ZyXEL NWA1121-NI User Guide

ZyXEL NWA1121-NI Manual

Get ZyXEL NWA1121-NI PDF manuals and user guides View all ZyXEL NWA1121-NI manuals
Add to My Manuals
Save this manual to your list of manuals

ZyXEL NWA1121-NI manual content summary:

  • ZyXEL NWA1121-NI | User Guide - Page 1
    NWA1121-NI 802.11b/g/n PoE Access Point Default Login Details IP Address http://192.168.1.2 User Name admin Password 1234 Version 1.00 Edition 1, 03/2012 www.zyxel.com www.zyxel.com IMPORTANT! READ CAREFULLY BEFORE USE. KEEP THIS GUIDE FOR FUTURE REFERENCE. Copyright © 2012 ZyXEL
  • ZyXEL NWA1121-NI | User Guide - Page 2
    , or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guid is designed to help you get up and running right away. 2 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 3
    's Guide ...9 Introducing the NWA1121-NI ...11 Introducing the Web Configurator ...19 Dashboard ...25 Tutorial ...29 Technical Reference ...47 Monitor ...49 Wireless LAN ...55 LAN ...94 VLAN ...98 System ...101 Log Settings ...115 Maintenance ...119 Troubleshooting ...127 NWA1121-NI User's Guide 3
  • ZyXEL NWA1121-NI | User Guide - Page 4
    Contents Overview 4 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 5
    11 1.2 Wireless Modes ...11 1.2.1 MBSSID ...11 1.2.2 Wireless Client ...13 1.2.3 Root AP ...14 1.2.4 Repeater ...14 1.3 Ways to Manage the NWA1121-NI 15 1.4 Configuring Your NWA1121-NI's Security Features 16 1.4.1 Control Access to Your Device 16 1.4.2 Wireless Security ...16 1.5 Good Habits for
  • ZyXEL NWA1121-NI | User Guide - Page 6
    To Know ...56 6.4 Wireless Settings Screen ...60 6.4.1 Root AP Mode ...61 6.4.2 Repeater Mode ...64 6.4.3 Wireless Client Mode ...67 6.4.4 MBSSID Mode ...69 6.5 SSID Screen ...72 6.5.1 Configuring SSID ...73 6.6 Wireless Security Screen ...74 6.6.1 Security: WEP ...76 6 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 7
    ...94 7.4 LAN IP Screen ...96 Chapter 8 VLAN ...98 8.1 Overview ...98 Supported MIBs ...112 9.9.3 Private-Public Certificates ...112 9.9.4 Certification Authorities ...112 9.9.5 Checking the Fingerprint of a Certificate on Your Computer 112 Chapter 10 Log Settings ...115 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 8
    Restore Configuration ...124 11.8.3 Back to Factory Defaults ...125 11.9 Restart Screen ...125 Chapter 12 Troubleshooting...127 12.1 Power, Hardware Connections, and LEDs 127 12.2 NWA1121-NI Access and Login ...128 12.3 Internet Access ...129 Appendix A Setting Up Your Computer's IP Address 131
  • ZyXEL NWA1121-NI | User Guide - Page 9
    PART I User's Guide 9
  • ZyXEL NWA1121-NI | User Guide - Page 10
    10
  • ZyXEL NWA1121-NI | User Guide - Page 11
    . See the Quick Start Guide for instructions on how to make hardware connections. 1.2 Wireless Modes The NWA1121-NI can be configured to use the following WLAN operating modes: OPERATING MODE MBSSID Client Root AP Repeater NUMBER OF SUPPORTED SSID 8 1 5 1 UNIVERSAL REPEATER FUNCTION No No
  • ZyXEL NWA1121-NI | User Guide - Page 12
    , SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for guest users. In this example, the guest user is forbidden access to the wired Land Area Network (LAN) behind the AP and can access only the Internet. Figure 1 Multiple BSSs 12 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 13
    Client The NWA1121-NI can be used as a wireless client to communicate with an existing network. In the figure below, the printer can receive requests from the wired computer clients A and B via the NWA1121-NI in Client mode (Z). Figure 2 Wireless Client Application NWA1121-NI User's Guide 13
  • ZyXEL NWA1121-NI | User Guide - Page 14
    the NWA1121-NI 1.2.3 Root AP In Root AP mode, the NWA1121-NI (Z) can act as the root AP in a wireless network and also allow repeaters (X and Y) to extend the range of its wireless network at the same time. In the figure below, both clients A, B and C can access the wired network through the root AP
  • ZyXEL NWA1121-NI | User Guide - Page 15
    recommended for everyday management of the NWA1121-NI using a (supported) web browser. • FTP (File Transfer Protocol) for firmware upgrades and configuration backup and restore. • SNMP (Simple Network Management Protocol). The device can be monitored by an SNMP manager. NWA1121-NI User's Guide 15
  • ZyXEL NWA1121-NI | User Guide - Page 16
    an unauthorized person has access to the reset button, they can then reset the device's password to its default password, log in and reconfigure its settings. • Change any default passwords on the NWA1121-NI, such as the password used for accessing the NWA1121-NI's web configurator (if it has a web
  • ZyXEL NWA1121-NI | User Guide - Page 17
    your password, you will have to reset the NWA1121-NI to its factory default settings. If you backed up an earlier configuration file, you would not have to totally re-configure the NWA1121-NI. You could simply restore your last configuration. 1.6 Hardware Connections See your Quick Start Guide for
  • ZyXEL NWA1121-NI | User Guide - Page 18
    Chapter 1 Introducing the NWA1121-NI 18 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 19
    its screens. 2.1 Accessing the Web Configurator 1 Make sure your hardware is properly connected and prepare your computer or computer network to connect to the NWA1121-NI (refer to the Quick Start Guide). 2 Launch your web browser. 3 Type "192.168.1.2" as the URL (default). The login screen appears
  • ZyXEL NWA1121-NI | User Guide - Page 20
    19 for details about the Dashboard screen. 2.2 Resetting the NWA1121-NI If you forget your password or cannot access the web configurator, you will need to use the RESET button at the rear panel of the NWA1121-NI. This replaces the current configuration file with the 20 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 21
    erase the current configuration and restore factory defaults in two ways: Use the RESET button to upload the default configuration file. Hold this button in for about 3 seconds (the light will begin to blink). Use this method for cases when the password or IP address of the NWA1121-NI is not known
  • ZyXEL NWA1121-NI | User Guide - Page 22
    screen is divided into these parts: • A - title bar • B - navigation panel • C - main window 2.3.1 Title Bar Click Logout at any time to exit the Web Configurator. Click ZAbout to open the about window, which provides information of the boot module and driver versions. 22 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 23
    can use Telnet to manage the NWA1121NI. SNMP Use this screen to configure the NWA1121-NI for SNMP management. FTP Use this screen to configure through which interface(s) and from which IP address(es) users can use FTP to access the NWA1121-NI. Log Settings Use this screen to change your log
  • ZyXEL NWA1121-NI | User Guide - Page 24
    (settings) or reset the factory default settings. Restart Use this screen to reboot the NWA1121-NI without turning the power off. 2.3.3 Main Window The main window displays information and configuration fields. It is discussed in the rest of this document. 24 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 25
    statistics, associated wireless clients, and logs. 3.1 The Dashboard Screen Use this screen to get a quick view of system, Ethernet, WLAN and other information regarding your NWA1121-NI. Click Dashboard. The following screen displays. Figure 10 The Dashboard Screen NWA1121-NI User's Guide 25
  • ZyXEL NWA1121-NI | User Guide - Page 26
    screen's System Name field. WLAN Operating Mode This field displays the current operating mode of the wireless module (Root AP, Repeater, Client, or MBSSID). You can change the operating mode in the Configuration > Wireless LAN > Wireless Settings screen. Firmware Version This field displays the
  • ZyXEL NWA1121-NI | User Guide - Page 27
    module. BSSID This field displays the MAC address of the wireless module. Security This field displays the type of wireless security used by each SSID. VLAN This field displays the VLAN ID of each SSID in use, or Disabled if the SSID does not use VLAN. NWA1121-NI User's Guide 27
  • ZyXEL NWA1121-NI | User Guide - Page 28
    Chapter 3 Dashboard 28 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 29
    access point with some groups of users having different security or QoS settings from other groups of users. See Section 1.2.1 on page 11 for details. • Use Client operating mode if you want to use the NWA1121-NI to access a wireless network. See Section 1.2.2 on page 13 for details. • Use Root AP
  • ZyXEL NWA1121-NI | User Guide - Page 30
    over IP (VoIP) users, and a guest network that allows visitors to access only the Internet and the network printer. To do this, you will take the following steps: 1 Edit the SSID profiles. 2 Change the operating mode from Root AP to MBSSID and reactivate the standard network. 3 Configure different
  • ZyXEL NWA1121-NI | User Guide - Page 31
    AA:00:AA:00:AA:00 4.2.1 Configure the SSID Profiles 1 Log in to the NWA1121-NI (see Section 2.1 on page 19). Click Wireless LAN > SSID. The SSID screen appears. 2 Click the Edit icon next to the Profile1. 3 Rename the Profile Name and SSID as SSID01. Click Apply. 4 Repeat Step 2 and 3 to change
  • ZyXEL NWA1121-NI | User Guide - Page 32
    Chapter 4 Tutorial 4.2.1.1 MBSSID 1 Go to Wireless LAN > Wireless Settings. Select MBSSID from the Operation Mode drop-down list box. 2 SSID01 profile. Select the corresponding Active check-boxes. 4 Click Apply to save your settings. Now the three SSIDs are activated. 32 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 33
    4.2.2 Configure the Standard Network 1 Click Wireless LAN > SSID. Click the Edit icon next to the area. Also, the clients on SSID01 might need to access other clients on the same wireless network. Do not select the Intra-BSS Traffic blocking check-box. Click Apply. NWA1121-NI User's Guide 33
  • ZyXEL NWA1121-NI | User Guide - Page 34
    that has access to all configuring the standard network, SSID01. 4.2.3 Configure the VoIP Network 1 Go to Wireless LAN > SSID. Click the Edit icon next to VoIP_SSID. 2 Select SecProfile2 as the Security Profile for the VoIP network. Select the Hidden SSID checkbox. 34 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 35
    Chapter 4 Tutorial 3 Select WMM_VOICE in the QoS field to give VoIP the highest priority in the wireless network. Click Apply. 4 Next, click Wireless LAN > Security. Click the Edit icon next to SecProfile2. NWA1121-NI User's Guide 35
  • ZyXEL NWA1121-NI | User Guide - Page 36
    priority across the wireless network. 4.2.4 Configure the Guest Network When you are setting up the wireless network for guests to -configured Guest_SSID profile has intra-BSS traffic blocking enabled by default. "Intra-BSS traffic blocking" means that the client cannot access NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 37
    Guest_SSID clients do not have access to sensitive information on the network, you should not leave the network without security. An attacker could still cause damage to the network or intercept unsecured communications or use your Internet access for illegal activities. NWA1121-NI User's Guide 37
  • ZyXEL NWA1121-NI | User Guide - Page 38
    the settings of the security profile are correct. 4.3 NWA1121-NI Setup in AP and Wireless Client Modes This example shows you how to restrict wireless access to your NWA1121-NI. 4.3.1 Scenario In the figure below, there are two NWA1121-NIs (A and B) in the network. A is in MBSSID or root AP mode
  • ZyXEL NWA1121-NI | User Guide - Page 39
    Client 4.3.2 Configuring the NWA1121-NI in MBSSID or Root AP Mode Before setting up the NWA1121-NI as a wireless client (B), you need to make sure there is an access point to connect to. Use the Ethernet port on NWA1121-NI (A) to configure it via a wired connection. NWA1121-NI User's Guide 39
  • ZyXEL NWA1121-NI | User Guide - Page 40
    NI (A) and go to the Wireless LAN > Wireless Settings screen. 1 Set the Operation Mode to Root AP. 2 Select the Wireless Mode. In this example, select 802.11b/g/n. 3 Select Profile1 as the SSID Profile. 4 Choose the Channel you want NWA1121-NI (A) to use. 5 Click Apply. 40 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 41
    Edit icon next to Profile1. Chapter 4 Tutorial 7 Change the SSID to AP-A. 8 Select SecProfile1 in the Security field. 9 Select the check-box for Intra-BSS Traffic blocking Enabled so the client cannot access other clients on the same wireless network. 10 Click Apply. NWA1121-NI User's Guide 41
  • ZyXEL NWA1121-NI | User Guide - Page 42
    should have a wired connection before it can be set to wireless client operating mode. Connect your NWA1121-NI to the FTP server. Login to NWA1121-NI (B)'s Web Configurator and go to the Wireless LAN > Wireless Settings screen. Follow these steps to configure station B. 42 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 43
    1 Select Client as Operation Mode. Click Apply. Chapter 4 Tutorial 2 Click on the Site Survey button. A window should pop up which contains a list of all available wireless devices within your NWA1121-NI's range. 3 Find and select NWA1121-NI (A)'s SSID: AP-A. NWA1121-NI User's Guide 43
  • ZyXEL NWA1121-NI | User Guide - Page 44
    4 Go to Wireless LAN > Security to configure the NWA1121-NI to use the same security mode and Pre-Shared Key as NWA1121-NI (A): WPA-PSK/ThisisMyPreSharedKey. Click Apply. Figure 12 4.3.4 MAC Filter Setup One way to ensure that only specified wireless clients can access the FTP server is by enabling
  • ZyXEL NWA1121-NI | User Guide - Page 45
    can access A. 3 Make sure intra-BSS traffic is enabled on A. • Try accessing the FTP server from X. If you are able to access the FTP server, do the following. 1 Make sure MAC filtering is enabled. 2 Make sure X's MAC address is not entered in the list of allowed devices. NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 46
    Chapter 4 Tutorial 46 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 47
    PART II Technical Reference The appendices provide general information. Some details may not apply to your NWA1121-NI. 47
  • ZyXEL NWA1121-NI | User Guide - Page 48
    48
  • ZyXEL NWA1121-NI | User Guide - Page 49
    NWA1121-NI. 5.2 What You Can Do • Use the Logs screen to see the logs for the categories that you selected in the Configuration > Log Settings NWA1121-NI. Log entries in red indicate system error logs. The log wraps around and deletes the old entries after it fills. NWA1121-NI User's Guide 49
  • ZyXEL NWA1121-NI | User Guide - Page 50
    -only information, including 802.11 Mode, Channel ID, Retry Count and FCS Error Count. Also provided is the "poll interval". The Poll Interval field is configurable and is used for refreshing the screen. 50 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 51
    with the NWA1121-NI in the Association List screen. Association means that a wireless client (for example, your network or computer with a wireless network card) has connected successfully to the AP (or wireless router) using the same SSID, channel and security settings. NWA1121-NI User's Guide 51
  • ZyXEL NWA1121-NI | User Guide - Page 52
    Association Time This field displays the time a wireless device first associated with the NWA1121-NI's wireless network. Signal Strength This field displays the RSSI (Received Signal Strength Indicator . Click Monitor > Channel Usage to display the screen shown next. 52 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 53
    low signal strength for minimum interference. Security This is the wireless security method used by the wireless network to protect wireless communication between wireless stations, access points and the wired network. Refresh Click Refresh to reload the screen. NWA1121-NI User's Guide 53
  • ZyXEL NWA1121-NI | User Guide - Page 54
    Chapter 5 Monitor 54 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 55
    Overview This chapter discusses the steps to configure the Wireless Settings screen on the NWA1121-NI. It also introduces the wireless LAN (WLAN) and some basic scenarios. Figure 17 Wireless Mode In the figure above, the NWA1121-NI allows access to another bridge device (A) and a notebook computer
  • ZyXEL NWA1121-NI | User Guide - Page 56
    network. • Repeater. The NWA1121-NI acts as a wireless repeater and increase a root AP's wireless coverage area. • Client. The NWA1121-NI acts as a wireless client to access a wireless network. • MBSSID. The Multiple Basic Service Set Identifier (MBSSID) mode allows you to use one access point to
  • ZyXEL NWA1121-NI | User Guide - Page 57
    to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there was also the possibility of channel interference. The NWA1121-NI's MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several
  • ZyXEL NWA1121-NI | User Guide - Page 58
    cannot set up user names and passwords for your users. Unauthorized Default) Unique SSID with Hide SSID Enabled MAC Address Filtering WEP Encryption IEEE802.1x EAP with RADIUS Server Authentication Wi-Fi Protected Access (WPA) Most Secure WPA2 The available security modes in your NWA1121-NI
  • ZyXEL NWA1121-NI | User Guide - Page 59
    User Service (RADIUS) is a protocol that can be used to manage user access to large networks. It is based on a client-server model that supports authentication, authorization and accounting. The access point is the client and the server is the RADIUS server. Figure 19 RADIUS Server Setup NWA1121-NI
  • ZyXEL NWA1121-NI | User Guide - Page 60
    which your AP acts as a message relay between the wireless client and the network RADIUS server. You should know the IP addresses, ports and share secrets of the external RADIUS server and/or the external RADIUS accounting server you want to use with your NWA1121-NI. You can configure a primary and
  • ZyXEL NWA1121-NI | User Guide - Page 61
    Chapter 6 Wireless LAN 6.4.1 Root AP Mode Use this screen to use your NWA1121-NI as an access point. Select Root AP as the Operation Mode. The following screen displays. Figure 20 Wireless LAN > Wireless Settings: Root AP NWA1121-NI User's Guide 61
  • ZyXEL NWA1121-NI | User Guide - Page 62
    SSID (Service Set IDentifier) identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. You can have up to four SSIDs active at the same time. Note: If you are configuring the NWA1121-NI from a computer
  • ZyXEL NWA1121-NI | User Guide - Page 63
    Auto option to have the NWA1121-NI set the data rates automatically to optimize the throughput. Apply Cancel Note: You can set the NWA1121-NI to use up to four MCS rates at a time. Click Apply to save your changes. Click Cancel to begin configuring this screen afresh. NWA1121-NI User's Guide 63
  • ZyXEL NWA1121-NI | User Guide - Page 64
    Mode Use this screen to have the NWA1121-NI act as a wireless repeater. You need to know the MAC address of the peer device, which also must be in Repeater or Root AP mode. Figure 21 Wireless LAN > Wireless Settings: Repeater The following table describes the bridge labels in this screen. Table
  • ZyXEL NWA1121-NI | User Guide - Page 65
    support channel bonding. Universal Repeater Settings The Universal repeater function allows the NWA1121-NI in root AP or repeater mode to set up a wireless connection between it and another NWA1121-NI in root AP or repeater mode. Note: Universal repeater of the access point. DTIM Interval
  • ZyXEL NWA1121-NI | User Guide - Page 66
    Auto option to have the NWA1121-NI set the data rates automatically to optimize the throughput. Apply Cancel Note: You can set the NWA1121-NI to use up to four MCS rates at a time. Click Apply to save your changes. Click Cancel to begin configuring this screen afresh. 66 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 67
    . Site Survey Click this to view a list of available wireless access points within the range. Select the AP you want to use. Note: After selecting Client as the Operation Mode in the Basic Settings section, you must click Apply to be able to select from the AP list. NWA1121-NI User's Guide 67
  • ZyXEL NWA1121-NI | User Guide - Page 68
    access point (AP) must have the same SSID. In this field, select the SSID profile of the AP you want to use. Click Apply. The SSID used in the selected SSID profile automatically changes to be the one you select in the Site Survey screen. Set the security configuration 68 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 69
    . Cancel Click Cancel to begin configuring this screen afresh. 6.4.4 MBSSID Mode Use this screen to have the NWA1121-NI function in MBSSID mode. Select MBSSID as the Operation Mode. The following screen diplays. Figure 23 Wireless LAN > Wireless Settings: MBSSID NWA1121-NI User's Guide 69
  • ZyXEL NWA1121-NI | User Guide - Page 70
    SSID (Service Set IDentifier) identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. You can have up to eight SSIDs active at the same time. Note: If you are configuring the NWA1121-NI from a computer
  • ZyXEL NWA1121-NI | User Guide - Page 71
    Auto option to have the NWA1121-NI set the data rates automatically to optimize the throughput. Apply Cancel Note: You can set the NWA1121-NI to use up to four MCS rates at a time. Click Apply to save your changes. Click Cancel to begin configuring this screen afresh. NWA1121-NI User's Guide 71
  • ZyXEL NWA1121-NI | User Guide - Page 72
    This field displays which MAC filter profile is currently associated with each SSID profile, or Disable if MAC filtering is not configured on an SSID profile. Modify Click Edit to go to the SSID configuration screen where you can modify settings in an SSID profile. 72 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 73
    NI applies that QoS setting to all of that SSID's traffic. • If you select None, the NWA1121-NI applies no priority to traffic on this SSID. Note: When you configure an SSID profile's QoS settings, the NWA1121-NI applies the same QoS setting to all of the profile's traffic. NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 74
    from the WLAN using this SSID profile are tagged with the VLAN ID number by the NWA1121-NI. Use this field to set a maximum number of wireless stations that may connect to the device. If you do not select the checkbox, the NWA1121-NI broadcasts this SSID (a wireless client scanning for an AP will
  • ZyXEL NWA1121-NI | User Guide - Page 75
    Note that some screens display differently depending on the operating mode selected in the Wireless LAN > Wireless Settings screen. Note: You must enable the same wireless security settings on the NWA1121-NI and on all wireless clients that you want to associate with it. NWA1121-NI User's Guide 75
  • ZyXEL NWA1121-NI | User Guide - Page 76
    Wireless LAN 6.6.1 Security: WEP Use this screen to use WEP as the security mode for your NWA1121-NI. Select WEP in the Security Mode field to display the following screen. Figure 28 Security: WEP . Generate Click this to get the keys from the Passphrase you entered. 76 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 77
    configuring this screen afresh. 6.6.2 Security: 802.1x Only This screen varies depending on the operating mode you select in the Wireless LAN > Wireless Settings screen. 6.6.2.1 Access Point Use this screen to use 802.1x-Only security mode for your NWA1121-NI that is in root AP, MBSSID or repeater
  • ZyXEL NWA1121-NI | User Guide - Page 78
    NWA1121-NI automatically disconnect a wireless station from the wired network after a period of inactivity. The wireless station needs to enter the user name and password again before access Security Settings Profile Name This is the name that identifying this profile. 78 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 79
    Back to return to the previous screen. Click Apply to save your changes. Click Cancel to begin configuring this screen afresh. 6.6.3 Security: 802.1x Static WEP This screen varies depending on the operating mode you select in the Wireless LAN > Wireless Settings screen. NWA1121-NI User's Guide 79
  • ZyXEL NWA1121-NI | User Guide - Page 80
    NWA1121-NI that is in root AP, MBSSID or repeater operating mode. Select 802.1X-Static WEP in the Security Mode field to display the following screen. Figure 31 Security: 802.1X-Static WEP for Access Point WEP for Access Point LABEL DESCRIPTION Security Settings Profile NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 81
    and password again before access to the wired network is allowed. Back Apply Cancel Enter a time interval between 100 and 3600 seconds. Click Back to return to the previous screen. Click Apply to save your changes. Click Cancel to begin configuring this screen afresh. NWA1121-NI User's Guide 81
  • ZyXEL NWA1121-NI | User Guide - Page 82
    table describes the labels in this screen. Table 20 Security: 802.1X-Static WEP for Wireless Client LABEL DESCRIPTION Security Settings Profile Name This is the name that identifying this profile. Security Mode Choose the same security mode used by the AP. 82 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 83
    to return to the previous screen. Click Apply to save your changes. Click Cancel to begin configuring this screen afresh. 6.6.4 Security: WPA, WPA2, WPA2-MIX This screen varies depending on the operating mode you select in the Wireless LAN > Wireless Settings screen. NWA1121-NI User's Guide 83
  • ZyXEL NWA1121-NI | User Guide - Page 84
    WPA or WPA2 as the security mode for your NWA1121-NI that is in root AP, MBSSID or repeater operating mode. Select WPA, WPA2 or WPA2-MIX in the Security Mode field to display the following screen. Figure 33 Security: WPA/WPA2 for Access Point The following table describes the labels in this screen
  • ZyXEL NWA1121-NI | User Guide - Page 85
    the user name of the account created in the RADIUS server. Login Name Password Certificate User Certificate Supply the password of the account created in the RADIUS server. If you select TLS, enter the name of the certificate used to to verify the identity of clients. NWA1121-NI User's Guide 85
  • ZyXEL NWA1121-NI | User Guide - Page 86
    same. The only difference between the two is that WPA-PSK uses a simple common password, instead of user-specific credentials. Back Apply Cancel Type a pre-shared key from 8 to 63 case- Apply to save your changes. Click Cancel to begin configuring this screen afresh. 86 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 87
    LAN 6.7 RADIUS Screen Use this screen to set up your NWA1121-NI's RADIUS server settings. Click Wireless LAN > RADIUS. The screen appears as shown. Figure 36 Wireless LAN > RADIUS Select a profile you want to configure and click Edit. Figure 37 Wireless LAN > RADIUS NWA1121-NI User's Guide 87
  • ZyXEL NWA1121-NI | User Guide - Page 88
    NWA1121-NI. The key is not sent over the network. Select the check box to enable user accounting through an external authentication server. Enter the IP address of the external accounting server in dotted decimal notation. Enter the port number of the external accounting server. Enter a password
  • ZyXEL NWA1121-NI | User Guide - Page 89
    at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC address of each device to configure MAC filtering on the NWA1121-NI. The MAC filter function allows you to configure the NWA1121-NI to grant access to the NWA1121NI from other
  • ZyXEL NWA1121-NI | User Guide - Page 90
    . You can specify MAC addresses to either allow or deny association with your NWA1121-NI. Click Wireless LAN > MAC Filter. The screen displays as shown. Figure 39 Wireless LAN > MAC Filter Select a profile you want to configure and click Edit. Figure 40 MAC Filter: Edit 90 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 91
    may cause them to send information to the AP at the same time and result in information colliding and not getting through. By setting this value lower than the default value, the wireless devices must sometimes get permission to send information to the NWA1121-NI. The lower the value, the more often
  • ZyXEL NWA1121-NI | User Guide - Page 92
    6 Wireless LAN TERM Roaming Antenna DESCRIPTION If you have two or more NWA1121-NIs (or other wireless access points) on your wireless (Wi-Fi MultiMedia) QoS (Quality of Service) ensures quality of service in wireless networks. It controls WLAN transmission priority on packets to be transmitted
  • ZyXEL NWA1121-NI | User Guide - Page 93
    but no RADIUS server. • If you don't have WPA(2)-aware wireless clients, then use WEP key encrypting. A higher bit key offers better security. You can manually enter 64-bit or 128-bit WEP keys. More information on Wireless Security can be found in Appendix D on page 179. NWA1121-NI User's Guide 93
  • ZyXEL NWA1121-NI | User Guide - Page 94
    to configure the IP address of your NWA1121-NI (see Section 7.4 on page 96). 7.3 What You Need to Know The Ethernet parameters of the NWA1121-NI are preset in the factory with the following values: 1 IP address of 192.168.1.2 2 Subnet mask of 255.255.255.0 (24 bits) NWA1121-NI User's Guide 94
  • ZyXEL NWA1121-NI | User Guide - Page 95
    represent the network address. An IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is similar to a "public IP address" in IPv4. A global unicast address starts with a 2 or 3. NWA1121-NI User's Guide 95
  • ZyXEL NWA1121-NI | User Guide - Page 96
    option, fill in the fields below. Enter the IP address of your NWA1121-NI in dotted decimal notation. Subnet Mask Gateway IP Address Note: If you change the NWA1121-NI's IP address, you must use the new IP address if you want to access the web configurator again. Type the subnet mask. Type the
  • ZyXEL NWA1121-NI | User Guide - Page 97
    first DNS (Domain Name Service) server, if provided. Secondary DNS Server Enter the IPv4 address of the second DNS (Domain Name Service) server address, if provided. Apply Click Apply to save your changes. Cancel Click Cancel to begin configuring this screen afresh. NWA1121-NI User's Guide 97
  • ZyXEL NWA1121-NI | User Guide - Page 98
    Overview This chapter discusses how to configure the NWA1121-NI's VLAN settings. Figure 43 Management VLAN Setup B VLAN A In the figure above, to access and manage the NWA1121-NI from computer A, the NWA1121-NI and switch B's ports to which computer A and the NWA1121-NI are connected should be in
  • ZyXEL NWA1121-NI | User Guide - Page 99
    to the VLAN specified below in order to manage the NWA1121-NI. Management VLAN ID Enter a number from 1 to 4094 to define the NWA1121-NI's management VLAN group. Apply Click Apply to save your changes. Cancel Click Cancel to begin configuring this screen afresh. NWA1121-NI User's Guide 99
  • ZyXEL NWA1121-NI | User Guide - Page 100
    Chapter 8 VLAN 100 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 101
    Network). It is also being accessed by a notebook (C) connected via WLAN (Wireless LAN). 9.2 What You Can Do in this Chapter • Use the WWW screen to configure through which interface(s) and from which IP address(es) you can use the Web Browser to manage the NWA1121-NI (see Section 9.4 on page 104
  • ZyXEL NWA1121-NI | User Guide - Page 102
    systems manager can access the NWA1121-NI (see Section 9.7 on page 107). • Use the FTP screen to configure through which interface(s) and from which IP address(es) you can use File Transfer Protocol (FTP) to manage the NWA1121-NI. You can use FTP to upload the latest firmware for example (see
  • ZyXEL NWA1121-NI | User Guide - Page 103
    or WLAN will not work when: • You have disabled that service in one of the remote management screens. • The IP address in the Secured Client IP Address field does not match the client IP address. If it does not match, the NWA1121-NI will disconnect the session immediately. NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 104
    keys and you never need to transmit private keys. 9.4 WWW Screen Use this screen to configure your NWA1121-NI via the World Wide Web (WWW) using a Web browser. This lets you specify which IP addresses or computers are able to communicate with and access the NWA1121-NI. 104 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 105
    the computer with the MAC address that you specify to access the NWA1121-NI using this service. Click Apply to save your customized settings. Click Cancel to begin configuring this screen afresh. 9.5 Certificates Screen Use this screen to delete or import certificates. NWA1121-NI User's Guide 105
  • ZyXEL NWA1121-NI | User Guide - Page 106
    selected certificate. 9.6 Telnet Screen Use this screen to configure your NWA1121-NI for remote Telnet access. You can use Telnet to access the NWA1121-NI's Command Line Interface (CLI). Click System > Telnet. The following screen displays. Figure 51 System > Telnet 106 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 107
    Selected to just allow the computer with the MAC address that you specify to access the NWA1121-NI using this service. Click Apply to save your customized settings. Click Cancel to begin configuring this screen afresh. 9.7 SNMP Screen Use this screen to have a manager station administrate your
  • ZyXEL NWA1121-NI | User Guide - Page 108
    The following table describes the labels in this screen. Table 33 System > SNMP LABEL DESCRIPTION SNMP Port You can change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. 108 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 109
    to access the NWA1121-NI using this service. Select the SNMP version for the NWA1121-NI, which you allow the SNMP manager to use to access the NWA1121-NI. Get Community Set Community Trap Community Trap Destination SNMPv3 Admin Settings SNMPv3 Admin User Name Password Confirm Password Access Type
  • ZyXEL NWA1121-NI | User Guide - Page 110
    . 9.8 FTP Screen Use this screen to upload and download the NWA1121-NI's firmware using FTP. To use this feature, your computer must have an FTP client. To change your NWA1121-NI's FTP settings, click System > FTP. The following screen displays. Figure 53 System > FTP 110 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 111
    any computer to access the NWA1121-NI using this service. Choose Selected to just allow the computer with the MAC address that you specify to access the NWA1121-NIe using this service. Click Apply to save your customized settings. Click Cancel to begin configuring this screen afresh. 9.9 Technical
  • ZyXEL NWA1121-NI | User Guide - Page 112
    Chapter 9 System 9.9.2 Supported MIBs The NWA1121-NI supports MIB II that is defined in RFC-1213 and RFC-1215 as well as the proprietary ZyXEL private MIB. The purpose of the MIBs is to let certificate. 1 Browse to where you have the certificate saved on your computer. 112 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 113
    Algorithm and Thumbprint fields. The secure method may vary according to your situation. Possible examples would be over the telephone or through an HTTPS connection. NWA1121-NI User's Guide 113
  • ZyXEL NWA1121-NI | User Guide - Page 114
    Chapter 9 System 114 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 115
    logs. The user (U) can access logs directly from the NWA1121-NI (A) via the Web configurator. Logs can also be located in an external log server (B). An email server (C) can also send harvested logs to the user's email account. 10.2 What You Can Do in this Chapter Use the Log Settings screen to
  • ZyXEL NWA1121-NI | User Guide - Page 116
    . Enabling Syslog Logging To enable Syslog Logging, obtain your Syslog server's IP address (or server name). 10.4 Log Settings Screen Use this screen to configure to where and when the NWA1121-NI is to send the logs and which logs and/or immediate alerts it is to send. 116 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 117
    your NWA1121-NI's log settings, click Configuration > Log Settings. The screen appears as shown. Figure 57 Log Settings The following table describes the labels in this screen. Table 35 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address
  • ZyXEL NWA1121-NI | User Guide - Page 118
    receive the e-mail logs. User Name Password Syslog Logging Syslog Logging Syslog Server IP Address Syslog Port Number Send NWA1121-NI to immediately send e-mail alerts. Click Apply to save your customized settings. Click Cancel to begin configuring this screen afresh. 118 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 119
    you can upload new firmware, manage configuration and restart your NWA1121-NI without turning it off and on. This chapter provides information and instructions on how to identify and manage your NWA1121NI over the network. Figure 58 NWA1121-NI Setup In the figure above, the NWA1121-NI connects to
  • ZyXEL NWA1121-NI | User Guide - Page 120
    the NWA1121-NI in the Ethernet network. Apply Cancel This name can be up to 15 alphanumeric characters long. Spaces are not allowed, but dashes "-" are accepted. Click Apply to save your changes. Click Cancel to reload the previous configuration for this screen. 120 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 121
    as you type a password, the screen displays a dot (.) for each character you type. Retype to Confirm Retype your new system password for confirmation. Apply Click Apply to save your changes. Cancel Click Cancel to reload the previous configuration for this screen. NWA1121-NI User's Guide 121
  • ZyXEL NWA1121-NI | User Guide - Page 122
    page, the NWA1121-NI synchronizes the time with the time server (if configured). Current Date When you disable NTP Client Update, you can manually enter the new time in this field and then click Apply. This field displays the last updated date from the time server. Time and Date Setup NTP Client
  • ZyXEL NWA1121-NI | User Guide - Page 123
    firmware to your NWA1121-NI. Click Maintenance > Firmware Upgrade. Follow the instructions in this section to upload firmware to your NWA1121-NI. Figure 62 Maintenance > Firmware Upgrade finished, log in again and check your new firmware version in the Dashboard screen. NWA1121-NI User's Guide 123
  • ZyXEL NWA1121-NI | User Guide - Page 124
    must decompress compressed (.ZIP) files before you can upload them. Upload Click Upload to begin the upload process. Do not turn off the NWA1121-NI while configuration file upload is in progress. You must then wait one minute before logging into the NWA1121-NI again. 124 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 125
    A on page 131 for details on how to set up your computer's IP address. 11.8.3 Back to Factory Defaults Pressing the Reset button in this section clears all user-entered configuration information and returns the NWA1121-NI to its factory defaults as shown on the screen. The following screen will
  • ZyXEL NWA1121-NI | User Guide - Page 126
    Chapter 11 Maintenance Click Restart to have the NWA1121-NI reboot. This does not affect the NWA1121-NI's configuration. 126 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 127
    on page 17. 2 Check the hardware connections. See the Quick Start Guide. 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables. 4 Disconnect and re-connect the power adaptor to the NWA1121-NI. 5 If the problem continues, contact the vendor. NWA1121-NI User's Guide 127
  • ZyXEL NWA1121-NI | User Guide - Page 128
    this step.) • If there is no DHCP server on your network, make sure your computer's IP address is in the same subnet as the NWA1121-NI. 5 Reset the device to its factory defaults, and try to access the NWA1121-NI with the default IP address. See Chapter 2 on page 20. 128 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 129
    cord to the NWA1121-NI. 4 If this does not work, you have to reset the device to its factory defaults. See Section 2.2 on page 20. I cannot use FTP to upload new firmware. See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator. Ignore the suggestions
  • ZyXEL NWA1121-NI | User Guide - Page 130
    . I had access to the Internet (with the NWA1121-NI), but my Internet connection is not available anymore. 1 Check the hardware connections, and make sure the LEDs are behaving as expected. See the Quick Start Guide and Section 1.7 on page 17. 2 Reboot the NWA1121-NI. 3 If the problem continues
  • ZyXEL NWA1121-NI | User Guide - Page 131
    A Setting Up Your Computer's IP Address Note: Your specific NWA1121-NI may not support all of the operating systems described in this appendix. See the product specifications for more information about which operating systems are supported. This appendix shows you how to configure the IP settings on
  • ZyXEL NWA1121-NI | User Guide - Page 132
    Appendix A Setting Up Your Computer's IP Address 1 Click Start > Control Panel. 2 In the Control Panel, click the Network Connections icon. 3 Right-click Local Area Connection and then select Properties. 132 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 133
    Appendix A Setting Up Your Computer's IP Address 4 On the General tab, select Internet Protocol (TCP/IP) and then click Properties. NWA1121-NI User's Guide 133
  • ZyXEL NWA1121-NI | User Guide - Page 134
    . 2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. 134 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 135
    Appendix A Setting Up Your Computer's IP Address Windows Vista This section shows screens from Windows Vista Professional. 1 Click Start > Control Panel. 2 In the Control Panel, click the Network and Internet icon. 3 Click the Network and Sharing Center icon. NWA1121-NI User's Guide 135
  • ZyXEL NWA1121-NI | User Guide - Page 136
    A Setting Up Your Computer's IP Address 4 Click Manage network connections. 5 Right-click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. 136 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 137
    Appendix A Setting Up Your Computer's IP Address 6 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NWA1121-NI User's Guide 137
  • ZyXEL NWA1121-NI | User Guide - Page 138
    . 2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. 138 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 139
    A Setting Up Your Computer's IP Address Windows 7 This section shows screens from Windows 7 Enterprise. 1 Click Start > Control Panel. 2 In the Control Panel, click View network status and tasks under the Network and Internet category. 3 Click Change adapter settings. NWA1121-NI User's Guide 139
  • ZyXEL NWA1121-NI | User Guide - Page 140
    Appendix A Setting Up Your Computer's IP Address 4 Double click Local Area Connection and then select Properties. Note: During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. 140 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 141
    Appendix A Setting Up Your Computer's IP Address 5 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. NWA1121-NI User's Guide 141
  • ZyXEL NWA1121-NI | User Guide - Page 142
    the Internet Protocol (TCP/IP) Properties window. 9 Click OK to close the Local Area Connection Properties window. Verifying Settings 1 Click Start > All Programs > Accessories > Command Prompt. 2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. 142 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 143
    3 The IP settings are displayed as follows. Appendix A Setting Up Your Computer's IP Address Mac OS X: 10.3 and 10.4 The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. 1 Click Apple > System Preferences. NWA1121-NI User's Guide 143
  • ZyXEL NWA1121-NI | User Guide - Page 144
    Appendix A Setting Up Your Computer's IP Address 2 In the System Preferences window, click the Network icon. 3 When the Network preferences pane opens, select Built-in Ethernet from the network connection type list, and then click Configure. 144 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 145
    settings, do the following: • From the Configure IPv4 list, select Manually. • In the IP Address field, type your IP address. • In the Subnet Mask field, type your subnet mask. • In the Router field, type the IP address of your device. 6 Click Apply Now and close the window. NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 146
    Up Your Computer's IP Address Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface Mac OS X 10.5 but can also apply to 10.6. 1 Click Apple > System Preferences. 146 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 147
    , click the Network icon. 3 When the Network preferences pane opens, select Ethernet from the list of available connection types. 4 From the Configure list, select Using DHCP for dynamically assigned settings. 5 For statically assigned settings, do the following: NWA1121-NI User's Guide 147
  • ZyXEL NWA1121-NI | User Guide - Page 148
    Computer's IP Address • From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. • In the Router field, enter the IP address of your NWA1121-NI. 6 Click Apply and close the window. 148 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 149
    , and individual configuration. The following screens use the default Ubuntu 8 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in GNOME: 1 Click System > Administration > Network. NWA1121-NI User's Guide 149
  • ZyXEL NWA1121-NI | User Guide - Page 150
    window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. 3 In the Authenticate window, enter your admin account name and password then click the Authenticate button. 150 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 151
    IP address. • In the Configuration list, select Static IP address if you have a static IP address. Fill in the IP address, Subnet mask, and Gateway address fields. 6 Click OK to save the changes and close the Properties dialog box and return to the Network Settings screen. NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 152
    Appendix A Setting Up Your Computer's IP Address 7 If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. 8 Click the Close button to apply the changes. 152 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 153
    you how to configure your computer's TCP/IP settings in the K configuration. The following screens use the default openSUSE 10.3 installation. Note: Make sure you are logged in as the root administrator. Follow the steps below to configure your computer IP address in the KDE: NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 154
    Appendix A Setting Up Your Computer's IP Address 1 Click K Menu > Computer > Administrator Settings (YaST). 2 When the Run as Root - KDE su dialog opens, enter the admin password and click OK. 154 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 155
    IP Address 3 When the YaST Control Center window opens, select Network Devices and then click the Network Card icon. 4 When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 156
    6 Select Dynamic Address (DHCP) if you have a dynamic IP address. Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. 7 Click Next to save the changes and close the Network Card Setup window. 156 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 157
    . 9 Click Finish to save your settings and close the window. Verifying Settings Click the KNetwork Manager icon on the Task bar to check your TCP/IP properties. From the Options sub-menu, select Show Connection Information. Figure 73 openSUSE 10.3: KNetwork Manager NWA1121-NI User's Guide 157
  • ZyXEL NWA1121-NI | User Guide - Page 158
    Appendix A Setting Up Your Computer's IP Address When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 74 openSUSE: Connection Status - KNetwork Manager 158 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 159
    configurator you need to allow: • Web browser pop-up windows from your device. • JavaScript (enabled by default). • Java permissions (enabled by default default in Windows XP SP (Service Pack) 2) or allow pop-up blocking and create an exception for your device's IP NWA1121-NI User's Guide 159
  • ZyXEL NWA1121-NI | User Guide - Page 160
    : Privacy 3 Click Apply to save this setting. Enable Pop-up Blockers with Exceptions Alternatively, if you only want to allow pop-up windows from your device, see the following steps. 1 In Internet Explorer, select Tools, Internet Options and then the Privacy tab. 160 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 161
    Java Permissions 2 Select Settings...to open the Pop-up Blocker Settings screen. Figure 77 Internet Options: Privacy 3 Type the IP address of your device (the web page that you do not want to have blocked) with the prefix "http://". For example, http://192.168.167.1. NWA1121-NI User's Guide 161
  • ZyXEL NWA1121-NI | User Guide - Page 162
    the list of Allowed sites. Figure 78 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript If pages of the web configurator do not display properly in Internet Explorer, check that JavaScript are allowed. 162 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 163
    tab. Figure 79 Internet Options: Security 2 Click the Custom Level... button. 3 Scroll down to Scripting. 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is selected (the default). NWA1121-NI User's Guide 163
  • ZyXEL NWA1121-NI | User Guide - Page 164
    Security Settings - Java Scripting Java Permissions 1 From Internet Explorer, click Tools, Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM. 4 Under Java permissions make sure that a safety level is selected. 164 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 165
    window. Figure 81 Security Settings - Java Appendix B Pop-up Windows, JavaScript and Java Permissions JAVA (Sun) 1 From Internet Explorer, click Tools, Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for under Java (Sun) is selected. NWA1121-NI User's Guide 165
  • ZyXEL NWA1121-NI | User Guide - Page 166
    Java, Javascript and pop-ups in one screen. Click Tools, then click Options in the screen that appears. Figure 83 Mozilla Firefox: TOOLS > Options 166 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 167
    shown in the following screen. Figure 84 Mozilla Firefox Content Security Opera Opera 10 screens are used here. Screens for other versions may vary slightly. NWA1121-NI User's Guide 167
  • ZyXEL NWA1121-NI | User Guide - Page 168
    the Advanced tab, select Content from the leftside menu. Select the check boxes as shown in the following screen. Figure 86 Opera: Enabling Java 168 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 169
    Appendix B Pop-up Windows, JavaScript and Java Permissions To customize JavaScript behavior in the Opera browser, click JavaScript Options. Figure 87 Opera: JavaScript Options Select the items you want Opera's JavaScript to apply. NWA1121-NI User's Guide 169
  • ZyXEL NWA1121-NI | User Guide - Page 170
    Appendix B Pop-up Windows, JavaScript and Java Permissions 170 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 171
    , while the host ID determines to which host on the network the packets are delivered. Structure An IP address is made up of four parts, written in dotted decimal notation (for example, 192.168.1.1). range of 00000000 to 11111111 in binary, or 0 to 255 in decimal. NWA1121-NI User's Guide 171
  • ZyXEL NWA1121-NI | User Guide - Page 172
    fourth octet (16) is the host ID. Figure 88 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the subnet mask. Subnet followed by a continuous sequence of zeros, for a total number of 32 bits. 172 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 173
    for that network (192.168.1.255 with a 24-bit subnet mask, for example). As these two IP addresses cannot be used for individual hosts, calculate the maximum number of possible hosts in a network as equivalent to saying 192.1.1.0 with subnet mask 255.255.255.128. NWA1121-NI User's Guide 173
  • ZyXEL NWA1121-NI | User Guide - Page 174
    Appendix C IP Addresses and Subnetting The following table shows some possible subnet masks using both notations. Table 44 Alternative Subnet Mask Notation " host ID bit can have a value of either 0 or 1, allowing two subnets; 192.168.1.0 /25 and 192.168.1.128 /25. 174 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 175
    broadcast address. Therefore, the lowest IP address that can be assigned IP/SUBNET MASK IP Address (Decimal) IP Address (Binary) Subnet Mask (Binary) NETWORK NUMBER 192.168.1. 11000000.10101000.00000001. 11111111.11111111.11111111. LAST OCTET BIT VALUE 0 00000000 11000000 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 176
    Host ID: 192.168.1.1 Highest Host ID: 192.168.1.62 Table 46 Subnet 2 IP/SUBNET MASK NETWORK NUMBER IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192.168.1.64 Broadcast Address: 192 eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). 176 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 177
    Addresses and Subnetting The following table shows IP address last octet values for each subnet. Table 49 Eight Subnets SUBNET SUBNET ADDRESS 1 0 2 32 3 64 4 96 5 128 6 160 ) 4096 NO. HOSTS PER SUBNET 32766 16382 8190 4094 2046 1022 510 254 126 62 30 14 NWA1121-NI User's Guide 177
  • ZyXEL NWA1121-NI | User Guide - Page 178
    NWA1121-NI unless you are instructed to do otherwise. Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet (running only between two branch offices, for example) you can assign any IP addresses to the hosts without problems
  • ZyXEL NWA1121-NI | User Guide - Page 179
    client and a wired network client go through one access point (AP). Intra-BSS traffic is traffic between wireless clients in the BSS. When Intra-BSS is enabled, wireless client A and B can access the wired network and communicate with each other. When Intra-BSS is NWA1121-NI User's Guide 179
  • ZyXEL NWA1121-NI | User Guide - Page 180
    between APs is called a Distribution System (DS). This type of wireless LAN topology is called an Infrastructure WLAN. The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. 180 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 181
    two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they NWA1121-NI User's Guide 181
  • ZyXEL NWA1121-NI | User Guide - Page 182
    wireless network before the AP will fragment the packet into smaller data frames. A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference. 182 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 183
    wireless communication between wireless clients, access points and the wired network. Wireless security methods available on the NWA1121-NI are data encryption, wireless client authentication, restricting access by device MAC address and hiding the NWA1121-NI identity. NWA1121-NI User's Guide 183
  • ZyXEL NWA1121-NI | User Guide - Page 184
    Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server. • Support for EAP (Extensible Authentication Protocol, RFC 2486) that allows additional authentication methods to be deployed with no changes to the access point or the
  • ZyXEL NWA1121-NI | User Guide - Page 185
    support multiple types of user authentication. By using EAP to interact with an EAP-compatible RADIUS server, an access point helps a wireless station and a RADIUS server perform authentication. The type of authentication you use depends on the RADIUS server and an intermediary AP(s) that supports
  • ZyXEL NWA1121-NI | User Guide - Page 186
    802.1x. Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed. 186 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 187
    password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a wireless client will be granted access to a WLAN. If the AP or the wireless clients do not support a block cipher that uses a 256-bit mathematical algorithm NWA1121-NI User's Guide 187
  • ZyXEL NWA1121-NI | User Guide - Page 188
    most widely available supplicant is the WPA patch for Windows XP, Funk Software's Odyssey client. The Windows XP patch is a free download that adds WPA capability to Windows XP's built-in "Zero Configuration" wireless client. However, you must run Windows XP to use it. 188 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 189
    AP checks each wireless client's password and allows it to join the network only if the password matches. 3 The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. NWA1121-NI User's Guide 189
  • ZyXEL NWA1121-NI | User Guide - Page 190
    Appendix D Wireless LANs 4 The AP and wireless clients use the TKIP how you configure these security features. Table 55 Wireless Security Relational Matrix AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL ENCRYPTIO N METHOD ENTER MANUAL KEY Open signals from the air. 190 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 191
    for WLAN There are with multiple access points. • point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 192
    Appendix D Wireless LANs For directional antennas, point the antenna in the direction of the desired coverage area. 192 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 193
    , uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. NWA1121-NI User's Guide 193
  • ZyXEL NWA1121-NI | User Guide - Page 194
    IEEE 802.11n (40MHz) operation of this product in the U.S.A. is firmware-limited to channels 3 through 9. • To comply with FCC RF exposure users, the antenna type and its gain should be so chosen that the EIRP is not more than required for successful communication. 194 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 195
    radiation exposure limits set forth for an uncontrolled environment. End users must follow the specific operating instructions for satisfying RF due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or NWA1121-NI User's Guide 195
  • ZyXEL NWA1121-NI | User Guide - Page 196
    overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF. Hiermit erklärt ZyXEL, dass sich das Gerät Ausstattung in Übereinstimmung mit den grundlegenden Anforderungen und den übrigen einschlägigen Bestimmungen der Richtlinie 1999/5/EU befindet. 196 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 197
    med de väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv 1999/5/EC. ZyXEL 1999/5/ЕC. Hér með lýsir, ZyXEL því yfir að þessi búnaður er í samræmi við grunnkröfur og ö ) without any limitation except for the countries mentioned below: NWA1121-NI User's Guide 197
  • ZyXEL NWA1121-NI | User Guide - Page 198
    applicable. The requirements for any country may evolve. ZyXEL recommends that you check with the local authorities for rieure à 300 mètres doivent être notifiées à l'Institut Belge des services Postaux et des Télécommunications (IBPT). Visitez http://www.ibpt.be pour de 198 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 199
    restrictions) Outdoor R&TTE 1999/5/EC WLAN 2.4 - 2.4835 GHz IEEE 802 points or other risks. ONLY qualified service personnel should service or disassemble this device. Please contact your vendor for further information. • Make sure to connect the cables to the correct ports. NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 200
    over them. • Always disconnect all cables from this device before servicing or disassembling. • Use ONLY an appropriate power adaptor or cord electrical lines, gas or water pipes will be damaged. • The PoE (Power over Ethernet) devices that supply or receive power and their NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 201
    191 gain 191 omni-directional 191 AP (access point) 181 Applications Access Point 14 AP + Bridge 14 applications MBSSID 11 Repeater 14 ATC 73 ATC+WMM 73 B Basic Service Set 56 see BSS Basic Service Set, See BSS 179 beacon 56 Beacon Interval 63, 65, 70 NWA1121-NI User's Guide Index Index BSS 11, 12
  • ZyXEL NWA1121-NI | User Guide - Page 202
    Service Set, See ESS 180 Extensible Authentication Protocol 59 F Factory Defaults 125 restoring 21 FCC interference statement 193 Firmware 120 Fragmentation 63, 66, 68, 71 Fragmentation threshold 91 fragmentation threshold 182 FTP 103 restrictions 103 G Generic Token Card 59 GTC 59 Guide Quick Start
  • ZyXEL NWA1121-NI | User Guide - Page 203
    Q QoS 73 Quick Start Guide 2 R Radio Frequency 92 RADIUS 59, 184 Accounting 60 Authentication 60 Authorization 60 message types 185 messages 185 shared secret key 185 RADIUS Screen Accounting Server 88 Accounting Server IP Address 88 RADIUS server 58 Backup 88 Primary 88 Rates Configuration 63, 66
  • ZyXEL NWA1121-NI | User Guide - Page 204
    is slow or intermittent 130 DHCP 128 factory defaults 129 firmware 129 Internet 129 LAN/ETHERNET port 129 QoS 130 Web Configurator 128 TTLS 59 Tunneled Transport Layer Security 59 Tutorial 29 U User Authentication 58 V Virtual Local Area Network 98 VLAN 98 introduction 98 NWA1121-NI User's Guide
  • ZyXEL NWA1121-NI | User Guide - Page 205
    Settings Screen 55 Access Point Mode 61 Antenna 92 AP + Bridge Mode 67 Bridge Mode 64 BSS 56 Channel 56 ESS 56 Fragmentation Threshold 91 Index Intra-BSS Traffic 91 Operating Mode 56 Preamble 91 Roaming 92 RTS/CTS Threshold 91 SSID 56 Wireless Client Mode 67 Wireless Mode 57 WMM QoS 91 WLAN
  • ZyXEL NWA1121-NI | User Guide - Page 206
    Index 206 NWA1121-NI User's Guide
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
www.zyxel.com
www.zyxel.com
NWA1121-NI
802.11b/g/n PoE Access Point
Copyright © 2012
ZyXEL Communications Corporation
Version 1.00
Edition 1, 03/2012
Default Login Details
IP Address
User Name
admin
Password
1234