The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a
retrieval system, translated into any language, or transmitted in any form or by any means, electronic,
mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written
permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or software
described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
ZyXEL further reserves the right to make changes in any products described herein without notice. This
publication is subject to change without notice.
Trademarks
Other trademarks mentioned in this publication are used for identification purposes only and may be
properties of their respective owners.
ii Copyright
ZyAIR B-5000 User’s Guide
Federal Communications Commission
(FCC) Interference Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause undesired
operations.
This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to
Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency
energy, and if not installed and used in accordance with the instructions, may cause harmful interference to
radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of
the following measures:
1. Reorient or relocate the receiving antenna.
2. Increase the separation between the equipment and the receiver.
3. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
4. Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance could void the
user's authority to operate the equipment.
Certifications
Refer to the product page at www.zyxel.com
FCC Statement iii
.
ZyAIR B-5000 User’s Guide
ZyXEL Limited Warranty (Warranty)
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials
or workmanship for a period of up to two years from the date of purchase. During the warranty period, and
upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or
materials, ZyXEL will, at its discretion, repair or replace the defective products or components without
charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or
components to proper operating condition. Any replacement will consist of a new or re-manufactured
functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL. This warranty
shall not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected
to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This
warranty is in lieu of all other warranties, express or implied, including any implied warranty of
merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect
or consequential damages of any kind of character to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material
Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit
be insured when shipped. Any returned products without proof of purchase or those with an out-dated
warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts
and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address,
Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary
from country to country.
iv ZyXEL Warranty
ZyAIR B-5000 User’s Guide
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
13.4.1Local 802.1X User Add ...........................................................................................................13-5
Chapter 14 MAC Filter .............................................................................................................................14-1
14.1 MAC Filter Overview..................................................................................................................14-1
14.1.1MAC Address Pool ..................................................................................................................14-2
24.3 SU Mode....................................................................................................................................... 24-3
24.4 System Information..................................................................................................................... 24-3
24.5 Ping Test .......................................................................................................................................24-4
28.7 Anti – Denial of Service .............................................................................................................28-11
Appendix A Site Planning...........................................................................................................................A-1
Appendix B Site Installation ......................................................................................................................B-1
Appendix C Setting up Your Computer’s IP Address ..............................................................................C-1
Appendix D Wireless LAN With IEEE 802.1x .........................................................................................D-1
Appendix E Types of EAP Authentication ................................................................................................E-1
Appendix F Troubleshooting...................................................................................................................... F-1
Appendix G Technical Specifications ....................................................................................................... G-1
Appendix H Power Specifications............................................................................................................. H-1
Appendix I Approvals.................................................................................................................................. I-1
Figure 12-3 Basic Service set .......................................................................................................................12-2
Figure 12-4 Extended Service Set.................................................................................................................12-3
Figure 23-10 System Status ......................................................................................................................... 23-9
Figure 23-11 Enter HyperTerminal Console Configuration....................................................................... 23-10
Figure 24-1 SMT Main Screen via Telnet or HyperTerminal ...................................................................... 24-1
Figure 26-2 SU Setup................................................................................................................................... 26-2
Figure 26-3 SU Upgrade .............................................................................................................................. 26-3
Figure 26-4 SU Enable................................................................................................................................. 26-3
Figure 26-5 SU Monitor............................................................................................................................... 26-3
Figure 26-6 SU *System .............................................................................................................................. 26-3
Figure 26-7 SU *Interface............................................................................................................................ 26-3
Figure 26-8 SU Packet Filter........................................................................................................................ 26-4
Figure 26-9 SU *PPP ................................................................................................................................... 26-5
Figure 26-10 SU *ISP.................................................................................................................................. 26-5
Figure 26-11 SU *IP_Share ......................................................................................................................... 26-5
Figure 26-12 SU *DHCP ............................................................................................................................. 26-6
Figure 26-13 SU *DHCP clt ........................................................................................................................ 26-6
Figure 26-14 SU *DNS_proxy..................................................................................................................... 26-7
Figure 26-15 SU *SNMP............................................................................................................................. 26-7
Figure 26-16 SU *TFTP .............................................................................................................................. 26-7
Figure 26-17 SU *Route .............................................................................................................................. 26-7
Figure 26-19 SU WLAN.............................................................................................................................. 26-8
Figure 26-20 SU Configuration ................................................................................................................... 26-8
Figure 26-21 SU *Show............................................................................................................................... 26-9
Figure 28-3 SYN Flood ................................................................................................................................28-5
Table 28-1 Common IP Ports........................................................................................................................ 28-3
Table 28-2 Firewall General Parameters.......................................................................................................28-7
Table 28-4 Firewall Config Denial of Service ............................................................................................ 28-11
xx List of Tables
ZyAIR B-5000 User’s Guide
Preface
Congratulations on your purchase from the ZyAIR B-5000 Outdoor Access Point & Bridge.
A wireless gateway is an access point and router rolled into one. It is a cost-effect solution to share Internet
access with multiple computers and expand your wired network.
This User’s Guide is designed to guide you through the configuration of your ZyAIR using the web
configurator or the SMT.
Related Documentation
Supporting Disk
Refer to the included CD for support documents.
Quick Installation Guide
Our Quick Installation Guide is designed to help you get up and running right away. It contains
information on the configuration of key features and hardware connections and installation.
ZyXEL Web Site
The ZyXEL download library at www.zyxel.com
refer to www.zyxel.com
Syntax Conventions
• “Enter” means for you to type one or more characters (and press the carriage return). “Select” or
“Choose” means for you to use one predefined choices.
for an online glossary of networking terms.
contains additional documentation. Please also
• [Enter], or carriage return, key; [ESC] means the escape key and [SPACE BAR]means the space bar.
[UP] and [DOWN] are the up and down arrow keys.
• Mouse action sequences are denoted using a comma. For example, “click the Apple icon, Control
Panels and then Modem” means first click the Apple icon, then point your mouse pointer to Control
Panels and then click Modem.
• For brevity’s sake, we will use “e.g.,” as a shorthand for “for instance”, and “i.e.,” for “that is” or “in
other words” throughout this manual.
• The ZyAIR B-5000 may be referred to simply as the ZyAIR in the user’s guide.
User Guide Feedback
Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to
techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications
Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you.
Preface xxi
ZyAIR B-5000 User’s Guide
xx Preface
OVERVIEW
Part I:
OVERVIEW
This part introduces the main features and applications of the ZyAIR and shows how to access
the web configurator and use the Quick Setup screens for initial configuration.
I
ZyAIR B-5000 User’s Guide
Chapter 1
Getting to know your ZyAIR
This chapter introduces the main features and applications of the ZyAIR.
1.1 ZyAIR Features
1.1.1 10 Mbps Ethernet Interface
This auto-negotiating feature allows the ZyAIR to detect the speed of incoming transmissions and adjust
appropriately without manual intervention. It allows data transfer of either 10 Mbps in either half-duplex or
full-duplex mode depending on your Ethernet network.
1.1.2 10 Mbps Auto-crossover Ethernet Interface
The LAN interface automatically adjusts to either a crossover or straight-through Ethernet cable.
1.1.3 802.11b Wireless LAN Standard
ZyAIR products containing the letter “B” in the model name, such as ZyAIR B-5000, comply with the
802.11b wireless standard.
The 802.11b data rate and corresponding modulation techniques are as follows. The modulation technique
defines how bits are encoded onto radio waves.
802.11b
Data Rate (Mbps) Modulation
1 DBPSK (Differential Binary Phase Shift Keyed)
2
5.5 / 11 CCK (Complementary Code Keying)
Getting to know your ZyAIR 1-1
DQPSK (Differential Quadrature Phase Shift Keying
)
ZyAIR B-5000 User’s Guide
The ZyAIR may be prone to RF (Radio Frequency) interference from other 2.4 GHz
devices such as microwave ovens, wireless phones, Bluetooth enabled devices,
and other wireless LANs.
1.1.4 Firewall
The ZyAIR’s firewall provides DoS (Denial of Service) protection. By default, when the firewall is activated,
all incoming traffic from the WAN to the LAN is blocked unless it is initiated from the LAN. The ZyAIR
firewall supports TCP/UDP inspection.
1.1.5 IEEE 802.1x Network Security
The ZyAIR supports the IEEE 802.1x standard to enhance user authentication. Use the built-in user profile
database to authenticate users using MD5 encryption. Use an EAP-compatible RADIUS (RFC2138, 2139 Remote Authentication Dial In User Service) server to authenticate a limitless number of users using EAP
(Extensible Authentication Protocol). EAP is an authentication protocol that supports multiple types of
authentication.
1.1.6 Wireless LAN MAC Address Filtering
On a local area network (LAN) or other network, the MAC (Media Access Control) address is a wireless
LAN client’s unique hardware number (On an Ethernet LAN, it's the same as your Ethernet address). Your
ZyAIR checks the MAC address of a wireless station against a list of allowed or denied MAC addresses.
1.1.7 WEP Encryption
WEP (Wired Equivalent Privacy) encrypts data frames before transmitting them over the wireless network to
help keep network communications private.
1.1.8 Deny Clients
You can set the ZyAIR to block access for wireless LAN clients that have the SSID set to “any” or
“ANY”.
1.1.9 PPPoE Support (RFC2516)
PPPoE (Point-to-Point Protocol over Ethernet) emulates a dial-up connection. It allows your ISP to use their
existing network configuration with newer broadband technologies such as ADSL. The PPPoE driver on the
ZyAIR is transparent to the computers on the LAN, which see only Ethernet and are not aware of PPPoE thus
saving you from having to manage PPPoE clients on individual computers.
1-2 Getting to know your ZyAIR
ZyAIR B-5000 User’s Guide
1.1.10 Network Address Translation (NAT) /(PAT)
NAT (Network Address Translation - NAT, RFC 1631) or PAT (Port Address Translation) allows the
translation of an IP address used within one network to different IP addresses known within another network.
1.1.11 DHCP (Dynamic Host Configuration Protocol)
DHCP (Dynamic Host Configuration Protocol) allows the individual clients (computers) to obtain the
TCP/IP configuration at start-up from a centralized DHCP server. The ZyAIR has built-in DHCP server
capability disabled by default. This can be changed at the initial configuration to enable DHCP. It can assign
IP addresses, an IP default gateway and DNS servers to DHCP clients.
1.1.12 SNMP
SNMP (Simple Network Management Protocol) is a protocol used for exchanging management information
between network devices. SNMP is a member of the TCP/IP protocol suite. Your ZyAIR supports SNMP
agent functionality, which allows a manager station to manage and monitor the ZyAIR through the network.
The ZyAIR supports SNMP version 1 (SNMPv1) and version 2c (SNMPv2c).
1.1.13 Full Network Management
The embedded web configurator is an all-platform web-based utility that allows you to easily access the
ZyAIR’s management settings. Most functions of the ZyAIR are also software configurable via the SMT
(System Management Terminal) interface. The SMT is a menu-driven interface that you can access from a
terminal emulator through the console port or over a telnet connection.
1.1.14 Embedded TFTP Client Address
The ZyAIR’s embedded TFTP Client address facility enables fast firmware upgrades as well as configuration
file backups and restoration.
Getting to know your ZyAIR 1-3
ZyAIR B-5000 User’s Guide
A
Chapter 2
Web Configurator Overview
This chapter describes how to access the ZyAIR web configurator and provides an overview of its
screens.
2.1 Web Configurator Overview
The web configurator makes it easy to configure and manage the ZyAIR. The screens you see in the web
configurator may vary somewhat from the ones shown in this document due to differences between firmware
versions. The IP address of your computer will need to be set if you are configuring the ZyAIR for the first
time, see Setting Up Your Computer’s IP Address in the appendix of this User’s Guide.
2.2 Accessing the ZyAIR Web Configurator
Step 1. Make sure your ZyAIR hardware is properly connected (refer to the Quick Installation Guide).
Step 2. Prepare your computer to connect to the ZyAIR (refer to Setting Up Your Computer’s IP Address
in the appendix of this User’s Guide).
ddress field.
Figure 2-1 Web Browser Address Field
Step 3. Launch your web browser.
Step 4. Type "192.168.1.1:2000" as the URL.
Step 5. Type the User Name, ‘admin’ is the factory default and Password, “1234” is the factory default
and click OK.
Web Configurator Overview 2-1
ZyAIR B-5000 User’s Guide
Figure 2-2 Password Screen
Step 6. You should now see the web configurator Operating Mode screen. Choose whether you want to
use the ZyAIR as an access point or as a bridge (See Quick Installation Guide Applications
section.
Access Point Application
Internet Service Providers (ISPs) can use the ZyAIR to provide wireless Internet access to users
that are outdoors or in different buildings. A company with many employees working outdoors
can also use the ZyAIR to extend the existing network without expensive network cables.
Wireless stations can move freely anywhere in the coverage area and use resources on the wired
network.
Wireless Bridge Application
You can use the ZyAIR as a bridge or router to form a wireless point-to-point or point-tomultipoint backbone connection.
With the bridge mode, you configure each ZyAIR to act as either a central bridge or a remote
bridge. For point-to-multipoint applications, all communications between network systems go
through the central bridge.
Select either Access Point or Bridge. Click Apply.
2-2 Web Configurator Overview
ZyAIR B-5000 User’s Guide
Figure 2-3 Operating Mode
Step 7. You should now see the Quick Setup web configuration Tutorial screen.
The following summarizes how to navigate the web configurator from the Tutorial screen.
Web Configurator Overview 2-3
ZyAIR B-5000 User’s Guide
Follow the instructions you see in the Tutorial screen or click the icon (located
in the top right corner of most screens) to view online help.
The
Click Quick Setup for initial
configuration including Operation
Mode, TCP/IP, WIRELESS and
CONFIGURATION REVIEW.
Click BASIC CONFIG to configure
basic features such as System,
Interface, Telnet/Console, ISP,
DHCP, Server Mapping, Wireless
LAN (802.1X Access Control, MAC Filter), Configuration Review and
SAVE & RESTART.
Click ADVANCEDCONFIG to
configure advanced features such
as STATIC ROUTE, BRIDGING,
SNMP COMMUNITY, SNMP TRAP,
CONFIGURATION, OVERVIEW,
SAVE & RESTART.
Click UTILITY to view information
about your ZyAIR, SYSTEM INFO,
SOFTWARE UPGRADE or
WIRELESS LINK INFO.
icon does not appear in the MAIN MENU screen.
Click FIREWALL for GENERAL
Firewall setup and click ACCESS CONTROL to configure user
management accessibility. Click
ANTI-DENIAL OF SERVICE to
access denial of services setup.
Figure 2-4 Tutorial Screen
2-4 Web Configurator Overview
Loading...
+ 257 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.