IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a Reference Guide for a series of products intended for people who want to configure the Zyxel
Device via Command Line Interface (CLI).
Note: Some commands or command options in this guide may not be available in your
product. See your product's User’s Guide for a list of supported features. Every effort has
been made to ensure that the information in this guide is accurate.
How To Use This Guide
1Read Chapter 2 on page 21 for how to access and use the CLI (Command Line Interface).
2Read Chapter 3 on page 32 to learn about the CLI user and privilege modes.
Do not use commands not documented in this guide.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the Zyxel Device and access the Web Configurator.
• User’s Guide
The User’s Guide explains how to use the Web Configurator to configure the Zyxel Device.
Note: It is recommended you use the Web Configurator to configure the Zyxel Device.
Icons Used in Figures
Figures in this guide may use the following generic icons. The Zyxel Device icon is not an exact
representation of your device.
Status ......................................................................... ............................................................................. 36
Storm Control ........................................................................................................................................ 48
AP Management .................................................................................................................................. 57
Wireless LAN Profiles .............................................................................................................................. 69
Rogue AP ............................................................................................................................................... 90
Bluetooth ............................................................................................................................................. 100
System ................................................................ .................................................................................. 105
System Remote Management .......................................................................................................... 110
AAA Server .......................................................................................................................................... 116
30.3.1 Application Watchdog Commands Example ............................................................... 167
List of Commands (Alphabetical) ..................................................................................................168
NWA/WAC/WAX Series CLI Reference Guide
10
PART I
Introduction
11
Getting to Know your Zyxel
1.1 Overview
Your Zyxel Device is a wireless AP (Access Point). It extends the range of your existing wired network
without additional wiring, providing easy network access to mobile users.
You can set the Zyxel Device to operate in either standalone AP or managed AP mode. When the Zyxel
Device is in standalone AP mode, it can serve as a normal AP, as an RF monitor to search for rouge APs
to help eliminate network threats (if it support rogue APs detection), or even as a root AP or a wireless
repeater to establish wireless links with other APs in a WDS (Wireless Distribution System). A WDS is a
wireless connection between two or more APs.
CHAPTER 1
Device
Your Zyxel Device’s business-class reliability, SMB features, and centralized wireless management make it
ideally suited for advanced service delivery in mission-critical networks. It uses Multiple BSSID and VLAN
to provide simultaneous independent virtual APs. Additionally, innovations in roaming technology and
QoS features eliminate voice call disruptions.
The Zyxel Device controls network access with Media Access Control (MAC) address filtering, and rogue
Access Point (AP) detection. It also provides a high level of network traffic security, supporting IEEE
802.1x, Wi-Fi Protected Access 2 and Wired Equivalent Privacy (WEP) data encryption.
1.2 Zyxel Device Product Feature
The following tables show the differences between each Zyxel Device model. You can find the feature
introductions in the later sections.The following tables show the differences between each Zyxel Device
model. You can find the feature introductions in the later sections.
The following table lists the features of the Zyxel Device.
NWA/WAC/WAX Series CLI Reference Guide
12
Chapter 1 Getting to Know your Zyxel Device
The following tables show the differences between each Zyxel Device model. You can find the feature
introductions in the later sections.
Table 1 500/1000 Models Comparison Table
FEATURES
Supported WiFi StandardsIEEE 802.11a
Supported Frequency Bands2.4 GHz
Supported Channel Width2.4G: 20/40 MHz
Available Security ModesNone
Number of SSID Profiles6464
Number of WiFi Radios22
Security Profile Radius SettingsYesYes
Security Profile Enterprise
Authentication Settings
Rogue AP DetectionYesYes
WDS (Wireless Distribution
Power DetectionNoNo
External AntennasNoNo
Internal AntennasYesYes
Antenna SwitchNoNo
Smart AntennaYesYes
Console Port4-Pin Serial4-Pin Serial
Reset ButtonYesYes
LED LocatorYesYes
LED SuppressionYesYes
AC (AP Controller) DiscoveryYesNo
NebulaFlex PROYesNo
NCC DiscoveryYesYes
802.11r Fast Roaming SupportYesYes
802.11k/v Assisted RoamingYesYes
Proxy ARPYesYes
Bluetooth Low Energy (BLE)NoNo
Antenna SwitchNoNoNo
Smart Antenna YesYesNo
Console Port4-Pin Serial4-Pin Serial4-Pin Serial
Reset ButtonYesYesYes
LED LocatorYesYesYes
LED SuppressionYesYesYes
AC (AP Controller) DiscoveryYesYesNo
NebulaFlex PROYesYesNo
NCC DiscoveryYesYesYes
802.11r Fast Roaming SupportYesYesYes
802.11k/v Assisted RoamingYesYesYes
Proxy ARPYesYesYes
Bluetooth Low Energy (BLE)NoYesNo
Load BalancingYesYesYes
Ethernet Storm ControlYesYesYes
Wireless Remote CaptureYesYesYes
SNMPYesYesYes
GroundingYesYesYes
Power JackYesYesYes
Latest Firmware Version Supported6.556.556.55
Maximum number of log messages512 event logs
Table 3 WiFi 6 Models Comparison Table
WAX510D
FEATURESWAX655E
WAX610D
Supported WiFi StandardsIEEE 802.11a
Supported Frequency Bands2.4 GHz
Supported Channel Width
Available Security ModesNone
Number of SSID Profiles6464
Number of WiFi Radios22
Security Profile Radius SettingsYesYes
Power DetectionYesYes
External AntennasYesNo
Internal AntennasNoYes
Antenna Switch
Smart Antenna NoNo
Console Port4-Pin Serial4-Pin Serial
Reset ButtonYesYes
LED LocatorYesYes
LED SuppressionYesYes
AC (AP Controller) DiscoveryYesYes
NebulaFlex PROYesYes
NCC DiscoveryYesYes
802.11r Fast Roaming SupportYesYes
802.11k/v Assisted RoamingYesYes
Proxy ARPYesYes
Bluetooth Low Energy (BLE)NoNo
Load BalancingYesYes
Ethernet Storm ControlYesYes
Wireless Remote CaptureYesYes
SNMPYesYes
GroundingYesYes
Power JackYesYes
Maximum number of log
messages
Latest Firmware Version
Supported
YesYes
YesYes
Yes
IEEE 802.3at
No
512 event logs
6.556.55
WAX510D: No
WAX610D: Yes
IEEE 802.3af
IEEE 802.3at
Yes
(per AP)
NWA/WAC/WAX Series CLI Reference Guide
16
Chapter 1 Getting to Know your Zyxel Device
Table 4 WiFi 6 Models Comparison Table
FEATURESNWA50AXNWA90AXNWA55AXE
Supported WiFi StandardsIEEE 802.11a
Supported Frequency Bands2.4 GHz
Supported Channel Width2.4G: 20/40 MHz
Available Security ModesNone
Number of SSID Profiles646464
Number of WiFi Radios222
Security Profile Radius SettingsNoYesNo
Security Profile Enterprise
Authentication Settings
Rogue AP DetectionYesYesYes
WDS (Wireless Distribution System) -
Root AP & Repeater Modes
Wireless BridgeNoNoYes
Tunnel Forwarding ModeNoNoNo
Layer-2 IsolationNoYesNo
Supported PoE StandardsIEEE 802.3atIEEE 802.3atIEEE 802.3at
Power DetectionNoNoN o
External AntennasNoNoYes
Internal AntennasYesYesNo
Antenna SwitchNoNoNo
Smart AntennaNoNoNo
Console Port4-Pin Serial4-Pin SerialNo
Reset buttonYesYesNo
LED LocatorYesYesNo
LED SuppressionYesYesYes
AC (AP Controller) DiscoveryNoNoNo
NCC DiscoveryYesYesYes
802.11r Fast Roaming SupportYesYesYes
802.11k/v Assisted RoamingYesYesYes
Proxy ARPNoNoNo
Bluetooth Low Energy (BLE)NoNoNo
Load BalancingNoNoNo
Ethernet Storm ControlNoNoNo
Wireless Remote CaptureNoNoNo
SNMPNoNoNo
Table 5 WiFi 6 PRO Models Comparison Table (continued)
FEATURESNWA50AX PRONWA90AX PRO
802.11k/v Assisted RoamingYesYes
Proxy ARPNoNo
Bluetooth Low Energy (BLE)NoNo
Load BalancingNoNo
Ethernet Storm ControlNoNo
Wireless Remote CaptureNoNo
SNMPNoNo
GroundingNoNo
Power Jack YesYes
Maximum number of log
messages
Latest Firmware Version Supported6.556.55
Table 6 WiFi 6E Models Comparison Table (continued)
FEATURESWAX620D-6EWAX640S-6EWA220AX-6E
Internal AntennasYesYesYes
Antenna SwitchYes
Smart Antenna NoYesNo
Console Port4-Pin Serial4-Pin Serial4-Pin Serial
Reset ButtonYesYesYes
LED LocatorYesYesYes
LED SuppressionYesYesYes
AC (AP Controller) DiscoveryYesYesNo
NebulaFlex PROYesYesNo
NCC DiscoveryYe sYesYes
802.11r Fast Roaming SupportYesYesYes
802.11k/v Assisted RoamingYesYesYes
Proxy ARPYesYesYes
Bluetooth Low Energy (BLE)NoYesNo
Load BalancingYesYesYes
Ethernet Storm ControlYesYesYes
Wireless Remote CaptureYesYesYes
SNMPYesYesYes
GroundingNoYesNo
Power JackYesYesYes
Maximum number of log
messages
Latest Firmware Version
Supported
(per AP)
6.556.556.55
NoNo
512 event logs
NWA/WAC/WAX Series CLI Reference Guide
20
Command Line Interface
This chapter describes how to access and use the CLI (Command Line Interface).
2.1 Overview
If you have problems with your Zyxel Device, customer support may request that you issue some of these
commands to assist them in troubleshooting.
Use of undocumented commands or misconfiguration can damage the
Zyxel Device and possibly render it unusable.
2.1.1 The Configuration File
CHAPTER 2
When you configure the Zyxel Device using either the CLI (Command Line Interface) or the web
configurator, the settings are saved as a series of commands in a configuration file on the Zyxel Device.
You can store more than one configuration file on the Zyxel Device. However, only one configuration file
is used at a time.
You can perform the following with a configuration file:
• Back up Zyxel Device configuration once the Zyxel Device is set up to work in your network.
• Restore Zyxel Device configuration.
• Save and edit a configuration file and upload it to multiple Zyxel Devices in your network to have the
same settings.
Note: You may also edit a configuration file using a text editor.
2.2 Accessing the CLI
You can access the CLI using a terminal emulation program on a computer connected to the console
port, or access the Zyxel Device using SSH (Secure SHell).
Note: The console port is not available in every model. Please check the User’s Guide or
datasheet, or refer to the product page at www.zyxel.com to see if your Zyxel Device
has a console port.
Note: The Zyxel Device might force you to log out of your session if reauthentication time,
lease time, or idle timeout is reached. See Chapter 9 on page 52 for more information
about these settings.
NWA/WAC/WAX Series CLI Reference Guide
21
2.2.1 Console Port
The default settings for the console port are as follows.
Table 7 Managing the Zyxel Device: Console Port
SETTINGVALUE
Speed115200 bps
Data Bits8
ParityNone
Stop Bit1
Flow ControlOff
When you turn on your Zyxel Device, it performs several internal tests as well as line initialization. You can
view the initialization information using the console port.
• Garbled text displays if your terminal emulation program’s speed is set lower than the Zyxel Device’s.
• No text displays if the speed is set higher than the Zyxel Device’s.
• If changing your terminal emulation program’s speed does not get anything to display, restart the
Zyxel Device.
• If restarting the Zyxel Device does not get anything to display, contact your local customer support.
After the initialization, the login screen displays.
Figure 2 Login Screen
Welcome to WAX640S-6E
Username:
Enter the user name and password at the prompts.
Note: The default login username is admin and password is 1234. The username and password
are case-sensitive.
2.2.2 SSH (Secure SHell)
You can use an SSH client program to access the CLI. The following figure shows an example using a
text-based SSH client program. Refer to the documentation that comes with your SSH program for
information on using it.
NWA/WAC/WAX Series CLI Reference Guide
22
Chapter 2 Command Line Interface
Note: The default login username is admin and password is 1234. The username and password
are case-sensitive.
Figure 3 SSH Login Example
C:\>ssh2 admin@192.168.1.2
Host key not found from database.
Key fingerprint:
xolor-takel-fipef-zevit-visom-gydog-vetan-bisol-lysob-cuvun-muxex
You can get a public key's fingerprint by running
% ssh-keygen -F publickey.pub
on the keyfile.
Are you sure you want to continue connecting (yes/no)? yes
Host key saved to C:/Documents and Settings/user/Application Data/SSH/
hostkeys/
ey_22_192.168.1.2.pub
host key for 192.168.1.2, accepted by user Tue Aug 09 2022 07:38:28
admin's password:
Authentication successful.
2.3 How to Find Commands in this Guide
You can simply look for the feature chapter to find commands. In addition, you can use the List of
Commands (Alphabetical) at the end of the guide. This section lists the commands in alphabetical
order that they appear in this guide.
If you are looking at the CLI Reference Guide electronically, you might have additional options (for
example, bookmarks or Find...) as well.
2.4 How Commands Are Explained
Each chapter explains the commands for one keyword. The chapters are divided into the following
sections.
2.4.1 Background Information
Note: See the User’s Guide for background information about most features.
This section provides background information about features that you cannot configure in the web
configurator. In addition, this section identifies related commands in other chapters.
2.4.2 Command Input Values
This section lists common input values for the commands for the feature in one or more tables
NWA/WAC/WAX Series CLI Reference Guide
23
2.4.3 Command Summary
This section lists the commands for the feature in one or more tables.
2.4.4 Command Examples
This section contains any examples for the commands in this feature.
2.4.5 Command Syntax
The following conventions are used in this User’s Guide.
• A command or keyword in courier new must be entered literally as shown. Do not abbreviate.
• Values that you need to provide are in italics.
• Required fields that have multiple choices are enclosed in curly brackets
• A range of numbers is enclosed in angle brackets <>.
• Optional fields are enclosed in square brackets [].
• The
| symbol means OR.
Chapter 2 Command Line Interface
{}.
2.4.6 Changing the Password
It is highly recommended that you change the password for accessing the Zyxel Device. See Section 9.2
on page 52 for the appropriate commands.
2.5 CLI Modes
You run CLI commands in one of several modes.
Table 8 CLI Modes
USERPRIVILEGECONFIGURATIONSUB-COMMAND
What User users
can do
What Limited-Admin users can
do
What Admin users
can do
How you enter itLog in to the Zyxel
• Look at (but not
run) available
commands
• Look at system
information (like
Status screen)
•Run basic
diagnostics
• Look at system
information (like
Status screen)
•Run basic
diagnostics
Device
Unable to accessUnable to accessUnable to access
•Look at system
information (like
Status screen)
•Run basic
diagnostics
•Look at system
information (like
Status screen)
•Run basic
diagnostics
Type enable in User
mode
Unable to accessUnable to access
• Configure simple
features (such as
an address
object)
• Create or remove
complex parts
(such as an
interface)
Type configure
terminal in User or
Privilege mode
• Configure
complex parts
(such as an
interface) in the
Zyxel Device
Type the command
used to create the
specific part in
Configuration mode
NWA/WAC/WAX Series CLI Reference Guide
24
Chapter 2 Command Line Interface
Table 8 CLI Modes (continued)
USERPRIVILEGECONFIGURATIONSUB-COMMAND
What the prompt
looks like
How you exit itType exitType disableType exitType exit
See Chapter 9 on page 52 for more information about the user types. User users can only log in, look at
(but not run) the available commands in User mode, and log out. Limited-Admin users can look at the
configuration in the web configurator and CLI, and they can run basic diagnostics in the CLI. Admin
users can configure the Zyxel Device in the web configurator or CLI.
At the time of writing, there is not much difference between User and Privilege mode for admin users.
This is reserved for future use.
Router>Router#Router(config)#
2.6 Shortcuts and Help
(varies by part)
Router(configif-brg)#
...
2.6.1 List of Available Commands
A list of valid commands can be found by typing ? or [TAB] at the command prompt. To view a list of
available commands within a command group, enter
Figure 4 Help: Available Commands Example 1
Router> ?
<cr>
apply
atse
clear
configure
------------------[Snip]-------------------shutdown
test
traceroute
wlan-report
write
Router>
<command> ? or <command> [TAB].
NWA/WAC/WAX Series CLI Reference Guide
25
Chapter 2 Command Line Interface
Figure 5 Help: Available Command Example 2
Router> show ?
<wlan ap interface>
aaa
account
app-watch-dog
apply
arp-table
------------------[Snip]-------------------wlan-security-profile
wlan-ssid-profile
wtp-logging
Router> show
2.6.2 List of Sub-commands or Required User Input
To view detailed help information for a command, enter <command> <sub command> ?.
Figure 6 Help: Sub-command Information Example
Router(config)# ip ssh server ?
;
<cr>
cert
port
|
Router(config)# ip ssh server
Figure 7 Help: Required User Input Example
Router(config)# ip ssh server port ?
<1..65535>
Router(config)# ip ssh server port
2.6.3 Entering Partial Commands
The CLI does not accept partial or incomplete commands. You may enter a unique part of a command
and press
For example, if you enter config and press [TAB] , the full command of configure automatically
displays.
If you enter a partial command that is not unique and press
commands that start with the partial command.
Figure 8 Non-Unique Partial Command Example
Router# c [TAB]
clear configure copy
Router# co
configure copy
[TAB] to have the Zyxel Device automatically display the full command.
[TAB]
[TAB], the Zyxel Device displays a list of
NWA/WAC/WAX Series CLI Reference Guide
26
Chapter 2 Command Line Interface
2.6.4 Entering a ? in a Command
Typing a ? (question mark) usually displays help information. However, some commands allow you to
input a ?, for example as part of a string. Press [CTRL+V] on your keyboard to enter a ? without the Zyxel
Device treating it as a help query.
2.6.5 Command History
The Zyxel Device keeps a list of commands you have entered for the current CLI session. You can use
any commands in the history again by pre s s i ng th e up ( ) or down () arrow key to scroll through the
previously used commands and press
2.6.6 Navigation
Press [CTRL]+A to move the cursor to the beginning of the line. Press [CTRL]+E to move the cursor to the
end of the line.
2.6.7 Erase Current Command
[ENTER].
Press [CTRL]+U to erase whatever you have currently typed at the prompt (before pressing [ENTER]).
2.6.8 The no Commands
When entering the no commands described in this document, you may not need to type the whole
command. For example, with the “[no] mss <536..1452>” command, you use “mss 536” to specify
the MSS value. But to disable the MSS setting, you only need to type “no mss” instead of “no mss 536”.
2.7 Input Values
You can use the ? or [TAB] to get more information about the next input value that is required for a
command. In some cases, the next input value is a string whose length and allowable characters may
not be displayed in the screen. For example, in the following example, the next input value is a string
called
<description>.
Router# configure terminal
Router(config)# interface lan
Router(config-if-brg)# description ?
<description>
The following table provides more information about input values like <description>.
Table 9 Input-Value Formats for Strings in CLI Commands
TAG# VALUESLEGAL VALUES
*1*
all--ALL
NWA/WAC/WAX Series CLI Reference Guide
27
Chapter 2 Command Line Interface
Table 9 Input-Value Formats for Strings in CLI Commands (continued)
TAG# VALUESLEGAL VALUES
authentication key32-40
16-20
Used in MD5 authentication keys and text authentication key
0-16alphanumeric or _-
Used in text authentication keys
0-8alphanumeric or _-
certificate name1-31alphanumeric or ;`~!@#$%^&()_+[\]{}',.=-
community string0-63alphanumeric or .-
connection_id1+alphanumeric or -_:
contact1-61alphanumeric, spaces, or '()+,/:=?;!*#@$_%-.
country code0 or 2alphanumeric
custom signature file
name
descriptionUsed in keyword criteria for log entries
distinguished name1-511alphanumeric, spaces, or .@=,_-
domain name0+lower-case letters, numbers, or .-
email1-63alphanumeric or .@_-
e-mail1-64alphanumeric or .@_-
encryption key16-64
file name0-31alphanumeric or _-
filter extension1-256alphanumeric, spaces, or '()+,/:=?;!*#@$_%.-
fqdnUsed in ip dns server
full file name0-256alphanumeric or _/.-
0-30alphanumeric or _-.
1-64alphanumeric, spaces, or '()+,/:=?;!*#@$_%-.
Used in other commands
1-61alphanumeric, spaces, or '()+,/:=?;!*#@$_%-
Used in ip dns server
1-248alphanumeric or .-
Used in domainname, ip dhcp pool, and ip domain
1-255alphanumeric or ._-
8-32
1-253alphanumeric or .-
Used in ip, time server, device HA, certificates, and
interface ping check
1-255alphanumeric or .-
“0x” or “0X” + 32-40 hexadecimal values
alphanumeric or ;|`~!@#$%^&*()_+\\{}':,./<>=-
first character: alphanumeric or -
first character: letter
first character: alphanumeric or -
first character: alphanumeric or -
“0x” or “0X” + 16-64 hexadecimal values
alphanumeric or ;\|`~!@#$%^&*()_+\\{}':,./
<>=-
first character: alphanumeric or -
first character: alphanumeric or -
NWA/WAC/WAX Series CLI Reference Guide
28
Chapter 2 Command Line Interface
Table 9 Input-Value Formats for Strings in CLI Commands (continued)
TAG# VALUESLEGAL VALUES
hostnameUsed in hostname command
1-64alphanumeric or .-_
first character: alphanumeric or -
Used in other commands
1-253alphanumeric or .-
first character: alphanumeric or -
import configuration
file
import shell script1-
initial string1-64alphanumeric, spaces, or '()+,/:=!*#@$_%-.&