Overview ..................................................................................................................................... 120
14.1.1 What You Can Do in this Chapter ................................................................................... 120
14.2 WDS Profile ................................................................................................................................... 120
14.2.1 Add/Edit WDS Profile ........................................................................................................ 121
Chapter 15
Certificates .......................................................................................................................................122
15.1 Overview ..................................................................................................................................... 122
15.1.1 What You Can Do in this Chapter ................................................................................... 122
15.1.2 What You Need to Know ................................................................................................. 122
15.1.3 Verifying a Certificate ...................................................................................................... 124
15.2 My Certificates ............................................................................................................................ 125
15.2.1 Add My Certificates .......................................................................................................... 126
15.2.2 Edit My Certificates ........................................................................................................... 128
15.2.3 Import Certificates ............................................................................................................ 131
15.3 Trusted Certificates ..................................................................................................................... 132
15.3.1 Edit Trusted Certificates .................................................................................................... 133
15.3.2 Import Trusted Certificates ............................................................................................... 136
15.4 Technical Reference .................................................................................................................. 137
Chapter 16
System...............................................................................................................................................138
16.1 Overview ..................................................................................................................................... 138
16.1.1 What You Can Do in this Chapter ................................................................................... 138
16.2 Host Name ................................................................................................................................... 138
16.3 Date and Time ........................................................................................................................... 139
16.3.1 Pre-defined NTP Time Servers List ..................................................................................... 141
16.3.2 Time Server Synchronization ............................................................................................ 142
16.4 WWW Overview .......................................................................................................................... 143
16.4.1 Service Access Limitations ............................................................................................... 143
16.4.2 System Timeout .................................................................................................................. 143
NWA/WAC/WAX Series User’s Guide
8
Table of Contents
16.4.3 HTTPS ................................................................................................................................... 143
16.4.4 Configuring WWW Service Control ................................................................................. 144
16.4.5 HTTPS Example ................................................................................................................... 145
16.5 SSH ................................................................................................................................................ 151
16.5.1 How SSH Works .................................................................................................................. 152
16.5.2 SSH Implementation on the Zyxel Device ...................................................................... 153
16.5.3 Requirements for Using SSH ..............................................................................................153
16.5.4 Configuring SSH ................................................................................................................. 153
16.5.5 Examples of Secure Telnet Using SSH .............................................................................. 154
16.6 FTP ............................................................................................................................................... 155
Chapter 17
Log and Report....... .... ... .................................................... ...............................................................157
17.1 Overview ..................................................................................................................................... 157
17.1.1 What You Can Do In this Chapter .................................................................................. 157
17.2 Log Setting .................................................................................................................................. 157
17.2.1 Log Setting Screen ............................................................................................................ 157
17.2.2 Edit System Log Settings ................................................................................................... 159
17.2.3 Edit Remote Server ............................................................................................................ 163
17.2.4 Active Log Summary ........................................................................................................ 164
Chapter 18
File Manager ....................................................................................................................................167
18.1 Overview ..................................................................................................................................... 167
18.1.1 What You Can Do in this Chapter ................................................................................... 167
18.1.2 What you Need to Know .................................................................................................. 167
18.2 Configuration File ....................................................................................................................... 168
18.2.1 Example of Configuration File Download Using FTP ...................................................... 172
18.3 Firmware Package ..................................................................................................................... 173
18.3.1 Example of Firmware Upload Using FTP .......................................................................... 174
18.4 Shell Script .................................................................................................................................... 175
Chapter 19
Diagnostics.......................................................................................................................................178
19.1 Overview ..................................................................................................................................... 178
19.1.1 What You Can Do in this Chapter ................................................................................... 178
19.2 Diagnostics .................................................................................................................................. 178
19.3 Remote Capture ........................................................................................................................ 179
Chapter 20
LEDs ...................................................................................................................................................180
20.1 Overview ..................................................................................................................................... 180
20.1.1 What You Can Do in this Chapter ................................................................................... 180
NWA/WAC/WAX Series User’s Guide
9
Table of Contents
20.2 Suppression Screen .................................................................................................................... 180
20.3 Locator Screen ........................................................................................................................... 181
Chapter 21
Reboot...............................................................................................................................................183
21.1 Overview ..................................................................................................................................... 183
21.1.1 What You Need To Know ................................................................................................. 183
21.2 Reboot ......................................................................................................................................... 183
Chapter 22
Shutdown..........................................................................................................................................184
22.1 Overview ..................................................................................................................................... 184
22.1.1 What You Need To Know ................................................................................................. 184
22.2 Shutdown ..................................................................................................................................... 184
Part II: Local Configuration in Cloud Mode................................................185
Chapter 23
Cloud Mode .....................................................................................................................................186
23.1 Overview ..................................................................................................................................... 186
23.2 Cloud Mode Web Configurator Screens ................................................................................. 186
23.3 Dashboard .................................................................................................................................. 187
Chapter 24
Network.............................................................................................................................................189
24.1 Overview ..................................................................................................................................... 189
24.1.1 What You Can Do in this Chapter ................................................................................... 189
24.2 IP Setting ...................................................................................................................................... 189
24.3 VLAN ............................................................................................................................................ 191
Chapter 25
Maintenance....................................................................................................................................192
25.1 Overview ..................................................................................................................................... 192
25.1.1 What You Can Do in this Chapter ................................................................................... 192
25.2 Shell Script .................................................................................................................................... 192
25.3 Diagnostics .................................................................................................................................. 193
25.4 View Log ...................................................................................................................................... 194
Part III: Appendices and Troubleshooting.................................................. 197
NWA/WAC/WAX Series User’s Guide
10
Table of Contents
Chapter 26
Troubleshooting................................................................................................................................198
26.1 Overview ..................................................................................................................................... 198
26.2 Power, Hardware Connections, and LED ................................................................................ 198
26.3 Zyxel Device Management, Access, and Login ..................................................................... 199
26.4 Internet Access ........................................................................................................................... 202
26.5 WiFi Network ................................................................................................................................ 203
26.6 Resetting the Zyxel Device ........................................................................................................ 205
26.7 Getting More Troubleshooting Help .........................................................................................205
Appendix A Importing Certificates ............................................................................................... 206
Appendix B IPv6............................................................................................................................... 230
Appendix C Customer Support ..................................................................................................... 238
Appendix D Legal Information ...................................................................................................... 244
Index.................................................................................................................................................251
NWA/WAC/WAX Series User’s Guide
11

1.1 Overview

This User’s Guide covers the models listed in the following table. They can be managed in one of the following methods: remote management through Nebula Control Center (NCC) or an AP Controller (AC) such as the NXC, or local management in Standalone Mode. Each Zyxel Device runs in standalone mode by default, but it is recommended to use NCC management if it is available for your device.
CHAPTER 1

Introduction

NCC, AC or Standalone (NebulaFlex PRO)
• NWA5123-AC HD • NWA1123-ACv2 • NWA5123-AC
• WAC6103D-I • NWA1123-AC PRO • WAC5302D-S
• WAC6303D-S • NWA1123-AC HD
• WAC6502D-E • NWA1302-AC
• WAC6502D-S • NWA110AX
• WAC6503D-S • NWA210AX
• WAC6552D-S • NWA1123ACv3
• WAC6553D-E
• WAC500
• WAC500H
• WAC5302D-Sv2
• WAX510D
• WAX610D
• WAX650S
For more information about Access Point (AP) management, see Section 2.1 on page 25.
Use the Zyxel Device to set up a wireless network with other IEEE 802.11a/b/g/n/ac/ax compatible devices in either 2.4 GHz and 5 GHz networks or both at the same time.
NCC or Standalone (NebulaFlex)
AC or Standalone
When two or more APs are interconnected, this network is called a Wireless Distribution System (WDS). See Section 1.2.2 on page 14 for more information on root and repeater APs and how to set them up.

1.2 Zyxel Device Roles

This section describes some of the different roles that your Zyxel Device can take up within a network. Not all roles are supported by all models (see Section 1.4 on page 18). The Zyxel Device can serve as a:
Access Point (AP) - This is used to allow wireless clients to connect to the Internet.
NWA/WAC/WAX Series User’s Guide
12
Chapter 1 Introduction
Radio Frequency (RF) monitor - An RF monitor searches for rogue APs to help eliminate network
threats if it supports monitor mode and rogue APs detection/containment. An RF monitor cannot simultaneously act as an AP.
Root AP - A root AP connects to the gateway or switch through a wired Ethernet connection and
has wireless repeaters connected to it to extend its range.
Wireless repeater - A wireless repeater wirelessly connects to a root AP and extends the network’s
wireless range.
The following figure shows a network setup that uses these different roles to create a secure Wireless Distribution System (WDS). The root AP (Y) is connected to a network with Internet access and has a wireless repeater (X) connected to it to expand the wireless network’s range. Clients (A, B, and C) can access the wired network through the wireless repeater and/or root AP.
If a client (D) tries to set up his own AP (R) with weak security settings, the network becomes exposed to threats. The RF monitor (M) scans the area to detect all APs, which can help the network administrator discover these rogue APs and remove them or use the NXC to quarantine them.
Figure 1 Sample Network Setup
1.2.1 Root AP
In Root AP mode, you can have multiple SSIDs active for regular wireless connections and one SSID for the connection with a repeater (repeater SSID). Wireless clients can use either SSID to associate with the Zyxel Device in Root AP mode. A repeater must use the repeater SSID to connect to the Zyxel Device in Root AP mode.
When the Zyxel Device is in Root AP mode, repeater security between the Zyxel Device and other repeaters is independent of the security between the wireless clients and the AP or repeater. When repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section
10.2 on page 76 and Section 14.2 on page 120 for more details.
Unless specified, the term “security settings” refers to the traffic between the wireless clients and the AP. At the time of writing, repeater security is compatible with the Zyxel Device only.
NWA/WAC/WAX Series User’s Guide
13
1.2.2 Wireless Repeater
Using Repeater mode, your Zyxel Device can extend the range of the WLAN. In the figure below, the Zyxel Device in Repeater mode (Z) has a wireless connection to the Zyxel Device in Root AP mode (X) which is connected to a wired network and also has a wireless connection to another Zyxel Device in Repeater mode (Y) at the same time. Z and Y act as repeaters that forward traffic between associated wireless clients and the wired LAN. Clients A and B access the AP and the wired network behind the AP through repeaters Z and Y.
Figure 2 Repeater Application
Chapter 1 Introduction
When the Zyxel Device is in Repeater mode, repeater security between the Zyxel Device and other repeater is independent of the security between the wireless clients and the AP or repeater. When repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section
10.2 on page 76 and Section 14.2 on page 120 for more details.
For NCC managed devices, you only need to enable AP Smart Mesh to automatically create wireless links between APs. See the NCC User’s Guide for more details.
To set up a WDS in standalone mode APs, do the following steps. You should already have the root AP set up (see the Quick Start Guide for hardware connections).
1 Go to Configuration > Object > WDS Profile in your root AP Web Configurator and click Add.
2 Enter a profile name, an SSID for the WDS, and a pre-shared key.
3 Do steps 1 and 2 for the wireless repeater using the same SSID and pre-shared key.
4 Once the security settings of peer sides match one another, the connection between the root and
repeater Zyxel Devices is made.
To set up a WDS in NXC managed Zyxel Devices, see the NXC User’s Guide.
NWA/WAC/WAX Series User’s Guide
14
Chapter 1 Introduction
1.2.3 Radio Frequency (RF) Monitor
The Zyxel Device can be set to work as an RF monitor to discover nearby Access Points. The information it obtains from other APs is used to tag possible rogue APs and quarantine them if the Zyxel Device is managed by the NXC (see Section 2.1.3 on page 27). If the Zyxel Device’s radio setting is set to MON Mode (RF Monitor mode), it will serve as a dedicated RF monitor and its AP clients are disconnected.
The models that do not support MON Mode support Rogue AP Detection (see Section 10.3 on page 79). Rogue AP Detection allows the AP to scan all channels similar to MON Mode except that the Zyxel Device still works as an AP while it scans the environment for wireless signals. To see which Zyxel Devices support the RF Monitor feature, see Section 1.4 on page 18.
The Zyxel Device in MON Mode scans a range of WiFi channels that you specify in a MON Profile, either in the 2.4 GHz or 5 GHz band. To scan both bands, you need to set both radio 1 and radio 2 in MON Mode. Once a rogue AP is detected, the network administrator can manually change the network settings to limit its access to the network using its MAC address or have the device physically removed. If the Zyxel Device is managed by an NXC, the network administrator can also use Rogue AP Containment through the NXC.
MON Mode in Standalone Mode
To use an RF monitor in standalone mode, do the following steps:
1 Create a MON Profile in Configuration > Object > MON Profile > Add. Specify a Channel dwell time to
determine how long the RF monitor scans a specific channel before moving to the next one.
2 To scan all 2.4 GHz and 5 GHz channels, select auto in Scan Channel Mode. Make sure that the Activate
check box is selected and click OK.
3 Go to the Configuration > Wireless > AP Management screen and set Radio 1 OP Mode (2.4 GHz) and/or
Radio 2 OP Mode (5 GHz) to MON Mode.
4 Select the Radio 1(2) Profile that you created in the previous step. Make sure that the Radio 1(2)
Activate check box is selected and click Apply.
5 Go to Monitor > Wireless > Detected Device to see a list of APs scanned by the RF monitor.
6 Select an AP or APs in the list and click Mark as Rogue AP or Mark as Friendly AP.
MON Mode in NXC-Managed Zyxel Devices
For NXC-managed Zyxel Devices, do the following steps in the NXC Web Configurator:
1 Create a MON Profile in CONFIGURATION > Object > MON Profile > Add. Specify a Channel dwell time to
determine how long the RF monitor scans a specific channel before moving to the next one.
2 To scan all 2.4 GHz and 5 GHz channels, select auto in Scan Channel Mode. Make sure that the Activate
check box is selected and click OK.
3 Go to the CONFIGURATION > Wireless > AP Management > Mgmt. AP List > Edit screen and/or set Radio
1 OP Mode (2.4 GHz) and Radio 2 OP Mode (5 GHz) to MON Mode.
NWA/WAC/WAX Series User’s Guide
15
Chapter 1 Introduction
4 Select the Radio 1(2) Profile that you created in the previous step. Select Override Group Radio Setting
and click OK.
5 Go to MONITOR > Wireless > Detected Device to see a list of APs scanned by the RF monitor.
6 Select an AP or APs in the list and click Mark as Rogue AP or Mark as Friendly AP.
7 To quarantine a rogue AP, go to CONFIGURATION > Wireless > Rogue AP, select the APs you want to
quarantine, and click Containment. Make sure the Enable Rogue AP Containment check box is selected, and click Apply.

1.3 Sample Feature Applications

This section describes some possible scenarios and topologies that you can set up using your Zyxel Device.
1.3.1 MBSSID
A Basic Service Set (BSS) is the set of devices forming a single wireless network (usually an access point and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS. In Multiple BSS (MBSSID) mode, the Zyxel Device provides multiple virtual APs, each forming its own BSS and using its own individual SSID profile.
You can configure multiple SSID profiles, and have all of them active at any one time.
You can assign different wireless and security settings to each SSID profile. This allows you to compartmentalize groups of users, set varying access privileges, and prioritize network traffic to and from certain BSSs.
To the wireless clients in the network, each SSID appears to be a different access point. As in any wireless network, clients can associate only with the SSIDs for which they have the correct security settings.
For example, you might want to set up a wireless network in your office where Internet telephony (VoIP) users have priority. You also want a regular wireless network for standard users, as well as a ‘guest’ wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority, SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for guest users. In this example, the guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access only the Internet.
NWA/WAC/WAX Series User’s Guide
16
Figure 3 Multiple BSSs
Chapter 1 Introduction
1.3.2 Dual-Radio
Some of the Zyxel Device models are equipped with dual wireless radios. This means you can configure two different wireless networks to operate simultaneously.
Note: A different channel should be configured for each WLAN interface to reduce the
effects of radio interference.
You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming.
NWA/WAC/WAX Series User’s Guide
17
Figure 4 Dual-Radio Application
Chapter 1 Introduction

1.4 Zyxel Device Product Feature Comparison

The following tables show the differences between each Zyxel Device model.
Table 1 Zyxel Device 1000/5000 Series Comparison Table
FEATURES
Supported Wireless Standards
Supported Frequency Bands
Available Security Modes
Number of SSID Profiles
Number of Wireless Radios
Monitor Mode & Rogue APs Containment
Rogue AP Detection
A
NWA1123-
ACV2
IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n
IEEE 802.11ac
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX WPA2-PSK
WPA2-PSK-MIX
64 64 64 64 64 64 64
2222222
No No No No Yes No No
Yes Yes Yes Yes Yes Yes Yes
NWA1123
-AC PRO
IEEE
802.11a IEEE
802.11b IEEE
802.11g IEEE
802.11n IEEE
802.11ac
2.4 GHz
5 GHz
None
WEP
WPA2 WPA2-MIX WPA2-PSK
WPA2-PSK-
MIX
NWA1123-
AC HD
IEEE
802.11a IEEE
802.11b IEEE
802.11g
IEEE 802.11n
IEEE
802.11ac
2.4 GHz
5 GHz
None
WEP
WPA2 WPA2-MIX WPA2-PSK
WPA2-PSK-
MIX
NWA1302
-AC
IEEE
802.11a IEEE
802.11b IEEE
802.11g IEEE
802.11n IEEE
802.11ac
2.4 GHz
5 GHz
None
WEP
WPA2 WPA2-MIX WPA2-PSK
WPA2-PSK-
MIX
NWA5123
-AC
IEEE
802.11a IEEE
802.11b IEEE
802.11g IEEE
802.11n IEEE
802.11ac
2.4 GHz
5 GHz
None
WEP
WPA2 WPA2-MIX WPA2-PSK
WPA2-PSK-
MIX
NWA5123
-AC HD
IEEE
802.11a IEEE
802.11b IEEE
802.11g IEEE
802.11n IEEE
802.11ac
2.4 GHz
5 GHz
None
WEP
WPA2 WPA2-MIX WPA2-PSK
WPA2-PSK-
MIX
WAC5302
D-S
IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n
IEEE
802.11ac
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX WPA2-PSK
WPA2-PSK-
MIX
NWA/WAC/WAX Series User’s Guide
18
Chapter 1 Introduction
Table 1 Zyxel Device 1000/5000 Series Comparison Table (continued)
FEATURES
WDS (Wireless Distribution System) - Root AP & Repeater Modes
Tunnel Forwarding Mode
Layer-2 Isolation Yes Yes Yes Yes Yes Yes Yes
Supported PoE Standards
Power Detection
External Antennas
Internal Antennas
Antenna Switch
Console Port 4-Pin Serial 4-Pin Serial 4-Pin Serial 4-Pin Serial 4-Pin Serial 4-Pin Serial 4-Pin Serial
LED Locator Yes Yes Yes Yes Yes Yes Yes
LED Suppression Yes Yes Yes Yes Yes Yes Yes
AC (AP Controller) Discovery
NebulaFlex PRO No No No No No Yes No
NCC Discovery Yes Yes Yes Yes No Yes No
802.11r Fast Roaming Support
802.11k/v Assisted Roaming
Bluetooth Low Energy (BLE)
USB Port for BLE No No No No No No Yes
Ethernet Storm Control
Grounding No No Yes No No Yes No
Power Jack Yes No Yes No Yes Yes No
Firmware Version
Maximum number of log messages
A. For NXC managed devices only. See the NXC User’s Guide for details.
NWA1123-
ACV2
Yes Yes Yes Yes Yes Yes Yes
No No No No No Yes No
IEEE 802.3af IEEE 802.3at
No No Yes Yes No Yes Yes
No No No No No No No
Yes Yes Yes Yes Yes Yes Yes
No
No No No No Yes Yes Yes
Yes Yes Yes Yes Yes Yes Yes
Yes Yes Yes Yes Yes Yes Yes
No No No No No No Yes
No No Yes No No Yes No
6.10 6.20 6.20 6.20 6.10 6.20 6.10
NWA1123
-AC PRO
IEEE 802.3at
Yes (per radio + physical
switch)
NWA1123-
AC HD
IEEE 802.3af IEEE 802.3at
No No No No No
512 event logs
NWA1302
-AC
IEEE
802.3af IEEE
802.3at
NWA5123
-AC
IEEE
802.3af IEEE
802.3at
NWA5123
-AC HD
IEEE
802.3af IEEE
802.3at
WAC5302
D-S
IEEE 802.3af IEEE 802.3at
256 event
logs
NWA/WAC/WAX Series User’s Guide
19
Chapter 1 Introduction
The following tables show the differences between each Zyxel Device model.
Table 2 Zyxel Device 1000/5000 Series Comparison Table
FEATURES
Supported Wireless Standards
Supported Frequency Bands
Available Security Modes
Number of SSID Profiles
Number of Wireless Radios
Monitor Mode & Rogue APs Containment
Rogue AP Detection
WDS (Wireless Distribution System) - Root AP & Repeater Modes
Tunnel Forwarding Mode
Layer-2 Isolation Yes Yes Yes
Supported PoE Standards
Power Detection
External Antennas
Internal Antennas
Antenna Switch No No No
Console Port 4-Pin Serial 4-Pin Serial 4-Pin Serial
LED Locator Yes Yes Yes
LED Suppression Yes Yes Yes
AC (AP Controller) Discovery
NebulaFlex PRO Yes No Yes
A
WAC500/ WAC500H
IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n
IEEE 802.11ac
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX WPA2-PSK
WPA2-PSK-MIX Enhanced-open WPA3-enterprise
WPA3-personal
64 64 64
222
No No No
Yes Yes Yes
Yes Yes Yes
Yes No Yes
IEEE 802.3af IEEE 802.3at
No No Yes
No No No
Yes Yes Yes
Yes No Yes
NWA1123-ACV3 WAC5302D-SV2
IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n
IEEE 802.11ac
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX WPA2-PSK
WPA2-PSK-MIX Enhanced-open WPA3-enterprise
WPA3-personal
IEEE 802.3af IEEE 802.3at
IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n
IEEE 802.11ac
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX WPA2-PSK
WPA2-PSK-MIX
IEEE 802.3af IEEE 802.3at
NWA/WAC/WAX Series User’s Guide
20
Chapter 1 Introduction
Table 2 Zyxel Device 1000/5000 Series Comparison Table (continued)
FEATURES
NCC Discovery Yes Yes Yes
802.11r Fast Roaming Support
802.11k/v Assisted Roaming
Bluetooth Low Energy (BLE)
USB Port for BLE No No No
Ethernet Storm Control
Grounding No No No
Power Jack Yes Yes No
Firmware Version
Maximum number of log messages
A. For NXC managed devices only. See the NXC User’s Guide for details.
WAC500/ WAC500H
Yes Yes Yes
Yes Yes Yes
No No No
Yes Yes No
6.20 6.20 6.20
NWA1123-ACV3 WAC5302D-SV2
512
The following tables show the differences between each Zyxel Device model.
Table 3 WAC 6000 Series Comparison Table
WAC6502D-S
WAC6502D-E
FEATURES WAC6103D-I WAC6303D-S
WAC6503D-S
WAC6553D-E
WAC6552D-S
Supported Wireless Standards
Supported Frequency Bands
Available Security Modes
Number of SSID Profiles
Number of Wireless Radios
Monitor Mode & Rogue APs Containment
Rogue AP Detection
A
IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n
IEEE 802.11ac
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX
WPA2-PSK
WPA2-PSK-MIX
64 64 64 64
22 2 2
Yes No Yes Yes
Yes Yes Yes Yes
IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n
IEEE 802.11ac
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX WPA2-PSK
WPA2-PSK-MIX
IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n
IEEE 802.11ac
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX WPA2-PSK
WPA2-PSK-MIX
IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n
IEEE 802.11ac
WPA2-MIX WPA2-PSK
WPA2-PSK-MIX
2.4 GHz 5 GHz
None
WEP
WPA2
NWA/WAC/WAX Series User’s Guide
21
Chapter 1 Introduction
Table 3 WAC 6000 Series Comparison Table (continued)
WAC6502D-S
WAC6502D-E
FEATURES WAC6103D-I WAC6303D-S
WAC6503D-S
WAC6553D-E
WAC6552D-S
WDS (Wireless Distribution System)
- Root AP & Repeater Modes
Tunnel Forwarding Mode
Layer-2 Isolation Yes Yes Yes Yes
Supported PoE Standards
Power Detection No Yes Yes Yes
External Antennas No No Yes No
Internal Antennas Yes Yes No Yes
Antenna Switch Yes
Console Port 4-Pin Serial 4-Pin Serial RJ-45 serial RJ-45 serial
LED Locator Yes Yes Yes Yes
LED Suppression Yes Yes Yes Yes
AC (AP Controller) Discovery
NebulaFlex PRO Yes Yes Yes Yes
NCC Discovery Yes Yes Yes Yes
802.11r Fast Roaming Support
802.11k/v Assisted Roaming
Bluetooth Low Energy (BLE)
USB Port for BLE No No No No
Ethernet Storm Control
Grounding No Yes Yes Yes
Power Jack
Firmware Version 6.20 6.20 6.20 6.20
Maximum number of log messages
Yes Yes Yes Yes
Yes Yes Yes Yes
IEEE 802.3at
(per radio +
physical switch)
Yes Yes Yes Yes
Yes Yes Yes Yes
Yes Yes Yes Yes
No Yes No No
No Yes No No
No Yes
IEEE 802.3af IEEE 802.3at
No No No
512 event logs
IEEE 802.3af IEEE 802.3at
WAC6502D-E: Yes
WAC6553D-E: No
IEEE 802.3af IEEE 802.3at
WAC6502D-S: Yes WAC6503D-S: Yes
WAC6552D-S: No
A. For NXC managed devices only. See the NXC User’s Guide for details.
NWA/WAC/WAX Series User’s Guide
22
The following tables show the differences between each Zyxel Device model.
Table 4 802.11ax Series Comparison Table
FEATURES
WAX650S
WAX610D
WAX510D
Supported Wireless Standards
Supported Frequency Bands
Available Security Modes None
Number of SSID Profiles 64 64 64
Number of Wireless Radios 2 2 2
Monitor Mode & Rogue APs Containment
Rogue AP Detection Yes Yes Yes
WDS (Wireless Distribution System) - Root AP & Repeater Modes
Tunnel Forwarding Mode Yes Yes No
Layer-2 Isolation Yes Yes Yes
Supported PoE Standards
Power Detection Yes Yes Yes
External Antennas No No No
Internal Antennas Yes Yes Yes
Antenna Switch Yes
Console Port 4-Pin Serial 4-Pin Serial 4-Pin Serial
LED Locator Yes Yes Yes
LED Suppression Yes Yes Yes
AC (AP Controller) Discovery
NebulaFlex PRO Yes Yes No
NCC Discovery Yes Yes Yes
802.11r Fast Roaming Support
802.11k/v Assisted Roaming Yes Yes Yes
Bluetooth Low Energy (BLE) No Yes No
USB Port for BLE No No No
Ethernet Storm Control Yes Yes Yes
Grounding Yes Yes Yes
A
IEEE 802.11a IEEE 802.11b IEEE 802.11g
IEEE 802.11n IEEE 802.11ac IEEE 802.11ax
2.4 GHz 5 GHz
WEP
WPA2
WPA2-MIX WPA2-PSK
WPA2-PSK-MIX Enhanced-open WPA3-enterprise
WPA3-personal
No No No
Yes Yes Yes
IEEE 802.3af IEEE 802.3at
(per AP)
Yes Yes No
Yes Yes Yes
IEEE 802.11a IEEE 802.11b IEEE 802.11g
IEEE 802.11n IEEE 802.11ac IEEE 802.11ax
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX
WPA2-PSK
WPA2-PSK-MIX Enhanced-open WPA3-enterprise
WPA3-personal
IEEE 802.3at IEEE 802.3bt
No No
NWA110AX NWA210AX
IEEE 802.11a IEEE 802.11b IEEE 802.11g
IEEE 802.11n IEEE 802.11ac IEEE 802.11ax
2.4 GHz 5 GHz
None
WEP
WPA2
WPA2-MIX WPA2-PSK
WPA2-PSK-MIX Enhanced-open WPA3-enterprise
WPA3-personal
IEEE 802.3af IEEE 802.3at
NWA/WAC/WAX Series User’s Guide
23
Chapter 1 Introduction
Table 4 802.11ax Series Comparison Table (continued)
FEATURES
WAX650S
WAX610D
Power Jack Yes Yes Yes
Firmware Version 6.20 6.20 6.20
WAX510D
Maximum number of log messages
A. For NXC managed devices only. See the NXC User’s Guide for details.
512 event logs
NWA110AX NWA210AX
NWA/WAC/WAX Series User’s Guide
24
Chapter 2 AP Management

2.1 Management Mode

The Zyxel Device is a unified AP and can be managed by the NCC or an AP controller (AC), or work as a standalone device. We recommend you use NCC to manage multiple APs (see the NCC User’s Guide). An AP Controller such as the NXC can only manage multiple APs in the same location.
Note: Not all models can be managed by NCC or an AC. See Section 1.4 on page 18 to
check whether your product supports these.
The following table shows the default IP addresses and firmware upload methods for different management modes.
CHAPTER 2

AP Management

Table 5 Zyxel Device Management Mode Comparison
MANAGEMENT MODE DEFAULT IP ADDRESS UPLOAD FIRMWARE VIA
Nebula Control Center Dynamic NCC Portal
AP Controller Dynamic AP Controller using CAPWAP
Standalone Dynamic or
When the Zyxel Device is in standalone mode and connects to a DHCP server, it uses the IP address assigned by the DHCP server. Otherwise, the Zyxel Device uses the default static management IP address (192.168.1.2). You can use the NCC Discovery or AC Discovery screen to allow the Zyxel Device to be managed by the NCC or an AC, respectively.
When the Zyxel Device is managed by the NCC or an AC, it acts as a DHCP client and obtains an IP address from the NCC/AC. It can be configured ONLY by the NCC/AC. To change the Zyxel Device back to standalone mode, use the Reset button to restore the default configuration. Alternatively, you need to check the NCC/AC for the Zyxel Device’s IP address and use FTP to upload the default configuration file at conf/system-default.conf to the Zyxel Device and reboot the device.
2.1.1 Standalone
When working in standalone mode, the Zyxel Device is configured mainly with its built-in Web Configurator. You can only connect to and set up one Zyxel Device at a time in this mode.
Static (192.168.1.2)
Built-in Web Configurator
See Chapter 5 on page 42 for detailed information about the standalone Web Configurator screens.
NWA/WAC/WAX Series User’s Guide
25
2.1.2 Nebula Control Center
In this mode, which is also called cloud mode, you can manage and monitor the Zyxel Device through the Zyxel Nebula cloud-based network management system. This means you can manage devices remotely without the need of connecting to each device directly. It offers many features to better manage and monitor not just the Zyxel Device, but your network as a whole, including supported switches and gateways. Your network can also be managed through your smartphone using the Nebula Mobile app. See Section 23.1 on page 186 for an example NCC managed network topology.
NCC allows different levels of management. You can configure each device on its own or configure a set of devices together as a site. You can also monitor groups of sites called organizations, as shown below.
Table 6 NCC Management Levels
Site A Site B
Device A-1 Device A-2 Device B-1 Device B-2
It graphically presents your device/network statistics and shows an overview of your network topology, as shown in the following figure. It also sends reports, alerts, and notifications for events, such as when a site goes offline.
Chapter 2 AP Management
Organization
NWA/WAC/WAX Series User’s Guide
26
Chapter 2 AP Management
Figure 5 Traffic Monitoring Graph From NCC
See the NCC (Nebula Control Center) User’s Guide for how to configure Nebula managed devices. See
Chapter 24 on page 189 if you want to change the Zyxel Device’s VLAN setting or manually set its IP
address.
Note: Make sure your network firewall allows TCP ports 443, 4335, and 6667 as well as UDP port
123 so the device can connect to and sync with the NCC.
2.1.3 AP Controller (AC)
If the Zyxel Device supports management using an AC (see Section 9.1.1 on page 69) such as the NXC2500 or NXC5500, and you have this AC in the same subnet, it will be managed by the controller automatically. To set the Zyxel Device to be managed by an AC in a different subnet or change between management modes, use the AC Discovery screen (see Section 9.4 on page 73 and Section
9.1.1 on page 69). You can use the AC to manage multiple Zyxel Devices. See Section 9.1.1 on page 69
for an example AC managed network topology.
NWA/WAC/WAX Series User’s Guide
27
Chapter 2 AP Management
Note: If the Zyxel Device is already registered to NCC, the controller will be unable to manage
it.
An AC uses Control And Provisioning of Wireless Access Points (CAPWAP, see RFC 5415) to discover and configure multiple managed APs.

2.2 Switching Management Modes

The Zyxel Device is in standalone mode by default, with NCC and/or AC discovery enabled.
Standalone-to-NCC
Register the Zyxel Device at the NCC website and then turn on the Zyxel Device. Make sure that NCC Discovery is enabled (see Section 9.4 on page 73). The NCC manages the Zyxel Device automatically
when it is discovered.
Standalone-to-AC (NXC)
By default, the Zyxel Device must be in the same subnet as the NXC. See Section 9.1.1 on page 69 for setting it up in a different subnet. Make sure AC Discovery is enabled (see Section 9.4 on page 73). The NXC manages the Zyxel Device automatically when it is discovered.
NXC-to-NCC
Register the Zyxel Device at the NCC website. Make sure that NCC Discovery is enabled on your Zyxel Device (see Section 9.4 on page 73). In the NXC Web Configurator, select the Zyxel Device and press the Nebula button. The NCC manages the Zyxel Device automatically when it is discovered.
NCC-to-NXC
Unregister the Zyxel Device at the NCC portal. By default, the Zyxel Device must be in the same subnet as the NXC. See Section 9.1.1 on page 69 for setting it up in a different subnet. Make sure AC Discovery is enabled (see Section 9.4 on page 73). The NXC manages the Zyxel Device automatically when it is discovered.
NCC-to-Standalone
Unregister the Zyxel Device from the NCC organization/site. Reset the Zyxel Device to factory defaults (see Section 26.6 on page 205).
AC-to-Standalone
Use the Reset button to return the Zyxel Device to its factory default settings (see Section 26.6 on page
205).
NWA/WAC/WAX Series User’s Guide
28
Chapter 2 AP Management

2.3 Zyxel One Network (ZON) Utility

ZON Utility is a program designed to help you deploy and manage a network more efficiently. It detects devices automatically and allows you to do basic settings on devices in the network without having to be near it.
The ZON Utility issues requests via Zyxel Discovery Protocol (ZDP) and in response to the query, the device responds back with basic information including IP address, firmware version, location, system and model name in the same broadcast domain. The information is then displayed in the ZON Utility screen and you can perform tasks like basic configuration of the devices and batch firmware upgrade in it. You can download the ZON Utility at www.zyxel.com and install it on your computer (Windows operating system).
2.3.1 Requirements
Before installing the ZON Utility on your PC, please make sure it meets the requirements listed below.
Operating System
At the time of writing, the ZON Utility is compatible with:
• Windows 7 (both 32-bit / 64-bit versions)
• Windows 8 (both 32-bit / 64-bit versions)
• Windows 8.1 (both 32-bit / 64-bit versions)
• Window 10 (both 32-bit / 64-bit versions)
Note: To check for your Windows operating system version, right-click on My Computer >
Properties. You should see this information in the General tab.
Note: It is suggested that you install Npcap, the packet capture library for Windows operating
systems, and remove WinPcap or any other installed packet capture tools before you install the ZON utility.
Hardware
Here are the minimum hardware requirements to use the ZON Utility on your PC.
• Core i3 processor
•2 GB RAM
• 100 MB free hard disk
• WXGA (Wide XGA 1280x800)
2.3.2 Run the ZON Utility
1 Double-click the ZON Utility to run it.
2 The first time you run the ZON Utility, you will see if your device and firmware version support the ZON
Utility. Click the OK button to close this screen.
NWA/WAC/WAX Series User’s Guide
29
Chapter 2 AP Management
Figure 6 Supported Devices and Versions
If you want to check the supported models and firmware versions later, you can click the Show
information about ZON icon in the upper right hand corner of the screen. Then select the Supported model and firmware version link. If your device is not listed here, see the device release notes for ZON
utility support. The release notes are in the firmware zip file on the Zyxel web site.
Figure 7 ZON Utility Screen
3 Select a network adapter to which your supported devices are connected.
NWA/WAC/WAX Series User’s Guide
30
Loading...
+ 296 hidden pages