Home » ZyXEL Manuals » Wireless » ZyXEL NWA90AX » Manual Viewer

ZyXEL NWA90AX User Guide - Page 123

Note: Click on the, Mode: wpa3 continued

Add to My Manuals
Save this manual to your list of manuals

Page 123 highlights

Chapter 12 AP Profile Table 47 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security Mode: wpa3 (continued) LABEL DESCRIPTION Advance Note: Click on the Show Advanced Settings button to show the fields describe below. Idle Timeout Group Key Update Timer Pre-Authentication Management Frame Protection Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued. Enter the interval (in seconds) at which the AP updates the group WPA2 encryption key. Select Enable to allow pre-authentication. Otherwise, select Disable. This field is available only when you select wpa2 in the Security Mode field and set Cipher Type to aes. Data frames in 802.11 WLANs can be encrypted and authenticated with WEP, WPA or WPA2. But 802.11 management frames, such as beacon/probe response, association request, association response, de-authentication and disassociation are always unauthenticated and unencrypted. IEEE 802.11w Protected Management Frames allows APs to use the existing security mechanisms (encryption and authentication methods defined in IEEE 802.11i WPA/WPA2) to protect management frames. This helps prevent wireless DoS attacks. Select the check box to enable management frame protection (MFP) to add security to 802.11 management frames. This option is always enabled if you select enhanced-open or WPA3 as the Security Mode. If Optional is selected, WiFi clients will not be not required to support MFP. Management frames will be encrypted if the clients support MFP. Radius Settings Primary / Secondary Radius Server Activate Radius Server IP Address Radius Server Port Radius Server Secret Primary / Secondary Accounting Server Activate Accounting Server IP Address Accounting Server Port Accounting Share Secret Accounting Interim Update If Required is selected, WiFi clients must support MFP in order to join the Zyxel Device's WiFi network. Select this to have the Zyxel Device use the specified RADIUS server. Enter the IP address of the RADIUS server to be used for authentication. Enter the port number of the RADIUS server to be used for authentication. Enter the shared secret password of the RADIUS server to be used for authentication. Select the check box to enable user accounting through an external authentication server. Enter the IP address of the external accounting server in dotted decimal notation. Enter the port number of the external accounting server. The default port number is 1813. You need not change this value unless your network administrator instructs you to do so with additional information. Enter a password (up to 128 alphanumeric characters) as the key to be shared between the external accounting server and the Zyxel Device. The key must be the same on the external accounting server and your Zyxel Device. The key is not sent over the network. This field is available only when you enable user accounting through an external authentication server. Interim Update Interval General Server Settings Select this to have the Zyxel Device send subscriber status updates to the accounting server at the interval you specify. Specify the time interval for how often the Zyxel Device is to send a subscriber status update to the accounting server. NWA50AX/NWA90AX/NWA55AXE Series User's Guide 123

Section	Page
NWA50AX/NWA90AX/NWA55AXE	1
Document Conventions	3
Contents Overview	4
Table of Contents	5
Introduction	12
1.1 Overview	12
1.2 Zyxel Device Roles	12
1.2.1 Root AP	14
1.2.2 Wireless Repeater	14
1.2.3 Radio Frequency (RF) Monitor	15
1.3 Sample Feature Applications	16
1.3.1 MBSSID	16
1.3.2 Dual-Radio	17
1.4 Zyxel Device Product Feature	18
AP Management	20
2.1 Management Mode	20
2.1.1 Standalone	20
2.1.2 Nebula Control Center	20
2.2 Switching Management Modes	22
2.3 Zyxel One Network (ZON) Utility	22
2.3.1 Requirements	22
2.3.2 Run the ZON Utility	23
2.4 Ways to Access the Zyxel Device	26
2.5 Good Habits for Managing the Zyxel Device	27
Hardware	28
3.1 Zyxel Device Single LED	28
3.1.1 Zyxel Device LED	28
Web Configurator	31
4.1 Overview	31
4.2 Accessing the Web Configurator	31
4.3 Navigating the Web Configurator	34
4.3.1 Title Bar	35
4.3.2 Navigation Panel	36
4.3.3 Standalone Mode Navigation Panel Menus	36
4.3.4 Cloud Mode Navigation Panel Menus	38
4.3.5 Tables and Lists	39
Standalone Configuration	42
Standalone Configuration	43
5.1 Overview	43
5.2 Starting and Stopping the Zyxel Device	43
Dashboard	45
6.1 Overview	45
6.1.1 CPU Usage	48
6.1.2 Memory Usage	49
Setup Wizard	51
7.1 Accessing the Wizard	51
7.2 Using the Wizard	51
7.2.1 Step 1 Time Settings	51
7.2.2 Step 2 Password and Uplink Connection	52
7.2.3 Step 3 Radio	53
7.2.4 Step 4 SSID	54
7.2.5 Summary	55
Monitor	56
8.1 Overview	56
8.1.1 What You Can Do in this Chapter	56
8.2 What You Need to Know	56
8.3 Network Status	57
8.3.1 Port Statistics Graph	58
8.4 Radio List	59
8.4.1 AP Mode Radio Information	61
8.5 Station List	62
8.6 WDS Link Info	63
8.7 Detected Device	64
8.8 View Log	66
Network	69
9.1 Overview	69
9.1.1 What You Can Do in this Chapter	69
9.2 IP Setting	69
9.3 VLAN	71
9.4 NCC Discovery	74
Wireless	76
10.1 Overview	76
10.1.1 What You Can Do in this Chapter	76
10.1.2 What You Need to Know	77
10.2 AP Management	77
10.3 Rogue AP	82
10.3.1 Add/Edit Rogue/Friendly List	85
10.4 DCS	86
10.5 Technical Reference	86
User	88
11.1 Overview	88
11.1.1 What You Can Do in this Chapter	88
11.1.2 What You Need To Know	88
11.2 User Summary	89
11.2.1 Add/Edit User	89
11.3 Setting	91
11.3.1 Edit User Authentication Timeout Settings	93
AP Profile	95
12.1 Overview	95
12.1.1 What You Can Do in this Chapter	95
12.1.2 What You Need To Know	95
12.2 Radio	96
12.2.1 Add/Edit Radio Profile	97
12.3 SSID	102
12.3.1 SSID List	103
12.3.2 Add/Edit SSID Profile	104
12.4 Security List	107
12.4.1 Add/Edit Security Profile	107
12.5 MAC Filter List	124
12.5.1 Add/Edit MAC Filter Profile	124
12.6 Layer-2 Isolation List	125
12.6.1 Add/Edit Layer-2 Isolation Profile	127
WDS Profile	128
13.1 Overview	128
13.1.1 What You Can Do in this Chapter	128
13.2 WDS Profile	128
13.2.1 Add/Edit WDS Profile	129
Certificates	130
14.1 Overview	130
14.1.1 What You Can Do in this Chapter	130
14.1.2 What You Need to Know	130
14.1.3 Verifying a Certificate	132
14.2 My Certificates	133
14.2.1 Add My Certificates	134
14.2.2 Edit My Certificates	136
14.2.3 Import Certificates	139
14.3 Trusted Certificates	140
14.3.1 Edit Trusted Certificates	141
14.3.2 Import Trusted Certificates	144
14.4 Technical Reference	145
System	146
15.1 Overview	146
15.1.1 What You Can Do in this Chapter	146
15.2 Host Name	146
15.3 Date and Time	147
15.3.1 Pre-defined NTP Time Servers List	149
15.3.2 Time Server Synchronization	150
15.4 WWW Overview	151
15.4.1 Service Access Limitations	151
15.4.2 System Timeout	151
15.4.3 HTTPS	151
15.4.4 Configuring WWW Service Control	152
15.4.5 HTTPS Example	153
15.5 SSH	159
15.5.1 How SSH Works	160
15.5.2 SSH Implementation on the Zyxel Device	161
15.5.3 Requirements for Using SSH	161
15.5.4 Configuring SSH	161
15.5.5 Examples of Secure Telnet Using SSH	162
15.6 FTP	163
Log and Report	165
16.1 Overview	165
16.1.1 What You Can Do In this Chapter	165
16.2 Email Daily Report	165
16.3 Log Setting	167
16.3.1 Log Setting Screen	168
16.3.2 Edit System Log Settings	169
16.3.3 Edit Remote Server	173
16.3.4 Active Log Summary	174
File Manager	177
17.1 Overview	177
17.1.1 What You Can Do in this Chapter	177
17.1.2 What you Need to Know	177
17.2 Configuration File	178
17.2.1 Example of Configuration File Download Using FTP	182
17.3 Firmware Package	183
17.3.1 Example of Firmware Upload Using FTP	184
17.4 Shell Script	185
Diagnostics	188
18.1 Overview	188
18.1.1 What You Can Do in this Chapter	188
18.2 Diagnostics	188
18.3 Remote Capture	189
LEDs	190
19.1 Overview	190
19.1.1 What You Can Do in this Chapter	190
19.2 Suppression Screen	190
19.3 Locator Screen	191
Reboot	193
20.1 Overview	193
20.1.1 What You Need To Know	193
20.2 Reboot	193
Shutdown	194
21.1 Overview	194
21.1.1 What You Need To Know	194
21.2 Shutdown	194
Local Configuration in Cloud Mode	195
Cloud Mode	196
22.1 Overview	196
22.2 Cloud Mode Web Configurator Screens	196
22.3 Dashboard	197
Network	199
23.1 Overview	199
23.1.1 What You Can Do in this Chapter	199
23.2 IP Setting	199
23.3 VLAN	201
Maintenance	202
24.1 Overview	202
24.1.1 What You Can Do in this Chapter	202
24.2 Shell Script	202
24.3 Diagnostics	203
24.4 View Log	204
Appendices and Troubleshooting	207
Troubleshooting	208
25.1 Overview	208
25.2 Power, Hardware Connections, and LED	208
25.3 Zyxel Device Management, Access, and Login	209
25.4 Internet Access	212
25.5 WiFi Network	213
25.6 Resetting the Zyxel Device	215
25.7 Getting More Troubleshooting Help	215
Importing Certificates	216
IPv6	240
Customer Support	248
Legal Information	253

Match case Limit results 1 per page

Chapter 12 AP Profile

NWA50AX/NWA90AX/NWA55AXE Series User’s Guide

123

Advance

Note: Click on the

Show Advanced Settings

button to show the fields describe below.

Idle Timeout

Enter the idle interval (in seconds) that a client can be idle before authentication is

discontinued.

Group Key Update

Timer

Enter the interval (in seconds) at which the AP updates the group WPA2 encryption key.

Pre-Authentication

Select

Enable

to allow pre-authentication. Otherwise, select

Disable

Management Frame

Protection

This field is available only when you select

wpa2

in the

Security Mode

field and set

Cipher

Type

aes

Data frames in 802.11 WLANs can be encrypted and authenticated with WEP, WPA or

WPA2. But 802.11 management frames, such as beacon/probe response, association

request, association response, de-authentication and disassociation are always

unauthenticated and unencrypted. IEEE 802.11w Protected Management Frames allows

APs to use the existing security mechanisms (encryption and authentication methods

defined in IEEE 802.11i WPA/WPA2) to protect management frames. This helps prevent

wireless DoS attacks.

Select the check box to enable management frame protection (MFP) to add security to

802.11 management frames. This option is always enabled if you select

enhanced-open

WPA3

as the

Security Mode.

Optional

is selected, WiFi clients will not be not required to support MFP. Management

frames will be encrypted if the clients support MFP.

Required

is selected, WiFi clients must support MFP in order to join the Zyxel Device’s

WiFi network.

Radius Settings

Primary / Secondary

Radius Server Activate

Select this to have the Zyxel Device use the specified RADIUS server.

Radius Server IP

Address

Enter the IP address of the RADIUS server to be used for authentication.

Radius Server Port

Enter the port number of the RADIUS server to be used for authentication.

Radius Server Secret

Enter the shared secret password of the RADIUS server to be used for authentication.

Primary / Secondary

Accounting Server

Activate

Select the check box to enable user accounting through an external authentication

server.

Accounting Server

IP Address

Enter the IP address of the external accounting server in dotted decimal notation.

Accounting Server

Port

Enter the port number of the external accounting server. The default port number is 1813.

You need not change this value unless your network administrator instructs you to do so

with additional information.

Accounting Share

Secret

Enter a password (up to 128 alphanumeric characters) as the key to be shared between

the external accounting server and the Zyxel Device. The key must be the same on the

external accounting server and your Zyxel Device. The key is not sent over the network.

Accounting Interim

Update

This field is available only when you enable user accounting through an external

authentication server.

Select this to have the Zyxel Device send subscriber status updates to the accounting

server at the interval you specify.

Interim Update

Interval

Specify the time interval for how often the Zyxel Device is to send a subscriber status

update to the accounting server.

General Server Settings

Table 47

Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security

Mode: wpa3 (continued)

LABEL

DESCRIPTION