Home

SMG-700 User's Guide V1.00 (Nov 2004)

1. 84 TA elsi da td ass danse NR E um Uc PEU RUD DNA 85 p ME ersopnpm nnn 85 8 eS C ONIOUEUOET 13 tec Orbe doeet e Dita ned o ALLE Mp S RIS 86 12 9 BaCk TO Factory DOIQUIDE zsxebutesntta prium etr Up eto Re epE Uu tob AQUI DR dest REY TED R MUN UA 87 pU Upload SGER M 87 Part Ill Troubleshooting and Product Specifications 89 Chapter 8 Troubleshooting rsrsrsrsrs RU RAE RRFeRRRRANRRA VARRNSKA KEEXEU RS AN RRRRUERS IAS RES KAK EK RAN VAR UNUS 91 8 1 Power Hardware Connections and LEDS 4 emer rtr art a reda Er Lr et rt 91 Cc prstrdFirx r sie pe 92 0 3 MEmeEt e 94 Chapter 9 Product Specifications and Wall Mounting Instructions eene 95 Nr rezUtEps Mesh tU SNR E Gian Maa ead E a 97 Part IV Appendices and Index eeeeseeeeeee 101 Appendix A Setting up Your Computer s IP Address ccccceccececcecececceeeeeeeeeeeeeeeeeeeeeess 103 Appendix B Pop up Windows JavaScripts and Java Permissions ssssss 119 ZyXEL NWA570N User s Guide 13 Table of Contents Appendix C Wireless LANS esseeessssssssssssseeeee ener ener nenne nennen nnn nnne nnnn nnns nennen sensns 125 Appendix D Customer SUPPO crasina a HR RR RR EE FADE S BER RE RUE 139 Appendix E Legal Information
2. ccccccccsccscccceccceccecceneceeeccecceeccceccececececeeceeseceeeneseneseneeeeess 145 rrr 149 ZyXEL NWA570N User s Guide List of Figures List of Figures Figure T Iniermnel Access Fae 41s eret diio aa eX PE odd Fa ttr i b ad even Hadas dn 24 Figure 2 Corporate Network Application aiiis rt en pea n rdi enn a khen kel n E paa Eua Lern EAR Rn na paa 24 ui Xeon 25 al fdg nt flsn elo c M 26 Figure 5 Bnage Repeater ADBIGSON irr ie eio SERERE PER PER Io ai ease canes 26 Figure G AP Repeater e rure rnt 27 FIGHT LEDE cosi sce pnl titre sium tar fen rp oM ter enn ere ae een Tree nS OM Terr ee 28 FoS S Ned CONE eie mr enene pete eee rec mere er erie Reenter iepererrnret err terarte reer crnrnt eer enne reer tert t rer 29 as S Wireless CONNECHON 29 Figure 10 Web Configurator Address M 32 x mE uA e sin i anini aE E E AANE manesernnedwrnentess 32 Figuie TZ Language OP a Le Le pt Lad obo ped aa o Eg pa 32 Figure 13 Select Wizard or Advanced Setup Screen gocciccccscssesswccsannesvenciarsraneccetenesceadeanssuccneserasweactanesans 33 Figure 14 gratum 36 Figure 15 Wizard Wireless Settings ica cn vara eic rico dao ndi a cnet RE n RD PEE EA P dudes KR P IR RR ka dea 37 gs E Saup Wead g Diable re 38 Figure Tr Wiese EF aaua 39 Figure 18 Wizard 3
3. 72 Foue 26 Wireless Security WEP aucsccissisepeek Fry ELA rrea EA GRE FR EE EEAS 73 Figure 37 Wireless Secult JEEE 02 IX em rnn n rts Figure 38 Wireless Security WPA 2 e 77 ZyXEL NWA570N User s Guide 15 List of Figures Figure 39 Wireless Security WEADZI PSN 1 onse eisetisezeeesxbtsext ti rrt iS po EEG A PELA IARE PAESE MALAE a RE dS 78 som RS PUNE aC U 80 Figure 41 Management Password 12e ce risit drca er rev rb vier DLL pe Xr Ld Vi Ee p ped d 83 Figure 42 Manaa BHL LOSS ocean a ablata a a uet ian aita a cR d Aia reer ere DR UR p Ru itid 84 Figure 43 Management Configuration FUE 22 5 o rn bere rU ete o Port betonte t eaten amen 85 Figure 44 Configuration Upload Successfull essiensa 86 Figure 45 Network Temporarily Disconnected eeeeeeeeceeseesiiieeseeeee nent th khan a tha kae aa PAR A44 aoa R4 44 86 Figure 46 gespeypuca Ee ciaie aee 87 Figure 4r Reset Varig Message oni era on eo rd b ose re an rci olere rd Ua Eo oi dies 87 Figura 48 Management FAW Upload neus iss ectia ssn tete ae Phara GR pe Ke bp BI e Ep OU ta nbeatue Kobe UBI ERA ka Ciis 87 Figure 49 Firmware Upgrading SOON 2c ies eceseeecscceseeiseeess peek esee e eive ue e cte Rep Ear vu Eee EET I EE rM E EIE Vds 88 Figure 50 Network Temporarily Disconnected uiuis ie reet rrr re Ra ep pyR EISE REPERIO nans EM A 88 Figure 91 TS Upload EMOT aaiscaserenredisbee iei m seu Ute ER TR PFARRER ON RPA PIT EON DU EID
4. SSID Wireless stations associating to the access point AP must have the same SSID Enter a descriptive name up to 32 printable characters for the wireless LAN Spaces are allowed Note If you are configuring the device from a computer connected to the wireless LAN and you change the device s SSID channel or security settings you will lose your wireless connection when you press Apply to confirm You must then change the wireless settings of your computer to match the device s new settings Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through passive scanning using a site survey tool Channel The range of radio frequencies used by IEEE 802 11b g wireless devices is called a channel Select a wireless channel if interference from other nearby devices is a problem The NWA570N and wireless devices in your network must use the same channel ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 13 Wireless Settings AP continued LABEL DESCRIPTION Wireless Mode Select 802 11b g to allow IEEE 802 11b and IEEE 802 11g compliant WLAN devices to associate with the device Select 802 11n g to allow IEEE 802 11n and IEEE 802 11g compliant WLAN devices to associate with the device HT protect Select HT protect if you have devices on your wireless network that support IEEE 802 1b g standards but not the IEEE 8
5. Chapter 4 Status Screen Table 5 Screens Summary LINK TAB FUNCTION Manage Password Use this screen to configure the administrator password ment Logs Use this screen to view logs and alert messages Configuration Use this screen to backup and restore the configuration or reset the factory defaults to your ZyXEL Device F W Upload Use this screen to upload firmware to your ZyXEL Device 4 2 System Status 4 2 1 Statistics Click View Statistics in the Status screen This screen displays read only information including port status and packet specific statistics Also provided are system up time and poll interval s The Poll Interval s field is configurable Figure 23 Status View Statistics View Status Ethernet S Races ranged Packets 1980 2081 Bytes 225615 917508 Wireless p Received Transmted Unicast Packets 0 2 Broadcast Packets 6 Multicast Packets 0 Total Packets 0 8 Total Bytes 0 1109 System Up Time 0 57 40 Poll Interval b sec Setinterval Stop The following table describes the labels in this screen Table 6 Status View Statistics LABEL DESCRIPTION Ethernet Packets This row displays the numbers of packets received and transmitted by the Ethernet port Bytes This row displays the numbers of bytes received and transmitted by the Ethernet port Wireless Unicast This row displays the numb
6. Enter a descriptive name up to 32 printable characters for the wireless LAN Spaces are allowed Note If you are configuring the device from a computer connected to the wireless LAN and you change the device s SSID channel or security settings you will lose your wireless connection when you click Apply to save your settings You must then change the wireless settings of your computer to match the device s new settings Advanced Settings Manual MAC Every Ethernet capable device is issued with a unique Media Access Control Cloning MAC address at the factory This address is used to identify the device across a network Your NWA570N is capable of cloning or emulating the MAC addresses of one or more other devices Select the check box and enter the MAC address you want to clone Radio Enable Turn on the wireless adapter to allow wireless communications between the device and other IEEE 802 11b and IEEE 802 11g compliant wireless devices Turn off the wireless adapter to stop wireless communications between the device and other IEEE 802 11b and IEEE 802 11g compliant wireless devices Preamble Preamble is used to signal that data is coming to the receiver Type Short preamble increases performance as less time sending preamble means more time for sending data All IEEE 802 11b compliant wireless adapters support long preamble but not all support short preamble Select Long preamble if you are unsure what preamble
7. Viewing Certifications 1 Go to http www zyxel com 2 Select your product on the ZyXEL home page to go to that product s page 3 Select the certification you wish to view from this page ZyXEL NWA570N User s Guide Appendix E Legal Information ZyXEL Limited Warranty ZyXEL warrants to the original end user purchaser that this product 1s free from any defects in materials or workmanship for a period of up to two years from the date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials ZyXEL will at its discretion repair or replace the defective products or components without charge for either parts or labor and to whatever extent it shall deem necessary to restore the product or components to proper operating condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal or higher value and will be solely at the discretion of ZyXEL This warranty shall not apply if the product has been modified misused tampered with damaged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty 1s the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be
8. 1 Click the Apple menu Control Panel and double click TCP IP to open the TCP IP Control Panel ZyXEL NWA570N User s Guide 111 Appendix A Setting up Your Computer s IP Address About This Computer D Apple System Profiler E Calculator gt Chooser Control Panels i Favorites 4 Key Caps GR Network Browser G Recent Applications ij Recent Documents ci Remote Access Status Scrapbook 49 Sherlock 2 Speakable Items y Stickies 2 Select Ethernet built in from the Connect via list Figure 63 Macintosh OS 8 9 Apple Menu ADSL Control and Status Appearance Apple Menu Options AppleTalk ColorSync Control Strip Date amp Time DialAssist Energy Saver Extensions Manager File Exchange File Sharing General Controls Internet Keyboard Keychain Access Launcher Location Manager Memory Modem Monitors Mouse Multiple Users Numbers QuickTime Settings Remote Access Software Update Sound Speech USB Printer Sharing Figure 64 Macintosh OS 8 9 TCP IP TCP IP camest va Setup Configure Using DHCP Server X Subnet mask Name server addr o DHCF Client ID l IP Address lt will be supplied by server 7 lt will be supplied by server gt Router address lt will be supplied by server gt x will be supplied by server Search comans 3 For dynamically assigned settings select Using DHCP Se
9. 192 168 11 12 168 95 1 1 Provided by DHCP Server Subnet Mask 255 255 254 0 Router 192 168 10 11 Search Domains Optional DHCP Client ID Optional Example apple com earthlink net Ethernet Address 00 05 02 43 93 ff a Click the lock to prevent further changes 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your ZyXEL Device in the Router address box 5 Click Apply Now and close the window 6 Turnon your ZyXEL Device and restart your computer if prompted Verifying Settings Check your TCP IP properties in the Network window Linux This section shows you how to configure your computer s TCP IP settings in Red Hat Linux 9 0 Procedure screens and file location may vary depending on your Linux distribution and release version ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address LES Make sure you are logged in as the root administrator Using the K Desktop Environment KDE Follow the steps below to configure your computer IP address using the KDE 1 Click the Red Hat button located on the bottom left corner select System Setting and click Network Figure 67 Red Hat 9 0 KDE Network Configuration Devices wv Network Configuration 7 7 ox Eile Profile Help f B0 F
10. A F Authentication Server Authentication Server IP Address o lo lo 7 o Port Number fist2 Shared Secret 0 64 alphanumeric printable characters and no spaces Rekey Options Reauthentication Time 3600 Seconds mas 100 3600 Global Key Update every 3500 Seconds max 100 3600 every fi 100 X1000 Packets mas 100 3600 T The following table describes the labels in this screen Table 19 Wireless Security IEEE 802 1x LABEL DESCRIPTION Encryption Select 802 1X to configure authentication of wireless stations and encryption key Method management Note WPA WPA2 and IEEE 802 1x wireless security are not available when you use Bridge or AP Repeater mode You can only use WEP keys to encrypt traffic between APs Data Encryption Select None to allow wireless stations to communicate with the access points without using dynamic WEP key exchange Select 64 bits WEP 128 bits WEP or 152 bits WEP to enable data encryption Up to 32 stations can access the device when you configure dynamic WEP key exchange Passphrase If you selected 64 bit or 128 bit WEP you can enter a passphrase password phrase of up to 32 case sensitive printable characters and click Generate to have the device create four different WEP keys ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 19 Wireless Security IEEE 802 1x LABEL DESCRIPTION Key 1 to If you want to manually set the WEP keys ent
11. By setting this value lower than the default value the wireless devices must sometimes get permission to send information to the NWA570N The lower the value the more often the devices must get permission If this value is greater than the fragmentation threshold value see below then wireless devices never have to get permission to send information to the NWA570N Preamble A preamble affects the timing in your wireless network There are two preamble modes long and short If a device uses a different preamble mode than the NWA570N does it cannot communicate with the NWA570N Authentication The process of verifying whether a wireless device is allowed to use the wireless network Max Frame Burst Enable this to improve the performance of both pure IEEE 802 11g and mixed IEEE 802 11b g networks Maximum Frame Burst sets the maximum time that the NWA570N transmits IEEE 802 11g wireless traffic only Fragmentation A small fragmentation threshold is recommended for busy networks while a Threshold larger threshold provides faster performance if the network is not very busy Roaming If you have two or more NWA570NS or other wireless access points on your wireless network you can enable this option so that wireless devices can change locations without having to log in again This is useful for devices such as notebooks that move around a lot 6 4 Configuring Wireless Click Wireless to display the Wireless S
12. E mail info zyxel fr Telephone 33 4 72 52 97 97 Fax 33 4 72 52 19 20 Web www zyxel fr Regular Mail ZyXEL France 1 rue des Vergers Bat 1 C 69760 Limonest France Germany Support E mail support zyxel de Sales E mail sales zyxel de Telephone 49 2405 6909 69 Fax 49 2405 6909 99 Web www zyxel de Regular Mail ZyXEL Deutschland GmbH Adenauerstr 20 A2 D 52146 Wuerselen Germany Hungary Support E mail support zyxel hu Sales E mail info zyxel hu Telephone 36 1 3361649 Fax 36 1 3259100 Web www zyxel hu Regular Mail ZyXEL Hungary 48 Zoldlomb Str H 1025 Budapest Hungary ZyXEL NWA570N User s Guide Appendix D Customer Support India Support E mail support zyxel in Sales E mail sales zyxel in Telephone 91 11 30888144 to 91 11 30888153 Fax 91 11 30888149 91 11 26810715 Web http www zyxel in Regular Mail India ZyXEL Technology India Pvt Ltd II Floor F2 9 Okhla Phase 1 New Delhi 110020 India Support E mail support zyxel co jp Sales E mail zyp zyxel co jp Telephone 81 3 6847 3700 Fax 81 3 6847 3705 Web www zyxel co jp Regular Mail ZyXEL Japan 3F Office T amp U 1 10 10 Higashi Gotanda Shinagawa ku Tokyo 141 0022 Japan Kazakhstan Support http zyxel kz support Sales E mail sales zyxel kz Telephone 7 3272 590 698 Fax 7 3272 590 689 Web www zyxel kz Regular Mail ZyXEL Kazakhstan 43 Do
13. FTP ftp zyxel co uk Regular Mail ZyXEL Communications UK Ltd 11 The Courtyard Eastern Road Bracknell Berkshire RG12 2XB United Kingdom UK ZyXEL NWA570N User s Guide Appendix D Customer Support ZyXEL NWA570N User s Guide Legal Information Copyright Copyright O 2007 by ZyXEL Communications Corporation The contents of this publication may not be reproduced in any part or as a whole transcribed stored in a retrieval system translated into any language or transmitted in any form or by any means electronic mechanical magnetic optical chemical photocopying manual or otherwise without the prior written permission of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subject to change without notice Trademarks ZyNOS ZyXEL Network Operating System is a registered trademark of ZyXEL Communications Inc Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners Certifications Federal Communications Commission FCC Interference St
14. Write down the password and put it in a safe place ZyXEL NWA570N User s Guide Chapter 1 Introducing the ZyXEL Device Back up the configuration and make sure you know how to restore it Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes If you forget your password you will have to reset the ZyXEL Device to its factory default settings If you backed up an earlier configuration file you would not have to totally re configure the ZyXEL Device You could simply restore your last configuration 1 5 LEDs Figure 7 LEDs ZyXEL o gg o Cn En 2D ZEND aE az o Oo ONE ONES The following table describes the LEDs on the ZyXEL Device Table 1 Front Panel LED Description LED COLOR STATUS DESCRIPTION POWER Green Blinking The ZyXEL Device is not ready or booting l On The ZyXEL Device has booted successfully and is receiving power Off The ZyXEL Device is not receiving power ETHERNET Green Blinking The ZyXEL Device is sending receiving data On The ZyXEL Device has a successful 10 Mbps Ethernet connection Amber Blinking The ZyXEL Device is sending receiving data On The ZyXEL Device has a successful 100 Mbps Ethernet connection Off The ZyXEL Device does not have an Ethernet connection WLAN Green Blinking The ZyXEL Device is sending or receiving data through the Pee wireless LAN TS i On The ZyXEL Device is ready but is not se
15. address 3 1 2 Wizard Wireless Settings Use this wizard screen to set up the wireless LAN See the chapter on the wireless screens for background information 1 The SSID is a unique name to identify the device in a wireless network Enter up to 32 printable characters Spaces are allowed If you change this field on the device make sure all wireless stations use the same SSID in order to access the network 2 Awireless device uses a channel to communicate in a wireless network Select a channel that 1s not already in use by a neighboring wireless device ES The wireless stations and this device must use the same SSID channel and wireless security settings for wireless communication ZyXEL NWA570N User s Guide Chapter 3 Wizard ai Mis 15 Wizard Wireless seung 5 0 osofi STEP 1 STEP2 STEP3 STEP4 ZyXEL NVVAS7ON 6 3 1 3 Wizard Security Settings Use this screen to configure security for your wireless LAN The screen varies depending on what you select in the Encryption Method field Select Disable to have no wireless security configured select WEP or select WPA PSK if your wireless clients support WPA PSK Select WPA2 PSK if your wireless clients 2 WPA2 PSK Go to Wireless gt Security if you want WPA2 WPA or 802 1x See Chapter page 55 for background information 3 1 3 1 Disable Select Disable to have no wireless LAN security configured If you do not enable any wireless sec
16. sender s identity However to implement EAP TLS you need a Certificate Authority CA to handle certificates which imposes a management overhead EAP TTLS Tunneled Transport Layer Service EAP TTLS is an extension of the EAP TLS authentication that uses certificates for only the server side authentications to establish a secure connection Client authentication is then done by sending username and password through the secure connection thus client identity is protected For client authentication EAP TTLS supports EAP methods and legacy authentication methods such as PAP CHAP MS CHAP and MS CHAP v2 PEAP Protected EAP LEAP Like EAP TTLS server side certificate authentication is used to establish a secure connection then use simple username and password methods through the secured connection to authenticate the clients thus hiding client identity However PEAP only supports EAP methods such as EAP MD5 EAP MSCHAPv2 and EAP GTC EAP Generic Token Card for client authentication EAP GTC is implemented only by Cisco LEAP Lightweight Extensible Authentication Protocol is a Cisco implementation of IEEE 802 1x ZyXEL NWA570N User s Guide Appendix C Wireless LANs Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server This key expires when the wireless connection times out disconnects or reauthentication times out A new WEP key is generated each time reauthentication is performe
17. 0 Tour Windows xP Windows Movie Maker e My Pictures e My Documents 2 My Recent Documents gt Q9 Help and Support Search 177 Run All Programs gt P Log Off 0 Turn Off Computer 5 untitled Paint 2 Inthe Control Panel double click Network Connections Network and Dial up Connections in Windows 2000 NT Control Panel File Edit view Favorites Tools Help Figure 57 Windows XP Control Panel d po Search e Folders E Address Control Panel V Control Panel Je Switch to Category view See Also A Windows Update Controllers Game 3 Right click Local Area Connection and then click Properties ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Figure 58 Windows XP Control Panel Network Connections Properties s Network Connections File Edit View Favorites Tools Advanced Help Q sax amp 2 Search 2 Folders Ez Network Connections LAN or High Speed Internet Network Tasks ocal Area Connection Create a new bled connection Standard PCI Fast Ethernet Adapte Set up a home or small Disable office network at atus Disable this network device Repair Repair this connection Bridge Connections mj Rename this connection view status of this connection Change settings of this connection Create Shortcut 4 Select Internet Protocol TCP IP under the General
18. 134 trademarks 145 troubleshooting 91 U upload configuration 86 upload firmware 87 W warranty 147 note 147 WDS 64 web configurator 27 weight 95 WEP 96 width 95 Wi Fi Protected Access 133 wireless association 48 49 wireless channel 93 wireless client WPA supplicants 135 Wireless Distribution System WDS 64 97 wireless frequency 59 wireless interference 94 wireless LAN 93 97 wireless security 93 96 129 wireless specifications 97 WLAN interference 127 security parameters 136 WPA 96 133 key caching 134 pre authentication 134 user authentication 134 vs WPA PSK 134 wireless client supplicant 135 with RADIUS application example 135 WPA2 133 user authentication 134 vs WPA2 PSK 134 wireless client supplicant 135 with RADIUS application example 135 WPA2 Pre Shared Key 133 WPA2 PSK 133 134 application example 135 WPA PSK 133 134 application example 135 ZyXEL NWA570N User s Guide Index 152 ZyXEL NWA570N User s Guide
19. Appendix C Wireless LANs BS Figure 87 RTS CTS RTS Rang CTS Range it ath O nn om pent RR ARI ER RR je ma aene P mra Station AP E oss iia j A Data E Mr Pi Ce r m DC Ke EH NR Stations A and B do not FN 7 pee Station A D hear each other They f Station B m t m can hear the AP When station A sends data to the AP it might not know that the station B is already using the channel If these two stations send data at the same time collisions may occur when both sets of data arrive at the AP at the same time resulting in a loss of messages for both stations RTS CTS is designed to prevent collisions due to hidden nodes An RTS CTS defines the biggest size data frame you can send before an RTS Request To Send CTS Clear to Send handshake is invoked When a data frame exceeds the RTS CTS value you set between 0 to 2432 bytes the station that wants to transmit this frame must first send an RTS Request To Send message to the AP for permission to send it The AP then responds with a CTS Clear to Send message to all other stations within its range to notify them to defer their transmission It also reserves and confirms with the requesting station the time frame for the requested transmission Stations can send frames smaller than the specified RTS CTS directly to the AP without the RTS Request To Send CTS Clear to Send handshake You should only configure RTS C
20. Document Conventions Warnings and Notes These are how warnings and notes are shown in this User s Guide lt gt Warnings tell you about things that could harm you or your device BS Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations Syntax Conventions The NWAS570N may be referred to as the ZyXEL Device the device the system or the product in this User s Guide Product labels screen names field labels and field choices are all in bold font A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENTER key Select or choose means for you to use one of the predefined choices A right angle bracket gt within a screen name denotes a mouse click For example Maintenance gt Log gt Log Setting means you first click Maintenance in the navigation panel then the Log sub menu and finally the Log Setting tab to get to that screen Units of measurement may denote the metric value or the scientific value For example k for kilo may denote 1000 or 1024 M for mega may denote 1000000 or 1048576 and so on ZyXEL NWA570N User s Guide Document Conventions Icons Used in Figures Figures i
21. Global Key This is how often the AP sends a new group key out to all clients The re keying Update process is the WPA equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis Specify an interval either in seconds or thousands of packets that the device sends Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh 6 5 4 Wireless Security WPA 2 WPA Wi Fi Protected Access is a subset of the IEEE 802 11i standard WPA2 IEEE 802 111 is a wireless security standard that defines stronger encryption authentication and key management than WPA Key differences between WPA 2 and WEP are user authentication and improved data encryption ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Figure 38 Wireless Security WPA 2 Security Settings Encryption Method WPA Y Authentication Server Authentication Server IP Address Port Number Shared Secret Rekey Options Reauthentication Time a600 Seconds max 100 3600 Global Key Update G every 606 Seconds mas 100 3600 C every fioo0 X1000 Packets max 100 3600 o o d o 3 o i812 0 64 alphanumeric printab spaces Reset The following table describes the labels in this screen Table 20 Wireless Security WPA 2 Server IP Address LABEL DESCRIPTION Encryption Select WPA WPA2 or WPA
22. LAN Figure 84 Peer to Peer Communication in an Ad hoc Network _ _ A s L I i BSS A Basic Service Set BSS exists when all communications between wireless clients or between a wireless client and a wired network client go through one access point AP Intra BSS traffic is traffic between wireless clients in the BSS When Intra BSS is enabled wireless client A and B can access the wired network and communicate with each other When Intra BSS is disabled wireless client A and B can still access the wired network but cannot communicate with each other ZyXEL NWA570N User s Guide 125 Appendix C Wireless LANs ESS Figure 85 Basic Service Set a a o een An Extended Service Set ESS consists of a series of overlapping BSSs each containing an access point with each access point connected together by a wired network This wired connection between APs is called a Distribution System DS This type of wireless LAN topology is called an Infrastructure WLAN The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood An ESSID ESS IDentification uniquely identifies each ESS All access points and their associated wireless clients within the same ESS must have the same ESSID in order to communicate ZyXEL NWA570N User s Guide Appendix C Wireless LANs
23. Scripting Under Active scripting make sure that Enable is selected the default Under Scripting of Java applets make sure that Enable is selected the default Click OK to close the window oar WO ND 122 ZyXEL NWA570N User s Guide Appendix B Pop up Windows JavaScripts and Java Permissions Figure 81 Security Settings Java Scripting Security Settings Settings Scripting amp Active scripting CY Dicahle 3 Allow paste operations via script Q Disable 9 Enable Q Prompt amp Scripting of Java applets Disable AD Enable 2 Promp lleas fuikhanticstian Reset to Medium Reset custom settings E Java Permissions Click the Custom Level button Scroll down to Microsoft VM cO WN Click OK to close the window Figure 82 Security Settings Java From Internet Explorer click Tools Internet Options and then the Security tab Under Java permissions make sure that a safety level is selected Security Settings Settings Q Disable 9 Enable es Font download Q Disable 9 Enable 3 Microsoft VM Java permissions Q Custom or ym f Q Medium safety Miccellsecc i Reset to Medium Reset Reset custom settings J ZyXEL NWA570N User s Guide Appendix B Pop up Windows JavaScripts and Java Permissions JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab
24. The screen appears as shown LES Be careful not to list your computer s MAC address and select Deny the following MAC address to associate when managing the device via a wireless connection This would lock you out ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Figure 40 MAC Filter Wireless Settings Security MAC Filter WPS Settings Active on Oo Un amp WO NM m LU N eG 13 14 15 16 MAC Address Filter allow the following MAC Address to associate C Deny the following MAC address to associate Ss MAC Address 00 00 00 00 00 00 17 00 00 00 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 00 00 00 00 00 00 00 19 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 00 00 00 00 00 22 00 00 00 00 00 00 00 00 00 00 00 00 23 00 00 00 00 00 00 i00 00 00 00 00 00 00 00 00 00 00 00 24 io 00 00 00 00 00 25 iD 00 00 00 00 00 00 00 00 00 00 00 26 00 00 00 00 00 00 27 20 00 00 00 00 00 iD 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 29 00 00 00 00 00 00 00 00 00 00 00 00 30 iD 00 00 00 00 00 00 00 00 00 00 00 31 iQ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 32 Reset The following table describes the labels in this screen Tab
25. WPAP ORK cease Lagat dudes E ENAA SA aE npc at Spade rae a radi ad he Eaa 40 Figure 19 Wizard Confit Your SOUS scccsccdieesscaccsstancnsessctschiccensaanernsstarcheamadaesh davensusis E 41 Faw 20 Vizard WG MT TT 41 FRU rab ctr pete 45 Figure 22 Status Sereen Details Re 46 Figure 23 mtus Viow Statisties Lunes iata e pH e innesi nre eii AENA ENRE Karani aeai iNET EEA NESNE 48 Figure 24 Status View Association LISE iiec milan qb icon a E 49 Figure 25 Status View Association List Wireless Client Mode sssseenm 50 FRM sy TNL UMS MT 52 Figure 27 Example of a Wireless NGIWOCK 12 122 tnit titt eerta cric redes atre dax cih Ebr dece kic pe de cade 55 xo PU Auli ccce uncta winnie ele 59 Figure 29 Wireless Settings Wireless IIl 1uucceraaao ke riva ERU px ARE Ert e EH RU Cone PRU dec EHDR RENE URL vRa UEM EN EUR 62 usi dip 64 Figure 31 Bridge Loop Two Bridges Connected to Hub eeeeeeeeeeeeeeanee ninth anne taaas 65 Figure 32 Bridge Loop Bridge Connected to Wired LAN cccsssccccesesecceceeeeseececeeeneeaceeeesneacaeeneneeaaae 65 Figuie ds Wireless Sutungs BOS 225i Let ped das toad ao i oc LGB nun La c a nae a anes 66 Figure 34 Wireless Settings AP Repeater eeseeuseseeuui eese anna eene tha nna nita annua aoa ta uua aoo ra nua taa asa 69 Figure 35 Wireless Security Disable e
26. Web CODTIQUEBTOE Liu ec seii irent beer rette rte pe bcd dri ber daret dea cir pud 31 pl M 35 Advanced M 43 M CIT OCB T 45 cv cabe slc E E E pacman tances T A Rea noma E 51 Pace sree bot Pu 55 Management SORGEN aerate sabato iod ota iu palin E bina visiten fe pa caus TEUER RA RENAL epp onda Dd 83 Troubleshooting and Product Specifications ccceeeceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeseeeeees 89 Hioci nM T 91 Product Specifications and Wall Mounting Instructions sss 95 Appendices and NIOR eee 101 ZyXEL NWA570N User s Guide 9 Contents Overview ZyXEL NWA570N User s Guide Table of Contents Table of Contents About This Us rs Gude mee 3 D cument Conventos conin E E eens enidicioneenen 4 Sary On i Caan ep merer re npr or Pepe merrell sapernnere anne for trrMer enter errs tenn ter ar rrrsricr nearer rn rere Tre 6 Contents COVEN WIG a teiactcs es venicntdxicescduscienscedici conser censaiezestasdsi nasiancdvetsonewensnnakiariedelecasanieriaiererniiid 9 Table of CORTGINIS uio distance iocos i Lad od OR DR LER GE b P Ga aaas a Far R Eb de EE 11 a EP qc 15 EGET mer 19 Part I Introduction and Wizards esses esee 21 Chapter 1 Introducing the ZyXEL DEVICE ieiuno het ir akon k
27. a sturdy wall that is free of obstructions 2 Drill two holes for the screws The distance between the centers of the holes is listed in the product specifications appendix Be careful to avoid damaging pipes or cables located inside the wall when drilling holes for the screws 3 Do not insert the screws all the way into the wall Leave a small gap of about 0 5 cm between the heads of the screws and the wall 4 Make sure the screws are snugly fastened to the wall They need to hold the weight of the NWAS570N with the connection cables 5 Align the holes on the back of the NWAS570N with the screws on the wall Hang the NWAS57ON on the screws Figure 52 Wall mounting Example M M AUIII ZyXEL NWA570N User s Guide Chapter 9 Product Specifications and Wall Mounting Instructions ZyXEL NWA570N User s Guide PART IV Appendices and Index Setting up Your Computer s IP Address 103 Pop up Windows JavaScripts and Java Permissions 119 Wireless LANs 125 Customer Support 139 Legal Information 145 Index 149 Setting up Your Computer s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP IP installed Windows 95 98 Me NT 2000 XP Macintosh OS 7 and later operating systems and all versions of UNIX LINUX include the software components you need to install and use TCP IP on your computer Windows 3 1 requires the purchase of
28. a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configure the TCP IP settings in order to communicate with your network If you manually assign IP information instead of using dynamic assignment make sure that your computers have IP addresses that place them in the same subnet as the ZyXEL Device s LAN port Windows 95 98 Me Click Start Settings Control Panel and double click the Network icon to open the Network window ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Figure 53 WIndows 95 98 Me Network Configuration LPR for TCP IP Printing 3Com EtherLink 10 100 PCI TX NIC 3C905B TX Dial Up Adapter USB Fast Ethernet Adapter Y TCP IP gt 3Com EtherLink 10 100 PCI TX NIC 3C905B T Ij Ff Client for Microsoft Networks sl Installing Components The Network window Configuration tab displays a list of installed components You need a network adapter the TCP IP protocol and Client for Microsoft Networks If you need the adapter 1 Inthe Network window click Add 2 Select Adapter and then click Add 3 Select the manufacturer and model of your network adapter and then click OK If you need TCP IP 1 Inthe Network window click Add 2 Select Protocol and then click Add 3 Select Microsoft from the li
29. address filtering to give mobile users highly secured wireless connectivity IEEE 802 11b IEEE 802 11g and IEEE 802 11n draft 2 0 compliant wireless devices can associate with the ZyXEL Device The ZyXEL Device is also Wi Fi Protected Setup WPS enabled allowing you to quickly add other WPS enabled devices to your wireless network at the touch of a button or the entry of a PIN 1 2 Applications for the ZyXEL Device Here are some application examples of how you can use your ZyXEL Device 1 2 1 Access Point for Internet Access The ZyXEL Device is an ideal access solution for wireless Internet connection A typical Internet access application for your ZyXEL Device is shown as follows ZyXEL NWA570N User s Guide 23 Chapter 1 Introducing the ZyXEL Device Figure 1 Internet Access Application UN Internet JJ 1 2 2 Corporate Network Access Application In situations where users need to access corporate network resources and the Internet the ZyXEL Device is an ideal solution for wireless stations to connect to the corporate network without expensive network cabling Stations A B and C can access the wired network through the ZyXEL Devices The following figure depicts a typical application of the ZyXEL Device in an enterprise environment The three computers with wireless adapters are allowed to access the network resource through the ZyXEL Device after account validation by the network authentication Server
30. amp WPA2 to configure user authentication and Method improved data encryption Note WPA WPA2 and IEEE 802 1x wireless security are not available when you use Wireless Client Bridge or AP Repeater mode Note You can only use WEP keys to encrypt traffic between APs Authentication Enter the IP address of the external authentication server in dotted decimal notation Port Number Enter the port number of the external authentication server The default port number is 1812 You need not change this value unless your network administrator instructs you to do so with additional information Shared Secret Enter a password up to 63 printable characters as the key to be shared between the external authentication server and the device The key must be the same on the external authentication server and your device The key is not sent over the network Reauthentication Specify how often wireless stations have to resend user names and passwords in Time order to stay connected Enter a time interval between 100 and 3600 seconds If wireless station authentication is done using a RADIUS server the reauthentication timer on the RADIUS server has priority Global Key This is how often the AP sends a new group key out to all clients The re keying Update process is the WPA equivalent of automatically changing the WEP key for an AP and all stations in a WLAN on a periodic basis Specify an interval either in seconds or thous
31. data transmission If you chose 64 bit WEP then enter any 5 ASCII characters or 10 hexadecimal characters 0 9 A F If you chose 128 bit WEP then enter 13 ASCII characters or 26 hexadecimal characters 0 9 A F If you chose 152 bit WEP then enter 16 ASCII characters or 32 hexadecimal characters 0 9 A F Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh 6 5 3 Wireless Security IEEE 802 1x The IEEE 802 1x standard outlines enhanced security methods for both the authentication of wireless stations and encryption key management BS Once you enable user authentication you need to specify an external RADIUS server on the device for authentication ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Figure 37 Wireless Security IEEE 802 1x ELLE o Security Settings Encryption Method 8021x Data Encryption 54 bit WEP v Enter a passphrase to automatically generate a WEP key or leave it blank if you want to manually enter the WEP key Passphrase Generate max 16 alphanumeric printable characters c Key 1 C Key 2 C Key 3 C Key4 Cd Note 64 bit WEP Enter 5 ASCII characters or 10 hexadecimal characters 0 9 A F 128 bit WEP Enter 13 ASCII characters or 26 hexadecimal characters 0 9 A F 152 bit WEP Enter 16 ASCII characters or 32 hexadecimal characters 0 9
32. for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference See Appendix C on page 125 for more information Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh 6 4 2 Wireless Client Mode BS Select Wireless Client in the Operation Mode field to display the screen as shown next This mode has the device act as wireless client to connect to a wireless network WPA WPA2 and IEEE 802 1x wireless security are not available when you use Wireless Client Bridge or AP Repeater mode Figure 29 Wireless Settings Wireless Client Basic Settings Operation Mode Wireless Client SSID ZyXEL WPS max 32 printable characters Advanced Settings Manual MAC Clone O e Radio Enable C yes C No Preamble Type Dynamic Channel Bandwidth ru RTS CTS Threshold 55535 0765535 Fragmentation 55534 256465534 Reset ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens The following table describes the labels in this screen Table 14 Wireless Settings Wireless Client LABEL DESCRIPTION Basic Settings Operation Select the operating mode from the drop down list The options are Access Point Mode Wireless Client Bridge and AP Repeater SSID Wireless stations associating to the access point AP must have the same SSID
33. held liable for indirect or consequential damages of any kind to the purchaser To obtain the services of this warranty contact ZyXEL s Service Center for your Return Material Authorization number RMA Products must be returned Postage Prepaid It is recommended that the unit be insured when shipped Any returned products without proof of purchase or those with an out dated warranty will be repaired or replaced at the discretion of ZyXEL and the customer will be billed for parts and labor All repaired or replaced products will be shipped by ZyXEL to the corresponding return address Postage Paid This warranty gives you specific legal rights and you may also have other rights that vary from country to country Registration Register your product online to receive e mail notices of firmware upgrades and information at www zyxel com for global products or at www us zyxel com for North American products ZyXEL NWA570N User s Guide Appendix E Legal Information ZyXEL NWA570N User s Guide Index A access 92 adaptor 91 address 51 92 address assignment 51 Advanced Encryption Standard See AES advanced screens 47 AES 96 134 antenna 95 directional 137 gain 137 omni directional 137 AP access point 127 association list 49 auto MDI MDI X 95 auto negotiating 95 B back up 85 backup 83 85 Basic Service Set see BSS browser settings 92 BSS 125 C CA 132 cables 91 Certificate Authority S
34. leave it blank if you m Passphrase max 16 characters Key 1 Note Manual WEP Key 64 bit WEP Enter 5 ASCII characters or 10 hexadecimal characters 0 9 A E 128 bit WEP Enter 13 ASCII characters or 26 hexadecimal characters 9 9 A F 152 bit WEP Enter 16 ASCH characters or 32 hexadecimal characters 0 9 A F 3 1 3 3 WPA 2 PSK Only select WPA PSK or WPA2 PSK if your wireless clients support it Type a pre shared key from 8 to 63 ASCII characters including spaces and symbols This field 1s case sensitive ZyXEL NWA570N User s Guide Chapter 3 Wizard Figure 18 Wizard 3 WPA 2 PSK SETUP WIZARD 3 1 4 Wizard Confirm Your Settings This read only screen shows the status of the current settings Use the summary table to check whether what you have configured is correct Click Finish to complete the wizard configuration and save your settings ZyXEL NWA570N User s Guide Chapter 3 Wizard Figure 19 Wizard Confirm Your Settings SETUP WIZARD ZyXEL STEP STEP 2 STEP 3 STEP 4 ffi Confirm your Settings IP Address Subnet Mask Gateway IP Address SSID Channel Security Back Finish 3 1 5 Auto Configuration The Wizard automatically configures the ZyXEL Device Figure 20 Wizard Configuration i m AP is configuring now E Please wait The AP is now configuring As there will be no indication of when th
35. lists data transfer speeds given a set of factors affecting network data transfer rates Such factors include GI and bandwidth The MCSO in the MCS0 7 2 15 option refers to the first set of network conditions and so on So MCS0 7 2 15 is appropriate for network conditions which provides data transfer rates of 7 2 Mbps and 15 Mbps at bandwidths of 20 Mhz and 40 Mhz respectively For more information on the MCS see the IEEE802 1n draft 2 0 specifications Channel Mode Select whether the NWA570N uses a wireless channel bandwidth of 20 or 40 MHz A standard 20 MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300 Mbps Because not all devices support 40 MHz channels select 20 40MHZ to allow the NWA570N to adjust the channel bandwidth automatically Extension If you have only IEEE wireless 802 1n draft 2 0 compatible devices on your channel network select None oer If you have devices that are not compatible with IEEE wireless 802 1n draft 2 0 and you have selected a Channel Mode of 40 Mhz select CTS to self CTS to self and RTS CTS are both kinds of protection mechanisms similar to HT protect Both decrease data transfer speeds but CTS to self is more efficient Preamble Preamble is used to signal that data is coming to the receiver Type Short preamble increases performance as less time sending preamble means more time for sending data All IEEE 802 1
36. mode the wireless adapters support and to provide more reliable communications in busy wireless networks Select Dynamic to have the device automatically use short preamble when all wireless clients support it otherwise the device uses long preamble Note The device and the wireless stations MUST use the same preamble mode in order to communicate RTS CTS RTS CTS is designed to prevent collisions due to hidden nodes You should only Threshold configure RTS CTS if the possibility of hidden nodes exists on your network and the cost of resending large frames is more than the extra network overhead involved in the RTS Request To Send CTS Clear to Send handshake Enter a value between 0 and 65535 Data with a frame size larger than this value will perform the RTS CTS handshake If the RTS CTS value is greater than the Fragmentation value then the RTS CTS handshake will never occur as data frames will be fragmented before they reach RTS CTS size See Appendix C on page 125 for more information ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 14 Wireless Settings Wireless Client continued LABEL DESCRIPTION Fragmentation Enter a value between 256 and 65534 It is the maximum data fragment size that can be sent A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to int
37. not be co located or operating in conjunction with any other antenna or transmitter JEEE 802 11b or 802 11g operation of this product in the U S A is firmware limited to channels 1 through 11 To comply with FCC RF exposure compliance requirements a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons dte TEX IKR BDR FE BCT PETERET EE BEIR RUS A ZR ee Be JERE AT ZH RBA Ata tHe A BS RS gt IAT a T RETE CURE DUC ROP ITAL HET OF A TRE PEAS KAA PRESS REVTBUESEH WU EPS ARATE HAUSE TEHRREBUE ESI ALE UPR ABERTA See ee a TE pa KB p Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment This device has been designed for the WLAN 2 4 GHz network throughout the EC region and Switzerland with restrictions in France This Class B digital apparatus complies with Canadian ICES 003 Cet appareil num rique de la classe B est conforme la norme NMB 003 du Canada
38. shows an example Figure 74 Red Hat 9 0 Restart Ethernet Card root localhost init d network restart Shutting down interface eth0 OK Shutting down loopback interface OK Setting network parameters OK Bringing up loopback interface OK Bringing up interface eth0 OK ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Verifying Settings Enter ifconfig in a terminal screen to check your TCP IP properties Figure 75 Red Hat 9 0 Checking TCP IP Properties root localhost ifconfig etho Link encap Ethernet HWaddr 00 50 BA 72 5B 44 inet addr 172 23 19 129 Bceast 172 23 19 255 Mask 255 255 255 0 UP BROADCAST RUNNING MULTICAST MTU 1500 Metric 1 RX packets 717 errors 0 dropped 0 overruns 0 frame 0 TX packets 13 errors 0 dropped 0 overruns 0 carrier 0 collisions 0 txqueuelen 100 RX bytes 730412 713 2 Kb TX bytes 1570 1 5 Kb Interrupt 10 Base address 0x1000 root localhost ZyXEL NWA570N User s Guide Pop up Windows JavaScripts and Java Permissions In order to use the web configurator you need to allow Web browser pop up windows from your device JavaScripts enabled by default Java permissions enabled by default BS Internet Explorer 6 screens are used here Screens for other Internet Explorer versions may vary Internet Explorer Pop up Blockers You may have to disable pop up blocking to log into your device Either di
39. tab in Win XP and then click Properties Figure 59 Windows XP Local Area Connection Properties 4 Local Area Connection Properties AES General Authentication Advanced Connect using B Accton EN1207D TX PCI Fast Ethernet Adapter This connection uses the following items E Client for Microsoft Networks a File and Printer Sharing for Microsoft Networks K K a Q oum D Description Transmission Control Protocol Internet Protocol The default wide area network protocol that provides communication across diverse interconnected networks C Show icon in notification area when connected 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP Ifyou have a dynamic IP address click Obtain an IP address automatically f you have a static IP address click Use the following IP Address and fill in the IP address Subnet mask and Default gateway fields Click Advanced ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Figure 60 Windows XP Internet Protocol TCP IP Properties Internet Protocol TCP IP Properties General Alternate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address Obtain DNS ser
40. use the wireless network it still has to have the correct information SSID channel and security If a device is not allowed to use the wireless network it does not matter if it has the correct information This type of security does not protect the information that is sent in the wireless network Furthermore there are ways for unauthorized wireless devices to get the MAC address of an authorized device Then they can use that MAC address to use the wireless network 6 2 3 User Authentication Authentication is the process of verifying whether a wireless device is allowed to use the wireless network You can make every user log in to the wireless network before they can use it However every device in the wireless network has to support IEEE 802 1x to do this For wireless networks you can store the user names and passwords for each user in a RADIUS server This is a server used in businesses more than in homes If you do not have a RADIUS server you cannot set up user names and passwords for your users 1 Some wireless devices such as scanners can detect wireless networks but cannot use wireless networks These kinds of wireless devices might not have MAC addresses 2 Hexadecimal characters are 0 1 2 3 4 5 6 7 8 9 A B C D E and F ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Unauthorized wireless devices can still see the information that is sent in the wireless network even if they cannot
41. 000000000 ZyXEL NWA570N User s Guide Chapter 4 Status Screen 4 1 1 Status Screen Icons The following table describes the global web configurator icons in the upper right corner of most screens Table 3 Global Icon Key ICON DESCRIPTION Click the Wizard icon to open the setup wizard Click the About icon to view copyright information El Click the Logout icon at any time to exit the web configurator Make sure you save any changes before you log out 4 1 2 Status Screen Details The status screen provides details on your ZyXEL Device wireless settings IP settings as well as statistics and associated device details Figure 22 Status Screen Details Device Information IP Settings Device Name ZyXEL840d IP Address 192 168 1 2 Operation Mode AP Subnet Mask 255 255 255 0 MAC Address 00 19 cb 04 84 0d Gateway IP Address 0 0 0 0 Firmware Version V1 00 AAP 0 B7 Wireless Settings SSID ZyXEL NWAS70N View Statistics 0 Channel 6 2 437GHz L View Association List Q Encryption Method TKIP EA MAC Filter Disable The following table describes the labels in this screen Table4 Status LABEL DESCRIPTION Refresh Interval Use the drop down list box to select how often you want the device to renew the information on this screen Refresh Now Click this button to have the device renew the information on this screen Device Information Device Name This is the sa
42. 02 1n draft 2 0 standard If all devices on your wireless network support IEEE 802 1n draft 2 0 deselect HT protect for higher data transmission rates Advanced Settings Beacon Interval A beacon transmits important information to stations on the wireless network Set the number of milliseconds that should pass between the sending out of beacons Selecting a low number increases the frequency of beacons This increases network overhead but improves wireless device association and roaming However it also reduces power saving as wireless stations in sleep mode must awaken more often Selecting a high number reduces the frequency of beacons reducing network overhead increasing data transmission rates and increasing power savings However association of wireless devices and roaming becomes more difficult Intra BSS Traffic A Basic Service Set BSS exists when all communications between wireless clients or between a wireless client and a wired network client go through one access point AP Intra BSS traffic is traffic between wireless stations in the same BSS Enable Intra BSS Traffic to allow wireless stations connected to the device to communicate with each other Disable Intra BSS Traffic to only allow wireless stations to communicate with the wired network not with each other This option is more secure See Appendix C on page 125 for more information DTIM Interval Set the interval for wireless clients in sl
43. 16 alphanumeric printable characters Gkeyi Ckey2 Ckeys Ckeya Q Note 64 bit WEP Enter 5 ASCII characters or 10 hexadecimal characters 0 9 A 128 bit WEP Enter 13 ASCII characters or 26 hexadecimal characters 0 9 152 bit WEP Enter 16 ASCII characters or 32 hexadecimal characters 0 9 Reset The following table describes the labels in this screen Table 18 Wireless Security WEP LABEL DESCRIPTION Encryption Select WEP if you want to configure WEP encryption parameters Method Authentication Select Auto Open or Shared from the drop down list box Type WEP Encryption Select 64 bit WEP 128 bit WEP or 152 bit WEP to enable data encryption If you selected 64 bit or 128 bit WEP you can enter a passphrase password phrase of up to 32 case sensitive printable characters and click Generate to have the device create four different WEP keys Passphrase ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 18 Wireless Security WEP LABEL DESCRIPTION Generate After you enter the passphrase click Generate to have the device generates four different WEP keys automatically Key 1 to Key 4 If you want to manually set the WEP keys enter the WEP key in the field provided Select a WEP key to use for data encryption The WEP keys are used to encrypt data Both the device and the wireless stations must use the same WEP key for
44. 1N Remote MAC Address 2 l l l i1N Remote MAC Address 3 l l C 11N Remote MAC Address 4 l l l 11N Advanced Settings Beacon Interval 100 25 1000 Intra BSS Traffic Enable C Disable DTIM Interval fi 1 255 Number of Wireless Stations Allowed to Associate 2 1 32 Radio Enable Yes C No 4 MPDU aggregation Yes C No A MSDU aggregation C Yes No RIFS Yes C No Short GI Yes C No Output Power Management Fui v Data Rate Management Auto v Channel Mode 20 40MHz Extension channel protection mode RTS CTS Preamble Type Dynamic Channel BandWidth Fui RTS CTS Threshold 65535 0 65535 Fragmentation 5534 256765534 pesa The following table describes the labels in this screen Table 16 Wireless Settings AP Repeater LABEL DESCRIPTION Basic Settings Operation Select the operating mode from the drop down list The options are Access Point Mode Wireless Client Bridge and AP Repeater ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 16 Wireless Settings AP Repeater continued LABEL DESCRIPTION SSID Wireless stations associating to the access point AP must have the same SSID Enter a descriptive name up to 32 printable characters for the wireless LAN Spaces are allowed Note If you are configuring the device from a computer connected to the wireless LAN and you change the device s SSID channel or security
45. 1b compliant wireless adapters support long preamble but not all support short preamble Select Long preamble if you are unsure what preamble mode the wireless adapters support and to provide more reliable communications in busy wireless networks Select Dynamic to have the device automatically use short preamble when all wireless clients support it otherwise the device uses long preamble Note The device and the wireless stations MUST use the same preamble mode in order to communicate ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 13 Wireless Settings AP continued LABEL DESCRIPTION RTS CTS RTS CTS is designed to prevent collisions due to hidden nodes You should only Threshold configure RTS CTS if the possibility of hidden nodes exists on your network and the cost of resending large frames is more than the extra network overhead involved in the RTS Request To Send CTS Clear to Send handshake Enter a value between 0 and 65535 Data with a frame size larger than this value will perform the RTS CTS handshake If the RTS CTS value is greater than the Fragmentation value then the RTS CTS handshake will never occur as data frames will be fragmented before they reach RTS CTS size See Appendix C on page 125 for more information Fragmentation Enter a value between 256 and 65534 It is the maximum data fragment size that can be sent A large Fragmentation Threshold is recommended
46. 2 Make sure that Use Java 2 for lt applet gt under Java Sun is selected 3 Click OK to close the window Figure 83 Java Sun General Security Privacy Content Connections Programs Advanced Settings O Use inline AutoComplete O Use Passive FTP for firewall and DSL modem compatibility Use smooth scrolling HTTP 1 1 settings Use HTTP 1 1 O Use HTTP 1 1 through proxy connections 9 Java B Alv Use Java 2 v1 4 1 7 for applet requires restart rm 3 ICTOSOTT v O Java console enabled requires restart O Java logging enabled JIT compiler for virtual machine enabled requires restart Multimedia O Always show Internet Explorer 5 0 or later Radio toolbar O Don t display online media content in the media bar Enable Automatic Image Resizing xf gt Restore Defaults Cancel Apply ZyXEL NWA570N User s Guide Wireless LANs Wireless LAN Topologies This section discusses ad hoc and infrastructure wireless LAN topologies Ad hoc Wireless LAN Configuration The simplest WLAN configuration is an independent Ad hoc WLAN that connects a set of computers with wireless adapters A B C Any time two or more wireless adapters are within range of each other they can set up an independent network which is commonly referred to as an ad hoc network or Independent Basic Service Set IBSS The following diagram shows an example of notebook computers using wireless adapters to form an ad hoc wireless
47. 60 B3 45 67 89 WLAN service started 50 B3 45 67 89 WLAN service stopped 60 B3 45 67 89 WLAN service started 60 B3 45 67 89 WLAN service stopped 60 B3 45 67 89 WLAN service started 50 B3 45 67 89 WLAN service stopped 60 B3 45 67 89 WLAN service started Refresh Clear Log The following table describes the labels in this screen Table 26 Management Logs LABEL DESCRIPTION Display Select a category of logs to view Refresh Click Refresh to renew the log screen Clear Log Click Clear Log to clear all the logs This is the log s index number Time This field displays the time the log was recorded It is the number of seconds since the last time the system turned on Message This field states the reason for the log Source This field lists the source IP address and the port number of the incoming packet that caused the log Destination This field lists the destination IP address and the port number of the outgoing packet that caused the log Note This field displays additional information about the log entry ZyXEL NWA570N User s Guide Chapter 7 Management Screens 7 4 Configuration File The configuration file often called the romfile or rom 0 contains the factory default settings such as password and TCP IP Setup etc It arrives from ZyXEL with a rom filename extension Once you have customized the device s settings they can be saved back to your computer under
48. AN for Quality of Service Microsoft PPTP MS PPTP Microsoft s implementation of Point to Point Tunneling Protocol Power Adaptor Specifications Table 32 Power Adaptor Specifications AUSTRALIAN PLUG STANDARDS AC Power Adapter Model AD 121AE Input Power 240 Volts AC 50Hz Output Power 12 Volts DC 5 1 Amp Power Consumption 12 Watts Safety Standards C Tick EUROPEAN PLUG STANDARDS AC Power Adapter Model AD 121AB Input Power 230 Volts AC 50Hz Output Power 12 Volts DC 5 1 Amp Power Consumption 12 Watts Safety Standards CE mark EN60950 2001 NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model AD 121A Input Power 120 Volts AC 60Hz Output Power 12 Volts DC 5 1 Amp Power Consumption 12 Watts Safety Standards UL UK PLUG STANDARDS AC Power Adapter Model AD 121AD Input Power 240 Volts AC 50Hz Output Power 12 Volts DC 5 1 Amp ZyXEL NWA570N User s Guide Chapter 9 Product Specifications and Wall Mounting Instructions Table 32 Power Adaptor Specifications continued Power Consumption 12 Watts Safety Standards CE mark EN60950 2001 Wall mounting Instructions BS Complete the following steps to hang your NWA570N on a wall See Table 29 on page 95 for the size of screws to use and how far apart to place them 1 Select a high position on
49. FS Select Yes to enable RIFS Reduced Interframe Spacing and to increase data transfer rates ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 13 Wireless Settings AP continued LABEL DESCRIPTION Short Gl Select Yes or No to enable or disable GI Guard Interval The GI refers to the interval given between data transmission from users in order to reduce interference Reducing the GI increases data transfer rates but also increases interference Increasing the GI reduces data transfer rates but also reduces interference Output Power Set the output power of the device in this field The options are Full 50 25 Management 12 and Min Full is recommended If there is a high density of APs within an area decrease the output power of the device to reduce interference with other APs Data Rate Use this field to select a maximum data rate for the wireless connection s The Management options are Auto 1 54M or MCS0 7 2 15 MCS15 144 4 300 Select Auto to let the NWA570N decide the most suitable data transfer rate If you are not certain of what setting to choose choose Auto Alternatively select a maximum data transfer rate from 1 to 54 Mbps Please note that this is a total rate to be shared by all of the device s wireless connections The NWA570N also lets you configure the maximum data transfer rate based on the IEEE802 1n draft 2 0 modulation and coding scheme MCS The MCS
50. Figure 2 Corporate Network Application N Internet ner 1 2 3 Wireless Client Application The ZyXEL Device can function as a wireless client to connect to a network via an Access Point AP The AP provides access to the wired network and the Internet ZyXEL NWA570N User s Guide Chapter 1 Introducing the ZyXEL Device Figure 3 Wireless Client Application N po Inte met a A ig e s r s rd t La w 4 s z s Pd N z ra j f Y 1 1 H N 1 A DL N gt 1 i H H 1 i h 1 X Y f EN 1 c gt d 5 A RA A Ps Ss aS Pa Ld E B Cc m EN Ps aana m i err m eee M 1 2 4 Bridge Repeater The ZyXEL Device can act as a wireless network bridge and establish wireless links with other APs The ZyXEL Devices in the following example are using bridge mode with a star configuration A B C and D are connected to independent wired networks and have bridge connections at the same time B C and D can communicate with A ZyXEL NWA570N User s Guide 25 Chapter 1 Introducing the ZyXEL Device Figure 4 Bridge Application A ZyXEL Device in bridge mode without an Ethernet connection can function as a repeater It transmits traffic from one AP to another AP without using a wired connection C in the following graphic repeats wireless traffic between A and B Fig
51. Figure 86 Infrastructure WLAN Ethernet wow ORE Se S E x mE MUS NUN de ae ne ITI SmSm oe gt A n 4 EN N S Ed NC e gt s BSS 1 Po I t Ss o or tee n c ort PEE i ni Ee ird npa Met E E e enert Channel A channel is the radio frequency ies used by IEEE 802 11a b g wireless devices Channels available depend on your geographical area You may have a choice of channels for your region so you should use a different channel than an adjacent AP access point to reduce interference Interference occurs when radio signals from different access points overlap causing interference and degrading performance Adjacent channels partially overlap however To avoid interference due to overlap your AP should be on a channel at least five channels away from a channel that an adjacent AP is using For example if your region has 11 channels and an adjacent AP is using channel 1 then you need to select a channel between 6 or 11 RTS CTS A hidden node occurs when two stations are within range of the same access point but are not within range of each other The following figure illustrates a hidden node Both stations STA are within range of the access point AP or wireless gateway but out of range of each other so they cannot hear each other that is they do not know if the channel is currently being used Therefore they are considered hidden from each other ZyXEL NWA570N User s Guide
52. Guide Chapter 7 Management Screens 7 4 2 Restore Configuration Restore configuration allows you to upload a new or previously saved configuration file from your computer to your device Table 27 Management Configuration File Restore Configuration LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse to find it Browse Click Browse to find the file you want to upload Remember that you must decompress compressed zip files before you can upload them Upload Click Upload to begin the upload process Do not turn off the device while configuration file upload is in progress The following screen displays You must wait one minute before logging into the device again Figure 44 Configuration Upload Successful D 7 AP Is Restarting Now 1 Please Wait The AP will now rebooting As there will be no indication of when the process is complete please wait for 57 seconds before attempting to access the AP again The device automatically restarts in this time causing a temporary network disconnect In some operating systems you may see the following icon on your desktop Figure 45 Network Temporarily Disconnected D Local Area Connection Network cable unplugged If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet a
53. If you know that there are routers between your computer and the NWA570N skip this step Ifthere is no DHCP server on your network make sure your computer s IP address is in the same subnet as the NWAS70N See Appendix A on page 103 5 Reset the device to its factory defaults and try to access the NWAS70N with the default IP address See Section 1 8 on page 30 6 Ifthe problem continues contact the network administrator or vendor e can see the Login screen but cannot log in to the NWA570N ZyXEL NWA570N User s Guide Chapter 8 Troubleshooting 1 Make sure you have entered the user name and password correctly The default password is 1234 This field is case sensitive so make sure Caps Lock is not on 2 You cannot log in to the web configurator while someone is using Telnet to access the NWAS7ON Log out of the NWAS70N in the other session or ask the person who is logged in to log out C Disconnect and re connect the power adaptor or cord to the NWA570N A If this does not work you have to reset the device to its factory defaults See Section 1 8 on page 30 e cannot access the NWA570N from the WLAN 1 Make sure the wireless adapter on the wireless station is working properly 2 Check that both the NWAS70N and your wireless station are using the same ESSID channel and security settings e cannot ping any computer on the WLAN Make sure the wireless adapter on the wireless stat
54. Macintosh OSA NOWOIK uicapxesxiturrecixskby o OILESUR RU EHE LE SSM KR YOK SS HAV A SEM pL ER ARE Ya 114 Figure 67 Red Hat 9 0 KDE Network Configuration Devices enne 115 Figure 68 Red Hat 9 0 KDE Ethernet Device General ccccsicsccccceessensscceeeesensceeeeesnecceeensenecsecteeneeees 115 Figure 69 Red Hat 9 0 KDE Network Configuration DNS ssssseeeeeeee eee 116 Figure 70 Red Hat 9 0 KDE Network Configuration Activate eeeeseesesseeseeeeeeeeennnnnne 116 Figure 71 Red Hat 9 0 Dynamic IP Address Setting in ifconfig ethO seeeeeeeeeessss 117 Figure 72 Red Hat 9 0 Static IP Address Setting in ifconfig ethO esssseee 117 Figure 73 Red Hat 9 0 DNS Settings IN resolv Conf ausceiceciceseiece tired ttt eo vov dera titt eoe pidas T7 Figure 74 Red Hat 9 0 Restart Ethernet Card usuosaie ne eri aia a ras ede Le p SINANA 117 Figure 75 Red Hat 9 0 Checking TOPHP Properes aesceiuasesei eerta eet pend euer Pr par ekE e inei 118 Figure 7G POpP Up BIGOK Gl dee 119 Figure 77 liberet Options PEDE uiiescicdscaaaxeesiidant c ctae tl niten bata eb EANA NANTE Naa EEA E 120 Figure 79 homot Options PINAG sanira 121 Figure 79 Popup Blocker Soling assau 121 Figura 80 Internet Options Securty sassrsrise irain reiia a a aaa basi edd iuda 122 Figure 81 Security Settings Java SOHIED iuiuaaucsesceeeisiesectt eei e o prenait eb rre dut Epor edd a Eu pL san ERE ppt
55. N x EN Channel 6 Encryption Disable ES lt n a The wireless stations and the ZyXEL Device must use the same SSID channel and wireless security settings for wireless communication ZyXEL NWA570N User s Guide Chapter 1 BS If you do not enable any wireless security on your ZyXEL Device your network traffic is visible to any wireless networking device that is within range 1 7 Restarting the ZyXEL Device BS Press and immediately release the RESET button to restart the ZyXEL Device Holding the RESET button in for five seconds or longer resets the device to the factory default settings 1 8 Resetting the ZyXEL Device If you forget the ZyXEL Device s IP address or your password to access the ZyXEL Device you will need to reload the factory default using the RESET button Resetting the ZyXEL Device replaces the current configuration file with the factory default configuration file This means that you will lose all configurations that you had previously The following parameters will be reset to the default values Table 2 Factory Defaults PARAMETER DEFAULT VALUE IP Address 192 168 1 2 Password 1234 Wireless Security Disabled SSID ZyXEL NWA570N 1 8 1 Methods of Restoring Factory Defaults You can erase the current configuration and restore factory defaults in two ways 1 Use the RESET button on the ZyXEL Device to upload the default configuratio
56. NWAS 0N Wireless N Access Point Bridge User s Guide Version 1 00 10 2007 Edition 1 DEFAULT LOGIN IP Address _http 192 168 1 2 Password 1234 ZyXEL www zyxel com About This User s Guide About This User s Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator You should have at least a basic knowledge of TCP IP networking concepts and topology Related Documentation Quick Start Guide The Quick Start Guide is designed to help you get up and running right away It contains information on setting up your network and configuring for Internet access Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary information BS It is recommended you use the web configurator to configure the ZyXEL Device e Supporting Disk Refer to the included CD for support documents ZyXEL Web Site Please refer to www zyxel com for additional support documentation and product certifications User Guide Feedback Help us help you Send all User Guide related comments questions or suggestions for improvement to the following address or use e mail instead Thank you The Technical Writing Team ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwan E mail techwriters zyxel com tw ZyXEL NWA570N User s Guide 3 Document Conventions
57. OR iE niren eaoin aankan iaka ais 23 U ER C2 o rr 23 1 2 Applications Tor th ZyXEL DOVICO Lcasccipu a ee ppp IIR RII ER ER UD ERREUR MERERI E REAA 23 142 1 Access Point Tor Internet ACCESS 2er t tet n otia Ug et dE e OR HERE E ERU RR 23 1 2 2 Corporate Network Access Application ccccccecceeeeeeeeteeeeeeeecaeeaeeeteeeeeeeeeeeees 24 1 2 3 Wireless Client AppiCatON uius vro cip nent Fr Ea paa QE niad da iaa 24 KARU RPT eec RR 25 1 2 5 Access Point and Repaater ecuatia noaa E TRIER V Sca i ES 27 1 9 Ways to Manage the ZyXEL DEVICE iauucccsio ence to rrt ttuno rope tmu eee o rh Pumas i ianen aa pla uasa rh Due Epic 27 1 4 Good Habits for Managing the ZyXEL Device Liuius eaaet than antt taa au ek tha ahh ka 27 jE EE c 28 16 Management Computer Sell i esed ic c OR De P Da Re S Db dta o dn 29 UM ORI Lr ai Na ct td ae a 29 1 5 2 Mireless D Om HO unccacixaec inita sande Fencrd x bue Fb t aem E 29 1 7 WR StU die AKEL DOVEO srai DESEE FEL L E ASDULARM DEAE RLA ANH 30 T Reset Die coL DOVE ene ci i EFE pe freer TES ERU TIMERE MN PHP IN treet er rrrcen trreter 30 1 8 1 Methods of Restoring Factory Doeofallls 1 erudite oti endet 30 30 Chapter 2 Introducing the Web Configurator LLeeeeeLeeeeeeL Lees e ceeeeeeeeeeeee nennen nennen nnn 31 2 1 eb C onigarater Vorio MI girare te
58. P AES WPA amp WPA2 or WPA PSK amp WPA2 PSK or Disable no security MAC Filter This field shows whether MAC filter is enabled or not With MAC filtering you can allow or deny access to the device based on the MAC addresses of the wireless stations View Statistics Click View Statistics to see performance statistics such as number of packets sent and number of packets received List View Association Click View Association List to show the wireless stations that are currently associated to the device 4 1 3 Navigation Panel After you enter the password use the links on the navigation panel to go to the various Screens The following table describes the sub menus Table 5 Screens Summary LINK TAB FUNCTION Status This screen shows the ZyXEL Device s general device system and interface status information Use this screen to access the wizard and summary statistics tables System Use this screen to configure the device name and IP address assignment settings Wireless Wireless Use this screen to configure the wireless LAN Settings Security Use this screen to configure the wireless LAN s security settings MAC Filter Use the MAC filter screen to configure the ZyXEL Device to block or allow only certain devices to associate with the ZyXEL Device WPS settings This shows the status of Wi Fi Protected Setup WPS on your device ZyXEL NWA570N User s Guide
59. RADIUS server use WPA2 for stronger data encryption If you don t have an external RADIUS server you should use WPA2 PSK WPA2 Pre Shared Key that only requires a single identical password entered into each access point wireless gateway and wireless client As long as the passwords match a wireless client will be granted access to a WLAN If the AP or the wireless clients do not support WPA2 just use WPA or WPA PSK depending on whether you have an external RADIUS server or not Select WEP only when the AP and or wireless clients do not support WPA or WPA2 WEP is less secure than WPA or WPA2 ZyXEL NWA570N User s Guide pas Appendix C Wireless LANs Encryption Both WPA and WPA2 improve data encryption by using Temporal Key Integrity Protocol TKIP Message Integrity Check MIC and IEEE 802 1x WPA and WPA2 use Advanced Encryption Standard AES in the Counter mode with Cipher block chaining Message authentication code Protocol CCMP to offer stronger encryption than TKIP TKIP uses 128 bit keys that are dynamically generated and distributed by the authentication server AES Advanced Encryption Standard is a block cipher that uses a 256 bit mathematical algorithm called Rijndael They both include a per packet key mixing function a Message Integrity Check MIC named Michael an extended initialization vector IV with sequencing rules and a re keying mechanism WPA and WPA2 regularly change and rotate the encryptio
60. RN BER AUEUA 88 Figure 52 Walhmounting cnpe A S 0 0 0 0 X 99 Figure 53 Windows 95 98 Me Network Configuration ssssssseeee emen 104 Figure 54 Windows 95 85 Me TCP IP Properties IP Address usce ret trant iaia 105 Figure 55 Windows 95 98 Me TCP IP Properties DNS Configuration seeeeenes 106 Figure 90 Windows AP Start MIE souci nte anb ea spleen pet eek o titu e bnt itk RA Pd It kc ni 107 Figure 57 Windows XP Control Panel 121 tti icto nit docebat ei eret Fette Erb che e ved dd pe bet di E Ddda 107 Figure 58 Windows XP Control Panel Network Connections Properties esssssesss 108 Figure 59 Windows XP Local Area Connection Properties eese nenne etna tn nena nn 108 Figure 60 Windows XP Internet Protocol TCP IP Properties eeeeeeeeeesceeeeiee eeiam nn 109 Figure 61 Windows XP Advanced TCP IP Properties eeeieeeeeeuueeeeseeeeee enn th anna nnn tta nasa nita aae 110 Figure 62 Windows XP Internet Protocol TCP IP Properties eese nennen nnn nnns 111 Figure 63 Macintosh OS S9 Apple NI us oor v a Ea prend es i ese A Ese Eo i a es aede ER 112 Figure 64 Macintosh OS 8 9 TOPAP auia i Enn ERE ER BEP e Pt nta ok ainda opu e Bad CR ATE pea 112 Figure 85 Macintosh Os X Apple MORE aiiis cesi eteesoaediecu vado sductaubastntencondivenshauissdevsaniueeadonseaseneuecansenenens 113 Figure Se
61. Spain Support E mail support zyxel com sg Sales E mail sales zyxel com sg Telephone 65 6899 6678 Fax 65 6899 8887 Web http www zyxel com sg Regular Mail ZyXEL Singapore Pte Ltd No 2 International Business Park The Strategy 03 28 Singapore 609930 Support E mail support zyxel es Sales E mail sales zyxel es Telephone 34 902 195 420 Fax 34 913 005 345 Web www zyxel es Regular Mail ZyXEL Communications Arte 21 5 planta 28033 Madrid Spain ZyXEL NWA570N User s Guide Appendix D Customer Support Sweden Support E mail support zyxel se Sales E mail sales zyxel se Telephone 46 3 1 744 7700 Fax 46 31 744 7701 Web www zyxel se Regular Mail ZyXEL Communications A S Sj porten 4 41764 G teborg Sweden Thailand Support E mail support zyxel co th Sales E mail sales zyxel co th Telephone 662 831 5315 Fax 662 831 5395 Web http www zyxel co th Regular Mail ZyXEL Thailand Co Ltd 1 1 Moo 2 Ratchaphruk Road Bangrak Noi Muang Nonthaburi 11000 Thailand Ukraine Support E mail support ua zyxel com Sales E mail sales ua zyxel com Telephone 380 44 247 69 78 Fax 380 44 494 49 32 Web www ua zyxel com Regular Mail ZyXEL Ukraine 13 Pimonenko Str Kiev 04050 Ukraine United Kingdom Support E mail support zyxel co uk Sales E mail sales zyxel co uk Telephone 44 1344 303044 08707 555779 UK only Fax 44 1344 303034 Web www zyxel co uk
62. TS if the possibility of hidden nodes exists on your network and the cost of resending large frames is more than the extra network overhead involved in the RTS Request To Send CTS Clear to Send handshake Ifthe RTS CTS value is greater than the Fragmentation Threshold value see next then the RTS Request To Send CTS Clear to Send handshake will never occur as data frames will be fragmented before they reach RTS CTS size Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy Fragmentation Threshold A Fragmentation Threshold is the maximum data fragment size between 256 and 2432 bytes that can be sent in the wireless network before the AP will fragment the packet into smaller data frames A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference ZyXEL NWA570N User s Guide Appendix C Wireless LANs If the Fragmentation Threshold value is smaller than the RTS CTS value see previously you set then the RTS Request To Send CTS Clear to Send handshake will never occur as data frames will be fragmented before they reach RTS CTS size Preamble Type Preamble is used to signal that data is coming to the receiver Short and Long refer to the length of the synchronization field in a packet Sho
63. The other types of encryption are better than none at all but it is still possible for unauthorized wireless devices to figure out the original information pretty quickly When you select WPA2 or WPA2 PSK in your NWAS570N you can also select an option WPA compatible to support WPA as well In this case if some of the devices support WPA and some support WPA2 you should set up WPA2 PSK or WPA2 depending on the type of wireless network login and select the WPA compatible option in the NWA570N Many types of encryption use a key to protect the information in the wireless network The longer the key the stronger the encryption Every device in the wireless network must have the same key ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens 6 3 Additional Wireless Terms The following table describes wireless network terms and acronyms used in the NWA570N s Web Configurator Table 12 Additional Wireless Terms TERM DESCRIPTION Intra BSS Traffic This describes direct communication not through the NWA570N between two wireless devices within a wireless network You might disable this kind of communication to enhance security within your wireless network RTS CTS Threshold In a wireless network which covers a large area wireless devices are sometimes not aware of each other s presence This may cause them to send information to the AP at the same time and result in information colliding and not getting through
64. a Characteristics Frequency An antenna in the frequency of 2 4GHz IEEE 802 11b or SGHz IEEE 802 11a is needed to communicate efficiently in a wireless LAN Radiation Pattern A radiation pattern is a diagram that allows you to visualize the shape of the antenna s coverage area Antenna Gain Antenna gain measured in dB decibel is the increase in coverage within the RF beam width Higher antenna gain improves the range of the signal for better communications For an indoor site each 1 dB increase in antenna gain results in a range increase of approximately 2 5 For an unobstructed outdoor site each 1dB increase in gain results in a range increase of approximately 5 Actual results may vary depending on the network environment Antenna gain is sometimes specified in dBi which is how much the antenna increases the signal power compared to using an isotropic antenna An isotropic antenna 1s a theoretical perfect antenna that sends out radio signals equally well in all directions dBi represents the true gain that the antenna provides Types of Antennas for WLAN There are two types of antennas used for wireless LAN applications Omni directional antennas send the RF signal out in all directions on a horizontal plane The coverage area is torus shaped like a donut which makes these antennas ideal for a room environment With a wide coverage area it is possible to make circular overlapping coverage areas with multiple acc
65. a filename of your choosing Click Management gt Configuration File Information related to factory defaults backup configuration and restoring configuration appears as shown next Figure 43 Management Configuration File Backup Configuration This page allows you to backup your current configuration to your computer Click the Backup button to start the backup process Backup Restore Configuration To restore your configuration from a previously saved configuration file browse to the location of the configuration file and click the Upload button File Path Browse Upload Back to Factory Defaults The Reset button will clear all user entered configuration and will reset the device settings back to its factory default value After reset to factory default settings please remember the following value to be able to login the device again Password 1234 LAN IP Address 192 168 1 2 Reset 7 4 1 Backup Configuration Backup configuration allows you to back up save the device s current configuration to a file on your computer Once your device is configured and functioning properly it is highly recommended that you back up your configuration file before making configuration changes The backup configuration file will be useful in case you need to return to your previous settings Click Backup to save the device s current configuration to your computer ZyXEL NWA570N User s
66. a specific channel or frequency to send and receive information Every device in the same wireless network must use security compatible with the AP Security stops unauthorized devices from using the wireless network It can also protect the information that is sent in the wireless network 6 2 Wireless Security Overview The following sections introduce different types of wireless security you can set up in the wireless network 6 2 1 SSID Normally the NWA570N acts like a beacon and regularly broadcasts the SSID in the area You can hide the SSID instead in which case the NWA570N does not broadcast the SSID In addition you should change the default SSID to something that is difficult to guess This type of security is fairly weak however because there are ways for unauthorized wireless devices to get the SSID In addition unauthorized wireless devices can still see the information that 1s sent in the wireless network 6 2 2 MAC Address Filter Every device that can use a wireless network has a unique identification number called a MAC address A MAC address is usually written using twelve hexadecimal characters for example 0040C5000002 or 00 A0 C5 00 00 02 To get the MAC address for each device in the wireless network see the device s User s Guide or other documentation You can use the MAC address filter to tell the NWA570N which devices are allowed or not allowed to use the wireless network If a device is allowed to
67. ands of packets that the device sends ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 20 Wireless Security WPA 2 continued LABEL DESCRIPTION Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh 6 5 5 Wireless Security WPA 2 PSK Select WPA PSK WPA2 PSK or WPA PSK amp WPA2 PSK in the Encryption Method drop down list box to display the screen displays as next Figure 39 Wireless Security WPA 2 PSK Security Settings Pre Shared Key Encryption Method WPA PSK Y RARRRARE 8 63 ASCII charactq Apply Reset The following table describes the labels in this screen Table 21 Wireless Security WPA PSK LABEL DESCRIPTION Encryption Select WPA PSK WPA2 PSK or WPA PSK amp WPA2 PSK if you want to Method configure a pre shared key Choose this option only if your wireless clients support it Pre Shared Key The encryption mechanisms used for WPA and WPA PSK are the same The only difference between the two is that WPA PSK uses a simple common password instead of user specific credentials Type a pre shared key from 8 to 63 ASCII characters including spaces and symbols This field is case sensitive Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh 6 6 MAC Filter The MAC fi
68. atement The device complies with Part 15 of FCC rules Operation is subject to the following two conditions This device may not cause harmful interference This device must accept any interference received including interference that may cause undesired operations This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This device generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation ZyXEL NWA570N User s Guide Appendix E Legal Information If this device does cause harmful interference to radio television reception which can be determined by turning the device off and on the user is encouraged to try to correct the interference by one or more of the following measures 1 Reorient or relocate the receiving antenna 2 Increase the separation between the equipment and the receiver 3 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected 4 Consult the dealer or an experienced radio TV technician for help fa FCC Radiation Exposure Statement This transmitter must
69. ater Note If you are configuring the device from a computer connected to the wireless LAN and you change the device to use bridge mode you will lose your wireless connection when you click Apply to save your settings You must then connect to the device through the wired network Channel The range of radio frequencies used by IEEE 802 11b g wireless devices is called a channel Select a wireless channel if interference from other nearby devices is a problem The NWA570N and wireless devices in your network must use the same channel Wireless Select 802 11b g to allow IEEE 802 11b and IEEE 802 11g compliant WLAN Mode devices to associate with the device Select 802 11n g to allow IEEE 802 11n and IEEE 802 11g compliant WLAN devices to associate with the device ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 15 Wireless Settings Bridge continued LABEL DESCRIPTION HT protect Select HT protect if you have devices on your wireless network that support IEEE 802 1b g standards but not the IEEE 802 1n draft 2 0 standard If all devices on your wireless network support IEEE 802 1n draft 2 0 deselect HT protect for higher data transmission rates WDS Settings Local MAC This is the MAC address of the device Address Remote MAC Type the MAC address of the peer device s the other access point s in your Address 1 4 network in a valid MAC address format tha
70. avior of the LED See Section 1 5 on page 28 Check the hardware connections See the Quick Start Guide Inspect your cables for damage Contact the vendor to replace any damaged cables Disconnect and re connect the power adaptor to the NWA570N If the problem continues contact the vendor ak WN ZyXEL NWA570N User s Guide Chapter 8 Troubleshooting 8 2 NWAB570N Access and Login e forgot the IP address for the NWA570N 1 The default IP address is 192 168 1 2 2 Ifthis does not work you have to reset the device to its factory defaults See Section 1 8 on page 30 e forgot the password 1 The default password is 1234 2 Ifthis does not work you have to reset the device to its factory defaults See Section 1 8 on page 30 e cannot see or access the Login screen in the web configurator 1 Make sure you are using the correct IP address The default IP address is 192 168 1 2 e f you changed the IP address Section 5 2 on page 52 use the new IP address f you changed the IP address and have forgotten it see the troubleshooting suggestions for I forgot the IP address for the NWA570N 2 Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide 3 Make sure your Internet browser does not block pop up windows and has JavaScripts and Java enabled See Appendix B on page 119 4 Make sure your computer is in the same subnet as the NWAS70N
71. bers between wireless devices Both methods use the WPA 2 security standard which uses a pre shared key to encrypt network traffic Click Network gt WPS The following screen displays Use this screen to configure WPS on your NWA570N Table 23 WPS Settings Current WPS Status Refresh Status Configured SSID ZyXEL WPS Encryption 4ES TKIP Pre Shared Key 922DEEES57EA40F29FA9841AD65B50C26AE04E77F216BAB7E807848A5565AB656 WPS Settings IV wi Fi Protected Setup WPS Enable WPS Configuration Mode amp Client s PIN C AP s PIN C Push Button Pre Shared Key PIN 84661302 M Auto Tip Enter your wireless client s PIN code and hit Apply button or use the AP PIN in your wireless client s WPS utility Reset The following table describes the labels in the screen Table 24 WPS Settings LABEL DESCRIPTION Current WPS Status Refresh Click this button to have the device renew the information on this screen WPS Settings Wi Fi Protected Select this to enable WPS on your NWA570N Setup WPS Enable WPS You can set up a WPS connection with another WPS enabled device in three Configuration ways Mode Select Client s PIN to set up WPS using the PIN generated by the WPS menu on the client device Select AP s PIN to set up WPS using the PIN generated by the WPS menu on the AP Select Push Button to set up WPS using either a physical button on the device s casing or a menu button sim
72. ble Output Power Management 4 levels Wireless Functionality Allows IEEE 802 11n draft 2 0 and either IEEE 802 11b or IEEE 802 11g wireless clients to connect to the NWA570N wirelessly Enable wireless security WEP WPA 2 WPA 2 PSK and or MAC filtering to protect your wireless network Note The NWA570N may be prone to RF Radio Frequency interference from other 2 4 GHz devices such as microwave ovens wireless phones Bluetooth enabled devices and other wireless LANs Operating Modes Access Point Client Bridge up to four bridge links supported Access Point and Repeater Security WPA and IEEE 802 1x security EAP TLS EAP TTLS LEAP EAP PEAP and Win XP PEAP included 64 128 152 bits WEP WPA WPA2 support based on 802 11i standard Dynamic WEP key exchange MAC address filtering through WLAN supports up to 32 MAC address entries AES support ZyXEL NWA570N User s Guide Chapter 9 Product Specifications and Wall Mounting Instructions Table 30 Firmware Features FEATURE DESCRIPTION Roaming If you have two or more NWA570NS or other wireless access points on your wireless network you can enable this option so that wireless devices can change locations without having to log in again This is useful for devices such as notebooks that move around a lot WDS Functionality A Distribution System DS is a wired connection between two or more APs while a Wireless Distribu
73. ble mode the wireless adapters support and to provide more reliable communications in busy wireless networks Select Dynamic to have the device automatically use short preamble when all wireless clients support it otherwise the device uses long preamble Note The device and the wireless stations MUST use the same preamble mode in order to communicate Channel Mode Select whether the NWA570N uses a wireless channel bandwidth of 20 or 40 MHz A standard 20MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300Mbps However not all devices support 40MHz channels Select 20 49 MHz to allow the NWA570N to adjust the channel bandwidth depending on network conditions Extension channel protection mode If you have only IEEE wireless 802 1n draft 2 0 compatible devices on your network select None If you have devices that are not compatible with IEEE wireless 802 1n draft 2 0 and you have selected a Channel Mode of 40 Mhz select CTS to self CTS to self and RTS CTS are both kinds of protection mechanisms similar to HT protect Both decrease data transfer speeds but CTS to self is more efficient RTS CTS Threshold RTS CTS is designed to prevent collisions due to hidden nodes You should only configure RTS CTS if the possibility of hidden nodes exists on your network and the cost of resending large frames is more than the extra network overhead in
74. connect the power adaptor to the NWA570N If the problem continues contact your ISP e The Internet connection is slow or intermittent 1 3 4 There might be a lot of traffic on the network Look at the LEDs and check Section 1 5 on page 28 If the NWAS70N is sending or receiving a lot of information try closing some programs that use the Internet especially peer to peer applications Check the signal strength If the signal strength is low try moving the NWA570N closer to the AP if possible and look around to see if there are any devices that might be interfering with the wireless network for example microwaves other wireless networks and so on Disconnect and re connect the power adaptor to the NWAS70N If the problem continues contact the network administrator or vendor ZyXEL NWA570N User s Guide Product Specifications and Wall Mounting Instructions The following tables summarize the NWA570N s hardware and firmware features Hardware Specifications Table 29 Hardware Specifications Dimensions 190 mm Wide x 128 mm Deep x 33 mm High Weight 203g Ethernet Port Four auto negotiating auto MDI MDI X 10 100 Mbps RJ 45 Ethernet ports Cabling Type 4 X LAN UTP Category 5 or better RESET button The reset button is built into the rear panel Use this button to restart the device or restore the factory default password WPS button The WPS WI Fi Protected S
75. d If this feature is enabled it is not necessary to configure a default encryption key in the Wireless screen You may still configure and store keys here but they will not be used while Dynamic WEP is enabled EAP MD5 cannot be used with Dynamic WEP Key Exchange For added security certificate based authentications EAP TLS EAP TTLS and PEAP use dynamic keys for data encryption They are often deployed in corporate environments but for public deployment a simple user name and password pair is more practical The following table is a comparison of the features of authentication types Table 35 Comparison of EAP Authentication Types EAP MD5 EAP TLS EAP TTLS PEAP LEAP Mutual Authentication No Yes Yes Yes Yes Certificate Client No Yes Optional Optional No Certificate Server No Yes Yes Yes No Dynamic Key Exchange No Yes Yes Yes Yes Credential Integrity None Strong Strong Strong Moderate Deployment Difficulty Easy Hard Moderate Moderate Moderate Client Identity Protection No No Yes Yes No WPA and WPA2 Wi Fi Protected Access WPA is a subset of the IEEE 802 111 standard WPA2 IEEE 802 111 is a wireless security standard that defines stronger encryption authentication and key management than WPA Key differences between WPA or WPA2 and WEP are improved data encryption and user authentication If both an AP and the wireless clients support WPA2 and you have an external
76. e number of milliseconds that should pass between the sending out of Interval beacons Intra BSS Intra BSS traffic is traffic between wireless stations in the same BSS Traffic Enable Intra BSS traffic to allow wireless stations connected to the device to communicate with each other Disable Intra BSS traffic to only allow wireless stations to communicate with the wired network not with each other DTIM Interval Set the interval for wireless clients in sleep mode to wake up and check for multicast or broadcast traffic The AP includes a Delivery Traffic Indication Message DTIM in the beacon to notify wireless clients in sleep mode that there is a multicast or broadcast packet awaiting delivery The interval is a multiple of the beacon interval For example if the beacon interval is 100 milliseconds and the DTIM interval is 2 the AP includes a DTIM with every second beacon or every 200 milliseconds Number of Use this field to set a maximum number of wireless stations that may connect to pi te the device ations Allowed to Enter the number from 1 to 32 of wireless stations allowed Associate ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 16 Wireless Settings AP Repeater continued LABEL DESCRIPTION Radio Enable Turn on the wireless adapter to allow wireless communications between the device and other IEEE 802 11b and IEEE 802 11g compliant wireless devices Turn off the wireless adapter to s
77. e process is complete please wait for 11 seconds before attempting to access AP again For more detailed background information see the rest of this User s Guide ZyXEL NWA570N User s Guide Chapter 3 Wizard ZyXEL NWA570N User s Guide PART II Advanced Status Screen 45 System Screen 51 Wireless Screens 55 Management Screens 83 Status Screen This chapter describes the Status screen 4 1 Status Screen The Status screen display a snapshot of your device s settings You can also view network statistics and a list of wireless stations currently associated with your device Note that these labels are READ ONLY and are meant to be used for diagnostic purposes You can reach this by clicking on Advanced after logging in or by clicking on the Status tab A from any screen Figure 21 Status Screen ZyXEL gt Status Refresh Interval None x Device Name ZyXEL840d IP Address 192 168 1 2 Operation Mode AP Subnet Mask 255 255 255 0 MAC Address 00 19 cb 04 84 0d Gateway IP Address 0 0 0 0 Firmware Version V1 00 AAP 0 B7 S Status RetreshNow Wireless Settings Summary e ZyXEL NWAS7ON view Statistics Channel 6 2 437GH2 View Association List Gp Encryption Method TKIP MAC Filter Disable status Ready 0000
78. e with any plain text editor f you have a dynamic IP address enter dhcp in the BOOTPROTO field The following figure shows an example ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Figure 71 Red Hat 9 0 Dynamic IP Address Setting in ifconfig ethO EVICE ethO0 BOOT yes OOTPROTO zdhcp SERCTL no ERDNS yes TYPE Ethernet ucGUOog Ifyou have a static IP address enter static in the BOOTPROTO field Type IPADDR followed by the IP address in dotted decimal notation and type NETMASK followed by the subnet mask The following example shows an example where the static IP address is 192 168 1 10 and the subnet mask 1s 255 255 255 0 Figure 72 Red Hat 9 0 Static IP Address Setting in ifconfig ethO DEVICE ethO0 ONBOOT yes BOOTPROTO static IPADDR 192 168 1 10 NETMASK 255 255 255 0 USERCTL no PEERDNS yes TYPE Ethernet 2 Ifyou know your DNS server IP address es enter the DNS server information in the resolv conf file in the etc directory The following figure shows an example where two DNS server IP addresses are specified Figure 73 Red Hat 9 0 DNS Settings in resolv conf nameserver 172 23 5 1 nameserver 172 23 5 2 3 After you edit and save the configuration files you must restart the network card Enter network restart inthe etc rc d init d directory The following figure
79. ee CA certifications 145 notices 146 viewing 146 channel 127 interference 127 channel ID 59 66 70 command interface 27 Index configuration 47 86 configuration file 85 93 connections 95 contact information 139 copyright 145 CTS Clear to Send 128 customer support 139 D default settings 85 87 92 93 depth 95 DHCP 92 diagnostics 48 dimensions 95 disclaimer 145 disconnect 86 88 dynamic WEP 96 dynamic WEP key exchange 133 E EAP Authentication 131 encryption 96 134 ESS 126 ESSID 93 ethernet ports 95 European plug standards 98 Extended Service Set See ESS 126 Extensible Authentication Protocol EAP 96 F factory defaults 85 87 92 FCC interference statement 145 file transfer protocol 93 firmware 87 88 93 fragmentation threshold 128 frequency 59 ZyXEL NWA570N User s Guide Index FTP 27 93 H hardware 95 height 95 hidden node 127 host ID 51 IANA 51 IBSS 125 IEEE 802 11g 129 IEEE 802 1x 96 Independent Basic Service Set See IBSS 125 initialization vector IV 134 interference 94 Internet access 94 Internet browser settings 92 IP address 51 86 92 L language 83 LEDs 28 91 94 95 login 92 logs 83 84 MAC address 63 96 97 maintenance 83 management 83 managing the device good habits 27 using FTP See FTP using Telnet See command interface using the command interface See command interface using the web configurator See web co
80. eep mode to wake up and check for multicast or broadcast traffic The AP includes a Delivery Traffic Indication Message DTIM in the beacon to notify wireless clients in sleep mode that there is a multicast or broadcast packet awaiting delivery The DTIM interval is a multiple of the beacon interval For example if the beacon interval is 100 milliseconds and the DTIM interval is 2 the AP includes a DTIM with every second beacon or every 200 milliseconds Number of Wireless Stations Allowed to Associate Use this field to set a maximum number of wireless stations that may connect to the device Enter the number from 1 to 32 of wireless stations allowed Radio Enable Turn on the wireless adapter to allow wireless communications between the device and other IEEE 802 11b g and IEEE 802 11n draft 2 0 compliant wireless devices Turn off the wireless adapter to stop wireless communications between the device and other IEEE 802 11b g and IEEE 802 11n draft 2 0 compliant wireless devices A MPDU aggregation Select Yes to enable the grouping of several A MSDU Aggregate MAC Service Data Units into one large A MPDU Aggregate MAC Protocol Data Unit When combined with A MSDU aggregation this function allows faster data transfer rates A MSDU aggregation Select Yes to enable the grouping of small groups of data MAC Service Data Units or MSDU into one large unit of MSDUs called an Aggregate MSDU A MSDU RI
81. er the WEP key in the field provided Key 4 Select a WEP key to use for data encryption The WEP keys are used to encrypt data Both the device and the wireless stations must use the same WEP key for data transmission If you chose 64 bit WEP then enter any 5 ASCII characters or 10 hexadecimal characters 0 9 A F If you chose 128 bit WEP then enter 13 ASCII characters or 26 hexadecimal characters 0 9 A F If you chose 152 bit WEP then enter 16 ASCII characters or 32 hexadecimal characters 0 9 A F Authentication Enter the IP address of the external authentication server in dotted decimal Server IP Address notation Port Number Enter the port number of the external authentication server The default port number is 1812 You need not change this value unless your network administrator instructs you to do so with additional information Shared Secret Enter a password up to 63 printable characters as the key to be shared between the external authentication server and the device The key must be the same on the external authentication server and your device The key is not sent over the network Reauthentication Specify how often wireless stations have to resend user names and passwords in Time order to stay connected Enter a time interval between 100 and 3600 seconds If wireless station authentication is done using a RADIUS server the reauthentication timer on the RADIUS server has priority
82. erference See Appendix C on page 125 for more information Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh 6 4 3 Bridge Mode The device can act as a wireless network bridge and establish wireless links with other APs You need to know the MAC address of the peer device which also must be in bridge mode When two devices connect in Bridge mode they form a WDS Wireless Distribution System allowing the computers in one LAN to connect to the computers in another LAN See the following example BES WPA WPA2 and IEEE 802 1x wireless security are not available when you use Wireless Client Bridge or AP Repeater mode BS You can use only WEP or WPA2 PSK keys to encrypt traffic between APs Figure 30 Bridging Example ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Be careful to avoid bridge loops when you enable bridging in the NWA570N Bridge loops cause broadcast traffic to circle the network endlessly resulting in possible throughput degradation and disruption of communications The following examples show two network topologies that can lead to this problem If two or more NWA570Ns in bridge mode are connected to the same hub as shown next Figure 31 Bridge Loop Two Bridges Connected to Hub Pp MAP Bridge AP Bridge If your NWAS570N in bridge mode is connected to a wired LAN while communicating wit
83. ers of unicast packets received and transmitted by the Packets wireless adapter ZyXEL NWA570N User s Guide Chapter 4 Status Screen Table 6 Status View Statistics LABEL DESCRIPTION Broadcast This row displays the numbers of broadcast packets received and transmitted by Packets the wireless adapter Multicast This row displays the numbers of multicast packets received and transmitted by Packets the wireless adapter Total Packets This row displays the numbers of all types of packets received and transmitted by the wireless adapter Total Bytes This row displays the numbers of bytes received and transmitted by the wireless adapter System Up Time This is the total time the device has been on Poll Interval s Enter the time interval for refreshing statistics Set Interval Click this button to apply the new poll interval you entered above Stop Click this button to stop refreshing statistics 4 2 2 Association List Click Status and then the View Association List button to display the Association List screen When the device is not in wireless client mode this screen displays which wireless stations are currently associated to the device in the Association List screen Figure 24 Status View Association List Association List MacAddress ee Status Rescan The following table describes the labels in this screen Table 7 Status View Association Lis
84. ess point and the RADIUS server for user accounting Accounting Request Sent by the access point requesting accounting Accounting Response Sent by the RADIUS server to indicate that it has started or stopped accounting In order to ensure network security the access point and the RADIUS server use a shared secret key which is a password they both know The key is not sent over the network In addition to the shared key password information exchanged is also encrypted to protect the network from unauthorized access Types of EAP Authentication This section discusses some popular authentication types EAP MD5 EAP TLS EAP TTLS PEAP and LEAP Your wireless LAN device may not support all authentication types EAP Extensible Authentication Protocol is an authentication protocol that runs on top of the IEEE 802 1x transport mechanism in order to support multiple types of user authentication By using EAP to interact with an EAP compatible RADIUS server an access point helps a wireless station and a RADIUS server perform authentication The type of authentication you use depends on the RADIUS server and an intermediary AP s that supports IEEE 802 1x ZyXEL NWA570N User s Guide 131 Appendix C Wireless LANs For EAP TLS authentication type you must first have a wired connection to the network and obtain the certificate s from a certificate authority CA A certificate also called digital IDs can be used to authentica
85. ess points Directional antennas concentrate the RF signal in a beam like a flashlight does with the light from its bulb The angle of the beam determines the width of the coverage pattern Angles typically range from 20 degrees very directional to 120 degrees less directional Directional antennas are ideal for hallways and outdoor point to point applications Positioning Antennas In general antennas should be mounted as high as practically possible and free of obstructions In point to point application position both antennas at the same height and in a direct line of sight to each other to attain the best performance ZyXEL NWA570N User s Guide Appendix C Wireless LANs For omni directional antennas mounted on a table desk and so on point the antenna up For omni directional antennas mounted on a wall or ceiling point the antenna down For a single AP application place omni directional antennas as close to the center of the coverage area as possible For directional antennas point the antenna in the direction of the desired coverage area ZyXEL NWA570N User s Guide Appendix D Customer Support Customer Support Please have the following information ready when you contact customer support Required Information Product model and serial number Warranty Information Date that you received your device Brief description of the problem and the steps you took to solve it is the prefi
86. ettings screen The screen varies depending upon the operation mode you select 6 4 1 Access Point Mode Select Access Point in the Operation Mode field to display the screen as shown next This mode has the device act as an access point AP through which wireless stations can communicate and or access a wired network ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Figure 28 Wireless Settings AP Wireless Settings Basic Settings Operation Mode SSID Channel Wireless Mode Advanced Settings Beacon Interval Intra BSS Traffic DTIM Interval Radio Enable A MPDU aggregation 4 MSDU aggregation RIFS Short GI Data Rate Management Channel Mode Preamble Type Channel BandWidth RTS CTS Threshold Fragmentation Number of Wireless Stations Allowed to Associate Output Power Management Extension channel protection mode AP ZyXEL WPS szasrenz s s02 10 max 32 printable characters Hide SSID HT protect 100 25 1000 Enable C Disable 1 14255 32 1432 Yes C No Yes C No C Yes Yes Yes Auto 55535 0465535 No C No C No B5534 Reset 256 65534 The following table describes the labels in this screen Table 13 Wireless Settings AP LABEL DESCRIPTION Basic Settings Operation Mode Select the operating mode from the drop down list The options are Access Point Wireless Client Bridge and AP Repeater
87. etup button is built into the rear panel Use this button to set up a WPS connection with another WPS enabled device Antenna 3 external detachable 2 dBi dipole antenna with R SMA connectors LEDs Status LEDs Power Ethernet WLAN WPS Power Requirements 12 V DC 1 A Max Operation Environment Temperature 0 C 50 C Humidity 20 95 RH Storage Environment Temperature 20 70 C Humidity 20 95 RH Distance between the centers of the holes on the device s back 74 mm ZyXEL NWA570N User s Guide Chapter 9 Product Specifications and Wall Mounting Instructions Table 29 Hardware Specifications continued Recommended type of M3 Tap Screw screws for wall mounting Certifications Safety ANSI UL 1950 3rd CSA C22 2 No 950 3rd EN60950 1992 A1 A2 A3 A4 A11 IEC 60950 3rd EMI FCC Part 15 Class B EN55022 Class B EN61000 3 2 EN61000 3 3 EMS EN61000 4 2 3 4 5 6 8 11 Firmware Specifications Table 30 Firmware Features FEATURE DESCRIPTION Default IP Address 192 168 1 2 Default Subnet Mask 255 255 255 0 24 bits Default Password 1234 Device Management Use the web configurator to easily configure the rich range of features on the NWA570N FTP Web for firmware downloading and configuration backup and restore Limitation of client connections is configurable default unlimited Intra BSS Block enable disa
88. eu an a 123 ZyXEL NWA570N User s Guide List of Figures Figure og SSC UTIL SED c dai asusiinosie pecca dtc aa dst addo ru dta nu abge dar t db 123 FI3uID O0 JO POEM ET tn bt scm dead cn T OEA eut tsa cates ER ER ERE HOUR Ead EA RED M ATT 124 Figure 84 Peer to Peer Communication in an Ad hoc Network sesseeene 125 Figure 35 Basic SEVIoe ool nnan cde dne apa ex E augue ada rta Hip oI a acd ag Rd Ud 126 Figuwe oG gp hope WLAN eec 127 Figures UBIO ge 128 Figure 88 WPA 2 with RADIUS Application Example essem mee 135 Figure 32 WPA 2 FPSK o upcqiie i M m 136 ZyXEL NWA570N User s Guide List of Figures ZyXEL NWA570N User s Guide List of Tables List of Tables Table 1 Froni Panel LED Deserta iiie asp ede Fa sb Ea let b Hbbay e obe Rl rod cub roe e Eta 28 DL racing qc TE 30 Table S Global loon KEY m 46 TOOG o 46 PoETo Tea a TD ITI E DEDIT 47 D s Dxccurt Ecc m 48 Table 7 Status View Association List eT 49 Table 8 Status View Association List Wireless Client Mode eeeeeesseeeeeeeeenee nennen nnne nnn 50 Table Private IF Address Rangos uus trit pe IEEE LH LY SCIRE EX YS pL IAN ERR ERA TR SV PR Ada UR E SR SAP pA 51 LIS TU I SUNN D 52 Table 11 Types of Encryption for Each Type of Au
89. f x New Edit Copy Delete Activate Deactivate Devices Hardware DNS Hosts atc You may configure network devices associated with 2 E physical hardware here Multiple logical devices can be T associated with a single piece of hardware Profile Status Device Nickname Type X Inactive ethO ethO Ethemet 2 Double click on the profile of the network card you wish to configure The Ethernet Device General screen displays as shown Figure 68 Red Hat 9 0 KDE Ethernet Device General i w Ethernet Device General Route Hardware Device Nickname ethO lt Activate device when computer starts Allow all users to enable and disable the device Automatically obtain IP address settings with dhcp DHCP Settings Hostname optional Automatically obtain DNS information from provider Statically set IP addresses Manual IP Address Settings Address Subnet Mask Default Gateway Address 3 Cancel ZyXEL NWA570N User s Guide 115 Appendix A Setting up Your Computer s IP Address f you have a dynamic IP address click Automatically obtain IP address settings with and select dhep from the drop down list If you have a static IP address click Statically set IP Addresses and fill in the Address Subnet mask and Default Gateway Address fields Click OK to save
90. g to the encryption method you select LES The encryption methods available depend on the Operation Mode you select in the Wireless gt Wireless screen 6 5 1 Wireless Security Disable If you do not enable any wireless security on your device your network is accessible to any wireless networking device that is within range Figure 35 Wireless Security Disable Security Settings Encryption Method Disable Y Apply Reset ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens The following table describes the labels in this screen Table 17 Wireless Security Disable LABEL DESCRIPTION Encryption Select Disable to have no wireless LAN security configured Method Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh 6 5 2 Wireless Security WEP WEP provides a mechanism for encrypting data using encryption keys Both the AP and the wireless stations must use the same WEP key to encrypt and decrypt data You can configure up to four 64 bit 128 bit or 152 bit WEP keys but only one key can be used at any one time Figure 36 Wireless Security WEP Security Settings Encryption Method WEP hd Authentication Type Open M Data Encryption 64 bit WEP Enter a passphrase to automatically generate a WEP key or leave it blank if you want to manually enter the WEP H Passphrase Generate mas
91. h another wireless bridge that is also connected to the same wired LAN as shown next Figure 32 Bridge Loop Bridge Connected to Wired LAN A ae To prevent bridge loops ensure that your NWA570N is not set to bridge mode while connected to both wired and wireless segments of the same LAN Select Bridge as the Operation Mode to have the device act as a wireless bridge only ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Figure 33 Wireless Settings Bridge Wireless Settings Basic Settings Bridge hd B5 2437GHz 80211n g Operation Mode Channel Wireless Mode HT protect WDS Settings Local MAC Address Remote MAC Address 1 Remote MAC Address 2 Remote MAC Address 3 Remote MAC Address 4 Advanced Settings RTS CTS Threshold Radio Enable ves C No 4 MPDU aggregation Yes C No 4 MSDU aggregation C Yes No RIFS Yes C No Short GI Yes C No Output Power Management ra Data Rate Management Auto T Channel Mode 20 40MHz gt Extension channel protection mode RTs cTs gt Preamble Type Dynamic Channel Bandwidth ru J 65535 0 65535 55534 Reset Fragmentation 256 65534 The following table describes the labels in this screen Table 15 Wireless Settings Bridge LABEL DESCRIPTION Basic Settings Operation Select the operating mode from the drop down list The options are Access Point Mode Wireless Client Bridge and AP Repe
92. he device for details Figure 41 Management Password Password Password Setup Current Password New Password max 18 characters Retype to Confirm Apply Reset The following table describes the labels in this screen Table 25 Management Password LABEL DESCRIPTION Current Password Type in your existing system password 1234 is the default password New Password Type your new system password up to 30 printable characters Spaces are not allowed Note that as you type a password the screen displays an asterisk for each character you type Retype to Confirm Retype your new system password for confirmation ZyXEL NWA570N User s Guide Chapter 7 Management Screens Table 25 Management Password continued LABEL DESCRIPTION Apply Click Apply to save your changes back to the device Cancel Click Cancel to reload the previous configuration for this screen 7 3 Logs Click Management gt Logs to open the Logs screen You can view logs and alert messages in this screen Once the log table is full old logs are deleted as new logs are created Click a column heading to sort the entries A triangle indicates the direction of the sort order Figure 42 Management Logs Log List oon nur WN e ES co a d 00 00 00 oo 00 00 oo 00 00 60 B3 45 67 89 WLAN service started 50 B3 45 67 89 WLAN service stopped
93. her the NWA570N uses a wireless channel bandwidth of 20 or 40 MHz A standard 20MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300Mbps However not all devices support 40MHz channels Select 20 49 MHz to allow the NWA570N to adjust the channel bandwidth depending on network conditions Extension If you have only IEEE wireless 802 1n draft 2 0 compatible devices on your channel network select None Pn If you have devices that are not compatible with IEEE wireless 802 1n draft 2 0 and you have selected a Channel Mode of 40 Mhz select CTS to self CTS to self and RTS CTS are both kinds of protection mechanisms similar to HT protect Both decrease data transfer speeds but CTS to self is more efficient Preamble Preamble is used to signal that data is coming to the receiver Type Short preamble increases performance as less time sending preamble means more time for sending data All IEEE 802 11b compliant wireless adapters support long preamble but not all support short preamble Select Long preamble if you are unsure what preamble mode the wireless adapters support and to provide more reliable communications in busy wireless networks Select Dynamic to have the device automatically use short preamble when all wireless clients support it otherwise the device uses long preamble Note The device and the wireless stations MUST use the same preamble
94. i EE ELMO regu R E Det eT db Poire RES Pu I MR tu E 31 ZyXEL NWA570N User s Guide LE Table of Contents 2 2 ccc ebr dr cuoi rut 31 Chapter 3 MZ 2 Arr ETT 35 CARE D do Sio TE a 35 MIDI He up T 35 3 1 2 Wizard Wireless el s M 36 CN NER I IsMEeI elg s ucc 37 3 Wizard Lon Your SEBIOS usibaseeditdcendyp ecd ec dol OR RP GR RR D ORNA 40 S LO AWOL TUN WM REMI de E TE LT 41 xli 43 Chapter 4 DUIS SETS ia incivrasiieacsdanccdters pesi E LEQ pO a aee E RIA Hi ic v A Evae HR ERA T 45 A Toe Seo INT S RUE 45 WE ToS SEROR IA P X 46 2 129885 Sereen Deals wcina a EVE RR Dad eru EbERL aaa e aTa PRAE EE Ted 46 4 1 3 Navigalon Panel e 47 LE uU cL pen Terr trey Tere 48 AA Re ANV SUNG Were Hr a ee 48 2 2 4 ASSODIBUDII EISE qouasciaceat asis veto EH eed slot a Erba ead a pU An edad FERA O E x T 49 Chapter 5 ir igi M T 51 ad MACE EPREBIEIBIS ariana bMS ELE ERI asau E GEt PASE Rud EEA aE Ae DDR EE tuba pad 51 5 1 1 IP Address ASSIGN Me 51 5 1 2 IP Address and Subnet Mask anisi acs arre vato br t n edd todos Ae epi 51 PA EE a S Meer 52 Chapter 6 idlp poll lg 55 0 1 Wireless NetWork SNE E 55 6 2 Wireless Securit
95. iated wireless stations BS See the rest of this User s Guide for configuration details and background information on all features using the web configurator ZyXEL NWA570N User s Guide System Screen This chapter provides information on the System screen 5 1 TCP IP Parameters 5 1 1 IP Address Assignment Every computer on the Internet must have a unique IP address If your networks are isolated from the Internet for instance only between your two branch offices you can assign any IP addresses to the hosts without problems However the Internet Assigned Numbers Authority IANA has reserved the following three blocks of IP addresses specifically for private networks Table 9 Private IP Address Ranges 10 0 0 0 10 255 255 255 172 16 0 0 172 31 255 255 192 168 0 0 192 168 255 255 You can obtain your IP address from the IANA from an ISP or have it assigned by a private network If you belong to a small organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization you should consult your network administrator for the appropriate IP addresses Regardless of your particular situation do not create an arbitrary IP address always follow the guidelines above For more information on address assignment please refer to RFC 1597 Address Allocation for Pr
96. ilar to the Start PBC button on this Screen ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 24 WPS Settings LABEL DESCRIPTION Pre Shared Key The field displays if Push Button or Client s PIN is selected This displays the pre shared key used for encrypting the data on your network If Auto is selected this field is read only If Auto is not selected you can type a pre shared key from 8 to 63 keyboard characters including spaces and symbols This field is case sensitive PIN The PIN field shows when Client s PIN or AP s PIN is selected When Client s PIN is selected enter the PIN generated on the client device in the PIN field When AP s PIN is selected the PIN field is read only Enter this PIN in the appropriate field on your client device Auto Select Auto to have the NWA570N generate a pre shared key Start PBC If you have selected Push Button click this button to start the WPS connection procedure You have two minutes to press the button on the device you wish to connect with This button may be either a physical button on the outside of the device or a menu button similar to the Start PBC button on this screen Reset Click Reset to begin configuring this screen afresh Follow these steps to set up a WPS connection using a PIN 1 Ensure Wi Fi Protected Setup WPS Enable is selected 2 Select Auto to generate a pre shared key or type a pre shared key i
97. ilt in Zero Configuration wireless client However you must run Windows XP to use it WPA 2 with RADIUS Application Example You need the IP address of the RADIUS server its port number default is 1812 and the RADIUS shared secret A WPA 2 application example with an external RADIUS server looks as follows A is the RADIUS server DS is the distribution system 1 The AP passes the wireless client s authentication request to the RADIUS server 2 The RADIUS server then checks the user s identification against its database and grants or denies network access accordingly 3 The RADIUS server distributes a Pairwise Master Key PMK key to the AP that then sets up a key hierarchy and management system using the pair wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients Figure 88 WPA 2 with RADIUS Application Example SES did a NIC NR brem J m x Ne WPA 2 PSK Application Example A WPA 2 PSK application looks as follows 1 First enter identical passwords into the AP and all wireless clients The Pre Shared Key PSK must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters including spaces and symbols 2 The AP checks each wireless client s password and only allows it to join the network if the password matches 3 The AP and wireless clients use the pre shared key to generate a comm
98. ion s is working properly Check that both the NWA570N and wireless station s are using the same ESSID channel and security settings e cannot Telnet to the NWA570N See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator Ignore the suggestions about your browser e cannot use FTP to upload download the configuration file cannot use FTP to upload new firmware See the troubleshooting suggestions for I cannot see or access the Login screen in the web configurator Ignore the suggestions about your browser ZyXEL NWA570N User s Guide Chapter 8 Troubleshooting 8 3 Internet Access e cannot access the Internet Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide and Section 1 5 on page 28 If you are trying to access the Internet wirelessly make sure the wireless settings in the wireless client are the same as the settings in the AP Disconnect all the cables from your device and follow the directions in the Quick Start Guide again If the problem continues contact your ISP e cannot access the Internet anymore had access to the Internet with the NWA570N but my Internet connection is not available anymore O N Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide and Section 1 5 on page 28 Disconnect and re
99. is a router or switch on the Address same network segment as the device The gateway helps forward packets to their destinations Leave this field as 0 0 0 0 if you do not know it Apply Click Apply to save your changes back to the device Reset Click Reset to reload the previous configuration for this screen ZyXEL NWA570N User s Guide Chapter 5 System Screen ZyXEL NWA570N User s Guide Wireless Screens This chapter discusses how to configure the wireless network settings in your NWAS570N See the appendices for more detailed information about wireless networks 6 1 Wireless Network Overview The following figure provides an example of a wireless network Figure 27 Example of a Wireless Network D i 1 H a i N 1 B Pr ann par ae The wireless network is the part in the blue circle In this wireless network devices A and B use the access point AP to interact with the other devices such as the printer or with the Internet Your NWAS570N is the AP Every wireless network must follow these basic guidelines Every device in the same wireless network must use the same SSID The SSID is the name of the wireless network It stands for Service Set IDentity Iftwo wireless networks overlap they should use a different channel ZyXEL NWA570N User s Guide 55 Chapter 6 Wireless Screens Like radio stations or television channels each wireless network uses
100. ivate Internets and RFC 1466 Guidelines for Management of IP Address Space 5 1 2 IP Address and Subnet Mask Similar to the way houses on a street share a common street name computers on a LAN share one common network number ZyXEL NWA570N User s Guide prd Chapter 5 System Screen Where you obtain your network number depends on your particular situation If the ISP or your network administrator assigns you a block of registered IP addresses follow their instructions in selecting the IP addresses and the subnet mask Ifthe ISP did not explicitly give you an IP network number then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established The Internet Assigned Number Authority LANA reserved this block of addresses specifically for private use please do not use any other number unless you are told otherwise Let s say you select 192 168 1 0 as the network number which covers 254 individual addresses from 192 168 1 1 to 192 168 1 254 zero and 255 are reserved In other words the first three numbers specify the network number while the last number identifies an individual computer on that network Once you have decided on the network number pick an IP address that is easy to remember for instance 192 168 1 2 for your device but make sure that no other device on your network is using that IP address The subnet mask specifies the network number porti
101. k disconnect In some operating systems you may see the following icon on your desktop Figure 50 Network Temporarily Disconnected D Local Area Connection Network cable unplugged After two minutes log in again and check your new firmware version in the System Status screen If the upload was not successful the following status message displays at the bottom of the screen Figure 51 Firmware Upload Error i status G ZyXEL NWA570N User s Guide PART III Troubleshooting nd Product Specifications Troubleshooting 91 Product Specifications and Wall Mounting Instructions 95 Troubleshooting This chapter offers some suggestions to solve problems you might encounter The potential problems are divided into the following categories Power Hardware Connections and LEDs NWAST7ON Access and Login Internet Access 8 1 Power Hardware Connections and LEDs e The NWA570N does not turn on None of the LEDs turn on 1 Make sure you are using the power adaptor or cord included with the NWAS70N 2 Make sure the power adaptor or cord is connected to the NWA570N and plugged in to an appropriate power source Make sure the power source is turned on 3 Disconnect and re connect the power adaptor or cord to the NWA570N 4 Ifthe problem continues contact the vendor One of the LEDs does not behave as expected z Make sure you understand the normal beh
102. l to your network to protect wireless communication between wireless clients access points and the wired network ZyXEL NWA570N User s Guide Appendix C Wireless LANs BS Wireless security methods available on the ZyXEL Device are data encryption wireless client authentication restricting access by device MAC address and hiding the ZyXEL Device identity The following figure shows the relative effectiveness of these wireless security methods available on your ZyXEL Device Table 34 Wireless Security Levels SECURITY LEVEL SECURITY TYPE Least Unique SSID Default Secure Unique SSID with Hide SSID Enabled MAC Address Filtering WEP Encryption IEEE802 1x EAP with RADIUS Server Authentication Wi Fi Protected Access WPA Most Secure WPA2 You must enable the same wireless security settings on the ZyXEL Device and on all wireless clients that you want to associate with it IEEE 802 1x In June 2001 the IEEE 802 1x standard was designed to extend the features of IEEE 802 11 to support extended authentication as well as providing additional accounting and control features It is supported by Windows XP and a number of network devices Some advantages of IEEE 802 1x are User based identification that allows for roaming Support for RADIUS Remote Authentication Dial In User Service RFC 2138 2139 for centralized user profile and accounting management on a network RADIUS se
103. lando SUPPE T c 97 Table 32 Power Adaptor Specifications iisssiiskucti tnb becario vH a A E 98 Tabe EBEE TOA be rona A E NA E E 129 Table 34 Wireless Security Levels uuusssrssrrissirrnnsicerrennninnnnninnanana nann NENEN NEENA NESNA TEA ARANNA NENANA tenes 130 Table 35 Comparison of EAP Authentication Types aeesssssseersieerrrrriseerrresrerrerserrineerrrnnedteeanaerinnnanneena 133 Table 36 Wireless Security Relational Matrix eessessseeesssssssssrseesrsrrrssrrrrseearssnesstensdedisaaasstnranaaatsaeeseena 136 ZyXEL NWA570N User s Guide List of Tables ZyXEL NWA570N User s Guide PART Introduction and Wizards Introducing the Zy ice 23 u ra Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device It also introduces the ways you can manage the ZyXEL Device 1 1 Overview The ZyXEL Device is a 4 in 1 Access Point with IEEE 802 11n draft 2 0 wireless technology Access Point AP repeater bridge and wireless client functions allow you to use the ZyXEL Device in various network deployments The ZyXEL Device Access Point AP allows wireless stations to communicate and or access a wired network It can work as a bridge and repeater to extend your wireless network You can also use it as a wireless client to access a wired network through another AP The ZyXEL Device uses IEEE 802 1x WEP data encryption WPA Wi Fi Protected Access WPA2 and MAC
104. le 22 MAC Filter LABEL DESCRIPTION Active Select the check box to enable MAC address filtering and define the filter action for the list of MAC addresses in the MAC address filter table Select Allow the following MAC address to associate to permit access to the device MAC addresses not listed will be denied access to the device Select Deny the following MAC address to associate to block access to the device MAC addresses not listed will be allowed to access the device This is the index number of the MAC address MAC Address Enter the MAC addresses in XX XX XX XX XX XX format of the wireless station that are allowed or denied access to the device in these address fields Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens 6 7 WPS Settings WiFi Protected Setup WPS allows you to quickly set up a secure network with other WPS enabled devices much more easily than manually configuring wireless connections and security through a web configurator Your NWAS70N uses WPS to set up a secure connection with other WPS enabled wireless devices in two ways The first method uses a push button either physically located on the housing of the wireless devices or provided as a feature in the device s software The second method relies on the exchanging of PINs Personal Identification Num
105. lter screen allows you to give exclusive access to up to 32 devices Allow Association or exclude up to 32 devices from accessing the device Deny Association Every Ethernet device has a unique MAC Media Access Control address The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 You need to know the MAC addresses of the devices to configure this Screen The MAC filter works when the device functions as an AP It allows or denies wireless client access The MAC filter does not apply to bridge or repeater functions ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens The following applies if you set the device to client mode and want to connect to an AP that uses a MAC filter After the device turns on in client mode it clones the MAC address of the first packets that it receives from devices connected to the Ethernet port It uses this MAC address on the packets that it sends to an AP All of the packets that the device sends to an AP will appear to be from the first device that connected to the Ethernet port If you turn the device off and back on it again clones the MAC address of the first packets that it receives from devices connected to the Ethernet port You may be able to check the association list on the AP to determine which MAC address the device is currently using To change your device s MAC filter settings click Wireless gt MAC Filter
106. me as the device name you entered in the first wizard screen if you entered one there It is for identification purposes Operation This field shows whether the device is functioning as an access point a wireless Mode client a bridge or an access point and repeater MAC Address This field displays the MAC address of the device The MAC Media Access Control or Ethernet address on a LAN Local Area Network is unique to your computer A network interface card such as an Ethernet adapter has a hardwired address that is assigned at the factory This address follows an industry standard that ensures no other adapter has a similar address ZyXEL NWA570N User s Guide Chapter 4 Status Screen Table 4 Status LABEL DESCRIPTION Firmware This is the firmware version and the date the firmware was created Version IP Settings IP Address This is the Ethernet port IP address Subnet Mask This is the Ethernet port subnet mask Gateway IP This is the IP address of a gateway Leave this field as 0 0 0 0 if you do not know Address it Wireless Settings SSID This is the descriptive name used to identify the device in a wireless network Channel This field displays the radio channel the device is currently using Encryption This field shows the type of data encryption that is enabled on the wireless Method network WEP WEP or 802 1x TKIP WPA or WPA PSK AES WPA2 or WPA2 PSK TKI
107. mode in order to communicate ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 16 Wireless Settings AP Repeater continued LABEL DESCRIPTION RTS CTS RTS CTS is designed to prevent collisions due to hidden nodes You should only Threshold configure RTS CTS if the possibility of hidden nodes exists on your network and the cost of resending large frames is more than the extra network overhead involved in the RTS Request To Send CTS Clear to Send handshake Enter a value between 0 and 65535 Data with a frame size larger than this value will perform the RTS CTS handshake If the RTS CTS value is greater than the Fragmentation value then the RTS CTS handshake will never occur as data frames will be fragmented before they reach RTS CTS size See Appendix C on page 125 for more information Fragmentation Enter a value between 256 and 65534 It is the maximum data fragment size that can be sent A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference See Appendix C on page 125 for more information Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh 6 5 Configuring Wireless Security Click Wireless gt Security to display the Security screen This screen varies accordin
108. n select Enable DNS and type the information in the fields below you may not need to fill them all in ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Figure 55 Windows 95 98 Me TCP IP Properties DNS Configuration TCP IP Properties f 3 x Bindings Advanced Netpios DNS Configuration Gateway WINS Configuration IP Address 4 Click the Gateway tab Ifyou do not know your gateway s IP address remove previously installed gateways If you have a gateway IP address type it in the New gateway field and click Add 5 Click OK to save and close the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Turn on your ZyXEL Device and restart your computer when prompted Verifying Settings 1 Click Start and then Run 2 Inthe Run window type winipcfg and then click OK to open the IP Configuration window 3 Select your network adapter You should see your computer s IP address subnet mask and default gateway Windows 2000 NT XP The following example figures use the default Windows XP GUI theme 1 Click start Start in Windows 2000 NT Settings Control Panel ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Figure 56 Windows XP Start Menu Internet Explorer 3 Outlook Express Y Paint Files and Settings Transfer W BJ Command Prompt Acrobat Reader 4
109. n North America or 230V AC in Europe Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution If the power adaptor or cord is damaged remove it from the device and the power source Do NOT attempt to repair the power adaptor or cord Contact your local vendor to order a new one Do not use the device outside and make sure all the connections are indoors There is a remote risk of electric shock from lightning Do NOT obstruct the device ventilation slots as insufficient airflow may harm your device Antenna Warning This device meets ETSI and FCC certification requirements when using the included antenna s Only use the included antenna s If you wall mount your device make sure that no electrical lines gas or water pipes will be damaged This product is recyclable Dispose of it properly ZyXEL NWA570N User s Guide Safety Warnings ZyXEL NWA570N User s Guide Safety Warnings ZyXEL NWA570N User s Guide Contents Overview Contents Overview introduction E 1 Wiza o eec cc 21 traduci Hie AAEL DOVE associe DRHRMODER FRU ERU RRHOOL ERI RERO SOR RU sacs Tax SR RO GS GA R RpOR 23 sii PONI POR REO ssl ERO MU op eat TANIE ct E EL d cup de GAP UE we vn S T OA S NAT 30 Iritroaducing Hie
110. n file hold this button in for at least five seconds 2 Use the web configurator Click System gt Management gt Configuration File From here you can restore the ZyXEL Device to its factory default settings ZyXEL NWA570N User s Guide Introducing the Web Configurator This chapter describes how to configure the ZyXEL Device using the Wizard 2 1 Web Configurator Overview The web configurator is an HTML based management interface that allows easy ZyXEL Device setup and management via Internet browser Use Internet Explorer 6 0 and later or Netscape Navigator 7 0 and later versions The recommended screen resolution is 1024 by 768 pixels In order to use the web configurator you need to allow Web browser pop up windows from your device Web pop up blocking 1s enabled by default in Windows XP SP Service Pack 2 JavaScripts enabled by default Java permissions enabled by default See the Troubleshooting chapter for details on how to make sure these functions are allowed in Internet Explorer or Netscape Navigator 2 2 Accessing the Web Configurator Follow the steps below to access the web configurator select a language change your login password and choose a configuration method from the status screen 1 Make sure your ZyXEL Device hardware is properly connected refer to the Quick Start Guide 2 Prepare your computer computer network to connect to the ZyXEL Device refer to the appendix on setting up
111. n keys so that the same encryption key 1s never used twice The RADIUS server distributes a Pairwise Master Key PMK key to the AP that then sets up a key hierarchy and management system using the PMK to dynamically generate unique data encryption keys to encrypt every data packet that 1s wirelessly communicated between the AP and the wireless clients This all happens in the background automatically The Message Integrity Check MIC is designed to prevent an attacker from capturing data packets altering them and resending them The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC If they do not match it is assumed that the data has been tampered with and the packet 1s dropped By generating unique data encryption keys for every data packet and by creating an integrity checking mechanism MIC with TKIP and AES it is more difficult to decrypt data on a Wi Fi network than WEP and difficult for an intruder to break into the network The encryption mechanisms used for WPA 2 and WPA 2 PSK are the same The only difference between the two is that WPA 2 PSK uses a simple common password instead of user specific credentials The common password approach makes WPA 2 PSK susceptible to brute force password guessing attacks but it s still an improvement over WEP as it employs a consistent single alphanumeric password to derive a PMK which is used to generate unique tempo
112. n the Pre Shared Key field 3 Select Client s PIN or AP s PIN f you select Client s PIN type the PIN generated on the device you want to add to the network and click Apply f you select AP s PIN type the PIN in the PIN field into the appropriate field on the device you want to add to your network and click Apply Follow these steps to set up a WPS connection using the push button 1 Ensure Wi Fi Protected Setup WPS Enable is selected 2 Select Auto to generate a pre shared key or type a pre shared key in the Pre Shared Key field 3 Select Push Button Click Start PBC or click the WPS button located on the NWA570N s housing 5 You have two minutes to press the WPS button on the device you wish to connect with This button may be either a physical button on the outside of the device or a menu button similar to the Start PBC button on this screen A ZyXEL NWA570N User s Guide Management Screens This chapter describes the Maintenance screens T 1 Maintenance Overview Use these maintenance screens to change the password view logs back up or restore the ZyXEL Device s configuration and change the web configurator language T 2 Password To change your device s password recommended click Management The screen appears as shown This screen allows you to change the device s password If you forget your password or the device IP address you will need to reset the device See the section on resetting t
113. n this User s Guide may use the following generic icons The ZyXEL Device icon is not an exact representation of your device ZyXEL Device Computer Notebook computer LJ Em CS 3 homm an Server DSLAM Firewall Telephone Switch Router S gy e ZyXEL NWA570N User s Guide a Safety Warnings Safety Warnings gt For your safety be sure to read and follow all warning notices and instructions e e e e e e Do NOT use this product near water for example in a wet basement or near a swimming pool Do NOT expose your device to dampness dust or corrosive liquids Do NOT store things on the device Do NOT install use or service this device during a thunderstorm There is a remote risk of electric shock from lightning Connect ONLY suitable accessories to the device Do NOT open the device or unit Opening or removing covers can expose you to dangerous high voltage points or other risks ONLY qualified service personnel should service or disassemble this device Please contact your vendor for further information Make sure to connect the cables to the correct ports Place connecting cables carefully so that no one will step on them or stumble over them Always disconnect all cables from this device before servicing or disassembling Use ONLY an appropriate power adaptor or cord for your device Connect it to the right supply voltage for example 110V AC i
114. nding receiving data WPS Green On The ZyXEL Device has a WPS connection with another WPS enabled device O Blinking The ZyXEL Device is setting up a WPS connection with another WPS enabled device Off The ZyXEL Device has no WPS connection or has failed to set up a WPS connection with another WPS enabled device ZyXEL NWA570N User s Guide Chapter 1 Introducing the ZyXEL Device 1 6 Management Computer Setup You can connect a computer to the ZyXEL Device for management purposes either using an Ethernet connection recommended for a first time management session or wirelessly 1 6 1 Wired Connection You must prepare your computer computer network to connect to the ZyXEL Device if you are using a wired connection Your computer s IP address and subnet mask must be on the same subnet as the ZyXEL Device This can be done by setting up your computer s IP address See the appendix for details on how to set up your IP address The following figure shows an example of accessing your ZyXEL Device via a wired connection with an Ethernet cable Figure 8 Wired Connection Default IP Address 192 168 1 2 192 168 1 3 N 1 6 2 Wireless Connection Ensure that the wireless stations have a compatible wireless card adapter with the same wireless settings as the ZyXEL Device The following figure shows how you can access your ZyXEL Device wirelessly Figure 9 Wireless Connection SSID ZyXEL S b NWA570
115. nfigurator mask 51 Media Access Control address 63 Message Integrity Check MIC 134 modes 96 N navigation panel 47 network congestion 94 network disconnect 86 88 network number 51 network statistics 48 North American plug standards 98 O operating frequency 59 operating modes 96 operating temperature 95 output power management 97 P packet statistics 48 Pairwise Master Key PMK 134 135 password 83 85 92 93 port status 48 ports 95 power adaptor 91 power adaptor specifications 98 power cord 91 power management 97 power requirements 95 preamble mode 129 private IP address 51 private networks 51 problem solving 91 product registration 147 PSK 134 R RADIUS 130 ZyXEL NWA570N User s Guide Index message types 131 messages 131 shared secret key 131 registration product 147 related documentation 3 reset 87 92 93 95 restart automatic 86 88 restore 83 85 86 RF Radio Frequency 96 RF interference 94 RJ 45 95 roaming 97 rom 0 file 85 romfile 85 RTS Request To Send 128 threshold 127 128 S safety warnings 6 screws 99 security 96 settings 48 signal interference 94 signal strength 49 50 94 size 95 statistics 48 status 48 storage temperature 95 subnet 92 subnet mask 51 syntax conventions 4 System status 48 T TCP IP setup 85 Telnet 93 temperature operation 95 temperature storage 95 Temporal Key Integrity Protocol TKIP
116. ntinue to the next screen No configuration changes will be saved to the ZyXEL Device until you click Finish 3 1 1 Wizard Basic Settings First log into the ZyXEL Device as shown in Section 2 2 on page 31 Click Wizard Setup to display the first wizard screen shown next Refer to the System Screens chapter for more background information 1 2 Enter a descriptive name to identify the device in the Ethernet network Select Obtain IP Address Automatically if you want to put the device behind a router that assigns an IP address If you select this by mistake use the RESET button to restore the factory default IP address Select Use fixed IP Address to give the device a static IP address The IP address you configure here is used for management of the device accessing the web configurator Enter a Subnet Mask appropriate to your network and the Gateway IP Address of the neighboring device if you know it If you do not leave the Gateway IP Address field as 0 0 0 0 ZyXEL NWA570N User s Guide 35 Chapter 3 Wizard Figure 14 Wizard Basic Settings Sl ZyXEL NWAS7ON Microsoft Internet Explorer __ nix SETUP WIZARD ZyXEL STEP 1 STEP2 STEP 3 gt STEP4 fii Basic Settings Device Name ZyXEL NYVAS70N Obtain IP Address Automatically Use Fixed IP Address IP Address Subnet Mask Gateway IP Address Do not select this unless you have a router that can assign the ZyXEL Device an IP
117. on PMK Pairwise Master Key ZyXEL NWA570N User s Guide 135 Appendix C Wireless LANs 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them Figure 89 WPA 2 PSK Authentication A Dyo Internet Y Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method key management protocol type MAC address filters are not dependent on how you configure these security features Table 36 Wireless Security Relational Matrix METHOD KEY ENCRYPTIO ENTER IEEE 802 1X MANAGEMENT PROTOCOL Open None No Disable Enable without Dynamic WEP Key Open WEP No Enable with Dynamic WEP Key Yes Enable without Dynamic WEP Key Yes Disable Shared WEP No Enable with Dynamic WEP Key Yes Enable without Dynamic WEP Key Yes Disable WPA TKIP AES No Enable WPA PSK TKIP AES Yes Disable WPA2 TKIP AES No Enable WPA2 PSK TKIP AES Yes Disable Antenna Overview An antenna couples RF signals onto air A transmitter within a wireless device sends an RF signal to the antenna which propagates the signal through the air The antenna also operates in reverse by capturing RF signals from the air ZyXEL NWA570N User s Guide Appendix C Wireless LANs Positioning the antennas properly increases the range and coverage area of a wireless LAN Antenn
118. on of an IP address Your device will compute the subnet mask automatically based on the IP address that you entered You don t need to change the subnet mask computed by the device unless you are instructed to do otherwise 5 2 System Settings Click System to open the System Settings screen Figure 26 System Settings Device Settings Device Name ZyXEL NWASTON max 15 alphanumeric printable characters and no spaces IP Address Assignment C Obtain IP Address Automatically Use Fixed IP Address IP Address 192 168 mai E Subnet Mask 255 255 255 10 Gateway IP Address o lo l0 l0 Reset The following table describes the labels in this screen Table 10 System Settings LABEL DESCRIPTION Device Name This name can be up to 30 printable characters long Spaces are allowed IP Address Assignment 52 ZyXEL NWA570N User s Guide Chapter 5 System Screen Table 10 System Settings LABEL DESCRIPTION Obtain IP Address Automatically Select this option to have your device use a dynamically assigned IP address from a router each time Use fixed IP Select this option to have your device use a static IP address When you select address this option fill in the fields below IP Address Enter the IP address of your device in dotted decimal notation Subnet Mask Enter the subnet mask Gateway IP Type the IP address of the gateway The gateway
119. our device Figure 48 Management F W Upload F W Upload Firmware Upload To upgrade the internal system firmware browse to the location of the FW file img upgrade file and click the Upload Download firmware files from ZyXEL s website If the file is compressed for example a ZIP file you must first extract the FW file img file File Path Browse Upload ZyXEL NWA570N User s Guide Chapter 7 Management Screens The following table describes the labels in this screen Table 28 Management F W Upload LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse to find it Browse Click Browse to find the rmt file you want to upload Remember that you must decompress compressed zip files before you can upload them Upload Click Upload to begin the upload process This process may take up to two minutes Do not turn off the device while firmware upload is in progress The following screen appears Wait two minutes before logging into the device again Figure 49 Firmware Upgrading Screen The device is upgrading now Please wait The device is now upgrading and then it will reboot 4s there will be no indication of when the process is complete please waitfor 131 seconds before attempting to access AP again The device automatically restarts in this time causing a temporary networ
120. our specific model Configuration Backup amp Restoration Make a copy of the NWA570N s configuration and put it back on the NWA570N later if you decide you want to revert back to an earlier configuration 9 1 Standards Supported The following list which is not exhaustive illustrates the standards supported in the NWAS 7ON Table 31 Standards Supported STANDARD DESCRIPTION RFC 867 Daytime Protocol RFC 868 Time Protocol RFC 1112 IGMP v1 RFC 1305 Network Time Protocol NTP version 3 RFC 1631 IP Network Address Translator NAT RFC 1661 The Point to Point Protocol PPP RFC 2236 Internet Group Management Protocol Version 2 RFC 2516 A Method for Transmitting PPP Over Ethernet PPPoE ZyXEL NWA570N User s Guide Chapter 9 Product Specifications and Wall Mounting Instructions Table 31 Standards Supported continued STANDARD DESCRIPTION RFC 2766 Network Address Translation Protocol IEEE 802 11 Also known by the brand Wi Fi denotes a set of Wireless LAN WLAN standards developed by working group 11 of the IEEE LAN MAN Standards Committee IEEE 802 IEEE 802 11b Uses the 2 4 gigahertz GHz band IEEE 802 11g Uses the 2 4 gigahertz GHz band IEEE 802 11d Standard for Local and Metropolitan Area Networks Media Access Control MAC Bridges IEEE 802 11x Port Based Network Access Control IEEE 802 11e QoS IEEE 802 11 e Wireless L
121. ow Address of Web site to allow http 192 168 1 1 Add Allowed sites Notifications and Filter Level Play a sound when a pop up is blocked Show Information Bar when a pop up is blocked Filter Level Medium Block most automatic pop ups Pop up Blocker FAQ Close ZyXEL NWA570N User s Guide Appendix B Pop up Windows JavaScripts and Java Permissions 5 Click Close to return to the Privacy screen 6 Click Apply to save this setting JavaScripts If pages of the web configurator do not display properly in Internet Explorer check that JavaScripts are allowed 1 In Internet Explorer click Tools Internet Options and then the Security tab Figure 80 Internet Options Security General Security Privacy Content Connections Programs Advanced Select a W eb content zone to specify its security settings e Z o e Internet Localintranet Trusted sites Restricted sites Internet A This zone contains all Web sites you Gites haven t placed in other zones m Security level for this zone Move the slider to set the security level for this zone E Medium Safe browsing and still functional a Prompts before downloading potentially unsafe content Unsigned ActiveX controls will not be downloaded Appropriate for most Internet sites Custom Level 59 Default Level OK Cancel Apply Click the Custom Level button Scroll down to
122. ral encryption keys This prevent all wireless devices sharing the same encryption keys a weakness of WEP User Authentication WPA and WPA2 apply IEEE 802 1x and Extensible Authentication Protocol EAP to authenticate wireless clients using an external RADIUS database WPA2 reduces the number of key exchange messages from six to four CCMP 4 way handshake and shortens the time required to connect to a network Other WPA2 authentication features that are different from WPA include key caching and pre authentication These two features are optional and may not be supported in all wireless devices Key caching allows a wireless client to store the PMK it derived through a successful authentication with an AP The wireless client uses the PMK when it tries to connect to the same AP and does not need to go with the authentication process again Pre authentication enables fast roaming by allowing the wireless client already connecting to an AP to perform IEEE 802 1x authentication with another AP before connecting to it ZyXEL NWA570N User s Guide Appendix C Wireless LANs Wireless Client WPA Supplicants A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WPA At the time of writing the most widely available supplicant is the WPA patch for Windows XP Funk Software s Odyssey client The Windows XP patch is a free download that adds WPA capability to Windows XP s bu
123. rt preamble increases performance as less time sending preamble means more time for sending data All IEEE 802 11b g compliant wireless adapters support long preamble but not all support short preamble Select Long preamble if you are unsure what preamble mode the wireless adapters support and to provide more reliable communications in busy wireless networks Select Short preamble if you are sure the wireless adapters support it and to provide more efficient communications Select Dynamic to have the AP automatically use short preamble when wireless adapters support it otherwise the AP uses long preamble LES The AP and the wireless adapters MUST use the same preamble mode in order to communicate IEEE 802 11g Wireless LAN IEEE 802 11g is fully compatible with the IEEE 802 11b standard This means an IEEE 802 11b adapter can interface directly with an IEEE 802 11g access point and vice versa at 11 Mbps or lower depending on range IEEE 802 11g has several intermediate rate steps between the maximum and minimum data rates The IEEE 802 11g data rate and modulation are as follows Table 33 IEEE 802 11g DATA RATE MBPS MODULATION 1 DBPSK Differential Binary Phase Shift Keyed 2 DQPSK Differential Quadrature Phase Shift Keying 5 5111 CCK Complementary Code Keying 6 9 12 18 24 36 48 54 OFDM Orthogonal Frequency Division Multiplexing Wireless Security Overview Wireless security is vita
124. rver e Support for EAP Extensible Authentication Protocol RFC 2486 that allows additional authentication methods to be deployed with no changes to the access point or the wireless clients RADIUS RADIUS is based on a client server model that supports authentication authorization and accounting The access point is the client and the server is the RADIUS server The RADIUS server handles the following tasks Authentication Determines the identity of the users Authorization ZyXEL NWA570N User s Guide Appendix C Wireless LANs Determines the network services available to authenticated users once they are connected to the network Accounting Keeps track of the client s network activity RADIUS is a simple package exchange in which your AP acts as a message relay between the wireless client and the network RADIUS server Types of RADIUS Messages The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication Access Request Sent by an access point requesting authentication Access Reject Sent by a RADIUS server rejecting access Access Accept Sent by a RADIUS server allowing access Access Challenge Sent by a RADIUS server requesting more information in order to allow access The access point sends a proper response from the user and then sends another Access Request message The following types of RADIUS messages are exchanged between the acc
125. rver from the Configure list 4 For statically assigned settings do the following From the Configure box select Manually ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your ZyXEL Device in the Router address box 5 Close the TCP IP Control Panel 6 Click Save if prompted to save changes to your configuration 7 Turn on your ZyXEL Device and restart your computer if prompted Verifying Settings Check your TCP IP properties in the TCP IP Control Panel window Macintosh OS X 1 Click the Apple menu and click System Preferences to open the System Preferences window Figure 65 Macintosh OS X Apple Menu P Grab File Edit Capt About This Mac Get Mac OS X Software System Preferences DOCK Location 2 Click Network in the icon bar Select Automatic from the Location list Select Built in Ethernet from the Show list Click the TCP IP tab 3 For dynamically assigned settings select Using DHCP from the Configure list ZyXEL NWA570N User s Guide 113 Appendix A Setting up Your Computer s IP Address Figure 66 Macintosh OS X Network eo0 Network Show All Displays Network Startup Disk Location Automatic m Show Built in Ethernet AppleTalk Proxies Configure Using DHCP Domain Name Servers Optional IP Address
126. s that of the default device IP address 192 168 1 2 If the upload was not successful the following screen will appear Click Return to go back to the Configuration File screen ZyXEL NWA570N User s Guide Chapter 7 Management Screens Figure 46 Configuration Upload Error Restore Configuration error The configuration file was not accepted by the device Please return to the previous page and select a valid configuration file Click Help for more information Return 7 4 3 Back to Factory Defaults Clicking the RESET button in this section clears all user entered configuration information and returns the device to its factory defaults The following warning screen will appear Figure 47 Reset Warning Message Microsoft Internet Explorer 2 WARNING Restore will restart the AP 3 Cancel You can also press the RESET button on the rear panel to reset the factory defaults of your device Refer to the section on resetting the device for more information on the RESET button 7 5 F W Upload Screen Find firmware at www zyxel com in a file that usually uses the system model name with a img extension for example zyxel img The upload process uses HTTP Hypertext Transfer Protocol and may take up to two minutes After a successful upload the system will reboot Click Management gt F W Upload to display the screen as shown Follow the instructions in this screen to upload firmware to y
127. sable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address Disable pop up Blockers 1 In Internet Explorer select Tools Pop up Blocker and then select Turn Off Pop up Blocker Figure 76 Pop up Blocker Mail and News Pop up Blocker Manage Add ons Synchronize Windows Update Windows Messenger Internet Options You can also check if pop up blocking is disabled in the Pop up Blocker section in the Privacy tab 1 In Internet Explorer select Tools Internet Options Privacy ZyXEL NWA570N User s Guide Appendix B Pop up Windows JavaScripts and Java Permissions 2 Clear the Block pop ups check box in the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled Figure 77 Internet Options Privacy Internet Options General Security Privacy Content Connections Programs Advanced Settings Move the slider to select a privacy setting for the Internet gt zone Medium Blocks third party cookies that do not have a compact privacy policy Blocks third party cookies that use personally identifiable LC information without your implicit consent Restricts first party cookies that use personally identifiable information without implicit consent Pop up Blocker Prevent most pop up windows from appearing Block pop ups 3 Click Appl
128. settings you will lose your wireless connection when you click Apply to save your settings You must then change the wireless settings of your computer to match the device s new settings Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through passive scanning using a site survey tool Channel The range of radio frequencies used by IEEE 802 11b g wireless devices is called a channel Select a wireless channel if interference from other nearby devices is a problem The NWA570N and wireless devices in your network must use the same channel Wireless Mode Select 802 11b g to allow IEEE 802 11b and IEEE 802 11g compliant WLAN devices to associate with the device Select 802 11n g to allow IEEE 802 11n and IEEE 802 11g compliant WLAN devices to associate with the device HT protect Select HT protect if you have devices on your wireless network that support IEEE 802 1b g standards but not the IEEE 802 1n draft 2 0 standard If all devices on your wireless network support IEEE 802 1n draft 2 0 deselect HT protect for higher data transmission rates WDS Settings Local MAC This is the MAC address of the device Address Remote MAC Type the MAC address of the peer device in a valid MAC address format that is Address 1 4 six hexadecimal character pairs for example 12 34 56 78 9a bc Advanced Settings Beacon Set th
129. st of manufacturers 4 Select TCP IP from the list of network protocols and then click OK If you need Client for Microsoft Networks 1 Click Add 2 Select Client and then click Add 3 Select Microsoft from the list of manufacturers 4 Select Client for Microsoft Networks from the list of network clients and then click OK 5 Restart your computer so the changes you made take effect ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Configuring 1 Inthe Network window Configuration tab select your network adapter s TCP IP entry and click Properties 2 Click the IP Address tab f your IP address is dynamic select Obtain an IP address automatically Ifyou have a static IP address select Specify an IP address and type your information into the IP Address and Subnet Mask fields Figure 54 Windows 95 98 Me TCP IP Properties IP Address TCP IP Properties NE 7 x Bindings Advanced NeBIOS DNS Configuration Gateway WINS Configuration IP Address n IP address can be automatically assigned to this computer IF your network does not automatically assign IP addresses ask your network administrator for an address and then type it in the space below C Specify an IP address v Detect connection to network media Cancel 3 Click the DNS Configuration tab f you do not know your DNS information select Disable DNS f you know your DNS informatio
130. styk Ave Office 414 Dostyk Business Centre 050010 Almaty Republic of Kazakhstan Malaysia Support E mail support zyxel com my Sales E mail sales zyxel com my Telephone 603 8076 9933 Fax 603 8076 9833 Web http www zyxel com my Regular Mail ZyXEL Malaysia Sdn Bhd 1 02 amp 1 03 Jalan Kenari 17F Bandar Puchong Jaya 47100 Puchong Selangor Darul Ehsan Malaysia North America Support E mail support zyxel com Support Telephone 1 800 978 7222 Sales E mail sales zyxel com Sales Telephone 1 714 632 0882 Fax 1 714 632 0858 Web www zyxel com ZyXEL NWA570N User s Guide Appendix D Customer Support Regular Mail ZyXEL Communications Inc 1130 N Miller St Anaheim CA 92806 2001 U S A Norway e e e e e Support E mail support zyxel no Sales E mail sales zyxel no Telephone 47 22 80 61 80 Fax 47 22 80 61 81 Web www zyxel no Regular Mail ZyXEL Communications A S Nils Hansens vei 13 0667 Oslo Norway Poland e e e E mail info pl zyxel com Telephone 48 22 333 8250 Fax 48 22 333 8251 Web www pl zyxel com Regular Mail ZyXEL Communications ul Okrzei 1A 03 715 Warszawa Poland Russia Support http zyxel ru support Sales E mail sales zyxel ru Telephone 7 095 542 89 29 Fax 7 095 542 89 25 Web www zyxel ru Regular Mail ZyXEL Russia Ostrovityanova 37a Str Moscow 117279 Russia Singapore e e e e e e
131. t LABEL DESCRIPTION This is the index number of an associated wireless station MAC Address This field displays the MAC address of an associated wireless station IP Address This field displays the IP address of an associated wireless station Signal Strength This field displays the signal strength of each associated wireless station Status This field displays Associated for associated wireless stations Rescan Click Rescan to check for associated wireless stations When the device is in wireless client mode this screen displays details of the access point to which the ZyXEL Device is associated ZyXEL NWA570N User s Guide Chapter 4 Status Screen Figure 25 Status View Association List Wireless Client Mode Association List a ee TP Address Signal Strength Status Rescan The following table describes the labels in this screen Table 8 Status View Association List Wireless Client Mode LABEL DESCRIPTION This is the index number of an associated access point MAC Address This field displays the MAC address of the associated access point IP Address This field displays the IP address of the associated access point Signal Strength This field displays the signal strength of the associated access point Status This field displays Associated for an associated access point Rescan Click Rescan to check for assoc
132. t is six hexadecimal character pairs for example 12 34 56 78 9a bc Advanced Settings Radio Enable Turn on the wireless adapter to allow wireless communications between the device and other IEEE 802 11b and IEEE 802 11g compliant wireless devices Turn off the wireless adapter to stop wireless communications between the device and other IEEE 802 11b and IEEE 802 11g compliant wireless devices A MPDU Select Yes to enable the grouping of several A MSDU Aggregate MAC Service aggregation Data Units into one large A MPDU Aggregate MAC Protocol Data Unit When combined with A MSDU aggregation this function allows faster data transfer rates A MDSU Select Yes to enable the grouping of small groups of data MAC Service Data aggregation Units or MSDU into one large unit of MSDUs called an Aggregate MSDU A MSDU RIFS Select Yes to enable RIFS Reduced Interframe Spacing and to increase data transfer rates Short Gl Select Yes or No to enable or disable GI Guard Interval The GI refers to the interval given between data transmission from users in order to reduce interference Reducing the Gl increases data transfer rates but also increases interference Increasing the GI reduces data transfer rates but also reduces interference Output Power Set the output power of the device in this field If there is a high density of APs Management within an area decrease the output power of the device to reduce interference wi
133. te users and a CA issues certificates and guarantees the identity of each certificate owner EAP MD5 Message Digest Algorithm 5 MDS authentication is the simplest one way authentication method The authentication server sends a challenge to the wireless client The wireless client proves that it knows the password by encrypting the password with the challenge and sends back the information Password is not sent in plain text However MD authentication has some weaknesses Since the authentication server needs to get the plaintext passwords the passwords must be stored Thus someone other than the authentication server may access the password file In addition it is possible to impersonate an authentication server as MDS authentication method does not perform mutual authentication Finally MD5 authentication method does not support data encryption with dynamic session key You must configure WEP encryption keys for data encryption EAP TLS Transport Layer Security With EAP TLS digital certifications are needed by both the server and the wireless clients for mutual authentication The server presents a certificate to the client After validating the identity of the server the client sends a different certificate to the server The exchange of certificates is done in the open before a secured tunnel is created This makes user identity vulnerable to passive attacks A digital certificate is an electronic ID card that authenticates the
134. th other APs The options are Full 50 25 12 and Min Data Rate Use this field to select a maximum data rate for the wireless connection s The Management options are Auto 1 54M or MCSO 7 2 15 MCS15 144 4 300 Select Auto to let the NWA570N decide the most suitable data transfer rate If you are not certain of what setting to choose choose Auto Alternatively select a data transfer rate from 1 to 54 Mbps Please note that this is a total rate to be shared by all of the device s wireless connections The NWA570N also lets you configure the maximum data transfer rate based on the IEEE802 1n draft 2 0 modulation and coding scheme MCS The MCS lists data transfer speeds given a set of network conditions The MCSO in the MCSO 7 2 15 option refers to the first set of network conditions and so on So MCSO 7 2 15 is appropriate for network conditions which provides data transfer rates of 7 2 Mbps and 15 Mbps at bandwidths of 20 Mhz and 40 Mhz respectively ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Table 15 Wireless Settings Bridge continued LABEL DESCRIPTION Preamble Preamble is used to signal that data is coming to the receiver Type Short preamble increases performance as less time sending preamble means more time for sending data All IEEE 802 11b compliant wireless adapters support long preamble but not all support short preamble Select Long preamble if you are unsure what pream
135. the changes and close the Ethernet Device General screen 4 If you know your DNS server IP address es click the DNS tab in the Network Configuration screen Enter the DNS server information in the fields provided Co Figure 69 Red Hat 9 0 KDE Network Configuration DNS v Teste Tiii He urs File Profile Help 689 New Edit Copy Delete Devices Hardware DNS Hosts rH You may configure the system s hostname domain HH name servers and search domain Name servers are used to look up other hosts on the network Hostname Primary DNS Secondary DNS Tertiary DNS DNS Search Path Active Profile Common modified 5 Click the Devices tab 6 Click the Activate button to apply the changes The following screen displays Click Yes to save the changes in all screens redhat config network You have made some changes in your configuration To activate the network device ethO the changes have to be saved Do you want to continue 7 After the network card restart process is complete make sure the Status is Active in the Network Configuration screen Using Configuration Files Follow the steps below to edit the network configuration files and set your computer IP address 1 Assuming that you have only one network card on the computer locate the ifconfig eth0 configuration file where eth0 is the name of the Ethernet card Open the configuration fil
136. thentication ccccccceceeeceeeeeeeeeeeeeeeeeeeeeeeeeteeeeeees 57 Table 12 Additional Wireless TOMS cii sack ERR Ha pred Ra da ct pda e td db e t dud 58 Table 12 lr cElrn sl d T 59 Table 14 Wireless Settings Wireless Client iuuacccccr sassssceo e soos er ttn exec eran vcra eerte ed tene ace seeiecasnarenenneas 63 Table 15 Wireless Settings Bridge TL 66 Table 16 Wireless Settings AP Repeatar sersecnerrcirorriiiiisn iiron Eka REENA a 69 Table 17 Viueluss Secun EISSBIS ccs co dy diro eG e one ab p RC D to Pc n oret p rn eda T3 Table 18 Wireless Secunty PEE DT 73 Table 19 Wireless Security IEEE 8021X iiissuecucieseccur neier arnike rnia E ADE E RE E 75 Table 20 Wiroloss Secun WPALZ 77 Table 21 Wireless Secun WPA PSK cnaennanineoniekkii innia 78 TAWE 22 MAG FIRE arrinin o iani a a iia 80 Tubo 23 WPS SOUNGE ri a E DOR a EAA padi obla a tad ad 81 Du lack ds mm PL Em 81 Table 25 Management PHSSWOF 4 uoscisnrcss rir rtt Hor E ER Re X REA EUER RII ATR IN VERAS XR PELLA Sd eo bkn bp pdddn 83 icu urged e 84 Table 27 Management Configuration File Restore Configuration ssssee 86 Tabla 28 Management EW M pipad sciret e Eve P ebd e taper ee Lp p oe Hop Lo HI a do dL RE ru 88 Table 29 Hardware Specie ANONS cioe po EHE pU a Cpl OE victi bap Rex diu PM Hp em RM ER dE 95 Table 30 ndo e 96 Tabe st S
137. tion System WDS is a wireless connection Your NWA570N supports WDS connections to other NWA570N APs This provides a cost effective solution for wireless network expansion Wireless LAN MAC Address Filtering Your NWA570N checks the MAC address of the wireless station against a list of allowed or denied MAC addresses Wireless Association List With the wireless association list you can see the list of the wireless stations that are currently using the NWA570N to access your wired network When the NWA570N is in client mode the wireless association list displays a list of wireless devices and networks in the area Output Power Management Output Power Management is the ability to set the level of output power There may be interference or difficulty with channel assignment when there is a high density of APs within a coverage area In this case you can lower the output power of each access point thus enabling you to place access points closer together Limit the Number of Client Connections You may set a maximum number of wireless stations that may connect to the NWA570N This may be necessary if for example there is interference or difficulty with channel assignment due to a high density of APs within a coverage area Firmware Upgrade Download new firmware when available from the ZyXEL web site and use the web configurator an FTP or a TFTP tool to put it on the NWAS570N Note Only upload firmware for y
138. top wireless communications between the device and other IEEE 802 11b and IEEE 802 11g compliant wireless devices A MPDU Select Yes to enable the grouping of several A MSDU Aggregate MAC Service aggregation Data Units into one large A MPDU Aggregate MAC Protocol Data Unit When combined with A MSDU aggregation this function allows faster data transfer rates A MSDU Select Yes to enable the grouping of small groups of data MAC Service Data aggregation Units or MSDU into one large unit of MSDUs called an Aggregate MSDU A MSDU RIFS Select Yes to enable RIFS Reduced Interframe Spacing and to increase data transfer rates Short Gl Select Yes or No to enable or disable GI Guard Interval The GI refers to the interval given between data transmission from users in order to reduce interference Reducing the Gl increases data transfer rates but also increases interference Increasing the GI reduces data transfer rates but also reduces interference Output Power Set the output power of the device in this field If there is a high density of APs Management within an area decrease the device s output power to reduce interference with other APs The options are Full 50 25 12 and Min Data Rate Use this field to select a maximum data rate for the wireless connection s Please Management note that this is a total rate to be shared by all of the device s wireless connections Channel Mode Select whet
139. ure 5 Bridge Repeater Application ZyXEL NWA570N User s Guide Chapter 1 Introducing the ZyXEL Device 1 2 5 Access Point and Repeater Set the ZyXEL Device to AP Repeater mode to have it simultaneously provide access for wireless clients and use the repeater function This allows you to extend the coverage of your wireless network without installing Ethernet cable to connect the ZyXEL Device In the following figure B is in AP Repeater mode B functions as an AP for wireless clients C and D B also repeats traffic between the wireless clients and AP A which is connected to the wired network You could also set AP A to AP Repeater mode so that wireless clients could connect to A as well Figure 6 AP Repeater Application 1 3 Ways to Manage the ZyXEL Device Use any of the following methods to manage the ZyXEL Device Web Configurator This is recommended for everyday management of the ZyXEL Device using a supported web browser Command Line Interface Line commands are mostly used for troubleshooting by service engineers FTP Use File Transfer Protocol for firmware upgrades and configuration backup restore 1 4 Good Habits for Managing the ZyXEL Device Do the following things regularly to make the ZyXEL Device more secure and to manage the ZyXEL Device more effectively Change the password Use a password that s not easy to guess and that consists of different types of characters such as numbers and letters
140. urity on your device your network is accessible to any wireless networking device that is within range BS With no wireless security a neighbor can access and see traffic in your network ZyXEL NWA570N User s Guide Chapter 3 Wizard Figure 16 Setup Wizard 3 Disable SETUP WIZARD fli Security Settings Select your desired encryption method to secure your w Encryption Method 3 1 3 2 WEP 1 WEP Wired Equivalent Privacy encrypts data frames before transmitting over the wireless network Select 64 bit 128 bit or 152 bit from the WEP Encryption drop down list box and then follow the on screen instructions to set up the WEP keys 2 Choose an encryption level from the drop down list The higher the WEP encryption the higher the security but the slower the throughput 3 Youcan generate or manually enter a WEP key f you selected 64 bit or 128 bit WEP you can enter a Passphrase up to 32 printable characters and click Generate The device automatically generates WEP keys One key displays in the Key 1 field Go to Wireless gt Security if you want to see the other WEP keys Or Enter a manual key in the Key 1 field ZyXEL NWA570N User s Guide Chapter 3 Wizard Figure 17 Wizard 3 WEP SETUP WIZARD fli Security Settings Use Passphrase to below keys or manually enter Encryption Method jw l a key in the Key 1 field WEP Encryption 64 bit WEP Ent rase to aut ally generate a WEP key or
141. use the wireless network Furthermore there are ways for unauthorized wireless users to get a valid user name and password Then they can use that user name and password to use the wireless network 6 2 4 Encryption Wireless networks can use encryption to protect the information that is sent in the wireless network Encryption is like a secret code If you do not know the secret code you cannot understand the message The types of encryption you can choose depend on the type of authentication See Section 6 2 3 on page 56 for information about this Table 11 Types of Encryption for Each Type of Authentication NO AUTHENTICATION RADIUS SERVER Weakest No Security WPA Static WEP n WPA PSK Strongest WPA2 PSK WPA2 For example if the wireless network has a RADIUS server you can choose WPA or WPA2 If users do not log in to the wireless network you can choose no encryption Static WEP WPA PSK or WPA2 PSK Usually you should set up the strongest encryption that every device in the wireless network supports For example suppose you have a wireless network with the NWAS570N and you do not have a RADIUS server Therefore there is no authentication Suppose the wireless network has two devices Device A only supports WEP and device B supports WEP and WPA Therefore you should set up Static WEP in the wireless network BS It is recommended that wireless networks use WPA PSK WPA or stronger encryption
142. ver address automatically Use the following DNS server addresses 6 Ifyou do not know your gateway s IP address remove any previously installed gateways in the IP Settings tab and click OK Do one or more of the following if you want to configure additional IP addresses Inthe IP Settings tab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Configure additional default gateways in the IP Settings tab by clicking Add in Default gateways In TCP IP Gateway Address type the IP address of the default gateway in Gateway To manually configure a default metric the number of transmission hops clear the Automatic metric check box and type a metric in Metric Click Add Repeat the previous three steps for each default gateway you want to add Click OK when finished ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Figure 61 Windows XP Advanced TCP IP Properties Advanced TCP IP Settings IP Settings DNS WINS Options IP addresses IP address Subnet mask DHCP Enabled Default gateways Gateway Metric Automatic metric 7 Inthe Internet Protocol TCP IP Properties window the General tab in Windows XP Click Obtain DNS server address automatically if you do not know your DNS server IP address es Ifyou know
143. volved in the RTS Request To Send CTS Clear to Send handshake Enter a value between 0 and 65535 Data with a frame size larger than this value will perform the RTS CTS handshake If the RTS CTS value is greater than the Fragmentation value then the RTS CTS handshake will never occur as data frames will be fragmented before they reach RTS CTS size See Appendix C on page 125 for more information Fragmentation Enter a value between 256 and 65534 It is the maximum data fragment size that can be sent A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference See Appendix C on page 125 for more information Apply Click Apply to save your changes back to the device Reset Click Reset to begin configuring this screen afresh 6 4 4 AP Repeater Mode Select AP Repeater as the Operation Mode to have the device act as an access point and a wireless bridge ZyXEL NWA570N User s Guide Chapter 6 Wireless Screens Figure 34 Wireless Settings AP Repeater Wireless Settings ecur Basic Settings Operation Mode aP Repeater X SSID ZyXEL wes max 32 printable characters Hide SSID Channel 6 2 437GHz nd Wireless Mode 802110 D HT protect WDS Settings Local MAC Address o s feo p NP ps Remote MAC Address 1 LI AL dL hb Mb RD C 1
144. x number you dial to make an international telephone call Corporate Headquarters Worldwide Support E mail support zyxel com tw Sales E mail sales zyxel com tw Telephone 886 3 578 3942 Fax 886 3 578 2439 Web www zyxel com www europe zyxel com FTP ftp zyxel com ftp europe zyxel com Regular Mail ZyXEL Communications Corp 6 Innovation Road II Science Park Hsinchu 300 Taiwan Costa Rica Support E mail soporte zyxel co cr Sales E mail sales zyxel co cr Telephone 506 2017878 Fax 506 2015098 Web www zyxel co cr FTP ftp zyxel co cr Regular Mail ZyXEL Costa Rica Plaza Roble Escaz Etapa El Patio Tercer Piso San Jos Costa Rica Czech Republic E mail info cz zyxel com Telephone 420 241 091 350 ZyXEL NWA570N User s Guide Appendix D Customer Support Fax 420 241 091 359 Web www zyxel cz Regular Mail ZyXEL Communications Czech s r o Modranska 621 143 01 Praha 4 Modrany Cesk Republika Denmark Support E mail support zyxel dk Sales E mail sales zyxel dk Telephone 45 39 55 07 00 Fax 45 39 55 07 07 Web www zyxel dk Regular Mail ZyXEL Communications A S Columbusvej 2860 Soeborg Denmark Finland Support E mail support zyxel fi Sales E mail sales zyxel fi Telephone 358 9 4780 8411 Fax 358 9 4780 8448 Web www zyxel fi Regular Mail ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland France
145. y Overview MNT 56 2 o E D E E A 56 O27 MAC Address FIIO M O 56 9 2 3 Verr Authentic UDIN eeren E enews eadeame eateries 56 G2 auc E T 57 0 3 Additional Wireless TERMS sisina nanie pei E ana rra dk PER Ln pun Dea a aaa a opa ads beUa vA KE kde 58 sz gae VE FN rq ee aa eeiivadamsd nated teen nahn 58 EXE dL dL 58 12 ZyXEL NWA570N User s Guide Table of Contents GAZ NSS COn MOGE scriniis 62 Wd NICS WINS MM 64 6 4 4 APeBRepeater MOOS auis Hii bes kessU devel v bep ovi addu ten e nina e a 68 63 Longam Wireless OS Ub 2c p o a e LR GO GR En SR AR S RERO 72 55 1 Tirelags Secme DISSDIS onina aa T2 6 5 2 Wireless Secuii WEP d 73 6 5 3 Wireless Security JEEE DOR DE Leuten bc edente ERE KR IQ KE Ik P ck a nd 74 5 5 4 Wires oH WFA Zi urit p ePi tErEvr tirte eap ix ela eS 76 56 5 5 Wireless Security WRAP OK Lusiteodaiiirexiiade rea o PE aed Aper uia cer di lexus 78 CONAC FIE cedes enel eet atte or rer enn Ne M Ei ter DUUM c n opa corer e i ubi sob bitis 78 SNA ICI e 81 Chapter 7 LET d A YAY E E Y 83 7 1 Maintenance CODD uuo daitedadadiir pud cui etti dub ATA Nep ix ie pu APER E AASE EANA als D undi 83 pred col pe 83 n E
146. y to save this setting Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer select Tools Internet Options and then the Privacy tab 2 Select Settings to open the Pop up Blocker Settings screen 120 ZyXEL NWA570N User s Guide Appendix B Pop up Windows JavaScripts and Java Permissions Figure 78 Internet Options Privacy Internet Options PR sy General Security Privacy Content Connections Programs Advanced Settings f Move the slider to select a privacy setting for the Internet RE zone Medium privacy policy Blocks third party cookies that use personally identifiable LJ information without your implicit consent Restricts first party cookies that use personally identifiable information without implicit consent Blocks third party cookies that do not have a compact Pop up Blocker Prevent most pop up windows from appearing Block pop ups Settings 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 167 1 4 Click Add to move the IP address to the list of Allowed sites Figure 79 Pop up Blocker Settings Pop up Blocker Settings Exceptions Pop ups are currently blocked You can allow pop ups from specific Web sites by adding the site to the list bel
147. your DNS server IP address es click Use the following DNS server addresses and type them in the Preferred DNS server and Alternate DNS server fields If you have previously configured DNS servers click Advanced and then the DNS tab to order them ZyXEL NWA570N User s Guide Appendix A Setting up Your Computer s IP Address Figure 62 Windows XP Internet Protocol TCP IP Properties Internet Protocol TCP IP Properties P General Altemate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings btain an IP address automatically C Use the following IP address Obtain DNS server address automatically C Use the following DNS server addresses 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Click Close OK in Windows 2000 NT to close the Local Area Connection Properties window 10 Close the Network Connections window Network and Dial up Connections in Windows 2000 NT 11 Turn on your ZyXEL Device and restart your computer if prompted Verifying Settings 1 Click Start All Programs Accessories and then Command Prompt 2 Inthe Command Prompt window type ipconfig and then press ENTER You can also open Network Connections right click a network connection click Status and then click the Support tab Macintosh OS 8 9
148. your IP address C Launch your web browser 4 Type the IP address of the ZyXEL Device 192 168 1 2 is the default in the URL bar Press Enter ZyXEL NWA570N User s Guide 31 Chapter 2 Introducing the Web Configurator arii 10 Web Configurator Address G t http 192 168 1 2 5 Type 1234 default as the password and click Login Figure 11 Login Screen 6 Select your language and click Apply Figure 12 Language Screen 7 The following screen displays Select Go Wizard Setup and click Apply to use the wizard setup screens for initial configuration see Chapter 3 on page 35 Select Go Advanced Setup and click Apply to go directly to the advanced screens see Chapter 1 on page 45 32 ZyXEL NWA570N User s Guide Chapter 2 Introducing the Web Configurator Figure 13 Select Wizard or Advanced Setup Screen ZyXEL NWA570N User s Guide 33 Chapter 2 Introducing the Web Configurator ZyXEL NWA570N User s Guide Wizard This chapter shows you how to configure the ZyXEL Device s basic features using the wizard 3 1 Using the Wizard The wizard consist of a series of screens to help you configure your ZyXEL Device for wireless stations to access your wired LAN Use the following buttons to navigate the Wizard Back Click Back to return to the previous screen Next Click Next to co

SMG-700 User's Guide V1.00 (Nov 2004)

Contents

Download Pdf Manuals

Related Search

Related Contents