IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots
and graphics in this book may differ slightly from your product due to differences in your product
firmware or your computer operating system. Every effort has been made to ensure that the information
in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide shows how to connect the NWA/WAC and access the Web Configurator.
•CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands
to configure the NWA/WAC.
Note: It is recommended you use the Web Configurator to configure the NWA/WAC.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary information.
•More Information
Go to support.zyxel.com to find other information on the NWA/WAC
.
NWA / WAC Series User’s Guide
2
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this guide.
Warnings tell you about things that could harm you or your device.
Note: Notes tell you other important information (for example, other things you may need to
configure or helpful tips) or recommendations.
Syntax Conventions
• All models in this series may be referred to as the “NWA/WAC” in this guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example, Configuration > Network > IP Setting means you first click Configuration in the navigation panel, then the Network sub
menu and finally the IP Setting tab to get to that screen.
Icons Used in Figures
Figures in this guide may use the following generic icons. The NWA/WAC icon is not an exact
representation of your device.
Bluetooth ............................................................................................................................................... 97
User ....................................................................................................................................................... 100
AP Profile .............................................................................................................................................. 107
System .................................................................................................................................................. 148
Log and Report ................................................................................................................................... 173
5.1.1 What You Can Do in this Chapter ....................................................................................... 60
5.2 What You Need to Know ............................................................................................................... 60
5.3 Network Status ................................................................................................................................ 61
5.3.1 Port Statistics Graph .............................................................................................................. 63
5.4 Radio List ........................................................................................................................................ 64
5.4.1 AP Mode Radio Information ................................................................................................65
5.5 Station List ....................................................................................................................................... 67
5.6 WDS Link Info ................................................................................................................................... 68
6.1.2 What You Can Do in this Chapter ....................................................................................... 77
6.2 IP Setting ......................................................................................................................................... 78
7.1.1 What You Can Do in this Chapter ....................................................................................... 84
7.1.2 What You Need to Know ..................................................................................................... 85
7.2 AP Management ............................................................................................................................ 85
7.3 Rogue AP ......................................................................................................................................... 88
7.3.1 Add/Edit Rogue/Friendly List ................................................................................................ 90
9.3.1 Edit User Authentication Timeout Settings ........................................................................ 105
Chapter 10
AP Profile...........................................................................................................................................107
10.1.1 What You Can Do in this Chapter ................................................................................... 107
10.1.2 What You Need To Know ................................................................................................. 107
10.2 Radio ............................................................................................................................................ 108
NWA / WAC Series User’s Guide
7
Table of Contents
10.2.1 Add/Edit Radio Profile ...................................................................................................... 109
10.4 Security List .................................................................................................................................. 118
10.5 MAC Filter List .............................................................................................................................. 121
10.5.1 Add/Edit MAC Filter Profile ............................................................................................... 122
10.6 Layer-2 Isolation List .................................................................................................................... 123
This User’s Guide covers the following models: NWA1123-ACv2, NWA1123-AC PRO, NWA1123-AC HD,
NWA5121-N, NWA5121-NI, NWA5123-AC, NWA5123-AC HD, NWA5123-NI, NWA5301-NJ, WAC5302D-S,
WAC6103D-I, WAC6303D-S, WAC6502D-E, WAC6502D-S, WAC6503D-S, and WAC6553D-E. Your NWA/
WAC is a wireless AP (Access Point). It extends the range of your existing wired network without
additional wiring, providing easy network access to mobile users.
Table 1 NWA1123 Series Comparison Table
FEATURESNWA1123-ACV2NWA1123-AC PRONWA1123-AC HD
Supported Wireless
Standards
Supported Frequency
Bands
Available Security
Modes
Number of SSID
Profiles
Number of Wireless
Radios
Monitor Mode &
Rogue APs
Containment
Rogue APs DetectionYesYesYes
WDS (Wireless
Distribution System) Root AP & Repeater
Modes
You can set the NWA/WAC to operate in either standalone AP or managed AP mode. When the NWA/
WAC is in standalone AP mode, it can serve as a normal AP, as an RF monitor to search for rouge APs to
help eliminate network threats (if it supports monitor mode and rogue APs detection/containment), or
even as a root AP or a wireless repeater to establish wireless links with other APs in a WDS (Wireless
Distribution System). A WDS is a wireless connection between two or more APs.
Your NWA/WAC’s business-class reliability, SMB features, and centralized wireless management make it
ideally suited for advanced service delivery in mission-critical networks. It uses Multiple BSSID and VLAN
to provide simultaneous independent virtual APs. Additionally, innovations in roaming technology and
QoS features eliminate voice call disruptions.
The NWA/WAC controls network access with Media Access Control (MAC) address filtering, and rogue
Access Point (AP) detection. It also provides a high level of network traffic security, supporting IEEE
802.1x, Wi-Fi Protected Access 2 and Wired Equivalent Privacy (WEP) data encryption.
Your NWA/WAC is easy to install, configure and use. The embedded Web-based configurator enables
simple, straightforward management and maintenance. See the Quick Start Guide for how to make
hardware connections.
1.1.1 Management Mode
The NWA/WAC is a unified AP and can work either in standalone AP mode or in managed AP mode. If
the NWA/WAC and a Zyxel AP controller, such as the NXC2500 or NXC5500, are in the same subnet, it will
be managed by the controller automatically.
An AP controller uses Control And Provisioning of Wireless Access Points (CAPWAP, see RFC 5415) to
discover and configure multiple managed APs.
To set the NWA/WAC to be managed by an AP controller in a different subnet or change between
management modes, use the AC (AP Controller) Discovery screen (see Section 6.4 on page 82).
Table 5 NWA/WAC Management Mode Comparison
MANAGEMENT MODEDEFAULT IP ADDRESSUPLOAD FIRMWARE VIA
Standalone AP
Managed APDynamicCAPWAP or FTP
When the NWA/WAC is in standalone AP mode and connects to a DHCP server, it uses the IP address
assigned by the DHCP server. Otherwise, the NWA/WAC uses the default static management IP address
(192.168.1.2). You can use the AC Discovery screen to have the NWA/WAC work as a managed AP.
Dynamic or
Static (192.168.1.2)
Web Configurator or FTP
When the NWA/WAC is in managed AP mode, it acts as a DHCP client and obtains an IP address from
the AP controller. It can be configured ONLY by the AP controller. To change the NWA/WAC back to
standalone AP mode, use the Reset button to restore the default configuration. Alternatively, you need
to check the AP controller for the NWA/WAC’s IP address and use FTP to upload the default
configuration file at conf/system-default.conf to the NWA/WAC and reboot the device.
NWA / WAC Series User’s Guide
17
1.1.2 MBSSID
A Basic Service Set (BSS) is the set of devices forming a single wireless network (usually an access point
and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS. In Multiple BSS
(MBSSID) mode, the NWA/WAC provides multiple virtual APs, each forming its own BSS and using its own
individual SSID profile.
You can configure multiple SSID profiles, and have all of them active at any one time.
You can assign different wireless and security settings to each SSID profile. This allows you to
compartmentalize groups of users, set varying access privileges, and prioritize network traffic to and
from certain BSSs.
To the wireless clients in the network, each SSID appears to be a different access point. As in any wireless
network, clients can associate only with the SSIDs for which they have the correct security settings.
For example, you might want to set up a wireless network in your office where Internet telephony (VoIP)
users have priority. You also want a regular wireless network for standard users, as well as a ‘guest’
wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority, SSID01 is the wireless
network for standard users, and Guest_SSID is the wireless network for guest users. In this example, the
guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access
only the Internet.
Chapter 1 Introduction
Figure 1 Multiple BSSs
NWA / WAC Series User’s Guide
18
1.1.3 Dual-Radio
Some of the NWA/WAC models are equipped with dual wireless radios. This means you can configure
two different wireless networks to operate simultaneously.
Note: A different channel should be configured for each WLAN interface to reduce the
effects of radio interference.
You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz
band for time sensitive traffic like high-definition video, music, and gaming.
Figure 2 Dual-Radio Application
Chapter 1 Introduction
1.1.4 Root AP
In Root AP mode, the NWA/WAC (Z) can act as the root AP in a wireless network and also allow
repeaters (X and Y) to extend the range of its wireless network at the same time. In the figure below,
both clients A, B and C can access the wired network through the root AP.
NWA / WAC Series User’s Guide
19
Figure 3 Root AP Application
Chapter 1 Introduction
On the NWA/WAC in Root AP mode, you can have multiple SSIDs active for regular wireless connections
and one SSID for the connection with a repeater (repeater SSID). Wireless clients can use either SSID to
associate with the NWA/WAC in Root AP mode. A repeater must use the repeater SSID to connect to
the NWA/WAC in Root AP mode.
When the NWA/WAC is in Root AP mode, repeater security between the NWA/WAC and other repeater
is independent of the security between the wireless clients and the AP or repeater. When repeater
security is enabled, both APs and repeaters must use the same pre-shared key. See Section 7.2 on page
85 and Section 12.2 on page 130 for more details.
Unless specified, the term “security settings” refers to the traffic between the wireless clients and the AP.
At the time of writing, repeater security is compatible with the NWA/WAC only.
1.1.5 Repeater
The NWA/WAC can act as a wireless network repeater to extend a root AP’s wireless network range,
and also establish wireless connections with wireless clients.
Using Repeater mode, your NWA/WAC can extend the range of the WLAN. In the figure below, the
NWA/WAC in Repeater mode (Z) has a wireless connection to the NWA/WAC in Root AP mode (X)
which is connected to a wired network and also has a wireless connection to another NWA/WAC in
Repeater mode (Y) at the same time. Z and Y act as repeaters that forward traffic between associated
wireless clients and the wired LAN. Clients A and B access the AP and the wired network behind the AP
through repeaters Z and Y.
NWA / WAC Series User’s Guide
20
Figure 4 Repeater Application
Chapter 1 Introduction
When the NWA/WAC is in Repeater mode, repeater security between the NWA/WAC and other
repeater is independent of the security between the wireless clients and the AP or repeater. When
repeater security is enabled, both APs and repeaters must use the same pre-shared key. See Section 7.2
on page 85 and Section 12.2 on page 130 for more details.
Once the security settings of peer sides match one another, the connection between devices is made.
At the time of writing, repeater security is compatible with the NWA/WAC only.
1.2 Ways to Manage the NWA/WAC
You can use the following ways to manage the NWA/WAC.
Web Configurator
The Web Configurator allows easy NWA/WAC setup and management using an Internet browser. This
User’s Guide provides information about the Web Configurator.
Command-Line Interface (CLI)
The CLI allows you to use text-based commands to configure the NWA/WAC. You can access it using
remote management (for example, SSH or Telnet). See the Command Reference Guide for more
information.
File Transfer Protocol (FTP)
This protocol can be used for firmware upgrades and configuration backup and restore.
NWA / WAC Series User’s Guide
21
Chapter 1 Introduction
Simple Network Management Protocol (SNMP)
The NWA/WAC can be monitored by an SNMP manager. See the SNMP chapter in this User’s Guide.
1.3 Good Habits for Managing the NWA/WAC
Do the following things regularly to make the NWA/WAC more secure and to manage it more
effectively.
• Change the password often. Use a password that’s not easy to guess and that consists of different
types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier working
configuration may be useful if the device becomes unstable or even crashes. If you forget your
password, you will have to reset the NWA/WAC to its factory default settings. If you backed up an
earlier configuration file, you won’t have to totally re-configure the NWA/WAC; you can simply restore
your last configuration.
1.4 Hardware Connections
See your Quick Start Guide for information on making hardware connections.
1.5 NWA5301-NJ Hardware
1.5.1 110 Punch-Down Block
This section shows you how to use a punch-down tool to seat an 8-wire Ethernet cable to the 110 punchdown block. You can connect a PoE switch to the 110 punch-down block to provide power and
Internet access to the NWA through this connection. An 8-pin Ethernet cable has four pairs of color
coded wires.
1Cut out one and a half inches of the jacket from the Ethernet cable to expose the wires.
2Untwist the wire pairs no more than one inch.
3Match each wire to the correct slot according to the color codes for wiring shown below.
NWA / WAC Series User’s Guide
22
Chapter 1 Introduction
PIN#
PHONE
PORT
UPLINK
PORT
NWA Rear Panel
Table 6 Color Codes for 110 Punch Down Block Wiring
4Use a punch-down tool to seat the wires down properly into the slot.
5Trim any excess wires. Place the dust caps over the terminated wires.
NWA / WAC Series User’s Guide
23
1.5.2 Phone Port
Chapter 1 Introduction
Connect a digital telephone to the RJ-45 PHONE port at the bottom of the NWA to forward voice traffic
to/from the telephone switchboard that is connected to the RJ-45 PHONE port on the back of the NWA.
The NWA does not support VoIP (Voice over Internet Protocol) and the PHONE port is NOT for making
calls over the regular networking network (PSTN), either.
1.5.3 Console Port
To use the CLI commands to configure the NWA, connect an RJ-45-to-DB-9 cable to the PHONE port at
the bottom of the NWA.
For local management, you can use a computer with terminal emulation software configured to the
following parameters:
• VT100 terminal emulation
NWA / WAC Series User’s Guide
24
Chapter 1 Introduction
• 115200 bps
• No parity, 8 data bits, 1 stop bit
• No flow control
The following table shows you the wire color codes and pin assignment for the console cable.
Table 7 RJ45-to-DB-9 Console Cable Color Codes
RJ45 PIN#WIRE COLORDB-9 PIN#
1Black1
7Brown2
2Blue3
8Purple5
1.6 LEDs
The LEDs of your WAC6500 and NWA5301 can be controlled by using the Suppression feature such that
the LEDs stay lit (ON) or OFF after the device is ready.
The WAC6500 also features Locator LED which allows you to see the actual location of the WAC6500
between several devices in the network.
Following are LED descriptions for the NWA/WAC series models.
1.6.1 WAC6502D-E, WAC6502D-S, and WAC6503D-S
The LEDs will stay ON when the WAC6500 Series is ready. You can change this setting in the Maintenance
> LEDs > Suppression screen.
NWA / WAC Series User’s Guide
25
Figure 5 WAC6500 Series LEDs
Chapter 1 Introduction
The following table describes the LEDs.
Table 8 WAC6500 Series LEDs
LEDCOLORSTATUSDESCRIPTION
PWR/SYS RedSlow Blinking (On for 1s,
Off for 1s)
GreenOn
RedOffThe WAC is ready for use.
GreenOn
RedOnThere is system error and the WAC cannot boot up, or the
GreenOff
RedFast Blinking (on for
50ms, Off for 50ms)
GreenOff
Red Slow Blinking (blink for 3
times, Off for 3s)
GreenOff
RedSlow Blinking (blink for 2
times, Off for 3s)
GreenOff
ManagementGreenOnThe WAC AP is managed by a controller.
Slow Blinking (blink for 3
times, Off for 3s)
OffThe WAC AP is in standalone mode.
WLANGreenOnThe 2.4 GHz WLAN is active.
OffThe 2.4 GHz WLAN is not active.
The WAC is booting up.
WAC suffered a system failure.
The WAC is doing firmware upgrade.
The Uplink port is disconnected.
The wireless module of the WAC is disabled or failed.
The WAC AP is searching (discovery) for a controller.
NWA / WAC Series User’s Guide
26
Chapter 1 Introduction
Table 8 WAC6500 Series LEDs (continued)
LEDCOLORSTATUSDESCRIPTION
WLANGreenOnThe 5 GHz WLAN is active.
OffThe 5 GHz WLAN is not active.
UPLINKAmber/
Green
LANAmber/
Green
LocatorWhiteBlinkingThe Locator is activated and will show the actual location
OnAmber - The port is operating as a 100-Mbps connection.
BlinkingThe WAC is sending/receiving data through the port.
OffThe port is not connected.
OnAmber - The port is operating as a 100-Mbps connection.
BlinkingThe LAN port is sending/receiving data through the port.
OffThe LAN port is not connected.
OffThe Locator function is off.
1.6.2 NWA1123-AC PRO and WAC6103D-I
The LEDs will stay ON when the NWA1123-AC PRO or WAC6103D-I is ready. You can change this setting
in the Maintenance > LEDs > Suppression screen.
Figure 6 NWA1123-AC PRO and WAC6103D-I LEDs
Green - The port is operating as a Gigabit connection
(1000 Mbps).
Green - The port is operating as a Gigabit connection
(1000 Mbps).
of the WAC between several devices in the network.
NWA / WAC Series User’s Guide
27
Chapter 1 Introduction
The following table describes the LEDs.
Table 9 NWA1123-AC PRO and WAC6103D-I LEDs
LEDCOLORSTATUSDESCRIPTION
PWR/SYS RedSlow Blinking (On for 1s,
Off for 1s)
GreenOn
RedOffThe NWA/WAC is ready for use.
GreenOn
RedOnThere is system error and the NWA/WAC cannot boot up,
GreenOff
RedFast Blinking (on for
50ms, Off for 50ms)
GreenOff
Red Slow Blinking (blink for 3
times, Off for 3s)
GreenOff
RedSlow Blinking (blink for 2
times, Off for 3s)
GreenOff
ManagementGreenOnThe NWA/WAC is managed by a controller.
Slow Blinking (blink for 3
times, Off for 3s)
OffThe NWA/WAC is in standalone mode.
WLANGreenOnThe antenna switch is set to “Ceiling” for the radio.
The NWA/WAC is booting up.
or the NWA/WAC suffered a system failure.
The NWA/WAC is doing firmware upgrade.
The Uplink port is disconnected.
The wireless module of the NWA/WAC is disabled or
failed.
The NWA/WAC is searching (discovery) for a controller.
The 2.4 GHz WLAN is active.
AmberOnThe antenna switch is set to “Wall” for the radio.
The 2.4 GHz WLAN is active.
OffThe 2.4 GHz WLAN is not active.
WLANGreenOnThe antenna switch is set to “Ceiling” for the radio.
The 5 GHz WLAN is active.
AmberOnThe antenna switch is set to “Wall” for the radio.
The 5 GHz WLAN is active.
OffThe 5 GHz WLAN is not active.
UPLINKAmber/
Green
LANAmber/
Green
OnAmber - The port is operating as a 100-Mbps connection.
Green - The port is operating as a Gigabit connection
(1000 Mbps).
BlinkingThe NWA/WAC is sending/receiving data through the
port.
OffThe port is not connected.
OnAmber - The port is operating as a 100-Mbps connection.
Green - The port is operating as a Gigabit connection
(1000 Mbps).
BlinkingThe LAN port is sending/receiving data through the port.
OffThe LAN port is not connected.
NWA / WAC Series User’s Guide
28
Table 9 NWA1123-AC PRO and WAC6103D-I LEDs (continued)
LEDCOLORSTATUSDESCRIPTION
LocatorWhiteBlinkingThe Locator is activated and will show the actual location
1.6.3 NWA5301-NJ
The LEDs automatically turn off when the NWA5301-NJ is ready. You can press the LED ON button for one
second to turn on the LEDs again. The LEDs will blink and turn off after two minutes.
Figure 7 NWA5301-NJ LEDs
Chapter 1 Introduction
of the NWA/WAC between several devices in the
network.
OffThe Locator function is off.
The following are the LED descriptions for your NWA5301-NJ.
Table 10 NWA5301-NJ LEDs
LABELCOLORSTATUSDESCRIPTION
PWR/SYS AmberSlow Blinking (On for 1s,
Off for 1s)
GreenOn
AmberOffThe NWA is ready for use.
GreenOn
AmberSlow Blinking (blink for 3
times, Off for 3s)
GreenOn
AmberOnThe NWA failed to boot up or is experiencing system
GreenOff
AmberFast Blinking (On for
50ms times, Off for
50ms)
GreenOff
AmberSlow Blinking (blink for 3
times, Off for 3s)
GreenOff
AmberSlow Blinking (blink for 2
times, Off for 3s)
GreenOff
PoEGreenOnPower is supplied to the yellow PoE Ethernet port (LAN1).
OffThere is no power supply.
The NWA is booting up.
The NWA is discovering an AP controller
failure.
The NWA is undergoing firmware upgrade.
The Uplink port is disconnected.
The wireless module of the WAC is disabled or failed.
NWA / WAC Series User’s Guide
29
Chapter 1 Introduction
Table 10 NWA5301-NJ LEDs (continued)
LABELCOLORSTATUSDESCRIPTION
WLANGreenOnThe WLAN is active.
OffThe WLAN is not active.
UPLINKGreenOnThe port is connected.
BlinkingThe NWA is sending/receiving data through the port.
OffThe port is not connected.
LAN1-3GreenOnThe port is connected.
BlinkingThe NWA is sending/receiving data through the port.
OffThe port is not connected.
1.6.4 NWA1123-ACv2, NWA5121-N, NWA5121-NI, NWA5123-AC and
NWA5123-NI
The following are the LED descriptions for your NWA1123/5120 series.
Figure 8 NWA1123/5120 Series LED
The following are the LED descriptions for your NWA1123/5120 series.
Table 11 NWA1123/5120 Series LED
COLORSTATUSDESCRIPTION
AmberSlow Blinking (On for 1s,
Off for 1s)
GreenOn
NWA / WAC Series User’s Guide
The NWA is booting up.
30
Loading...
+ 229 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.