Home

ZyXEL WAP3205 User's Manual

1. eeeeeees 129 Appendix A Pop up Windows JavaScripts and Java Permissions sssuuss 131 WAP3205 User s Guide Table of Contents Appendix B IP Addresses and Subnetting oreet rne trum anre 139 Appendix C Setting up Your Computer s IP Address cceeeceeeeeeeeeeeeeeeeaeeeeeeeeaeeeeneaes 149 Appendix D Wireless eT leet Bee eee 167 Appendix E Common SA as coca cases sa entes So ppl cio icm es a ttu MR Lena ies ue IR RR MR cS SUE 179 Appendix F Legal id i UPPER E 183 C M 191 WAP3205 User s Guide 15 Table of Contents WAP3205 User s Guide PART I Introduction Getting to Know Your WAP3205 19 Connection Wizard 25 Introducing the Web Configurator 23 WAP3205 Modes 33 Monitor 29 Tutorials 73 Getting to Know Your WAP3205 1 1 Overview This chapter introduces the main features and applications of the WAP3205 The WAP3205 extends the range of your existing wired network without additional wiring providing easy network access to mobile users You can set up a wireless network with other IEEE 802 11b g n compatible devices 1 2 Applications Your can create the following networks using the WAP3205 Wired You can connect to a broadband modem router for Internet access and or connect network devices via the Ethernet ports of the WAP3205 so
2. Wireless LAN ON Network Name SSID ZyXEL Hide V Enable Intra BSS Traffic Name SSID1 Hide Enable Intra BSS Traffic Name SSID2 Hide Enable Intra BSS Traffic Name SSID3 Hide Enable Intra BSS Traffic Channel Selection v Auto Channel Selection Operating Channel Channel 10 2457MHz The following table describes the general wireless LAN labels in this screen Table 31 Network Wireless LAN General LABEL DESCRIPTION Wireless Setup Wireless LAN This is turned on by default The current wireless state is reflected in this field Network The SSID Service Set IDentity identifies the Service Set with which a Name SSID wireless client is associated Enter a descriptive name up to 32 printable characters found on a typical English language keyboard for the wireless er LAN Name SSID1 You can configure up to four SSIDs to enable multiple BSSs Basic Service 3 Sets on the WAP3205 This allows you to use one access point to provide several BSSs simutaneously You can then assign varying security types to different SSIDs Wireless clients can use different SSIDs to associate with the same access point Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a wireless client cannot obtain the SSID through scanning using a site survey tool WAP3205 User s Guide Chapter 10 Wireless LAN Table 31 Network Wireless LAN General
3. 81 PDC LAN e 83 LAN asas daro ae DD DN t eU diebeubbdddPmDM ete bdditeti dese Patet DU Ed M 101 Maintenance and Troubleshooting 1 eeeeee esee esee eere eene 105 LIE gius RETE OON EDS SE 107 Troubleshoot e 119 PONEI PECCAS MM Tm PP 125 App ndices and i MM 129 WAP3205 User s Guide 9 Contents Overview WAP3205 User s Guide Table of Contents Table of Contents Aboul This Users SUN sce II aa 3 Ere esIIZIPE RIDICULE 5 cuv WANG NR iaaa naaraana e u a aR A aaa 7 GContenis OVET eiciia De Era dE I LL aaa MEE aTeo 9 Table OFCOM ONE oco en cid ndi En uU M I ELI 11 Part I Introduction 1eeeseeeeeeeeee eene nennen nnn nn anneau au mnnn 17 Chapter 1 Getting to Know Your WAPS2OD sissies essit nare bi Kuba aas te kkki tae sno kk SERM ENESENN 19 DA ESIT SI MY ESTER EMPTORE NUM 19 TERO SUNN m EI Tm 19 12 Ways to Manage the WAP S205 ssec vae eoa pec a gd a a Ap DOG a M da aba ga PR A pl 19 1 8 Good Habits Tor Managing the VIOAPSSBEL euussiuissedientidader ao cidit prb tx adiecit 20 EOHNIIS I eI TERT NES 20 Chapter 2 introducing the Web Canfigul aol isses tdkcondda Re MEER ARA RAE REIR ARE RAM E 9M ARR EO AER SA a RO LA DA ERU e idi nA 23 COMES E NEN PP ergs iced tances once 23 2 2 Accessing this Web Configurator 3ecdessteve idsgisece qid tree suat e vdddst b
4. WAP3205 User s Guide Chapter 5 Easy Mode The following table describes the general wireless LAN labels in this screen Table 12 Wireless Security LABEL DESCRIPTION Wireless Service Set IDentity The SSID identifies the Service Set with which a Network wireless station is associated Wireless stations associating to the access Name SSID point AP must have the same SSID Enter a descriptive name up to 32 keyboard characters for the wireless LAN The default SSID is WAP3205 Security Select WPA PSK or WPA2 PSK to add security on this wireless network mode The wireless clients which want to associate to this network must have same wireless security settings as this device After you select to use a security additional options appears in this screen Select No Security to allow any client to connect to this network without authentication Wireless This field appears when you choose wither WPA PSK or WPA2 PSK as password the security mode Type a pre shared key from 8 to 63 case sensitive keyboard characters Verify Type the password again to confirm password Apply Click Apply to save your changes back to the WAP3205 Cancel Click Cancel to close this screen WPS Click this to configure the WPS screen You can transfer the wireless settings configured here Wireless Security screen to another wireless device that supports WPS WAP3205 User s Guide Chapter 5 Easy Mode 5 6 2 WP
5. General Security MACFilter Advanced QoS WPS WPS Station Scheduling WDS Wireless Advanced Setup Fragmentation Threshold 2346 256 2346 2346 256 2346 100 w 11bigin mixed mode vw Mixed O Green O20 920540 Olong 9 Auto AUTO w WAP3205 User s Guide Chapter 10 Wireless LAN The following table describes the labels in this screen Table 36 Network Wireless LAN Advanced LABEL DESCRIPTION RTS CTS Data with its frame size larger than this value will perform the RTS Threshold Request To Send CTS Clear To Send handshake Enter a value between 256 and 2432 Fragmentatio n Threshold The threshold number of bytes for the fragmentation boundary for directed messages It is the maximum data fragment size that can be sent Enter an even number between 256 and 2346 Output Power Set the output power of the WAP3205 in this field If there is a high density of APs in an area decrease the output power of the WAP3205 to reduce interference with other APs Select one of the following 100 9096 75 50 25 or 10 See the product specifications for more information on your WAP3205 s output power Network Mode Select 11b only to allow only IEEE 802 11b compliant WLAN devices to associate with the WAP3205 Select 11g only to allow only IEEE 802 11g compliant WLAN devices to associate with the WAP3205 Select 11 b g mixed mode to allow both IEEE802 11b
6. High wins Q Low safety m Reset custom settings Reset to Medium Reset JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 Make sure that Use Java 2 for applet under Java Sun is selected WAP3205 User s Guide 137 Appendix A Pop up Windows JavaScripts and Java Permissions 3 Click OK to close the window Figure 86 Java Sun General Security Privacy Content Connections Programs Advanced Settings O Use inline AutoComplete O Use Passive FTP for firewall and DSL modem compatibility Use smooth scrolling E HTTP 1 1 settings v Use HTTP 1 1 gH Use HTTP 1 1 through proxy connections reser 204101 aeo feni D A ee Use Java 2 v1 4 1 07 for Use Java 2 v1 4 1_07 for coppleb requies esta gt requires restart l 5 ICTOSO O Java Jam enabled requires restart O Java logging enabled JIT compiler for virtual machine enabled requires restart Multimedia O Always show Internet Explorer 5 0 or later Radio toolbar O Don t display online media content in the media bar Enable Automatic Image Resizing gt b Restore Defaults Apply WAP3205 User s Guide IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks P addresses identify individual devices on a network Every networking device including computers servers routers printers etc needs an IP address to communicate a
7. 3 Inthe wireless client utility find the WPS settings Enable WPS and press the WPS button Start or WPS button 4 Log into WAP3205 s Web Configurator and press the Push Button button in the Network gt Wireless Client gt WPS Station screen Note Your WAP3205 has a WPS button located on its panel as well as a WPS button in its configuration utility Both buttons have exactly the same function you can use one or the other Note It doesn t matter which button is pressed first You must press the second button within two minutes of pressing the first one The WAP3205 sends the proper configuration settings to the wireless client This may take up to two minutes Then the wireless client is able to communicate with the WAP3205 securely WAP3205 User s Guide Chapter 9 Tutorials The following figure shows you an example to set up wireless network and security by pressing a button on both WAP3205 and wireless client the NWD 211AN in this example Figure 41 Example WPS Process PBC Method Wireless Client WITHIN 2 MINUTES D SECURITY INFO 4 nnunmummmmmmmmmmm y COMMUNICATION 9 3 2 PIN Configuration When you use the PIN configuration method you need to use both WAP3205 s configuration interface and the client s utilities 1 Launch your wireless client s configuration utility Go to the WPS settings and select the PIN method to get a PIN number 2 Enter the PIN number to the PIN
8. Click the status to display Network Wireless LAN WPS screen Interface Status Interface This displays the WAP3205 port types The port types are LAN and WLAN Status For the LAN and WAN ports this field displays Down line is down or Up line is up or connected For the WLAN it displays Up when the WLAN is enabled or Down when the WLAN is disabled Rate For the LAN ports this displays the port speed or N A when the line is disconnected For the WLAN it displays the maximum transmission rate when the WLAN is enabled and N A when the WLAN is disabled System Status Item This column shows the type of data the WAP3205 is recording Data This column shows the actual data recorded by the WAP3205 System Up Time This is the total time the WAP3205 has been on Current Date Time This field displays your WAP3205 s present date and time System Resource CPU Usage This displays what percentage of the WAP3205 s processing ability is currently used When this percentage is close to 10096 the WAP3205 is running at full load and the throughput is not going to improve anymore If you want some applications to have more throughput you should turn off other applications for example using bandwidth management Memory Usage This shows what percentage of the heap memory the WAP3205 is using System Setting Configuration Mode This shows the web configurator mo
9. ITEM DESCRIPTION Home Click this to go to the Login page Expert Mode Click this to change to Expert mode and customize features of the WAP3205 Logout Click this to end the Web Configurator session 5 5 Network Map Note The Network MAP is viewable by Windows XP need to install patch Windows Vista and Windows 7 users only For Windows XP Service Pack 2 users you can see the network devices connected to the WAP3205 by downloading the LLTD Link Layer Topology Discovery patch from the Microsoft Website Note Don t worry if the Network Map does not display in your web browser This feature may not be supported by your system You can still configure the Control Panel Section 5 6 on page 38 in the Easy Mode and the WAP3205 features that you want to use in the Expert Mode Note The Network Map is not applicable when the WAP3205 is in Client Mode WAP3205 User s Guide Chapter 5 Easy Mode When you log into the Web Configurator the Network Map is shown as follows Figure 15 Network Map Wireless A Security The line connecting the WAP3205 to the gateway becomes green when the WAP3205 is able to ping the gateway It becomes red when the ping initiating from the WAP3205 does not get a response from the gateway The same rule applies to the line connecting the gateway to the Internet You can also view the devices represented by icons indicating the kind of network device connected to the WAP3205
10. LABEL DESCRIPTION Enable Intra BSS Traffic A Basic Service Set BSS exists when all communications between wireless clients or between a wireless client and a wired network client go through one access point AP Intra BSS traffic is traffic between wireless clients in the BSS When Intra BSS is enabled wireless clients can access the wired network and communicate with each other When Intra BSS is disabled wireless clients can still access the wired network but cannot communicate with each other Channel Selection Set the operating frequency channel depending on your particular region Select a channel from the drop down list box The options vary depending on the frequency band and the country you are in This option is only available if Auto Channel Selection is disabled Auto Channel Selection Select the check box to have the WAP3205 automatically scan for and select a channel which is not used by another device Operating Channel This displays the channel the WAP3205 is currently using Apply Click Apply to save your changes back to the WAP3205 Reset Click Reset to reload the previous configuration for this screen 10 5 Wireless Security Screen Use this screen to select the wireless security mode for each SSID Click Network gt Wireless LAN gt Security to open the Security screen The screen varies depending on what you select in the Security Mode field 10 5
11. POS Cap 104 Part Ill Maintenance and Troubleshooting 105 Chapter 12 Ll 107 JU WEG Qu uem TE 107 18 2 What YOU CSDL DI anna io qua rre cURE ina A unten E ux A ENARR obe EUER con E RN E Gan 107 Tonma Oo emer 108 124 Passvedid SOON sciatic ie oe EEG ae eG PL oe OG oen CERA o 108 des Hue Sell ocon aiina et Ubi breeti des eee udi iaes qu dabo En M VdoU S 109 12 6 PURINE WGN CIOS e Dm 111 12 7 Configuration BackupiRestale Screen 2o rennes uui nd Ee nor a bacc opa qus dae d E Kad EUER 113 12 9 Rosor Poslan ei TERT OSEE 114 12 8 System Operation Mode OVerVigW iae mrt emere itk et je ER Fa e ROLE RE IR 115 pue OP kode CRE ENS MT tan tnatietaashbeuntaeans 116 Chapter 13 lj i 119 19 1 Power Hardware Connections and LEDS ioco cina taret nate hee tee pR ben IEEE Dese a 119 13 2 WAPS205 Access ANO LOGI rr m 120 Paus fiber a We ADUSES rinso aao a 122 13 4 Resetting the WAP3205 to Its Factory Defaults eeeeeeeseeeeeeeeeeee 123 13 5 Wireless Router AP Troubleshooting eeeeeeeeeseseeesssseseeeeeee enne nennt 124 Chapter 14 Product zs Jc X X 125 INE LspisBlruln s e 126 Part IV Appendices and Index
12. This is the firmware version and the date created This is the device mode Section 4 1 2 on page 33 to which the WAP3205 is set Access Point Mode LAN Information MAC Address This shows the LAN Ethernet adapter MAC Address of your device IP Address This shows the LAN port s IP address IP Subnet Mask This shows the LAN port s subnet mask Default Gateway This shows the gateway IP address DHCP This shows the LAN port s DHCP role Client or None WLAN Information WLAN OP Mode This is the device mode Section 4 1 2 on page 33 to which the WAP3205 s wireless LAN is set Access Point Mode MAC Address This shows the wireless adapter MAC Address of your device Operating Channel Status This shows the current status of the Wireless LAN ON Name SSID This shows a descriptive name used to identify the WAP3205 in the wireless LAN Channel This shows the channel number which you select manually or the WAP3205 automatically scans and selects This shows the channel number which the WAP3205 is currently using over the wireless LAN Security Mode This shows the level of wireless security the WAP3205 is using 802 11 Mode This shows the wireless standard WAP3205 User s Guide Chapter 6 Access Point Mode Table 16 Status Screen Access Point Mode LABEL DESCRIPTION WPS This displays Configured when the WPS h
13. 8 4 Universal Repeater Mode Status Screen Click to open the status screen Figure 36 Status Universal Repeater Mode ZyXEL WAP3205 mm Welcome Admin Device Information System Status Item Data Item Data Host Name WAP3205 System Up Time 13 mins 6 secs Firmware Version V1 00 BFR 0 B3 Current Date Time 2000 01 01 00 15 40 Sys OP Mode Universal Repeater Mode System Resource LAN Information CPU Usage 996 MAC Address 00 0C 43 41 88 44 Memory Usage IP Address 172 23 31 211 System Setting IP Subnet Mask 255 255 255 0 Configuration Mode DHCF None WLAN Information WLAN OP Mode Universal Repeater Mode Summary MAC Address 00 0C 42 41 88 44 Packet Statistics Details Status ON WLAN Station Status Details Name SSID ZyXELddddd Channel Auto Channel Operating Channel Channel 01 2412MHz Security Mode WPA2 PSK 802 11 Mode 802 11b g n WLAN Station Status Disassociated WPS Confiqured Interface Status Interface Status LAN Up WLAN Up WAP3205 User s Guide Chapter 8 Universal Repeater Mode The following table describes the labels shown in the Status screen Table 26 Status Screen Universal Repeater Mode LABEL DESCRIPTION Logout Click this at any time to exit the Web Configurator Device Information Host Name This is the System Name you enter in the Maintenance gt General screen It is for identification purposes
14. CC CoCoc5c5c 5c 5c The following table describes the LEDs and the WPS button Table1 Front Panel LEDs and WPS Button LED COLOR STATUS DESCRIPTION POWER Green On The WAP3205 is receiving power and functioning properly b Off The WAP3205 is not receiving power LAN 1 2 Green On The WAP3205 has a successful 10 100MB Ethernet connection Blinking The WAP3205 is sending receiving data through the LAN Off The LAN is not connected WAP3205 User s Guide Chapter 1 Getting to Know Your WAP3205 Table1 Front Panel LEDs and WPS Button LED COLOR STATUS DESCRIPTION WLAN Green On The WAP3205 is ready but is not sending receiving data through the wireless LAN Blinking The WAP3205 is sending receiving data through x the wireless LAN I Off The wireless LAN is not ready or has failed WPS Green On WPS is enabled Blinking The WAP3205 is negotiating a WPS connection with a wireless client O Off The wireless LAN is not ready or has failed WAP3205 User s Guide Chapter 1 Getting to Know Your WAP3205 22 WAP3205 User s Guide Introducing the Web Configurator 2 1 Overview This chapter describes how to access the WAP3205 Web Configurator and provides an overview of its screens The Web Configurator is an HTML
15. Firmware Version This is the firmware version and the date created Sys OP Mode This is the device mode Section 4 1 2 on page 33 to which the WAP3205 is set Universal Repeater Mode LAN Information MAC Address This shows the LAN Ethernet adapter MAC Address of your device IP Address This shows the LAN port s IP address IP Subnet Mask This shows the LAN port s subnet mask DHCP This shows the LAN port s DHCP role Client or None WLAN Information WLAN OP Mode This is the device mode Section 4 1 2 on page 33 to which the WAP3205 s wireless LAN is set Universal Repeater Mode MAC Address This shows the wireless adapter MAC Address of your device Status This shows the current status of the Wireless LAN ON Name SSID This shows a descriptive name used to identify the WAP3205 in the wireless LAN Channel This shows the channel number which you select manually or the WAP3205 automatically scans and selects Operating Channel This shows the channel number which the WAP3205 is currently using over the wireless LAN Security Mode This shows the level of wireless security the WAP3205 is using 802 11 Mode This shows the wireless standard WLAN Station Status This shows whether a wireless station is currently associated with the WAP3205 WPS This displays Configured when the WPS has been set up This displays Unconfigured if the WPS has not been set up Click the statu
16. If you do not configure a DNS server you must know the IP address of a computer in order to access it Apply Click Apply to save your changes back to the WAP3205 Reset Click Reset to begin configuring this screen afresh 11 5 IP Alias Screen Use this screen to have the WAP3205 apply IP alias to create LAN subnets Click LAN gt IP Alias Figure 65 Network LAN IP Alias IP IP Alias IP Alias 1 IP Alias IP Address IP Subnet Mask The following table describes the labels in this screen Table 43 Network gt LAN gt IP Alias LABEL DESCRIPTION IP Alias Check this to enable IP alias IP Address Type the IP alias address of your WAP3205 in dotted decimal notation IP Subnet Mask The subnet mask specifies the network number portion of an IP address Your WAP3205 will automatically calculate the subnet mask based on the IP address that you assign Unless you are implementing subnetting use the subnet mask computed by the WAP3205 Apply Click Apply to save your changes back to the WAP3205 Reset Click Reset to begin configuring this screen afresh WAP3205 User s Guide PART Ill Maintenance and Troubleshootinc Maintenance 12 1 Overview This chapter provides information on the Maintenance screens 12 2 What You Can Do Use the General screen Section 12 3 on page 108 to set the timeout period of the m
17. LABEL DESCRIPTION WDS Setup Basic Settings Select the operating mode for your WAP3205 Disable The WAP3205 works as an access point only and cannot establish wireless links with other APs AP Bridge The WAP3205 functions as a bridge and access point simultaneously Bridge The WAP3205 acts as a wireless network bridge and establishes wireless links with other APs You need to know the MAC address of the peer device which also must be in bridge mode The WAP3205 can establish up to five wireless links with other APs Local MAC This is the MAC address of your WAP3205 Address WAP3205 User s Guide Chapter 10 Wireless LAN Table 41 Network Wireless LAN WDS LABEL DESCRIPTION Phy Mode Select the Phy mode you want the WAP3205 to use This dictates the maximum size of packets during data transmission This field is not available when you select Disable in the Basic Setting field Remote MAC This is the MAC address of the peer device that your WAP3205 wants to Address make a bridge connection with You can connect to up to 4 peer devices Security EncrypType Select whether to use WEP TKIP or AES encryption for your WDS connection in this field Otherwise select No Security EncrypKey The Encryp key is used to encrypt data Peers must use the same key for data transmission Apply Click Apply to save your changes to WAP3205 Cancel Click Cancel to rel
18. Ly NS Y jn WPA 2 with RADIUS Application Example You need the IP address of the RADIUS server its port number default is 1812 and the RADIUS shared secret A WPA 2 application example with an external RADIUS server looks as follows A is the RADIUS server DS is the distribution system 1 The AP passes the wireless client s authentication request to the RADIUS server 2 The RADIUS server then checks the user s identification against its database and grants or denies network access accordingly 3 The RADIUS server distributes a Pairwise Master Key PMK key to the AP that then sets up a key hierarchy and management system using the pair wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients WAP3205 User s Guide 1 77 Appendix D Wireless LANs Security Parameters Summary 178 Refer to this table to see what other security parameters you should configure for each Authentication Method key management protocol type MAC address filters are not dependent on how you configure these security features Table 65 Wireless Security Relational Matrix AUTHENTICATION METHOD KEY ENCRYPTIO ENTER IEEE 802 1X MANAGEMENT N METHOD MANUAL KEY PROTOCOL Open None No Disable Enable without Dynamic WEP Key Open WEP No Enable with Dynamic WEP Key Yes Enable with
19. Restricts first party cookies that use personally identifiable information without implicit consent Pop up Blocker Prevent most pop up windows from appearing Block pop ups 3 Click Apply to save this setting Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer select Tools Internet Options and then the Privacy tab WAP3205 User s Guide Appendix A Pop up Windows JavaScripts and Java Permissions 2 Select Settings to open the Pop up Blocker Settings screen Figure 81 Internet Options Privacy Internet Options General Security Privacy Content Connections Programs Advanced Settings Move the slider to select a privacy setting for the Internet MR zone Medium Blocks third party cookies that do not have a compact privacy policy Blocks third party cookies that use personally identifiable CJ information without your implicit consent Restricts first party cookies that use personally identifiable information without implicit consent Pop up Blocker S Prevent most pop up windows from appearing 3 Typethe IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 167 1 Block pop ups WAP3205 User s Guide Appendix A Pop up Windows JavaScripts and Java Permissions
20. Table 15 Status Screen Icon Key Access Point Mode ICON DESCRIPTION FAbout Click this icon to view copyright and a link for related product information Tae Click this icon to go to Easy Mode See Chapter 5 on page 35 oe S ee Click this to go to the Home page See Chapter 3 on page 29 WAP3205 User s Guide Chapter 6 Access Point Mode Table 15 Status Screen Icon Key Access Point Mode continued ICON DESCRIPTION L4 Refresh Interval None Select a number of seconds or None from the drop down list box to refresh all screen statistics automatically at the end of every time interval or to not refresh the screen statistics Refresh Now Click this button to refresh the status screen statistics Click this icon to see the Status page The information in this screen depends on the device mode you select Click this icon to see the Monitor navigation menu Click this icon to see the Configuration navigation menu asa Click this icon to see the Maintenance navigation menu The following table describes the labels shown in the Status screen Table 16 Status Screen Access Point Mode DESCRIPTION Device Information Click this at any time to exit the Web Configurator Host Name This is the System Name you enter in the Maintenance gt General screen It is for identification purposes Firmware Version Sys OP Mode
21. To the extent that the Software contains third party software ZyXEL has no express or implied obligation to provide any technical or other support for such software Please contact the appropriate software vendor or manufacturer directly for technical support and customer service related to its software and products Confidentiality You acknowledge that the Software contains proprietary trade secrets of ZyXEL and you hereby agree to maintain the confidentiality of the Software using at least as great a degree of care as you use to maintain the confidentiality of your own most confidential information You agree to reasonably communicate the terms and conditions of this License Agreement to those persons employed by you who come into contact with the Software and to use reasonable best efforts to ensure their compliance with such terms and conditions including without limitation not knowingly permitting such persons to use any portion of the Software for the purpose of deriving the source code of the Software No Warranty THE SOFTWARE IS PROVIDED AS IS TO THE MAXIMUM EXTENT PERMITTED BY LAW ZyXEL DISCLAIMS ALL WARRANTIES OF ANY KIND EITHER EXPRESSED OR IMPLIED INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ZyXEL DOES NOT WARRANT THAT THE FUNCTIONS CONTAINED IN THE SOFTWARE WILL MEET ANY REQUIREMENTS OR NEEDS YOU MAY HAVE OR THAT THE SOFTWARE WILL OPERATE ERROR FREE OR IN AN
22. i n i t i t i n i H e mmm mm m m m m m 9 How much of the IP address is the network number and how much is the host ID varies according to the subnet mask Subnet Masks A subnet mask is used to determine which bits are part of the network number and which bits are part of the host ID using a logical AND operation The term subnet is short for sub network A subnet mask has 32 bits If a bit in the subnet mask is a 1 then the corresponding bit in the IP address is part of the network number If a bit in the subnet mask is 0 then the corresponding bit in the IP address is part of the host ID The following example shows a subnet mask identifying the network number in bold text and host ID of an IP address 192 168 1 2 in decimal Table 52 Subnet Mask Identifying Network Number 1ST 2ND 3RD 4TH OCTET OCTET OCTET OCTET 192 168 1 2 IP Address Binary 11000000 10101000 00000001 00000010 Subnet Mask Binary 11111111 11111111 11111111 00000000 WAP3205 User s Guide Appendix B IP Addresses and Subnetting Table 52 Subnet Mask Identifying Network Number 1ST 2ND 3RD 4TH OCTET OCTET OCTET OCTET 192 168 1 2 Network Number 11000000 10101000 00000001 Host ID 00000010 By convention subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask followed by
23. redhat config network You have made some changes in your configuration To activate the network device ethO the changes have to be saved Do you want to continue 7 After the network card restart process is complete make sure the Status is Active in the Network Configuration screen Using Configuration Files Follow the steps below to edit the network configuration files and set your computer IP address 1 Assuming that you have only one network card on the computer locate the ifconfig eth0 configuration file where etho is the name of the Ethernet card Open the configuration file with any plain text editor f you have a dynamic IP address enter dhcp in the BoorTPROTO field The following figure shows an example Figure 108 Red Hat 9 0 Dynamic IP Address Setting in ifconfig ethO EVICE eth0 BOOT yes OOTPROTO dhcp SERCTL no ERDNS yes YPE Ethernet Hugon WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address f you have a static IP address enter static in the BOOTPROTO field Type IPADDR followed by the IP address in dotted decimal notation and type NETMASK followed by the subnet mask The following example shows an example where the static IP address is 192 168 1 10 and the subnet mask is 255 255 255 0 Figure 109 Red Hat 9 0 Static IP Address Setting in ifconfig ethO DEVICE eth0 ONBOO
24. 1 No Security Select No Security to allow wireless clients to communicate with the access points without any data encryption WAP3205 User s Guide Chapter 10 Wireless LAN Note If you do not enable any wireless security on your WAP3205 your network is accessible to any wireless networking device that is within range Figure 52 Network gt Wireless LAN gt Security No Security General i Security i MAC Filter Advanced QoS WPS WPS Station Scheduling WDS Security SSID ZyXEL v Security Mode No Security v Hote WPA PSK and WPA2 PSK can be configured when WPS enabled The following table describes the labels in this screen Table 32 Network gt Wireless LAN gt Security No Security LABEL DESCRIPTION SSID Select the SSID for which you want to configure the security Security Choose No Security from the drop down list box Mode Apply Click Apply to save your changes back to the WAP3205 Cancel Click Cancel to reload the previous configuration for this screen 10 5 2 WEP Encryption WEP encryption scrambles the data transmitted between the wireless stations and the access points to keep network communications private It encrypts unicast and multicast communications in a network Both the wireless stations and the access points must use the same WEP key Your WAP3205 allows you to configure up to four 64 bit or 128 bit WEP keys but only one key can be enabled at any one t
25. 4 Click Add to move the IP address to the list of Allowed sites Figure 82 Pop up Blocker Settings Pop up Blocker Settings Exceptions Pop ups are currently blocked You can allow pop ups from specific Web sites by adding the site to the list below Address of Web site to allow http 192 168 1 1 Allowed sites Notifications and Filter Level Play a sound when a pop up is blocked Show Information Bar when a pop up is blocked Filter Level Medium Block most automatic pop ups Pop up Blocker FAQ 5 Click Close to return to the Privacy screen 6 Click Apply to save this setting JavaScripts If pages of the Web Configurator do not display properly in Internet Explorer check that J avaScripts are allowed WAP3205 User s Guide Appendix A Pop up Windows JavaScripts and Java Permissions 1 In Internet Explorer click Tools Internet Options and then the Security tab Figure 83 Internet Options Security AE General Security Privacy Content Connections Programs Advanced Select a Web content zone to specify its security settings F Fa O Intemet Localintranet Trusted sites Restricted sites MD This zone contains all Web sites you BE haven t placed in other zones m Security level for this zone Move the slider to set the security level for this zone 5 Medium Safe browsing and still functional Prompts before downloading potentially unsafe content Unsign
26. Common Services Table 66 Commonly Used Services continued NAME PROTOCOL PORT S DESCRIPTION TFTP UDP 69 Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP but uses the UDP User Datagram Protocol rather than TCP Transmission Control Protocol VDOLI VE TCP 7000 Another videoconferencing solution WAP3205 User s Guide Legal Information Copyright Copyright 2009 by ZyXEL Communications Corporation The contents of this publication may not be reproduced in any part or as a whole transcribed stored in a retrieval system translated into any language or transmitted in any form or by any means electronic mechanical magnetic optical chemical photocopying manual or otherwise without the prior written permission of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subject to change without notice Certifications Federal Communications Commission FCC Interference Statement The device complies with Part 15 of FCC rules Operatio
27. Encryption oe This dictates the length of the security key that the network is going to use Authenticatio Select Auto or Shared Key from the drop down list box n Method This field specifies whether the wireless clients have to provide the WEP key to login to the wireless client Keep this setting at Auto unless you want to force a key verification before communication between the wireless client and the WAP3205 occurs Select Shared Key to force the clients to provide the WEP key prior to communication ASCII Select this option in order to enter ASCII characters as WEP key 90 WAP3205 User s Guide Chapter 10 Wireless LAN Table 33 Network gt Wireless LAN gt Security Static WEP LABEL DESCRIPTION Hex Select this option in order to enter hexadecimal characters as a WEP key The preceding Ox that identifies a hexadecimal key is entered automatically Key 1 to Key The WEP keys are used to encrypt data Both the WAP3205 and the 4 wireless stations must use the same WEP key for data transmission If you chose 64 bit WEP then enter any 5 ASCII characters or 10 hexadecimal characters 0 9 A F If you chose 128 bit WEP then enter 13 ASCII characters or 26 hexadecimal characters 0 9 A F You must configure at least one key only one key can be activated at any one time The default key is key 1 Apply Click Apply to save your changes back to the WAP3205 Canc
28. LABEL DESCRIPTION Register Create a secure wireless network simply by entering a wireless client s PIN Personal Identification Number in the WAP3205 s interface and pushing this button Type the same PIN number generated in the wireless station s utility Then click Register to associate to each other and perform the wireless security information synchronization Exit Click Exit to close this screen 5 7 Status Screen in Easy Mode In the Network Map screen click Status to view read only information about the WAP3205 System Name Time LANIP MAC Address Figure 19 Status Screen in Easy Mode Firmware Version Wireless Network Name SSID Security The following table describes the labels in this screen Table 14 Status Screen in Easy Mode ITEM DESCRIPTION Name This is the name of the WAP3205 in the network You can change this in the Maintenance gt General screen in Section 12 3 on page 108 Time This is the current system date and time The date is in YYYY MM DD Year Month Day format The time is in HH MM SS Hour Minutes Seconds format LAN IP This is the IP address of the LAN port MAC Address This is the MAC address of the WAP3205 Firmware Version This shows the firmware version of the WAP3205 The firmware version format shows the trunk version model code and release number WAP3205 User s Guide Chapter 5 Easy M
29. Loginto the Web Configurator if you haven t already See the Quick start Guide for instructions on how to do this 2 To set your WAP3205 to Universal Repeater Mode go to Maintenance gt Sys OP Mode and select Universal Repeater Mode Figure 35 Changing to Universal Repeater mode Sys OP Mode Configuration Mode Access Point Mode O Client Mode Universal Repeater Mode Note You have to log in to the Web Configurator again when you change modes As soon as you do your WAP3205 is already in Universal Repeater mode 8 3 2 Accessing the Web Configurator in Universal Repeater Mode To login to Web Configurator in Client mode do the following 1 Connect your computer to the LAN port of the WAP3205 WAP3205 User s Guide Chapter 8 Universal Repeater Mode 2 The default IP address of the WAP3205 is 192 168 1 2 If you did not change this you can use the same IP address in Universal Repeater mode Open a web browser such as Internet Explorer and type 192 168 1 2 as the web address in your web browser If you changed the IP address of your WAP3205 while in Access Point mode use this IP address in Universal Repeater mode The Universal Repeater mode IP address is always the same as the Access Point mode IP adderss Note After clicking Login the Easy mode appears Refer to Chapter 5 on page 35 for the Easy mode screens Click Expert Mode to see the screens described in the sections following this
30. Password DESCRIPTION Type 1234 default as the password Language Select the language you want to use to configure the Web Configurator Click Login This shows the current weather either in celsius or fahrenheit of the city you specify in Section 2 2 3 1 on page 26 IEEE This shows the time hh mm ss and date yyyy mm dd of the timezone you select in Section 2 2 3 2 on page 27 or Section 12 5 on page 109 The time is in 24 hour format for example 15 00 is 3 00 PM WAP3205 User s Guide Chapter 2 Introducing the Web Configurator 2 2 2 Password Screen You should see a screen asking you to change your password highly recommended as shown next Figure 4 Change Password Screen Use this screen to change the password Hew Password al Retype to Confirm Apply Ignore The following table describes the labels in this screen Table 3 Change Password Screen LABEL DESCRIPTION New Password Type a new password Retype to Retype the password for confirmation Confirm Apply Click Apply to save your changes back to the WAP3205 Ignore Click Ignore if you do not want to change the password this time Note The management session automatically times out when the time period set in the Administrator Inactivity Timer field expires default five minutes go to Chapter 12 on page 107 to change this Simply log back into the WAP3205 if this happens 2 2 3
31. WEP Enter 13 ASCII characters or 26 hexadecimal characters 0 9 A F for each Key 1 4 Select one WEP key as an active key to encrypt wireless data transmission Oasci uxex 9 Key 1 Okey 2 Oo Key 3 Okey4 WAP3205 User s Guide 59 Chapter 7 Client Mode The following table describes the labels in this screen Table 22 Client Mode WLAN Profile WEP LABEL DESCRIPTION Wireless Setup Profile Name Enter a descriptive name for this profile Network Enter the name of the access point to which you are connecting Name SSID Security Security Select Static WEP to enable data encryption Mode PassPhrase Enter a Passphrase up to 26 printable characters and click Generate A passphrase functions like a password In WEP security mode it is further converted by the WAP3205 into a complicated string that is referred to as the key This key is requested from all devices wishing to connect to a wireless network WEP Select 64 bit WEP or 128 bit WEP Encryption This dictates the length of the security key that the network is going to use Authenticatio n Method Select Open or Shared Key from the drop down list box This field specifies whether the wireless clients have to provide the WEP key to log into the wireless network Keep this setting at Open unless you want to force a key verification before communication between the wireless client and the ZyXEL Dev
32. a continuous sequence of zeros for a total number of 32 bits Subnet masks can be referred to by the size of the network number part the bits with a 1 value For example an 8 bit mask means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes Subnet masks are expressed in dotted decimal notation just like IP addresses The following examples show the binary and decimal notation for 8 bit 16 bit 24 bit and 29 bit subnet masks Table 53 Subnet Masks BINARY 1ST 2ND 3RD 4TH DECIMAL OCTET OCTET OCTET OCTET 8 bit mask 11111111 00000000 00000000 00000000 255 0 0 0 16 bit 11111111 11111111 00000000 00000000 255 255 0 0 mask 24 bit 11111111 11111111 11111111 00000000 255 255 255 0 mask 29 bit 11111111 11111111 11111111 11111000 255 255 255 24 mask 8 Network Size The size of the network number determines the maximum number of possible hosts you can have on your network The larger the number of network number bits the smaller the number of remaining host ID bits An IP address with host IDs of all zeros is the IP address of the network 192 168 1 0 with a 24 bit subnet mask for example An IP address with host IDs of all ones is the broadcast address for that network 192 168 1 255 with a 24 bit subnet mask for example WAP3205 User s Guide Appendix B IP Addresses and Subnetting As these two IP addr
33. been left idle not recommended Apply Click Apply to save your changes back to the WAP3205 Reset Click Reset to begin configuring this screen afresh 12 4 Password Screen It is strongly recommended that you change your WAP3205 s password If you forget your WAP3205 s password or IP address you will need to reset the device See Section 12 8 on page 114 for details Click Maintenance gt Password Figure 67 Maintenance Password Password Setup Password Setup Old Password New Password Retype to Confirm Apply Reset WAP3205 User s Guide Chapter 12 Maintenance The following table describes the labels in this screen Table 45 Maintenance Password LABEL DESCRIPTION Password Setup Change your WAP3205 s password recommended using the fields as shown Old Password Type the default password or the existing password you use to access the system in this field New Password Type your new system password up to 30 characters Note that as you type a password the screen displays an asterisk for each character you type Retype to Confirm Type the new password again in this field Apply Click Apply to save your changes back to the WAP3205 Reset Click Reset to begin configuring this screen afresh 12 5 Time Setting Screen Use this screen to configure the WAP3205 s time based on your local time zone To change y
34. field in the Network gt Wireless LAN gt WPS Station screen on the WAP3205 3 Click Start buttons or button next to the PIN field on both the wireless client utility screen and the WAP3205 s WPS Station screen within two minutes The WAP3205 authenticates the wireless client and sends the proper configuration settings to the wireless client This may take up to two minutes Then the wireless client is able to communicate with the WAP3205 securely WAP3205 User s Guide Chapter 9 Tutorials The following figure shows you the example to set up wireless network and security on WAP3205 and wireless client ex NWD 211AN in this example by using PIN method Figure 42 Example WPS Process PIN Method Wireless Client 25327519 WITHIN 2 MINUTES D Authentication by PIN SECURITY INFO imm jon COMMUNICATION WAP3205 User s Guide Chapter 9 Tutorials 9 4 Enabling and Configuring Wireless Security No WPS This example shows you how to configure wireless security settings with the following parameters on your WAP3205 SSID SSID Example3 Channel Auto Security WPA PSK Pre Shared Key ThisismyWPA PSKpre sharedkey Follow the steps below to configure the wireless settings on your WAP3205 The instructions require that your hardware is connected see the Quick Start Guide and you are logged into the Web Configurator through your LAN connect
35. gt Network Mode 802 11b g gt Channel Auto gt Security WPA PSK Back Save Exit 7 Check the status of your wireless connection in the screen below If your wireless connection is weak or you have no connection see the Troubleshooting section of this User s Guide Figure 49 Link Status gt Profile Name Transmit Rate 2 Kbps gt Network Name SSID SSID Example3 Receive Rate 0 Kbps gt AP MAC Address 00 A0 C5 CD 1F 64 Authentication None gt Network Type Infrastructure Network Mode 802 119 gt Transmission Rate 18 Mbps Total Transmit 46 gt Security WPA PSK Total Receive 3 gt Channel 6 Link Quality 68 dBm Trend Chart Signal Strength 88e8e 6 aoa Link Quality 9900060970006 If your connection is successful open your Internet browser and enter http www zyxel com or the URL of any other web site in the address bar If you are able to access the web site your wireless connection is successfully configured WAP3205 User s Guide PART II Configuration Wireless LAN 10 1 Overview This chapter discusses how to configure the wireless network settings in your WAP3205 See the appendices for more detailed information about wireless networks The following figure provides an example of a wireless network Figure 50 Example of a Wireless Network a The wireless network is the part in the blue circle In this wireless network devices A and B are called wireless
36. need TCP IP In the Network window click Add Select Protocol and then click Add WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address 3 Select Microsoft from the list of manufacturers 4 Select TCP IP from the list of network protocols and then click OK If you need Client for Microsoft Networks 1 Click Add 2 Select Client and then click Add 3 Select Microsoft from the list of manufacturers 4 Select Client for Microsoft Networks from the list of network clients and then click OK 5 Restart your computer so the changes you made take effect Configuring 1 Inthe Network window Configuration tab select your network adapter s TCP IP entry and click Properties 2 Click the IP Address tab f your IP address is dynamic select Obtain an IP address automatically f you have a static IP address select Specify an I P address and type your information into the IP Address and Subnet Mask fields Figure 91 Windows 95 98 Me TCP IP Properties IP Address TCP IP Properties BEES zi xt Bindings Advanced Netplos DNS Configuration Gateway WINS Configuration IP Address An IP address can be automatically assigned to this computer IF your network does not automatically assign IP addresses ask your network administrator for an address and then type it in the space below IV Detect connection to network media Cancel WAP3205 User s Guide 151 Appendix C S
37. number in the station s utility The following table describes the labels in this screen Table 39 Network gt Wireless LAN gt WPS Station LABEL DESCRIPTION Push Button Use this button when you use the PBC Push Button Configuration method to configure wireless stations s wireless settings See Section 9 3 1 on page 74 Click this to start WPS aware wireless station scanning and the wireless security information synchronization Or input Use this button when you use the PIN Configuration method to station s PIN configure wireless station s wireless settings See Section 9 3 2 on page number 75 Type the same PIN number generated in the wireless station s utility Then click Start to associate to each other and perform the wireless security information synchronization 10 11 Scheduling Screen Use this screen to set the times your wireless LAN is turned on and off Wireless LAN scheduling is disabled by default The wireless LAN can be scheduled to turn WAP3205 User s Guide Chapter 10 Wireless LAN on or off on certain days and at certain times To open this screen click Network gt Wireless LAN gt Scheduling tab Figure 60 Network gt Wireless LAN gt Scheduling General Security MAC Filter Advanced QoS WPS WPS Station i Scheduling i wos Wireless LAH Scheduling Enable Wireless LAN Scheduling Scheduling WLAN status Day For the following times 24
38. on your Linux distribution and release version Note Make sure you are logged in as the root administrator Using the K Desktop Environment KDE Follow the steps below to configure your computer IP address using the KDE 1 Click the Red Hat button located on the bottom left corner select System Setting and click Network Figure 104 Red Hat 9 0 KDE Network Configuration Devices v Network Configuration 5 x File Profile Help B B x New Edit Copy Delete Activate Deactivate Devices Hardware DNS Hosts Aca You may configure network devices associated with d o physical hardware here Multiple logical devices can be g associated with a single piece of hardware Nickname Type X inactive ethO ethO Ethernet WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address 2 Double click on the profile of the network card you wish to configure The Ethernet Device General screen displays as shown Figure 105 Red Hat 9 0 KDE Ethernet Device General Ethernet Device nx General Route Hardware Device Nickname ethO lt Activate device when computer starts Allow all users to enable and disable the device Automatically obtain IP address settings with dhcp DHCP Settings Hostname optional 4 Automatically obtain DNS information from provider Sta
39. open this screen click Network gt Wireless LAN gt WPS tab WAP3205 User s Guide Chapter 10 Wireless LAN Note With WPS wireless clients can only connect to the wireless network using the first SSID on the WAP3205 Figure 58 Network gt Wireless LAN gt WPS WPS Setup Enable WPS PIN Number Status Status 802 11 Mode SSID Security General Security MACFilter Advanced QoS WPS i WPS Station Scheduling WDS 42947240 Configured Release Configuration 11 bigin ZyXELddddd WPA2 PSK The following table describes the labels in this screen Table 38 Network Wireless LAN WPS Configuration LABEL DESCRIPTION WPS Setup Enable WPS Select this to enable the WPS feature PIN Number This displays a PIN number last time system generated Click Generate to generate a new PIN number Status Status This displays Configured when the WAP3205 has connected to a wireless network using WPS or when Enable WPS is selected and wireless or wireless security settings have been changed The current wireless and wireless security settings also appear in the screen This displays Unconfigured if WPS is disabled and there are no wireless or wireless security changes on the WAP3205 or you click Release Configuration to remove the configured wireless and wireless security settings Release This button is only available when the WPS status displays Confi
40. pool Do NOT expose your device to dampness dust or corrosive liquids Do NOT store things on the device Do NOT install use or service this device during a thunderstorm There is a remote risk of electric shock from lightning Connect ONLY suitable accessories to the device Do NOT open the device or unit Opening or removing covers can expose you to dangerous high voltage points or other risks ONLY qualified service personnel should service or disassemble this device Please contact your vendor for further information Make sure to connect the cables to the correct ports Place connecting cables carefully so that no one will step on them or stumble over them Always disconnect all cables from this device before servicing or disassembling Use ONLY an appropriate power adaptor or cord for your device Connect the power adaptor or cord to the right supply voltage for example 110V AC in North America or 230V AC in Europe Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution f the power adaptor or cord is damaged remove it from the power outlet Do NOT attempt to repair the power adaptor or cord Contact your local vendor to order a new one Do not use the device outside and make sure all the connections are indoors T
41. process Note Do not turn off the WAP3205 while configuration file upload is in progress After you see a configuration upload successful screen you must then wait one minute before logging into the WAP3205 again The WAP3205 automatically restarts in this time causing a temporary network disconnect If you see an error screen click Back to return to the Backup Restore screen Reset Pressing the Reset button in this section clears all user entered configuration information and returns the WAP3205 to its factory defaults You can also press the RESET button on the rear panel to reset the factory defaults of your WAP3205 Refer to the chapter about introducing the Web Configurator for more information on the RESET button Note If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as that of the default WAP3205 IP address 192 168 1 2 See Appendix C on page 149 for details on how to set up your computer s IP address 12 8 Reset Restart Screen System restart allows you to reboot the WAP3205 without turning the power off Click Maintenance Reset Restart to open the following screen Figure 72 Maintenance Reset Restart System Restart Click Restart to have the device perform a software restart The SYS or PAR LED blinks as the device restarts and then stays steady on if the restart is successful Wait a minute before lo
42. subnet the host ID has 7 bits so each sub network has a maximum of 2 2 or 126 possible hosts a host ID of all zeroes is the subnet s address itself all ones is the subnet s broadcast address 192 168 1 0 with mask 255 255 255 128 is subnet A itself and 192 168 1 127 with mask 255 255 255 128 is its broadcast address Therefore the lowest IP address that can be assigned to an actual host for subnet A is 192 168 1 1 and the highest is 192 168 1 126 Similarly the host ID range for subnet B is 192 168 1 129 to 192 168 1 254 Example Four Subnets The previous example illustrated using a 25 bit subnet mask to divide a 24 bit address into two subnets Similarly to divide a 24 bit address into four subnets you need to borrow two host ID bits to give four possible combinations 00 01 10 and 11 The subnet mask is 26 bits 11111111 11111111 11111111 11000000 or 255 255 255 192 WAP3205 User s Guide Appendix B IP Addresses and Subnetting Each subnet contains 6 host ID bits giving 29 2 or 62 hosts for each subnet a host ID of all zeroes is the subnet itself all ones is the subnet s broadcast address Table 56 Subnet 1 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address Decimal 192 168 1 0 IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 1111
43. that they can communicate with each other and access the Internet Wireless Wireless clients can connect to the WAP3205 to access network resources Figure 1 WAP3205 Network LAN1 LAN2 WLAN 1 3 Ways to Manage the WAP3205 Use any of the following methods to manage the WAP3205 Web Configurator This is recommended for everyday management of the WAP3205 using a supported web browser WAP3205 User s Guide Chapter 1 Getting to Know Your WAP3205 WPS Wi Fi Protected Setup button You can use the WPS button or the WPS section of the Web Configurator to set up a wireless network with your ZyXEL Device 1 4 Good Habits for Managing the WAP3205 Do the following things regularly to make the WAP3205 more secure and to manage the WAP3205 more effectively Change the password Use a password that s not easy to guess and that consists of different types of characters such as numbers and letters Write down the password and put it in a safe place Back up the configuration and make sure you know how to restore it Restoring an earlier working configuration may be useful if the device becomes unstable or even crashes If you forget your password you will have to reset the WAP3205 to its factory default settings If you backed up an earlier configuration file you would not have to totally re configure the WAP3205 You could simply restore your last configuration 1 5 LEDs Figure 2 Front Panel b T 0
44. you select this you cannot enter an IP address for your WAP3205 in the field below Use Defined LAN Click this if you want to specify the IP address of your WAP3205 Or if P Address your ISP or network administrator gave you a static IP address to access the network or the Internet IP Address Type the IP address in dotted decimal notation The default setting is 192 168 1 2 If you change the IP address you will have to log in again with the new IP address IP Subnet Mask The subnet mask specifies the network number portion of an IP address Your WAP3205 will automatically calculate the subnet mask based on the IP address that you assign Unless you are implementing subnetting use the subnet mask computed by the WAP3205 WAP3205 User s Guide Chapter 11 LAN Table 42 Network gt LAN gt IP DNS Assignment LABEL DESCRIPTION Gateway IP Enter a gateway IP address if your ISP or network administrator gave Address you one in this field First DNS Server Second DNS Server Select From ISP if your ISP or router to which the WAP3205 connects dynamically assigns DNS server information and the WAP3205 s WAN P address The field to the right displays the read only DNS server IP address that the ISP assigns Select User Defined if you have the IP address of a DNS server Enter the DNS server s IP address in the field to the right Select None if you do not want to configure DNS servers
45. 0 3 What You Should Know 10 3 1 Every wireless network must follow these basic guidelines Every wireless client in the same wireless network must use the same SSID The SSID is the name of the wireless network It stands for Service Set I Dentity If two wireless networks overlap they should use different channels Like radio stations or television channels each wireless network uses a specific channel or frequency to send and receive information Every wireless client in the same wireless network must use security compatible with the AP Security stops unauthorized devices from using the wireless network It can also protect the information that is sent in the wireless network Wireless Security Overview The following sections introduce different types of wireless security you can set up in the wireless network WAP3205 User s Guide Chapter 10 Wireless LAN 10 3 1 1 SSID Normally the AP acts like a beacon and regularly broadcasts the SSID in the area You can hide the SSID instead in which case the AP does not broadcast the SSID In addition you should change the default SSID to something that is difficult to guess This type of security is fairly weak however because there are ways for unauthorized devices to get the SSID In addition unauthorized devices can still see the information that is sent in the wireless network 10 3 1 2 MAC Address Filter Every wireless client has a unique identification numb
46. 02 11g and or IEEE 802 11n wireless clients to connect to the WAP3205 wirelessly Enable wireless security WPA 2 PSK and or MAC filtering to protect your wireless network Note The WAP3205 may be prone to RF Radio Frequency interference from other 2 4 GHz devices such as microwave ovens wireless phones Bluetooth enabled devices and other wireless LANs Firmware Upgrade Download new firmware when available from the ZyXEL web site and use the Web Configurator to put it on the WAP3205 Note Only upload firmware for your specific model Configuration Backup amp Make a copy of the WAP3205 s configuration and put it back on Restoration the WAP3205 later if you decide you want to revert back to an earlier configuration Wireless LAN Scheduler You can schedule the times the wireless LAN is enabled disabled Time and Date Get the current time and date from an external server when you turn on your WAP3205 You can also set the time manually These dates and times are then used in logs P Multicast IP Multicast is used to send traffic to a specific group of computers The WAP3205 supports versions 1 and 2 of IGMP Internet Group Management Protocol used to join multicast groups see RFC 2236 Logging Use logs for troubleshooting You can view logs in the Web Configurator 14 1 Wall mounting Instructions Complete the following steps to hang your WAP3205 on a wall 1 Select a position fre
47. 1 The following table shows IP address last octet values for each subnet Table 60 Eight Subnets SUBNET SUBNET FIRST ADDRESS LAST ss ADDRESS 7 1 30 31 3 zm 33 62 63 Bs 8 M 9 2 OE 97 126 127 5 128 129 ros unie lic eos L lier 114580 SE 3 7 192 193 222 223 8 224 225 254 255 Subnet Planning The following table is a summary for subnet planning on a network with a 24 bit network number Table 61 24 bit Network Number Subnet Planning NO PORROWED SUBNET MASK NO SUBNETS NO HOSTS PER 1 255 255 255 128 25 126 2 255 255 255 192 26 4 62 3 255 255 255 224 27 30 4 255 255 255 240 28 16 14 5 255 255 255 248 29 32 6 6 255 255 255 252 30 64 2 7 255 255 255 254 31 128 1 WAP3205 User s Guide Appendix B IP Addresses and Subnetting The following table is a summary for subnet planning on a network with a 16 bit network number Table 62 16 bit Network Number Subnet Planning Nosr Ens OWED SUBNET MASK NO SUBNETS NOS S PER 1 255 255 128 0 17 32766 2 255 255 192 0 18 16382 3 255 255 224 0 19 8190 4 255 255 240 0 20 16 4094 5 255 255 248 0 21 32 2046 6 255 255 252 0 22 64 1022 7 255 255 254 0 23 128 510 8 255 255 255 0 24 256 254 9 255 255 255 128 25 51
48. 1111 11000000 Subnet Address Lowest Host ID 192 168 1 1 192 168 1 0 Broadcast Address Highest Host ID 192 168 1 62 192 168 1 63 Table 57 Subnet2 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 64 IP Address Binary 11000000 10101000 00000001 01000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address Lowest Host ID 192 168 1 65 192 168 1 64 Broadcast Address Highest Host ID 192 168 1 126 192 168 1 127 Table 58 Subnet 3 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address Lowest Host ID 192 168 1 129 192 168 1 128 Broadcast Address Highest Host ID 192 168 1 190 192 168 1 191 Table 59 Subnet 4 IP SUBNET MASK NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 192 IP Address Binary 11000000 10101000 00000001 11000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 WAP3205 User s Guide Appendix B IP Addresses and Subnetting Table 59 Subnet 4 continued IP SUBNET MASK LAST OCTET BIT NETWORK NUMBER VALUE Subnet Address 192 168 1 192 Broadcast Address 192 168 1 255 Lowest Host ID 192 168 1 193 Highest Host ID 192 168 1 254 Example Eight Subnets Similarly use a 27 bit mask to create eight subnets 000 001 010 011 100 101 110 and 11
49. 11n wireless clients Make sure that your notebook or computer s wireless adapter supports one of these standards 2 Wireless adapters come with software sometimes called a utility that you install on your computer See your wireless adapter s User s Guide for information on how to do that 3 After you ve installed the utility open it If you cannot see your utility s icon on your screen go to Start Programs and click on your utility in the list of programs that appears The utility displays a list of APs within range as shown in the example screen below 4 Select SSID Example3 and click Connect Figure 46 Connecting a Wireless Client to a Wireless Network t fj e ZyXEL MIS ies zyez fil ZyXEL test 8e EM Al CPE_5257_00 T Available Network List Site Information Network Type Infrastructure Network Mode 802 119 Channel 6 Security WPA PSK MAC Address 00 40 05 Surveyed at 11 46 38 ai LL 5 Select WPA PSK and type the security key in the following screen Click Next Figure 47 Security Settings gt Encryption Type gt Pre Shared Key Security Settings WPA PSK ThisismyWPA PSKpre sharedkeyl Back Next Exit WAP3205 User s Guide Chapter 9 Tutorials 6 The Confirm Save window appears Check your settings and click Save to continue Figure 48 Confirm Save gt Network Name SSID SSID Example3 gt Network Type Infrastructure
50. 2 126 10 255 255 255 192 26 1024 62 11 255 255 255 224 27 2048 30 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 8192 6 14 255 255 255 252 30 16384 2 15 255 255 255 254 31 32768 1 Configuring IP Addresses Where you obtain your network number depends on your particular situation If the ISP or your network administrator assigns you a block of registered IP addresses follow their instructions in selecting the IP addresses and the subnet mask If the ISP did not explicitly give you an IP network number then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established If this is the case it is recommended that you select a network number from 192 168 0 0 to 192 168 255 0 The Internet Assigned Number Authority IANA reserved this block of addresses specifically for private use please do not use any other number unless you are told otherwise You must also enable Network Address Translation NAT on the WAP3205 Once you have decided on the network number pick an IP address for your WAP3205 that is easy to remember for instance 192 168 1 1 but make sure that no other device on your network is using that IP address The subnet mask specifies the network number portion of an IP address Your WAP3205 will compute the subnet mask automatically based on the IP address WAP3205 User s Guide 1 47 Appendix B IP Addresses
51. 205 4 If this does not work you have to reset the device to its factory defaults See Section 13 4 on page 123 WAP3205 User s Guide 121 Chapter 13 Troubleshooting 13 3 Internet Access cannot access the Internet 1 Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide 2 Make sure the WAP3205 is connected to a broadband modem or router with Internet access 3 If you are trying to access the Internet wirelessly make sure the wireless settings in the wireless client are the same as the settings in the AP Go to Network Wireless LAN General WDS and check if the WAP3205 is set to bridge mode Select Disable and try to connect to the Internet again 4 Disconnect all the cables from your device and follow the directions in the Quick Start Guide again 5 Go to Maintenance gt Sys OP Mode Check your System Operation Mode setting Select Access Point Mode if your WAP3205 bridges traffic between clients on the same network Select Client Mode if your WAP3205 needs a wireless client to connect to an existing access point Select Universal Repeater Mode if you want to have wireless clients associate with the WAP3205 and also want to connect the WAP3205 to an existing access point 6 Ifthe problem continues contact your ISP cannot access the Internet anymore had access to the Internet with the WAP3205 but my Internet connec
52. A 13 0 pqa 3237 test 00 1 9 CB 73 CC BA 5 Tyexample BE A3 AB 58 F8 4F AES WPA2 PSK Infra TKIP WPA PSK Infra Not Use OPEN Ad Hoc 2 1 1 1 ZyXEL test 3345H 00 02 CF 98 6E 4C 10 1 TKIP AES WPA PSK WPA2 PSK Infra 3 4 1 The following table describes the labels in this screen Table 24 Client Mode WLAN gt Site Survey LABEL DESCRIPTION Station Site Survey Select a wireless device and click Add Profile to open a configuration screen where you can add the selected wireless device to a profile and then enable it SSID This displays the SSID of the wireless device 8B indicates the wireless device is added to an activated profile and the WAP3205 is connecting to it BSSID This displays the MAC address of the wireless device Signal This displays the strength of the wireless signal The signal strength Strength mainly depends on the antenna output power and the distance between your WAP3205 and this device Channel This displays the channel number used by this wireless device Encryption This displays the data encryption method used by this wireless device Authentication This displays the authentication method used by this wireless device Network Type This displays the network type Infrastructure or Ad Hoc of this wireless device Rescan Click this button to search for available wireless devices within transmission range and update this table Add Profile Select a
53. AIM New ICQ TCP 5190 AOL s Internet Messenger service It is also used as a listening port by ICQ AUTH TCP 113 Authentication protocol used by some servers BGP TCP 179 Border Gateway Protocol BOOTP CLIENT UDP 68 DHCP Client BOOTP SERVER UDP 67 DHCP Server CU SEEME TCP 7648 A popular videoconferencing solution from White Pines Software UDP 24032 DNS TCP UDP 53 Domain Name Server a service that matches web names for example www zyxel com to IP numbers WAP3205 User s Guide 1 79 Appendix E Common Services Table 66 Commonly Used Services continued NAME PROTOCOL PORT S DESCRIPTION ESP User Defined 50 The IPSEC ESP Encapsulation IPSEC TUNNEL Security Protocol tunneling protocol uses this service FINGER TCP 79 Finger is a UNIX or Internet related command that can be used to find out if a user is logged on FTP TCP 20 File Transfer Program a program to enable fast transfer of files including TCP 21 large files that may not be possible by e mail H 323 TCP 1720 NetMeeting uses this protocol HTTP TCP 80 Hyper Text Transfer Protocol a client server protocol for the world wide web HTTPS TCP 443 HTTPS is a secured http session often used in e commerce CMP User Defined 1 Internet Control Message Protocol is often used for diagnostic or routing purposes ICQ UDP 4000 This is a popular Internet chat program IGMP Use
54. Auth This displays the authentication method used by this wireless device Encrypt This displays the data encryption method used by this wireless device Ver This displays the firmware version running on the wireless device Status This displays Conf configured when WPS has been set up on the wireless device This displays Unconf unconfigured if WPS has not been set up on the wireless device PIN This displays the PIN number of the WAP3205 Renew PIN Click this button to generate a new PIN and display it in the PIN field PIN Start Click this button to perform wireless security information synchronization using the PIN configuration method PBC Start Click this button to perform wireless security information synchronization using the Push Button Configuration PBC method WAP3205 User s Guide Chapter 7 Client Mode Table 25 Client Mode WLAN WPS continued LABEL DESCRIPTION Stop Click this button to cancel wireless security information synchronization Rescan Click this button to search for available for WPS enabled devices within transmission range and update this table WAP3205 User s Guide Universal Repeater Mode 8 1 Overview Your WAP3205 can act as an access point and wireless client at the same time In this mode the WAP3205 can connect to an existing network through another access point and also lets wireless clients connect to the network throug
55. E 63 Chapter 8 Universal Repeater MOd iii iaetaki nins 124 6a 83a P611 ABRE ARR R0112 14 Ma ERE RR 1SE daia L0 ERR RR REB RRa PaL L0 KI ana a 1o dE 65 12 WAP3205 User s Guide Table of Contents NEN OD S r n M M9 65 PE iU RAI c Sr crc TNNT 65 8 9 What You Need to KNOW E 66 8 3 1 Setting your WAP3205 to Universal Repeater Mode sse 66 8 3 2 Accessing the Web Configurator in Universal Repeater Mode 66 8 4 Universal Repeater Mode Status BOGEN 1i iauececese eec tetur tate k Eta aina 67 En Unversal Repeater SOrD siusiu Dciuniadxcitira dont a AANSEN E NAAA AANA 69 SEIL E EE E ILES 70 Tor WEPR node te am boa tO tna do re Aul ca a pnis do ab adi a a aa 70 DOG PRESS Senta recta tener aa DOCTR E PRI URN CU DM EY UU RR o UE eats Z2 Chapter 9 Tutorials o0 A 73 DAMES N e es cnet sac sete N 73 9 2 Connecting to the Internet from an Access Point cceeececeteeeeeeeeeeeeeeeeeaaeeseceeeeeaaeesenees 73 9 3 Configuring Wireless Security Using WPS cacvccsesscesiccstasedavsssercevsccdessaesssscentansiedereonedicuotneciaxe T3 8 9 1 Push Button Coniguraton PEG aussen asta ieran EAE EI etr Cod 74 SIBI CBE TOU aoaiina p NNS pua SIA kaaa SRA adc 75 9 4 Enabling and Configuring Wireless Security No WPS ssssseeeseeeen 77 84 1 one Your NOUDOOK sarrin in a vec dt arp Qd AEA 79 Part Il Con
56. Figure 93 Windows XP Start Menu Internet Explorer __ My Documents fe Outlook Express y Paint Files and Settings Transfer W 2 My Recent Documents gt e My Pictures BI Command Prompt Acrobat Reader 4 0 Tour windows XP Wh Windows Movie Maker Q9 Help and Support Search All Programs gt 17 Run P Log OFF O Turn Off Computer 5 untitled Paint WAP3205 User s Guide 153 Appendix C Setting up Your Computer s IP Address 2 Inthe Control Panel double click Network Connections Network and Dial up Connections in Windows 2000 NT Figure 94 Windows XP Control Panel E Control Panel File Edit View Favorites Tools Help Q B v 5 P Search c Folders Ez Address J Control Panel v Control Panel A b o diHardware G Switch to Category View Co 5 See Also Game Controllers Windows Update 3 Right click Local Area Connection and then click Properties Figure 95 Windows XP Control Panel Network Connections Properties Network Connections File Edit View Favorites Tools Advanced Help Q ax x gt Ei Search lic Folders E Address e Network Connections LANorHigh Speed Internet Network Tasks ocal Area Connection 5 Create a new v nabled connection E A Standard PCI Fast Ethernet Adapte Set up a home or small Disable office network Stat Qf Disable this network EY devic
57. Home Screen If you have previously logged into the Web Configurator but did not click Logout you may be redirected to the Home screen You can also open this screen by clicking Home CRM or Lm in the Easy Mode or Expert Mode screens WAP3205 User s Guide 25 Chapter 2 Introducing the Web Configurator The Home screen displays as follows Figure 5 Home Screen WAP3205 ation interface de UGE Mmm English v The following table describes the labels in this screen Table 4 Home Screen LABEL DESCRIPTION Go Click this to open the Easy mode Web Configurator Language Select a language to go to the Easy mode Web Configurator in that language and click Login This is just an example This shows the current weather either in celsius or fahrenheit of the city you specify in Section 2 2 3 1 on page 26 alla This is just an example This shows the time hh mm ss and date 15 03 09 yyyy mm dd of the timezone you select in Section 2 2 3 2 on page 27 or Section 12 5 on page 109 2 2 3 1 Weather Edit You can change the temperature unit and select the location for which you want to know the weather Click the icon to change the Weather display Figure 6 Change Weather c zl Change location UK Greenwich USA New York WAP3205 User s Guide Chapter 2 Introducing the Web Configurator The following table describes the labels in this screen Tab
58. Hour Format O on off Everyday O on of Mon on of Tue O on of Wed O on of Thu O on of Fri O on of Sat on of Sun hour 90 v min 00 hour hour 00 min 00 hour hour 90 min 00 hour hour 90 min 00 hour hour 90 min 00 hour hour 00 min 00 hour hour 00 min 00 hour hour 90 min 00 hour MEIE SS S S SH SS Note Specify the same begin time and end time means the whole day schedule The following table describes the labels in this screen Table 40 Network Wireless LAN Scheduling LABEL DESCRIPTION Wireless LAN Scheduling Enable Wireless Select this to enable Wireless LAN scheduling LAN Scheduling Scheduling WLAN Status Select On or Off to specify whether the Wireless LAN is turned on or off This field works in conjunction with the Day and For the following times fields Day Select Everyday or the specific days to turn the Wireless LAN on or off If you select Everyday you can not select any specific days This field works in conjunction with the For the following times field For the Select a begin time using the first set of hour and minute min drop following times down boxes and select an end time using the second set of hour and 24 Hour minute min drop down boxes If you have chosen On earlier for the Format WLAN Status the Wireless LAN
59. IP address for your WAP3205 Use the Wireless LAN screen Section 7 5 on page 57 to associate your WAP3205 acting as a wireless client with an existing access point WAP3205 User s Guide 53 Chapter 7 Client Mode 7 3 What You Need to Know With the exception of the Wireless LAN screens the LAN Monitor Configuration and Maintainance screens in Client mode are similar to the ones in Access Point Mode See Chapter 11 on page 101 through Chapter 12 on page 107 of this User s Guide 7 3 1 Setting your WAP3205 to Client Mode Log into the Web Configurator if you haven t already See the Quick start Guide for instructions on how to do this To set your WAP3205 to Client Mode go to Maintenance gt Sys OP Mode and select Client Mode Figure 25 Changing to Client mode Configuration Mode Access Point Mode Client Mode O Universal Repeater Mode Note You have to log in to the Web Configurator again when you change modes As soon as you do your WAP3205 is already in Client mode 7 3 2 Accessing the Web Configurator in Client Mode To login to Web Configurator in Client mode do the following Connect your computer to the LAN port of the WAP3205 The default IP address of the WAP3205 is 192 168 1 2 If you did not change this you can use the same IP address in Client mode Open a web browser such as Internet Explorer and type 192 168 1 2 as the web address in your web browser If you chang
60. NOT APPLY TO YOU 8 Export Restrictions THIS LICENSE AGREEMENT IS EXPRESSLY MADE SUBJECT TO ANY APPLI CABLE LAWS REGULATI ONS ORDERS OR OTHER RESTRICTIONS ON THE EXPORT OF THE SOFTWARE OR INFORMATION ABOUT SUCH SOFTWARE WHICH MAY BE IMPOSED FROM TIME TO TIME YOU SHALL NOT EXPORT THE SOFTWARE DOCUMENTATI ON OR INFORMATION ABOUT THE SOFTWARE AND DOCUMENTATI ON WITHOUT COMPLYI NG WITH SUCH LAWS REGULATI ONS ORDERS OR OTHER RESTRICTI ONS YOU AGREE TO INDEMNIFY ZyXEL AGAINST ALL CLAIMS LOSSES DAMAGES LIABILITIES COSTS AND EXPENSES INCLUDING REASONABLE ATTORNEYS FEES TO THE EXTENT SUCH CLAIMS ARISE OUT OF ANY BREACH OF THIS SECTION 8 9 Audit Rights ZyXEL SHALL HAVE THE RIGHT AT ITS OWN EXPENSE UPON REASONABLE PRIOR NOTICE TO PERIODICALLY INSPECT AND AUDIT YOUR RECORDS TO ENSURE YOUR COMPLIANCE WITH THE TERMS AND CONDITIONS OF THIS LICENSE AGREEMENT 10 Termination This License Agreement is effective until it is terminated You may terminate this License Agreement at any time by destroying or returning to ZyXEL all copies of the Software and Documentation in your possession or under your control ZyXEL may terminate this License Agreement for any reason including but not limited to if ZyXEL finds that you have violated any of the terms of this License Agreement Upon notification of termination you agree to destroy or return to ZyXEL all copies of the Software and Documentation and to certify in writing that all known cop
61. P data encryption Encryption Select Open or Shared Key from the drop down list box Type m This field specifies whether the wireless clients have to provide the WEP key to log into the wireless network Keep this setting at Open unless you want to force a key verification before communication between the wireless client and the ZyXEL Device occurs Select Shared Key to force the clients to provide the WEP key prior to communication WEP Key WEP Default Select a default WEP key to use for data encryption Key WEP Key 1 The WEP keys are used to encrypt data Both the WAP3205 and the WEP Key 4 access point must use the same WEP key for data transmission If you chose HEX enter 10 or 26 hexadecimal characters in the range of A F a f and 0 9 for example 11AA22BB33 for a 64 bit or 128 bit WEP key respectively If you chose ASCII enter any 5 or 13 ASCII characters case sensitive ranging from a z A Z and 0 9 for example MyKey for a 64 bit or 128 bit WEP key respectively You must configure at least one key only one key can be activated at any one time Apply Click Apply to save your changes back to the WAP3205 Reset Click Reset to reload the previous configuration for this screen WAP3205 User s Guide Chapter 8 Universal Repeater Mode 8 5 3 WPA 2 PSK Figure 39 Universal Repeater Mode Wireless LAN gt Universal Repeater WPA 2 PSK General Security MAC Filter Advanced QoS WPS WPS
62. P3205 the device the product or the system in this User s Guide Product labels screen names field labels and field choices are all in bold font A key stroke is denoted by square brackets and uppercase text for example ENTER means the enter or return key on your keyboard Enter means for you to type one or more characters and then press the ENTER key Select or choose means for you to use one of the predefined choices A right angle bracket gt within a screen name denotes a mouse click For example Maintenance gt Log gt Log Setting means you first click Maintenance in the navigation panel then the Log sub menu and finally the Log Setting tab to get to that screen Units of measurement may denote the metric value or the scientific value For example k for kilo may denote 1000 or 1024 M for mega may denote 1000000 or 1048576 and so on e g is a Shorthand for for instance and i e means that is or in other words WAP3205 User s Guide Document Conventions Icons Used in Figures Figures in this User s Guide may use the following generic icons The WAP3205 icon is not an exact representation of your device WAP3205 Computer Notebook computer Server Modem Telephone Switch I 3 WAP3205 User s Guide Safety Warnings Safety Warnings Do NOT use this product near water for example in a wet basement or near a swimming
63. Repeater Parameters SSID Enter the name of the access point to which you are connecting MAC Address Enter the MAC address of the access point to which you are connecting Optional Security Mode Select No Security if the access point to which you want to connect does not use encryption Apply Click Apply to save your changes back to the WAP3205 Reset Click Reset to reload the previous configuration for this screen 8 5 2 Static WEP Figure 38 Universal Repeater Mode Wireless LAN gt Universal Repeater Static WEP General Security MAC Filter Advanced QoS WPS WPS Station Scheduling Universal Repeater Universal Repeater Parameters SSID MAC Address Optional Security Mode Static WEP Y Encryption Type Open v WEP Key WEP Default Key Key 1 w WEP Key 1 ASCI v WEP Key 2 Asc v WEP Key 3 JLASCI un WEP Key 4 asei v WAP3205 User s Guide Chapter 8 Universal Repeater Mode The following table describes the labels in this screen Table 28 Universal Repeater Mode Wireless LAN Universal Repeater Static WEP LABEL DESCRIPTION Universal Repeater Parameters SSID Enter the name of the access point to which you are connecting MAC Address Enter the MAC address of the access point to which you are connecting Optional Security Mode Select Static WEP if the access point to which you want to connect uses WE
64. S Use this screen to add a wireless station to the network with the WAP3205 s first SSID using WPS Click WPS in the Wireless Security to open the following screen Figure 18 Wireless Security WPS Wireless Click the Wi Fi Protected i TTT number enter 42947240 in Security Setup button of your it wireless client and then click the button on the bottom wireless security x WiFi Protected Setup WPS provides you a easier and faster way to connect your computers device to your wireless network Use one of the following approaches to If your wireless client requires the Router s PIN Register the PIN number of your wireless client The following table describes the labels in this screen Table 13 Wireless Security WPS LABEL DESCRIPTION Wireless Security WPS Click this to go back to the Wireless Security screen Create a secure wireless network simply by pressing the button The WAP3205 scans for a WPS enabled device within the range and performs wireless security information synchronization Note After you click the WPS button on this screen you have to press a similar button in the wireless station utility within 2 minutes To add the second wireless station you have to press these buttons on both device and the wireless station again after the first 2 minutes WAP3205 User s Guide Chapter 5 Easy Mode Table 13 Wireless Security WPS
65. Station Scheduling Universal Repeater Universal Repeater Parameters SSID MAC Address Optional Security Mode WPA2 PSK w Encryption Type AES b Pre Shared Key The following table describes the labels in this screen Table 29 Universal Repeater Mode Wireless LAN gt Universal Repeater WPA 2 PSK LABEL DESCRIPTION Universal Repeater Parameters SSID Enter the name of the access point to which you are connecting MAC Address Enter the MAC address of the access point to which you are connecting Optional Security Mode Select WPA PSK or WPA2 PSK if the access point to which you want to connect uses WPA PSK or WPA2 PSK Encryption Select the type of wireless encryption employed by the access point to Type which you want to connect Pre Shared WPA PSK or WPA2 PSK uses a simple common password for Key authentication Type the password employed by the access point to which you want to connect Apply Click Apply to save your changes back to the WAP3205 Reset Click Reset to reload the previous configuration for this screen WAP3205 User s Guide Tutorials 9 1 Overview This chapter provides tutorials for your WAP3205 in access point or universal repeater mode as follows Connecting to the Internet from an Access Point Configuring Wireless Security Using WPS Enabling and Configuring Wireless Security No WPS 9 2 Connecting to the Internet from an Access Po
66. T yes BOOTPROTO static IPADDR 192 168 1 10 NETMASK 255 255 255 0 USERCTL no PEERDNS yes TYPE Ethernet 2 f you know your DNS server IP address es enter the DNS server information in the resolv conf file in the etc directory The following figure shows an example where two DNS server IP addresses are specified Figure 110 Red Hat 9 0 DNS Settings in resolv conf nameserver 172 23 5 1 nameserver 172 23 5 2 3 After you edit and save the configuration files you must restart the network card Enter network restart inthe etc rc d init d directory The following figure shows an example Figure 111 Red Hat 9 0 Restart Ethernet Card root localhost init d network restart Shutting down interface eth0 Shutting down loopback interface Setting network parameters Bringing up loopback interface Bringing up interface eth0 oOoOoooOo ROR ROR N WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address Verifying Settings Enter ifconfig in a terminal screen to check your TCP IP properties Figure 112 Red Hat 9 0 Checking TCP IP Properties root localhost ifconfig eth0 Link encap Ethernet HWaddr 00 50 BA 72 5B 44 inet addr 172 23 19 129 Bcast 172 23 19 255 Mask 255 255 255 0 UP BROADCAST RUNNING MULTICAST MTU 1500 Metric 1 RX packets 717 errors 0 dropped 0 overruns 0 frame 0 TX packets 13 errors 0 dropped 0 overruns 0 carrier 0 col
67. UNINTERUPTED FASHION OR THAT ANY DEFECTS OR ERRORS IN THE SOFTWARE WILL BE CORRECTED OR THAT THE SOFTWARE IS COMPATIBLE WITH ANY PARTICULAR PLATFORM SOME JURISDICTIONS DO NOT ALLOW THE WAIVER OR EXCLUSION OF IMPLIED WARRANTIES SO THEY MAY NOT APPLY TO YOU IF THIS EXCLUSION IS HELD TO BE UNENFORCEABLE BY A COURT OF COMPETENT JURISDICTION THEN ALL EXPRESS AND IMPLIED WARRANTIES SHALL BE LIMITED IN DURATION TO A PERIOD OF THIRTY 30 DAYS FROM THE DATE OF PURCHASE OF THE SOFTWARE AND NO WARRANTIES SHALL APPLY AFTER THAT PERIOD 7 Limitation of Liability WAP3205 User s Guide Appendix F Legal Information IN NO EVENT WILL ZyXEL BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INCI DENTAL OR CONSEQUENTI AL DAMAGES INCLUDI NG WITHOUT LI MITATI ON INDIRECT SPECIAL PUNITI VE OR EXEMPLARY DAMAGES FOR LOSS OF BUSINESS LOSS OF PROFITS BUSINESS INTERRUPTI ON OR LOSS OF BUSINESS INFORMATI ON ARISING OUT OF THE USE OF OR INABILITY TO USE THE PROGRAM OR FOR ANY CLAIM BY ANY OTHER PARTY EVEN IF ZyXEL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES ZyXEL s AGGREGATE LIABILITY WITH RESPECT TO ITS OBLIGATIONS UNDER THIS AGREEMENT OR OTHERWISE WITH RESPECT TO THE SOFTWARE AND DOCUMENTATI ON OR OTHERWISE SHALL BE EQUAL TO THE PURCHASE PRICE BUT SHALL IN NO EVENT EXCEED THE PRODUCT S PRICE BECAUSE SOME STATES COUNTRI ES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES THE ABOVE LIMITATION MAY
68. US 172 RADIUS is based on a client server model that supports authentication authorization and accounting The access point is the client and the server is the RADIUS server The RADIUS server handles the following tasks Authentication Determines the identity of the users Authorization Determines the network services available to authenticated users once they are connected to the network Accounting Keeps track of the client s network activity RADIUS is a simple package exchange in which your AP acts as a message relay between the wireless station and the network RADIUS server WAP3205 User s Guide Appendix D Wireless LANs Types of RADIUS Messages The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication Access Request Sent by an access point requesting authentication Access Reject Sent by a RADIUS server rejecting access Access Accept Sent by a RADIUS server allowing access e Access Challenge Sent by a RADIUS server requesting more information in order to allow access The access point sends a proper response from the user and then sends another Access Request message The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user accounting Accounting Request Sent by the access point requesting accounting Accounting Response Sent by the RADIUS server to indicate tha
69. WAP3205 Wireless N Access Point Default Login Details IP Address http 192 168 1 2 Password 1234 Firmware Version 1 0 Edition 1 6 2009 www zyxel com Copyright 2009 ZyXEL Communications Corporation About This User s Guide About This User s Guide Intended Audience This manual is intended for people who want to configure the WAP3205 using the Web Configurator Related Documentation Quick Start Guide The Quick Start Guide is designed to help you get up and running right away It contains information on setting up your network and configuring for Internet access Support Disc Refer to the included CD for support documents Documentation Feedback Send your comments questions or suggestions to techwriters zyxel com tw Thank you The Technical Writing Team ZyXEL Communications Corp 6 Innovation Road Il Science Based Industrial Park Hsinchu 30099 Taiwan Need More Help More help is available at www zyxel com ET ET Download Library gt Firmware Knowledge Base Software Glossary Driver Support amp Feedback Datasheet Warranty Information Tech Doc Overview ZyXEL Windows Vista Support User s Guide Forum Quick start guide CLI Reference Guide Support note Certification Declaration SNMP MIB File WAP3205 User s Guide 3 About This User s Guide Download Library Search for the latest product updates and documentation from this link Read the Tech Do
70. a RR Pr ana E ose caneantnbel QURE EP PASE RE H PUR KREU UIDI E EP OHRRR DEOR 38 cou Li cN s M R H 39 EB UPS hia a eiue addu EOD EE x Le abdo ain N A ONE On NTE 41 57 Status Screen ii Easy MOE e vanidasntet aiaiai EEEN a 42 Chapter 6 Acess Nola X4 7 Y P 45 NES CSS e c M M 45 02 Vee TOn Cani DO eer 45 55 Nha rou Need ID OD ararua kenaa aaa aaa aaa 45 8 3 1 Setting your WAP3205 To AP Mod 1uiiesi cuarta nnana aa a 46 6 3 2 Accessing the Web Configurator in Access Point Mode seessesser 46 6 3 3 Configuring your WLAN LAN and Maintenance Settings sss 47 GAAP Moge talus SOISBIY 2 ioecee troie e Ure e PLAN MD tL DUET a OAE E FM PODNERE UI ANA 47 Chapter 7 cci 53 VES S o e east Te 53 FECE CI S EET TUR Ne Serum MET NOMS 53 Ta Nhar vou Need tO dio ER 54 74 1 Sating your WAPS205 to Client ModE iae n e e ad da cene de 54 7 3 2 Accessing the Web Configurator in Client Mode seseesseeee 54 2A Glem Noda aus rO emia 55 7 0 Wireless LAN Profile SOL BEI eessasuirssseie cinneis eeann b bx DE udo DG ERR bx Dd FEET RR 57 To AGIM u Now WLAN PONG oinik 58 Tor ade SU VEV CRON aa ePi d an Rd eb c pd AEEA 62 FREUE E eU T TT EN L
71. allows you to upload a new or previously saved configuration file from your computer to your WAP3205 Click Maintenance Backup Restore Information related to factory defaults backup configuration and restoring configuration appears as shown next Figure 71 Maintenance Backup Restore Backup Restore Backup Configuration Click Backup to save the current configuration of your system to your computer Restore Configuration To restore a previously saved configuration file to your system browse to the location of the configuration file and click Upload File Path Back to Factory Defaults Click Reset to clear all user entered configuration information and return to factory defaults After resetting the Password will be 1234 LAN IP address will be 192 168 1 2 The following table describes the labels in this screen Table 48 Maintenance Backup Restore LABEL DESCRIPTION Backup Click Backup to save the WAP3205 s current configuration to your computer File Path Type in the location of the file you want to upload in this field or click Browse to find it Browse Click Browse to find the file you want to upload Remember that you must decompress compressed ZIP files before you can upload them WAP3205 User s Guide 113 Chapter 12 Maintenance Table 48 Maintenance Backup Restore LABEL DESCRIPTION Upload Click Upload to begin the upload
72. an choose depend on the type of user authentication Table 30 Types of Encryption for Each Type of Authentication NO AUTHENTICATION Weakest No Security WEP T WPA PSK Strongest WPA2 PSK Usually you should set up the strongest encryption that every wireless client in the wireless network supports Suppose the wireless network has two wireless clients Device A only supports WEP and device B supports WEP and WPA PSK Therefore you should set up WEP in the wireless network Note It is recommended that wireless networks use WPA PSK or stronger encryption IEEE 802 1x and WEP encryption are better than none at all but it is still possible for unauthorized devices to figure out the original information pretty quickly When you select WPA2 PSK in your WAP3205 you can also select an option WPA Compatible to support WPA as well In this case if some wireless clients support WPA and some support WPA2 you should set up WPA2 PSK depending on the type of wireless network login and select the WPA Compatible option in the WAP3205 Many types of encryption use a key to protect the information in the wireless network The longer the key the stronger the encryption Every wireless client in the wireless network must have the same key 10 3 1 4 WPS WiFi Protected Setup WPS is an industry standard specification defined by the WiFi Alliance WPS allows you to quickly set up a wireless network with strong security
73. anagement session Use the Password screen Section 12 4 on page 108 to change your WAP3205 s system password Use the Time screen Section 12 5 on page 109 to change your WAP3205 s time and date Use the Firmware Upgrade screen Section 12 6 on page 111 to upload firmware to your WAP3205 Use the Backup Restore screen Section 12 8 on page 114 to view information related to factory defaults backup configuration and restoring configuration Use the Reset Restart screen Section 12 8 on page 114 to reboot the WAP3205 without turning the power off Use the Sys OP Mode screen Section 12 10 on page 116 to select how you want to use your WAP3205 WAP3205 User s Guide 1 07 Chapter 12 Maintenance 12 3 General Screen Use this screen to set the management session timeout period Click Maintenance gt General The following screen displays Figure 66 Maintenance General System Setup Administrator Inactivity Timer minutes 0 means no timeout The following table describes the labels in this screen Table 44 Maintenance General LABEL DESCRIPTION Administrator Type how many minutes a management session can be left idle before Inactivity Timer the session times out The default is 5 minutes After it times out you have to log in with your password again Very long idle timeouts may have security risks A value of 0 means a management session never times out no matter how long it has
74. and information at www zyxel com for global products or at www us zyxel com for North American products End User License Agreement for WAP3205 WARNING ZyXEL Communications Corp IS WILLING TO LICENSE THE ENCLOSED SOFTWARE TO YOU ONLY UPON THE CONDITION THAT YOU ACCEPT ALL OF THE TERMS CONTAI NED IN THIS LICENSE AGREEMENT PLEASE READ THE TERMS CAREFULLY BEFORE COMPLETING THE INSTALLATION PROCESS AS INSTALLING THE SOFTWARE WILL INDICATE YOUR ASSENT TO THEM IF YOU DO NOT AGREE TO THESE TERMS THEN ZyXEL INC IS UNWILLING TO LICENSE THE SOFTWARE TO YOU IN WHICH EVENT YOU SHOULD RETURN THE UNINSTALLED SOFTWARE AND PACKAGING TO THE PLACE FROM WHICH IT WAS ACQUIRED AND YOUR MONEY WILL BE REFUNDED WAP3205 User s Guide Appendix F Legal Information 1 Grant of License for Personal Use ZyXEL Communications Corp ZyXEL grants you a non exclusive non sublicense non transferable license to use the program with which this license is distributed the Software including any documentation files accompanying the Software Documentation for internal business use only for up to the number of users specified in sales order and invoice You have the right to make one backup copy of the Software and Documentation solely for archival back up or disaster recovery purposes You shall not exceed the scope of the license granted hereunder Any rights not expressly granted by ZyXEL to you are reserved by ZyXEL and all implied licenses a
75. and IEEE802 11g compliant WLAN devices to associate with the WAP3205 The transmission rate of your WAP3205 might be reduced Select 11 b g n mixed mode to allow both IEEE802 11b IEEE802 11g and IEEE802 11n compliant WLAN devices to associate with the WAP3205 The transmission rate of your WAP3205 might be reduced HT High Throughput Physical Mode Use the fields below to configure the 802 11 wireless environment of your WAP3205 Operating Choose this according to the wireless mode s used in your network Mode Mixed Select this if the wireless clients in your network use different wireless modes for example IEEE 802 11b g and IEEE 802 1n modes Green Select this if the wireless clients in your network uses only one type of wireless mode for example IEEEE 802 11 n only Channel Select the channel bandwidth you want to use for your wireless network Bandwidth It is recommended that you select 20 40 20 40 MHz Select 20 MHz if you want to lessen radio interference with other wireless devices in your neighborhood Guard Select Auto to increase data throughput However this may make data Interval transfer more prone to errors Select Long to prioritize data integrity This may be because your wireless network is busy and congested or the WAP3205 is located in an environment prone to radio interference Extension This is set to Auto by default Channel If you select 20 40 as your Channel Bandwidth the ext
76. and Subnetting that you entered You don t need to change the subnet mask computed by the WAP3205 unless you are instructed to do otherwise Private IP Addresses Every machine on the Internet must have a unique address If your networks are isolated from the Internet running only between two branch offices for example you can assign any IP addresses to the hosts without problems However the Internet Assigned Numbers Authority IANA has reserved the following three blocks of IP addresses specifically for private networks e 10 0 0 0 10 255 255 255 e 172 16 0 0 172 31 255 255 192 168 0 0 192 168 255 255 You can obtain your IP address from the IANA from an ISP or it can be assigned from a private network If you belong to a small organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization you should consult your network administrator for the appropriate IP addresses Regardless of your particular situation do not create an arbitrary IP address always follow the guidelines above For more information on address assignment please refer to RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space WAP3205 User s Guide Setting up Your Computer s IP Address All computers must have a 10M or 100M Ethernet adapter card an
77. as been set up This displays Unconfigured if the WPS has not been set up Click the status to display Network gt Wireless LAN gt WPS screen Interface Status Interface This displays the WAP3205 port types The port types are LAN and WLAN Status For the LAN ports this field displays Down line is down or Up line is up or connected For the WLAN it displays Up when the WLAN is enabled or Down when the WLAN is disabled Rate For the LAN ports this displays the port speed or N A when the line is disconnected For the WLAN it displays the maximum transmission rate when the WLAN is enabled and N A when the WLAN is disabled System Status Item This column shows the type of data the WAP3205 is recording Data This column shows the actual data recorded by the WAP3205 System Up Time This is the total time the WAP3205 has been on Current Date Time This field displays your WAP3205 s present date and time System Resource CPU Usage This displays what percentage of the WAP3205 s processing ability is currently used When this percentage is close to 10096 the WAP3205 is running at full load and the throughput is not going to improve anymore If you want some applications to have more throughput you should turn off other applications for example using bandwidth management Memory Usage This shows what percentage of the heap memory the WAP3205 is using Syste
78. as und deese ERTER 23 FX Hae Ee i EET E E 24 2 287 Password Seien usc ceto bed m denne cess aaa Kebab aequ HALE aai auda DaEEL S rain 25 ua OH DE A T E AEA AEI A E E A E EE A EEE ASET 25 2 ROSS hg NAP E aa a 27 2 3 1 Procedure to Use the Reset Button 20 0 ccccecccessseccceeeeeesceeeeceenseeceeeeseeeseeeeeeeaseseeeees 28 Chapter 3 MONIO ano m Ear SEE EE MM E ELE MEE M EIE 29 LA EG T VI S RR ER ERR REOR NIS UAR 29 3 2 hast FON D Ol DO sssutzsiadaie dean Saundbrsnnaaanh saan dds brabrasct eem drip icd tbv E dimitto dat date EA 29 RE e M 29 OE PCW ON AD NES unsicunudiint certain coho es Ui LL LEID MI A UA EIE 30 05 WEAN SEn SIS an ibit ondes oeiuedn Cru ineo odisse tute ei E at uET 32 WAP3205 User s Guide Table of Contents Chapter 4 MEE sree Oy NS uc 33 CURE Ea Romane DT te cect a etn Seat NOI TA Taek an teen rere Teer ret DIDIT RTT T 33 A iT ors Nri eT E EO Raia 33 e EE A a e s E A AT TA T E E DA E sauna EU EK YR O EN 33 Chapter 5 Easy WAG O O OO O 35 MEG O E E mmt 35 Be VHS TOI Cap DO Lospxosonidiera a ERIORPHA AER ED REO OE ERE Cu a RE Eu o c 36 Dos vens FONT Tes TO KNOR io o toe tiep e ovr Ses Ul ga pe dades Mud du bleu tg Deco a 36 Da Navigahon T 37 ONO E a renee cre arr oS nan ere ern rr ee uos EP RUM NR af 5S bang PS ausserndcate vitat oe versa oto Pr L
79. ate IEEE 802 11g Wireless LAN IEEE 802 11g is fully compatible with the IEEE 802 11b standard This means an IEEE 802 11b adapter can interface directly with an IEEE 802 11g access point and vice versa at 11 Mbps or lower depending on range IEEE 802 11g has WAP3205 User s Guide 1 71 Appendix D Wireless LANs several intermediate rate steps between the maximum and minimum data rates The IEEE 802 11g data rate and modulation are as follows Table 63 IEEE 802 11g MBPS MODULATION 1 DBPSK Differential Binary Phase Shift Keyed 2 DQPSK Differential Quadrature Phase Shift Keying 5 5 11 CCK Complementary Code Keying 6 9 12 18 24 36 OFDM Orthogonal Frequency Division Multiplexing 48 54 IEEE 802 1x In June 2001 the IEEE 802 1x standard was designed to extend the features of IEEE 802 11 to support extended authentication as well as providing additional accounting and control features It is supported by Windows XP and a number of network devices Some advantages of IEEE 802 1x are User based identification that allows for roaming Support for RADIUS Remote Authentication Dial In User Service RFC 2138 2139 for centralized user profile and accounting management on a network RADIUS server Support for EAP Extensible Authentication Protocol RFC 2486 that allows additional authentication methods to be deployed with no changes to the access point or the wireless stations RADI
80. based management interface that allows easy setup and management of the WAP3205 via Internet browser Use Internet Explorer 6 0 and later or Netscape Navigator 7 0 and later versions or Safari 2 0 or later versions The recommended screen resolution is 1024 by 768 pixels In order to use the Web Configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScripts enabled by default Java permissions enabled by default Refer to the Troubleshooting chapter Chapter 13 on page 119 to see how to make sure these functions are allowed in Internet Explorer 2 2 Accessing the Web Configurator Make sure your WAP3205 hardware is properly connected and prepare your computer or computer network to connect to the WAP3205 refer to the Quick Start Guide Launch your web browser Type http 192 168 1 2 as the website address Your computer must be in the same subnet in order to access this website address WAP3205 User s Guide EJ Chapter 2 Introducing the Web Configurator 2 2 1 Login Screen The Web Configurator initially displays the following login screen Figure 3 Login screen iint configuration interface ick Login Password Ea max 30 alphanumeric printable characters and no spa IEUIUERLEMEE English Y The following table describes the labels in this screen Table 2 Login screen LABEL
81. be reset to 1234 and the IP address will be reset to 192 168 1 2 WAP3205 User s Guide Chapter 2 Introducing the Web Configurator 2 3 1 Procedure to Use the Reset Button 1 Make sure the power LED is on 2 Press the RESET button for longer than 1 second to restart reboot the WAP3205 3 Press the RESET button for longer than five seconds to set the WAP3205 back to its factory default configurations WAP3205 User s Guide Monitor 3 1 Overview This chapter discusses read only information related to the device state of the WAP3205 Note To access the Monitor screens you can also click the links in the Summary table of the Status screen to view the packets sent received as well as the status of clients connected to the WAP3205 3 2 What You Can Do Use the Log screen Section 3 3 on page 29 to view the logs for the categories such as system maintenance system errors and so on use the Packet Statistics screen Section 3 4 on page 30 to view port status packet specific statistics the system up time and so on Use the WLAN Station Status screen Section 3 5 on page 32 to view the wireless stations that are currently associated to the WAP3205 3 3 Log Use the View Log screen to see the logged messages for the WAP3205 Log entries in red indicate system error logs The log wraps around and deletes the old entries after it fills WAP3205 User s Guide Chapter 3 Monitor Click Mo
82. c Overview to find out how to efficiently use the User Guide Quick Start Guide and Command Line Interface Reference Guide in order to better understand how to use your product Knowledge Base If you have a specific question about your product the answer may be here This is a collection of answers to previously asked questions about ZyXEL products Forum This contains discussions on ZyXEL products Learn from others who use ZyXEL products and share your experiences as well Customer Support Should problems arise that cannot be solved by the methods listed above you should contact your vendor If you cannot contact your vendor then contact a ZyXEL office for the region in which you bought the device See http www zyxel com web contact us php for contact information Please have the following information ready when you contact an office Product model and serial number Warranty Information Date that you received your device Brief description of the problem and the steps you took to solve it WAP3205 User s Guide Document Conventions Document Conventions Warnings and Notes These are how warnings and notes are shown in this User s Guide Warnings tell you about things that could harm you or your device Note Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations Syntax Conventions The WAP3205 may be referred to as the WA
83. ce Set ESS An Extended Service Set ESS consists of a series of overlapping BSSs each containing an access point with each access point connected together by a wired network This wired connection between APs is called a Distribution System DS This type of wireless LAN topology is called an Infrastructure WLAN The Access Points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood WAP3205 User s Guide Appendix D Wireless LANs An ESSID ESS IDentification uniquely identifies each ESS All access points and their associated wireless stations within the same ESS must have the same ESSID in order to communicate Figure 115 Infrastructure WLAN ey if 1 oe s BSS Wireless Station B T Station C Meg lam t Md m mmm NES wem T gt or oe Et ye 7 TES ro wx E he Channel A channel is the radio frequency ies used by IEEE 802 11a b g wireless devices Channels available depend on your geographical area You may have a choice of channels for your region so you should use a different channel than an adjacent AP access point to reduce interference Interference occurs when radio signals from different access points overlap causing interference and degrading performance Adjacent channels partially overlap however To avoid interference due to overlap your AP should be on a channel at least fiv
84. clients The wireless clients use the access point AP to interact with other devices such as the printer or with the Internet Your WAP3205 is the AP WAP3205 User s Guide Chapter 10 Wireless LAN 10 2 What You Can Do Use the General screen Section 10 4 on page 87 to enter the SSID enable intra BSS traffic and select the channel Use the Security screen Section 10 5 on page 88 to configure wireless security between the WAP3205 and the wireless clients Use the MAC Filter screen Section 10 6 on page 92 to allow or deny wireless stations based on their MAC addresses from connecting to the WAP3205 Use the Advanced screen Section 10 7 on page 93 to configure wireless advanced features such as set the RTS CTS Threshold and HT physical mode Use the QoS screen Section 10 8 on page 95 to enable Wifi MultiMedia Quality of Service WMMQoS This allows the WAP3205 to automatically set priority levels to services such as e mail VoIP chat and so on Use the WPS screen Section 10 9 on page 95 to quickly set up a wireless network with strong security without having to configure security settings manually Use the WPS Station screen Section 10 10 on page 97 to add a wireless station using WPS Use the Scheduling screen Section 10 11 on page 97 to set the times your wireless LAN is turned on and off Use the WDS screen Section 10 12 on page 99 to configure Wireless Distribution System on your WAP3205 1
85. cross the network These networking devices are also known as hosts Subnet masks determine the maximum number of possible hosts on a network You can also use subnet masks to divide one network into multiple sub networks Introduction to IP Addresses One part of the IP address is the network number and the other part is the host ID In the same way that houses on a street share a common street name the hosts on a network share a common network number Similarly as each house has its own house number each host on the network has its own unique identifying number the host ID Routers use the network number to send packets to the correct network while the host ID determines to which host on the network the packets are delivered Structure An IP address is made up of four parts written in dotted decimal notation for example 192 168 1 1 Each of these four parts is known as an octet An octet is an eight digit binary number for example 11000000 which is 192 in decimal notation Therefore each octet has a possible range of 00000000 to 11111111 in binary or O to 255 in decimal WAP3205 User s Guide Appendix B IP Addresses and Subnetting The following figure shows an example IP address in which the first three octets 192 168 1 are the network number and the fourth octet 16 is the host ID Figure 87 Network Number and Host ID 192 168 1 16 pm ay x af uf i gt 1 mm li n i n t i i
86. ctions in Windows 2000 NT 11 Turn on your Prestige and restart your computer if prompted Verifying Settings 1 Click Start All Programs Accessories and then Command Prompt 2 Inthe Command Prompt window type ipconfig and then press ENTER You can also open Network Connections right click a network connection click Status and then click the Support tab WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address Macintosh OS 8 9 1 Click the Apple menu Control Panel and double click TCP I P to open the TCP I P Control Panel Figure 100 Macintosh OS 8 9 Apple Menu File Edit View Window Special Help About This Computer D Apple System Profiler E Calculator gt Chooser Control Panels gt IT Favorites Key Caps Network Browser Recent Applications D Recent Documents cif Remote Access Status Scrapbook P Sherlock 2 Jj Speakable Items J Stickies ADSL Control and Status Appearance Apple Menu Options AppleTalk ColorSync Control Strip Date amp Time DialAssist Energy Saver Extensions Manager File Exchange File Sharing General Controls Internet Keyboard Keychain Access Launcher Location Manager Memory Modem Monitors Mouse Multiple Users Numbers QuickTime Settings Remote Access Software Update Sound Startup Disk TCP IP USB Printer Sharing WAP3205 User s Gu
87. d TCP IP installed Windows 95 98 Me NT 2000 XP Macintosh OS 7 and later operating systems and all versions of UNIX LINUX include the software components you need to install and use TCP IP on your computer Windows 3 1 requires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configure the TCP IP settings in order to communicate with your network If you manually assign IP information instead of using dynamic assignment make sure that your computers have IP addresses that place them in the same subnet as the Prestige s LAN port WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address Windows 95 98 Me Click Start Settings Control Panel and double click the Network icon to open the Network window Figure 90 Windows 95 98 Me Network Configuration LPR for TCP IP Printing 3Com EtherLink 10 100 PCI T NIC 3C905B TX Dial Up Adapter USB Fast Ethernet Adapter Installing Components The Network window Configuration tab displays a list of installed components You need a network adapter the TCP IP protocol and Client for Microsoft Networks If you need the adapter In the Network window click Add Select Adapter and then click Add Select the manufacturer and model of your network adapter and then click OK If you
88. de you are viewing Expert Summary Packet Statistics Click Details to go to the Monitor gt Packet Statistics screen Section 3 4 on page 30 Use this screen to view port status and packet specific statistics WAP3205 User s Guide Chapter 7 Client Mode 7 5 Wireless LAN Profile Screen Use this screen to view the wireless LAN profile settings of your WAP3205 Go to Configuration Wireless LAN Profile to open the following screen Figure 27 Client Mode WLAN gt Profile Profile Site Survey WPS Station Profile Pofile List Profile Miproroot PROFOO2 SSID Channel Authentication Encryption Network Type ZyXEL Auto TWexample 1 WPA PSK TKIP OPEN NONE Infrastructure Ad Hoc The following table describes the labels in this screen Table 19 Client Mode WLAN gt Profile Authentication LABEL DESCRIPTION Profile List Select a profile to remove modify or enable it Profile This displays the name of the pre configured profile indicates the profile is activated and the WAP3205 connects to the specified wireless network indicates the profile is activated but the specified wireless network is not available or the WAP3205 fails to associate with the wireless network SSID This displays the SSID of the wireless network with which this profile associates Channel This displays the channel number used by this profile Auto means the WAP3205 automatically scans f
89. e Repair EN Repair this connection Bridge Connections mij Rename this connection view status of this connection Create Shortcut Change settings of this connection WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address 4 Select Internet Protocol TCP I P under the General tab in Win XP and then click Properties Figure 96 Windows XP Local Area Connection Properties Local Area Connection Properties General Authentication Advanced Connect using HS Accton EN1207D TX PCI Fast Ethernet Adapter This connection uses the following items v E Client for Microsoft Networks vi dil File and Printer Sharing for Microsoft Networks ntemet Protocol TCP IP 9 _ Install KI Properties 2 Description Transmission Control Protocol Internet Protocol The default wide area network protocol that provides communication across diverse interconnected networks C Show icon in notification area when connected 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain an I P address automatically f you have a static IP address click Use the following I P Address and fill in the IP address Subnet mask and Default gateway fields WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address Click Advanced Figure 97 Windows XP Interne
90. e Web Configurator Host Name This is the System Name you enter in the Maintenance gt General screen It is for identification purposes Firmware Version This is the firmware version and the date created Sys OP Mode This is the device mode Section 4 1 2 on page 33 to which the WAP3205 is set Client Mode LAN Information MAC Address This shows the LAN Ethernet adapter MAC Address of your device IP Address This shows the LAN port s IP address IP Subnet Mask This shows the LAN port s subnet mask DHCP This shows the LAN port s DHCP role Client or None WLAN Information WLAN OP Mode This is the device mode Section 4 1 2 on page 33 to which the WAP3205 s wireless LAN is set Client Mode MAC Address This shows the wireless adapter MAC Address of your device WAP3205 User s Guide E Chapter 7 Client Mode Table 18 Status Screen Client Mode LABEL DESCRIPTION Status This shows the current status of the Wireless LAN ON Name SSID This shows a descriptive name used to identify the WAP3205 in the wireless LAN Connect Status This shows whether or not the WAP3205 has successfully associated with an access point Connected or Disassociated 802 11 Mode This shows the wireless standard WPS This displays Configured when the WPS has been set up This displays Unconfigured if the WPS has not been set up
91. e channels away from a channel that an adjacent AP is using For example if your region has 11 channels and an adjacent AP is using channel 1 then you need to select a channel between 6 or 11 RTS CTS A hidden node occurs when two stations are within range of the same access point but are not within range of each other The following figure illustrates a hidden node Both stations STA are within range of the access point AP or WAP3205 User s Guide Appendix D Wireless LANs 170 wireless gateway but out of range of each other so they cannot hear each other that is they do not know if the channel is currently being used Therefore they are considered hidden from each other Figure 116 RTS CTS eig d CTS Range Station AP oa NN oe AN P d AP M a orn f diim i i j Q Rn E m a i M ACK eee Stations A and B do not 7 po i Station A T gt hear each other They 77 can hearthe AP When station A sends data to the AP it might not know that the station B is already using the channel If these two stations send data at the same time collisions may occur when both sets of data arrive at the AP at the same time resulting in a loss of messages for both stations RTS CTS is designed to prevent collisions due to hidden nodes An RTS CTS defines the biggest size data frame you can send before an RTS Request To Send CTS Clear to Send handshake is invoked When a da
92. e of obstructions on a sturdy wall 2 Drill two holes for the screws Be careful to avoid damaging pipes or cables located inside the wall when drilling holes for the screws 3 Do not insert the screws all the way into the wall Leave a small gap of about 0 5 cm between the heads of the screws and the wall WAP3205 User s Guide Chapter 14 Product Specifications 4 Make sure the screws are snugly fastened to the wall They need to hold the weight of the WAP3205 with the connection cables 5 Align the holes on the back of the WAP3205 with the screws on the wall Hang the WAP3205 on the screws Figure 77 Wall mounting Example The following are dimensions of an M4 tap screw and masonry plug used for wall mounting All measurements are in millimeters mm Figure 78 Masonry Plug and M4 Tap Screw 4 22 0 1 6 0 1 0 30 0 2 0 30 0 2 0 WAP3205 User s Guide 1 27 Chapter 14 Product Specifications WAP3205 User s Guide Index Pop up Windows JavaScripts and Java Permissions 131 IP Addresses and Subnetting 139 Setting up Your Computer s IP Address Wireless LANs 167 Common Services 179 Legal Information 183 Index 191 Pop up Windows JavaScripts and Java Permissions In order to use the Web Configurator you need to allow Web browser pop up windows from your device JavaScripts enabled by default Java permissions enabled by default Note In
93. ed ActiveX controls will not be downloaded Appropriate for most Internet sites Custom Level Default Level OK Cancel Apply 2 Click the Custom Level button 3 Scroll down to Scripting 4 Under Active scripting make sure that Enable is selected the default 5 Under Scripting of Java applets make sure that Enable is selected the default WAP3205 User s Guide Appendix A Pop up Windows JavaScripts and Java Permissions 6 Click OK to close the window Security Settings Settings 5 Scripting E Active scripting C 3 nicahle 3 Allow paste operations via script Q Disable 9 Enable Q Prompt E Scripting of Java applets O Disable AD Enable 2 O Promp Llenar Aubkhankie skinn Figure 84 Security Settings Java Scripting Reset custom settings Reset to Medium Reset cms Java Permissions 1 From Internet Explorer click Tools I nternet Options and then the Security tab 2 Click the Custom Level button 3 Scroll down to Microsoft VM 4 UnderJava permissions make sure that a safety level is selected WAP3205 User s Guide Appendix A Pop up Windows JavaScripts and Java Permissions 5 Click OK to close the window Figure 85 Security Settings Java Security Settings Settings Q Disable 9 Enable 5 Font download Disable 9 Enable p Q Prompt 3 Microsoft VM E Java permissions Q custom
94. ed the IP address of your WAP3205 while in Access Point mode use this IP address in Client mode The Client mode IP address is always the same as the Access Point mode IP adderss Note After clicking Login the Easy mode appears Refer to Chapter 5 on page 35 for the Easy mode screens Click Expert Mode to see the screens described in the sections following this WAP3205 User s Guide Chapter 7 Client Mode 7 4 Client Mode Status Screen Click to open the status screen Figure 26 Status Client Mode ZyXEL wars205 gJ Status Device Information Item Host Name Firmware Version Sys OP Mode LAN Information MAC Address IP Address IP Subnet Mask DHCP WLAN Information WLAN OP Mode MAC Address Status Connect Status 802 11 Mode e About Easy Mode Refresh Interval None Retresh Now Data Data WAP3205 System Up Time 42 mins 54 secs V1 DO BFR 0 B1 Current Date Time 2000 01 01 00 43 06 Client Mode System Resource CPU Usage 00 0C 43 41 88 44 Memory Usage 172 23 31 211 System Setting 255 255 255 0 Configuration Mode None Client Mode Summary 00 0C 43 41 88 44 Packet Statistics Details ON Disassociated 802 11b gin Confiqured Status The following table describes the labels shown in the Status screen Table 18 Status Screen Client Mode LABEL DESCRIPTION Logout Device Information Click this at any time to exit th
95. ed when WPS enabled Open the Status screen Verify your wireless and wireless security settings under Device Information and check if the WLAN connection is up under Interface Status Figure 45 Tutorial Checking Wireless Settings ZyXEL wars205 ra Status C Refresh interval None v _ Refresh Now Device Information System Status Item Data Item Data Host Name WAP3205 System Up Time 2 hours 5 mins 42 secs Firmware Version V1 00 BFR 0 B1 Current Date Time 2000 01 01 02 05 52 Sys OP Mode Access Point Mode System Resource LAN Information CPU Usage MAC Address 00 0 43 41 88 44 Memory Usage IP Address 172 23 31 211 System Setting IP Subnet Mask 255 255 255 0 Configuration Mode Default Gateway 172 23 31 254 DHCP None WLAN Information Bum WLAN OP Mode Access Point Mode Packet Statistice Details MAC Address 00 0C 43 41 88 44 WLAN Station Status Detalls Status ON Name SSID SSID_Example3 Channel Auto Channel Operating Channel Channel 01 2412MHz Security Mode WPA PSK 802 11 Mode 802 11b gin Configured Interface Status Interface Status LAN Up 78 WAP3205 User s Guide Chapter 9 Tutorials 9 4 1 Configure Your Notebook Note We use the ZyXEL NWD 211AN wireless adapter utility screens as an example for the wireless client The screens may vary for different models 1 The WAP3205 supports IEEE 802 11b IEEE 802 11g and IEEE 802
96. el Click Cancel to reload the previous configuration for this screen 10 5 3 WPA PSK WPA2 PSK Select WPA PSK or WPA2 PSK from the Security Mode list Figure 54 Network gt Wireless LAN gt Security WPA PSK WPA2 PSK General i Security MAC Filter Advanced QoS WPS WPS Station Scheduling WDS Security SSID ZyXEL v Security Mode WPA2 PSK YJ WPA Compatible Pre Shared Key 12345678 Group Key Update Timer 3500 seconds Note WPA PSK and WPA2 PSK can be configured when WPS enabled The following table describes the labels in this screen Table 34 Network gt Wireless LAN gt Security WPA PSK WPA2 PSK LABEL DESCRIPTION SSID Select the SSID for which you want to configure the security Security Mode Select WPA PSK or WPA2 PSK to enable data encryption WPA This field appears when you choose WPA2 PSK as the Security Mode Compatible M f Check this field to allow wireless devices using WPA PSK security mode to connect to your WAP3205 WAP3205 User s Guide Chapter 10 Wireless LAN Table 34 Network gt Wireless LAN gt Security WPA PSK WPA2 PSK LABEL DESCRIPTION Pre Shared Key WPA PSK WPA2 PSK uses a simple common password for authentication Type a pre shared key from 8 to 63 case sensitive keyboard characters Group Key The Group Key Update Timer is the rate at which the AP sends a new Update Timer group key out to all clients The de
97. ension channel enables the WAP3205 to get higher data throughput This also lowers radio interference and traffic WAP3205 User s Guide Chapter 10 Wireless LAN Table 36 Network Wireless LAN Advanced LABEL DESCRIPTION Apply Click Apply to save your changes back to the WAP3205 Cancel Click Cancel to reload the previous configuration for this screen 10 8 Quality of Service QoS Screen The QoS screen allows you to automatically give a service such as VoIP and video a priority level Click Network gt Wireless LAN gt QoS The following screen appears Figure 57 Network Wireless LAN QoS General Security MACFilter Advanced i QoS WPS WPS Station Scheduling WDS WMM Configuration V Enable WMM QoS The following table describes the labels in this screen Table 37 Network Wireless LAN QoS LABEL DESCRIPTION Enable WMM QoS Check this to have the WAP3205 automatically give a service a priority level according to the ToS value in the IP header of packets it sends WMM QoS Wifi MultiMedia Quality of Service gives high priority to voice and video which makes them run more smoothly Apply Click Apply to save your changes to the WAP3205 Cancel Click Cancel to reload the previous configuration for this screen 10 9 WPS Screen Use this screen to enable disable WPS view or generate a new PIN number and check current WPS status To
98. er called a MAC address A MAC address is usually written using twelve hexadecimal characters for example 00A0C5000002 or 00 A0 C5 00 00 02 To get the MAC address for each wireless client see the appropriate User s Guide or other documentation You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to use the wireless network If a wireless client is allowed to use the wireless network it still has to have the correct settings SSID channel and security If a wireless client is not allowed to use the wireless network it does not matter if it has the correct settings This type of security does not protect the information that is sent in the wireless network Furthermore there are ways for unauthorized devices to get the MAC address of an authorized wireless client Then they can use that MAC address to use the wireless network 10 3 1 3 Encryption Wireless networks can use encryption to protect the information that is sent in the wireless network Encryption is like a secret code If you do not know the secret code you cannot understand the message 1 Some wireless devices such as scanners can detect wireless networks but cannot use wireless networks These kinds of wireless devices might not have MAC addresses 2 Hexadecimal characters are 0 1 2 3 4 5 6 7 8 9 A B C D E and F WAP3205 User s Guide Chapter 10 Wireless LAN The types of encryption you c
99. esses cannot be used for individual hosts calculate the maximum number of possible hosts in a network as follows Table 54 Maximum Host Numbers SUBNET MASK HOST ID SIZE iri eu rac 8 bits 255 0 0 0 24 bits 224 2 16777214 16 bits 255 255 0 0 16 bits 216 2 65534 24 bits 255 255 255 0 8 bits 28 2 254 29 bits 255 255 255 2 3 bits 23 2 6 48 Notation Since the mask is always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet This is usually specified by writing a followed by the number of bits in the mask after the address For example 192 1 1 0 25 is equivalent to saying 192 1 1 0 with subnet mask 255 255 255 128 The following table shows some possible subnet masks using both notations Table 55 Alternative Subnet Mask Notation SUBNET ALTERNATIVE LAST OCTET LAST OCTET MASK NOTATION BINARY DECIMAL 255 255 255 0 24 0000 0000 0 255 255 255 12 25 1000 0000 128 8 255 255 255 19 26 1100 0000 192 2 255 255 255 22 27 1110 0000 224 4 255 255 255 24 28 1111 0000 240 0 255 255 255 24 29 1111 1000 248 8 255 255 255 25 30 1111 1100 252 2 WAP3205 User s Guide Appendix B IP Addresses and Subnetting Subnetting You can use subnetting to divide
100. et into smaller data frames A large Fragmentation Threshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks that are prone to interference If the Fragmentation Threshold value is smaller than the RTS CTS value see previously you set then the RTS Request To Send CTS Clear to Send handshake will never occur as data frames will be fragmented before they reach RTS CTS size Preamble Type A preamble is used to synchronize the transmission timing in your wireless network There are two preamble modes Long and Short Short preamble takes less time to process and minimizes overhead so it should be used in a good wireless network environment when all wireless stations support it Select Long if you have a noisy network or are unsure of what preamble mode your wireless stations support as all IEEE 802 11b compliant wireless adapters must support long preamble However not all wireless adapters support short preamble Use long preamble if you are unsure what preamble mode the wireless adapters support to ensure interpretability between the AP and the wireless stations and to provide more reliable communication in noisy networks Select Dynamic to have the AP automatically use short preamble when all wireless stations support it otherwise the AP uses long preamble Note The AP and the wireless stations MUST use the same preamble mode in order to communic
101. etting up Your Computer s IP Address 3 Click the DNS Configuration tab f you do not know your DNS information select Disable DNS f you know your DNS information select Enable DNS and type the information in the fields below you may not need to fill them all in Figure 92 Windows 95 98 Me TCP IP Properties DNS Configuration TCP IP Properties 3 24 xl Bindings Advanced NeBios DNS Configuration Gateway WINS Configuration IP Address Domain Suffix Search Order Add Remove Cancel 4 Click the Gateway tab f you do not know your gateway s IP address remove previously installed gateways f you have a gateway IP address type it in the New gateway field and click Add 5 Click OK to save and close the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Turn on your Prestige and restart your computer when prompted Verifying Settings 1 Click Start and then Run 2 Inthe Run window type winipcfg and then click OK to open the IP Configuration window 152 WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address 3 Select your network adapter You should see your computer s IP address subnet mask and default gateway Windows 2000 NT XP The following example figures use the default Windows XP GUI theme 1 Click start Start in Windows 2000 NT Settings Control Panel
102. fault is 3600 seconds 60 minutes Apply Click Apply to save your changes back to the WAP3205 Cancel Click Cancel to reload the previous configuration for this screen 10 6 MAC Filter The MAC filter screen allows you to configure the WAP3205 to give exclusive access to devices Allow or exclude devices from accessing the WAP3205 Deny Every Ethernet device has a unique MAC Media Access Control address The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 You need to know the MAC address of the devices to configure this screen To change your WAP3205 s MAC filter settings click Network gt Wireless LAN gt MAC Filter The screen appears as shown Figure 55 Network gt Wireless LAN gt MAC Filter General Security MAC Filter i Advanced QoS WPS WPS Station Scheduling WDS Access Policy SSID ZyXEL Policy Disable Y Add a station Mac Address MAC Filter Summary Delete MAC Address MAC Address W 00 A0 C5 00 00 02 W 00 A0 C5 01 23 45 The following table describes the labels in this menu Table 35 Network gt Wireless LAN gt MAC Filter LABEL DESCRIPTION Access Policy SSID Select the SSID for which you want to configure MAC filtering WAP3205 User s Guide Chapter 10 Wireless LAN Table 35 Network gt Wireless LAN gt MAC Filter LABEL DESCRIPTION Policy Defi
103. field or click Browse to find it Browse Click Browse to find the bin file you want to upload Remember that you must decompress compressed zip files before you can upload them Upload Click Upload to begin the upload process This process may take up to two minutes Note Do not turn off the WAP3205 while firmware upload is in progress After you see the Firmware Upload In Process screen wait two minutes before logging into the WAP3205 again The WAP3205 automatically restarts in this time causing a temporary network disconnect In some operating systems you may see the following icon on your desktop Figure 70 Network Temporarily Disconnected D Local Area Connection Network cable unplugged After two minutes log in again and check your new firmware version in the Status screen If the upload was not successful an error message appears Click Return to go back to the Firmware Upgrade screen 12 WAP3205 User s Guide Chapter 12 Maintenance 12 7 Configuration Backup Restore Screen Backup configuration allows you to back up save the WAP3205 s current configuration to a file on your computer Once your WAP3205 is configured and functioning properly it is highly recommended that you back up your configuration file before making configuration changes The backup configuration file will be useful in case you need to return to your previous settings Restore configuration
104. figuration cece 81 Chapter 10 Wireless LAN 83 gf OIE E E cem 83 10 2 na You Can DO cm 84 Toe NNa vou o UNE KAON pm T EU ER 84 103 1 Wireless Secunty OvervioW xc acaxcssacc iausi EAA EAEAN 84 104 General Wireless LAN SOGI Rc 87 10 5 Wirelese OUO SGEE unii dinis deca sa added es AEE mi aaa 88 pite NG Sao deer niacin aceindeagemcaleeseed lesa E O 88 WU NEP ERE I es cca sae espa dE ERROR RR Dr EC neta na RR ER PEDE OR RR ERR RERR E ARE RA Ka a 89 T0 WPA Fe a BOB iius sid ion ant uaanag apa umi Eo Rei E tad Ear RUE DING Eos LE ED AG 91 jg esc 92 10 7 Wireless LAN Advanced SCreen sss sa rant pred nre d ERR YR RR REV RCRR EXER a da 93 108 Quali er Serice Q09 SCION caicuicasd ae iqd beet n e Midou ber Und quor Tria 95 IIS IP SEIEB euis cet E E A nee Nei rs Rte r eres cei bm eei ue d bas qu riore TN eer 95 TOTO WPG SNO SOGE ociosa D DUUM 97 pHNEE EI Uie C m Lo SEE 97 10 12 WDS SAGAN M 99 WAP3205 User s Guide 13 Table of Contents Chapter 11 LAP m M 101 BEY LU NEUSTEN LOIN ICE INTR EAN T E eet TT 101 DEC rU YORU AID rr Ve 101 Tia Whal Tou Need TO VOU narrisid E edd GERE Ano Ub lao cca d d br EV tom emp SR Ea 102 nnseosE peu E 102 gece az PRENNE m E T ttt 102 TH LIP SG TEIL S LU 103
105. for damage Contact the vendor to replace any damaged cables 4 Disconnect and re connect the power adaptor to the WAP3205 5 Ifthe problem continues contact the vendor 13 2 WAP3205 Access and Login don t know the IP address of my WAP3205 1 The default IP address is 192 168 1 2 2 Ifyou changed the IP address and have forgotten it and your WAP3205 is a DHCP client you can find your IP address from the DHCP server This information is only available from the DHCP server which allocates IP addresses on your network Find this information directly from the DHCP server or contact your system administrator for more information reset your WAP3205 to change all settings back to their default This means your current settings are lost See Section 13 4 on page 123 in the Troubleshooting for information on resetting your WAP3205 forgot the password 1 The default password is 1234 2 If this does not work you have to reset the device to its factory defaults See Section 13 4 on page 123 cannot see or access the Login screen in the Web Configurator 1 Make sure you are using the correct IP address The default IP address is 192 168 1 2 f you changed the IP address Section 11 4 on page 103 use the new IP address WAP3205 User s Guide Chapter 13 Troubleshooting f you changed the IP address and have forgotten it see the troubleshooting suggestions for don t know the IP add
106. gging into the device again Click Restart to have the WAP3205 reboot This does not affect the WAP3205 s configuration WAP3205 User s Guide Chapter 12 Maintenance 12 9 System Operation Mode Overview The Sys OP Mode System Operation Mode function lets you configure your WAP3205 as an access point wireless client or both at the same time You can choose between Access Point Mode Client Mode and Universal Repeater Mode depending on your network topology and the features you require from your device The following describes the device modes available in your WAP3205 Access Point An access point enabled all ethernet ports to be bridged together and be in the same subnet To connect to the Internet another device such as a router is required Figure 73 Access Point Mode LAN Client WAP3205 in client mode connects to an existing access point wirelessly It acts just like a wireless client in notebooks computers Figure 74 Client Mode i Access Point Wireless Client T WAP3205 User s Guide 115 Chapter 12 Maintenance Universal Repeater WAP3205 in Universal Repeater mode work as an access point and wireless client simutaneously Figure 75 Universal Repeater Mode 12 10 Sys Op Mode Screen Use this screen to select how you want to use your WAP3205 Figure 76 Maintenance Sys OP Mode Sys OP Mode Configuration Mode Access Point Mode O client Mode Oo Un
107. gured Click this button to remove all configured wireless and wireless security settings for WPS connections on the WAP3205 802 11 Mode This is the 802 11 mode used Only compliant WLAN devices can associate with the WAP3205 SSID This is the name of the wireless network the WAP3205 s first SSID Security This is the type of wireless security employed by the network Apply Click Apply to save your changes back to the WAP3205 Cancel Click Cancel to reload the previous configuration for this screen WAP3205 User s Guide Chapter 10 Wireless LAN 10 10 WPS Station Screen Use this screen when you want to add a wireless station using WPS To open this screen click Network gt Wireless LAN gt WPS Station tab Note After you click Push Button on this screen you have to press a similar button in the wireless station utility within 2 minutes To add the second wireless station you have to press these buttons on both device and the wireless station again after the first 2 minutes Figure 59 Network gt Wireless LAN gt WPS Station General Security MACFilter Advanced QoS WPS WPS Station i Scheduling WDS Add Station by WPS Click the below Push Button to add WPS stations to wireless network Push Button Or input station s PIN number start Note 1 The Push Button Configuration requires pressing a button on both the station and AP within 120 seconds 2 You may find the PIN
108. h it This helps you expand wireless coverage when you have an access point or wireless router already in your network In the example below the WAP3205 A is configured as a universal repeater It has three clients that want to connect to the Internet The WAP3205 wirelessly connects to the available access point B Figure 34 Universal Repeater Mode A 4 After the WAP3205 and the access point connect the WAP3205 acquires its IP address from the access point The clients of the WAP3205 can now surf the Internet 8 2 What You Can Do Use the Status screen Section 7 4 on page 55 to view read only information about your WAP3205 Use the LAN screen Chapter 11 on page 101 to set the IP address for your WAP3205 Use the Wireless LAN gt Universal Repeater screen Section 7 5 on page 57 to configure the security between the WAP3205 and another access point WAP3205 User s Guide Chapter 8 Universal Repeater Mode Use other Wireless LAN screens Chapter 10 on page 83 to configure the wireless settings and wireless security between the wireless clients and the WAP3205 8 3 What You Need to Know With the exception of the Wireless LAN gt Universal Repeater screen other configuration screens in Universal Repeater mode are similar to the ones in Access Point Mode See Chapter 11 on page 101 through Chapter 12 on page 107 of this User s Guide 8 3 1 Setting your WAP3205 to Universal Repeater Mode 1
109. hange No Yes Yes Yes Yes Credential Integrity None Strong Strong Strong Moderate Deployment Difficulty Easy Hard Moderate Moderate Moderate Client Identity No No Yes Yes No Protection WPA 2 Wi Fi Protected Access WPA is a subset of the IEEE 802 11i standard WPA2 IEEE 802 11i is a wireless security standard that defines stronger encryption authentication and key management than WPA Key differences between WPA 2 and WEP are improved data encryption and user authentication Encryption Both WPA and WPA2 improve data encryption by using Temporal Key Integrity Protocol TKIP Message Integrity Check MIC and IEEE 802 1x In addition to TKI P WPA2 also uses Advanced Encryption Standard AES in the Counter mode with Cipher block chaining Message authentication code Protocol CCMP to offer stronger encryption Temporal Key Integrity Protocol TKIP uses 128 bit keys that are dynamically generated and distributed by the authentication server It includes a per packet key mixing function a Message Integrity Check MIC named Michael an extended initialization vector IV with sequencing rules and a re keying mechanism WAP3205 User s Guide 175 Appendix D Wireless LANs TKIP regularly changes and rotates the encryption keys so that the same encryption key is never used twice The RADIUS server distributes a Pairwise Master Key PMK key to the AP that then sets up a key hierarchy and management sy
110. he WAP3205 1 Make sure the power LED is on 2 Press the RESET button for longer than 1 second to restart reboot the WAP3205 3 Press the RESET button for longer than five seconds to set the WAP3205 back to its factory default configurations WAP3205 User s Guide 123 Chapter 13 Troubleshooting If the WAP3205 restarts automatically wait for the WAP3205 to finish restarting and log in to the Web Configurator The password is 1234 If the WAP3205 does not restart automatically disconnect and reconnect the WAP3205 s power Then follow the directions above again 13 5 Wireless Router AP Troubleshooting cannot access the WAP3205 or ping any computer from the WLAN wireless AP or router Make sure the wireless adapter on the wireless station is working properly Make sure the wireless adapter installed on your computer is IEEE 802 11 compatible and supports the same wireless standard as the WAP3205 Make sure your computer with a wireless adapter installed is within the transmission range of the WAP3205 Check that both the WAP3205 and your wireless station are using the same wireless and wireless security settings WAP3205 User s Guide Product Specifications The following tables summarize the WAP3205 s hardware and firmware features Table 50 Hardware Features Dimensions W X Dx 162 mm x 115 mm x 33 mm H Weight 245 g Power Specification Input 100 240 V AC 50 60 Hz Outpu
111. he WAP3205 has been for each session System Up Time This is the total time the WAP3205 has been on Poll Interval s Enter the time interval in seconds for refreshing statistics in this field Set Interval Click this button to apply the new poll interval you entered in the Poll I nterval s field Stop Click Stop to stop refreshing statistics WAP3205 User s Guide Chapter 3 Monitor 3 5 WLAN Station Status Click the WLAN Station Status Details hyperlink in the Status screen or Monitor gt WLAN Station Status View the wireless stations that are currently associated to the WAP3205 in the Association List Association means that a wireless client for example your network or computer with a wireless network card has connected successfully to the AP or wireless router using the same SSID channel and security settings Note This screen is not available when the WAP3205 is in Client mode Figure 10 Summary Wireless Association List Association List Association List Association List MAC Address Association Time 1 00 19 CB 32 BE AC 02 43 51 2000 01 01 The following table describes the labels in this screen Table 9 Summary Wireless Association List LABEL DESCRIPTION This is the index number of an associated wireless station MAC Address This field displays the MAC address of an associated wireless station Association Time This field displays the time a wireless station fir
112. he Web Configurator the following screen opens Figure 12 Easy Mode Network Map P WAP3205 Ao Wireless A Secut ity WAP3205 User s Guide 35 Chapter 5 Easy Mode Click Status to open the following screen screen Figure 13 Easy Mode Status Screen Pr WAP3205 System Name Time LANIP MAC Address Firmware Version Wireless Network Name SSID Security 5 2 What You Can Do You can do the following in this mode Use this Navigation Panel Section 5 4 on page 37 to opt out of the Easy mode Use the Network Map screen Section 5 5 on page 37 to check if your WAP3205 can ping the gateway and whether it is connected to the Internet The Network Map screen is not applicable when the WAP3205 is in Client Mode Use the Control Panel Section 5 6 on page 38 to configure wireless security Use the Status Screen screen Section 5 7 on page 42 to view read only information about the WAP3205 including the LAN IP MAC Address of the WAP3205 and the firmware version 5 3 What You Need to Know The Network Map screen is not applicable and Wireless Security in the control panel is not configurable when the WAP3205 is in Client mode WAP3205 User s Guide Chapter 5 Easy Mode 5 4 Navigation Panel Use this navigation panel to opt out of the Easy mode Figure 14 Control Panel P WAP3205 The following table describes the labels in this screen Table 10 Control Panel
113. he Web Configurator if you haven t already See the Quick start Guide for instructions on how to do this To use your WAP3205 as an access point go to Maintenance Sys OP Mode and select Access Point mode Figure 21 Changing to Access Point mode Sys OP Mode Configuration Mode Access Point Mode O Client Mode Oo Universal Repeater Mode Note You have to log in to the Web Configurator again when you change modes As soon as you do your WAP3205 is already in Access Point mode 6 3 2 Accessing the Web Configurator in Access Point Mode Log in to the Web Configurator in Access Point mode do the following Connect your computer to the LAN port of the WAP3205 The default IP address of the WAP3205 is 192 168 1 2 In this case your computer must have an IP address in the range between 192 168 1 3 and 192 168 1 254 Click Start gt Run on your computer in Windows Type cmd in the dialog box Enter ipconfig to show your computer s IP address If your computer s IP address is not in the correct range then see Appendix C on page 149 for information on changing your computer s IP address After you ve set your computer s IP address open a web browser such as Internet Explorer and type 192 168 1 2 as the web address in your web browser Note After clicking Login the Easy mode appears Refer to Section on page 35 for the Easy mode screens Change to Expert mode to see the screens described in the sections follo
114. he wireless stations that are Status currently associated to the WAP3205 CONFI GURATI ON Network WAP3205 User s Guide Chapter 6 Access Point Mode Table 17 Navigation Panel Access Point Mode LINK TAB FUNCTION Wireless General Use this screen to configure general wireless LAN settings LAN Security Use this screen to configure wireless security settings MAC Filter Use the MAC filter screen to configure the WAP3205 to block access to devices or block the devices from accessing the WAP3205 Advanced This screen allows you to configure advanced wireless settings QoS Use this screen to configure Wi Fi Multimedia Quality of Service WMM QoS WMM QoS allows you to prioritize wireless traffic according to the delivery requirements of individual services WPS Use this screen to configure WPS WPS Use this screen to add a wireless station using WPS Station Scheduling Use this screen to schedule the times the Wireless LAN is enabled WDS Use this screen to set up Wireless Distribution System WDS on your WAP3205 LAN IP Use this screen to configure LAN IP address and subnet mask IP Alias Use this screen to have the WAP3205 apply IP alias to create LAN subnets MAI NTENANCE General Use this screen to view and change administrative settings such as system and domain names Password Password Use this screen to change the password of your WAP3205 Setup Time Time Use
115. here is a remote risk of electric shock from lightning Do NOT obstruct the device ventilation slots as insufficient airflow may harm your device Antenna Warning This device meets ETSI and FCC certification requirements when using the included antenna s Only use the included antenna s f you wall mount your device make sure that no electrical lines gas or water pipes will be damaged Your product is marked with this symbol which is known as the WEEE mark WEEE stands for Waste Electronics and Electrical Equipment It means that used electrical and electronic products should not be mixed with general waste Used electrical and mem electronic equipment should be treated separately WAP3205 User s Guide Safety Warnings WAP3205 User s Guide Contents Overview Contents Overview no 17 Getma o dp Your WAP 2209 assess aes ee aont NE R ates 19 Introduce ihe Web COUPE oaa din kan ak dab ekaad access adiri aea a adiac OQ Pda ted 23 PAORO eee 29 MONE oe leer MOC O NM 33 zicyggss dep oc oe beset iscsi msde wu ettcs de He wade dba eb pete pe pnee ed mm aoe pce cape GR 35 D er mana ds 45 dc hdi p Te TTD PR NEN 53 ovora POUR NOCE Lo v siruet ics beri DI dee On NodbE RH EDD DRPbee Gad QUE nue niocteantincddaeniiatoamenaciuieatceniiiee 65 Bir We T E 73 e M
116. hysical network into different logical networks over the same Ethernet interface The WAP3205 supports three logical LAN interfaces via its single physical Ethernet interface with the WAP3205 itself as the gateway for each LAN network WAP3205 User s Guide Chapter 11 LAN 11 4 LAN IP Screen Use this screen to change the IP address for your WAP3205 Click Network LAN gt IP Figure 64 Network gt LAN gt IP i IP Alias LAN TCP IP Get trom DHCP Server Use Defined LAN IP Address IP Address 192 168 1 2 IP Subnet Mask 255 255 2550 Gateway IP Address DHS Assignment First DNS Server User Defined v Second DNS Server User Defined v The following table describes the labels in this screen Table 42 Network gt LAN gt IP LABEL DESCRIPTION Get from DHCP Click this to deploy the WAP3205 as an access point in the network Server When you enable this the WAP3205 gets its IP address from the network s DHCP server for example your ISP or router Users connected to the WAP3205 can now access the network i e the Internet if the IP address is given by the ISP or a router with Internet access The Web Configurator may no longer be accessible unless you know the IP address assigned by the DHCP server to the WAP3205 Otherwise you need to reset the WAP3205 to be able to access the Web Configurator again see Section 12 7 on page 113 for details on how to reset the WAP3205 Also when
117. ice occurs Select Shared Key to force the clients to provide the WEP key prior to communication ASCII Select this option in order to enter ASCII characters as WEP key Hex Select this option in order to enter hexadecimal characters as a WEP key The preceding Ox that identifies a hexadecimal key is entered automatically Key 1 to Key 4 The WEP keys are used to encrypt data Both the WAP3205 and the wireless stations must use the same WEP key for data transmission If you chose 64 bit WEP then enter any 5 ASCII characters or 10 hexadecimal characters 0 9 A F If you chose 128 bit WEP then enter 13 ASCII characters or 26 hexadecimal characters 0 9 A F You must configure at least one key only one key can be activated at any one time The default key is key 1 Apply Click Apply to save your changes back to the WAP3205 Cancel Click Canel to go back to the previous screen WAP3205 User s Guide Chapter 7 Client Mode 7 5 1 3 WPA 2 PSK Use this screen if the access point to which you want to connect uses WPA 2 PSK security mode Figure 31 Client Mode WLAN gt Profile WPA PSK WPA2 PSK Profile i Site Survey WPS Wireless Setup Profile Name Network Name SSID Security Security Mode WPA PSK vw Encryption Type GrP Oas Pre Shared Key The following table describes the labels in this screen Table 23 Client Mode WLAN Profi
118. icon bar Select Automatic from the Location list Select Built in Ethernet from the Show list Click the TCP IP tab 3 For dynamically assigned settings select Using DHCP from the Configure list Figure 103 Macintosh OS X Network e0 Network CO m Od H Show All Displays Network Startup Disk Location Automatic m Show Built in Ethernet B PPPoE AppleTalk Proxies Configure Using DHCP b Domain Name Servers Optional IP Address 192 168 11 12 168 95 1 1 Provided by DHCP Server Subnet Mask 255 255 254 0 Router 192 168 10 11 Search Domains Optional DHCP Client ID Optional Example apple com earthlink net Ethernet Address 00 05 02 43 93 ff Click the lock to prevent further changes Apply Now WAP3205 User s Guide 161 Appendix C Setting up Your Computer s IP Address 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your Prestige in the Router address box 5 Click Apply Now and close the window 6 Turn on your Prestige and restart your computer if prompted Verifying Settings Check your TCP IP properties in the Network window Linux This section shows you how to configure your computer s TCP IP settings in Red Hat Linux 9 0 Procedure screens and file location may vary depending
119. ide Appendix C Setting up Your Computer s IP Address 2 Select Ethernet built in from the Connect via list Figure 101 Macintosh OS 8 9 TCP IP i TCP IP Comect vla Ethernet t m Setup Configure Using DHCP Server DHCP Client ID IP Address lt will be supplied by server 7 Subnet mask lt will be supplied by server gt Router address lt will be supplied by server gt Search comans Name server addr x will be supplied by server 3 For dynamically assigned settings select Using DHCP Server from the Configure list 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your Prestige in the Router address box 5 Close the TCP IP Control Panel 6 Click Save if prompted to save changes to your configuration 7 Turn on your Prestige and restart your computer if prompted Verifying Settings Check your TCP IP properties in the TCP IP Control Panel window WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address Macintosh OS X 1 Click the Apple menu and click System Preferences to open the System Preferences window Figure 102 Macintosh OS X Apple Menu Grab File Edit Captu About This Mac ftware Location 2 Click Network in the
120. ies including backup copies have been destroyed All provisions relating to confidentiality proprietary rights and non disclosure shall survive the termination of this Software License Agreement WAP3205 User s Guide Appendix F Legal Information 11 General This License Agreement shall be construed interpreted and governed by the laws of Republic of China without regard to conflicts of laws provisions thereof The exclusive forum for any disputes arising out of or relating to this License Agreement shall be an appropriate court or Commercial Arbitration Association sitting in ROC Taiwan This License Agreement shall constitute the entire Agreement between the parties hereto This License Agreement the rights granted hereunder the Software and Documentation shall not be assigned by you without the prior written consent of ZyXEL Any waiver or modification of this License Agreement shall only be effective if it is in writing and signed by both parties hereto If any part of this License Agreement is found invalid or unenforceable by a court of competent jurisdiction the remainder of this License Agreement shall be interpreted so as to reasonably effect the intention of the parties Note NOTE Some components of the Vantage CNM 2 3 incorporate source code covered under the Apache License GPL License LGPL License Sun License and Castor License To obtain the source code covered under those Licenses please check ftp opensource
121. ime WAP3205 User s Guide Chapter 10 Wireless LAN Select Static WEP from the Security Mode list Figure 53 Network Wireless LAN Security Static WEP General Security i MAC Filter Advanced QoS WPS WPS Station Scheduling WDS Security SSID ZyXEL v Security Mode Static WEP Y PassPhrase WEP Encryption 64 bits v Authentication Method Shared Key vV Note 64bit WEP Enter 5 ASCII characters or 10 hexadecimal characters 0 9 A F for each Key 1 4 128 bit WEP Enter 13 ASCII characters or 26 hexadecimal characters 0 9 A F for each Key 1 4 Select one WEP key as an active key to encrypt wireless data transmission Oasci O HEX key1 o Key 2 Okey3 Okey 4 Note WPA PSK and WPA2 PSK can be configured when WPS enabled The following table describes the wireless LAN security labels in this screen Table 33 Network gt Wireless LAN gt Security Static WEP LABEL DESCRIPTION SSID Select the SSID for which you want to configure the security Security Select Static WEP to enable data encryption Mode PassPhrase Enter a Passphrase up to 26 printable characters and click Generate A passphrase functions like a password In WEP security mode it is further converted by the WAP3205 into a complicated string that is referred to as the key This key is requested from all devices wishing to connect to a wireless network WEP Select 64 bits or 128 bits
122. ime starts if you selected Daylight Savings The o clock field uses the 24 hour format Here are a couple of examples Daylight Saving Time starts in most parts of the United States on the first Sunday of April Each time zone in the United States starts using Daylight Saving Time at 2 A M local time So in the United States you would select First Sunday April and type 2 in the o clock field Daylight Saving Time starts in the European Union on the last Sunday of March All of the time zones in the European Union start using Daylight Saving Time at the same moment 1 A M GMT or UTC So in the European Union you would select Last Sunday March The time you type in the o clock field depends on your time zone In Germany for instance you would type 2 because Germany s time zone is one hour ahead of GMT or UTC GMT 1 End Date Configure the day and time when Daylight Saving Time ends if you selected Daylight Savings The o clock field uses the 24 hour format Here are a couple of examples Daylight Saving Time ends in the United States on the last Sunday of October Each time zone in the United States stops using Daylight Saving Time at 2 A M local time So in the United States you would select Last Sunday October and type 2 in the o clock field Daylight Saving Time ends in the European Union on the last Sunday of October All of the time zones in the European Union stop using Daylight Saving Time at the same moment 1 A M GMT
123. in access point mode default is 192 168 1 2 Apply Click Apply to save your settings Reset Click Reset to return your settings to the default Router Note If you select the incorrect System Operation Mode you may not be able to connect to the Internet WAP3205 User s Guide 117 Chapter 12 Maintenance WAP3205 User s Guide Troubleshooting This chapter offers some suggestions to solve problems you might encounter The potential problems are divided into the following categories Power Hardware Connections and LEDs WAP3205 Access and Login nternet Access Resetting the WAP3205 to Its Factory Defaults Wireless Router AP Troubleshooting 13 1 Power Hardware Connections and LEDs The WAP3205 does not turn on None of the LEDs turn on 1 Make sure you are using the power adaptor or cord included with the WAP3205 2 Make sure the power adaptor or cord is connected to the WAP3205 and plugged in to an appropriate power source Make sure the power source is turned on 3 Disconnect and re connect the power adaptor or cord to the WAP3205 4 Ifthe problem continues contact the vendor One of the LEDs does not behave as expected 1 Make sure you understand the normal behavior of the LED See Section 1 5 on page 20 2 Check the hardware connections See the Quick Start Guide WAP3205 User s Guide Chapter 13 Troubleshooting 3 Inspect your cables
124. in materials or workmanship for a period of up to two years from the date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials ZyXEL will at its discretion repair or replace the defective products or components without charge for either parts or labor and to whatever extent it shall deem necessary to restore the product or components to proper operating condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal or higher value and will be solely at the discretion of ZyXEL This warranty shall not apply if the product has been modified misused tampered with damaged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser To obtain the services of this warranty contact your vendor You may also refer to the warranty policy for the region in which you bought the device at http WWW Zyxel com web support warranty info php Registration Register your product online to receive e mail notices of firmware upgrades
125. including those connecting wirelessly Right click on the WAP3205 icon to refresh the network map and go to the Wizard Right click on the other icons to view information about the device 5 6 Control Panel The features configurable in Easy Mode are shown in the Control Panel Figure 16 Control Panel ff wireless A Security Click the feature to open a screen where you can edit its settings WAP3205 User s Guide Chapter 5 Easy Mode The following table describes the labels in this screen Table 11 Control Panel ITEM DESCRIPTION Wireless Security Click this to configure the wireless security such as SSID security mode and WPS key on your WAP3205 Refer to Section 5 6 1 on page 39 to see this screen 5 6 1 Wireless Security Use this screen to configure security for your the Wireless LAN You can enter the SSID and select the wireless security mode in the following screen Note Wireless Security in the control panel is not configurable when the WAP3205 is in Client Mode Figure 17 Wireless Security e Wireless Security Data transmitted wirelessly without encryption is not safe Guard your wireless network with a security mode and the password you setup And then you can use WPS to connect your computers to your wireless network with just one single click Wireless Network Name SSID ZyXELSDSSDD Security mode WPA2 PSK v Wireless password 02009000 Verify password 99999299
126. int This section gives you an example of how to set up an access point AP and wireless client a notebook B in this example for wireless communication B can access the Internet through the access point A wirelessly Figure 40 Wireless Access Point Connection to the Internet INTERNEJ 9 3 Configuring Wireless Security Using WPS This section gives you an example of how to set up wireless network using WPS This example uses the WAP3205 as the AP and NWD 211AN as the wireless client which connects to a notebook WAP3205 User s Guide Chapter 9 Tutorials Note The wireless client must be a WPS aware device for example a WPS USB adapter or PCI card There are two WPS methods for creating a secure connection This tutorial shows you how to do both Push Button Configuration PBC create a secure wireless network simply by pressing a button See Section 9 3 1 on page 74 This is the easier method PIN Configuration create a secure wireless network simply by entering a wireless client s PIN Personal Identification Number in the WAP3205 s interface See Section 9 3 2 on page 75 This is the more secure method since one device can authenticate the other 9 3 1 Push Button Configuration PBC 1 Make sure that your WAP3205 is turned on and that it is within range of your computer 2 Make sure that you have installed the wireless client this example uses the NWD 211AN driver and utility in your notebook
127. ion see Section 2 2 on page 23 1 Open the Wireless LAN gt General screen in the AP s Web Configurator 2 Enter SSID Example3 as the SSID and select a channel or select Auto Channel Selection to have the WAP3205 scans for and select an available channel automatically Click Apply Figure 43 Tutorial Network Wireless LAN General General Security MAC Filter Advanced QoS WPS WPS Station Scheduling WDS i Wireless Setup Wireless LAN Network Name SSID Name SSID1 Name SSID2 Name SSID3 Channel Selection Operating Channel SSID Example3 Hide Hide Hide Hide Enable Intra BSS Traffic Enable Intra BSS Traffic Enable Intra BSS Traffic Enable Intra BSS Traffic V Auto Channel Selection 3 Click the Security tab Channel 01 2412MHz WAP3205 User s Guide Chapter 9 Tutorials 4 Select the SSID SSID Example3 for which you want to configure the security 5 Set security mode to WPA PSK and enter ThisismyWPA PSKpre sharedkey in the Pre Shared Key field Click Apply Figure 44 Tutorial Network gt Wireless LAN gt Security General Security MAC Filter Advanced QoS WPS WPS Station Scheduling WDS Security SSD SSID Example3 v Security Mode WPA PSK Y Pre Shared Key IThisismyWPA PSKpre sharedkey Group Key Update Timer 3600 econds _ Note WPA PSK and WPA2 PSK can be configur
128. iversal Repeater Mode The following table describes the labels in the General screen Table 49 Maintenance gt Sys OP Mode LABEL DESCRIPTION System Operation Mode Access Point Select Access Point Mode if your device bridges traffic between clients on the same network In Access Point mode all Ethernet ports have the same IP address The default IP address of the device on the local network is 192 168 1 2 WAP3205 User s Guide Chapter 12 Maintenance LABEL DESCRIPTION Client Mode Select Client Mode if your device needs a wireless client to connect to an existing access point You cannot configure wireless LAN settings like MAC filtering QoS WDS and scheduling in the client mode e The IP address of the device on the local network is the same as the IP foo tesa oe to the WAP3205 while in access point mode default is 168 1 2 Universal Repeater Mode Select Universal Repeater Mode if you want to have wireless clients associate with the WAP3205 and also want to connect the WAP3205 to an existing access point e In addition to wireless LAN settings between the WAP3205 and wireless clients you also need to configure security and wireless settings between the WAP3205 and another access point WDS is not available when the WAP3205 is in universal repeater mode The IP address of the device on the local network is the same as the IP address en to the WAP3205 while
129. l EAP to authenticate wireless clients using an external RADIUS database If both an AP and the wireless clients support WPA2 and you have an external RADIUS server use WPA2 for stronger data encryption If you don t have an external RADIUS server you should use WPA2 PSK WPA2 Pre Shared Key that only requires a single identical password entered into each access point wireless gateway and wireless client As long as the passwords match a wireless client will be granted access to a WLAN If the AP or the wireless clients do not support WPA2 just use WPA or WPA PSK depending on whether you have an external RADIUS server or not Select WEP only when the AP and or wireless clients do not support WPA or WPA2 WEP is less secure than WPA or WPA2 WAP3205 User s Guide Appendix D Wireless LANs WPA 2 PSK Application Example A WPA 2 PSK application looks as follows 1 First enter identical passwords into the AP and all wireless clients The Pre Shared Key PSK must consist of between 8 and 63 ASCII characters including spaces and symbols 2 The AP checks each wireless client s password and only allows it to join the network if the password matches 3 The AP derives and distributes keys to the wireless clients 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them Figure 117 WPA 2 PSK Authentication PSK om c re ea yy t 2 i 4 g
130. le WPA PSK WPA2 PSK LABEL DESCRIPTION Wireless Setup Profile Name Enter a descriptive name for this profile Network Name Enter the name of the access point to which you are connecting SSID Security Security Mode Select WPA PSK or WPA2 PSK to add strong security on this wireless network Encryption Type Select the type of wireless encryption employed by the access point to which you want to connect Pre Shared Key WPA PSK or WPA2 PSK uses a simple common password for authentication Type the pre shared key employed by the access point to which you want to connect Apply Click Apply to save your changes back to the WAP3205 Cancel Click Canel to go back to the previous screen WAP3205 User s Guide Chapter 7 Client Mode 7 5 2 Site Survey Screen Use this screen to scan for and connect to a wireless network automatically Go to Configuration Wireless LAN Site Survey to open the following screen Figure 32 Client Mode WLAN gt Site Survey Profile Site Survey WPS Station Site Survey Station Site Survey SSID BSSID Signal Strength Channel Encryption Authentication Network Type Mi zyxEL_Benny 00 13 49 C5 6E 08 10 ZyXEL MIS D0 19 CB 4B 22 0F 39 ZyXEL_MIS_WPA 06 19 CB 4B 22 0F 44 ZyXEL Guest UA 19 CB 4B 22 0F 3496 Not Use OPEN Infra WEP Unknown Infra TKIP AES WPA WPA2 Infra TKIP AES WPA WPA2 Infra pqa 3250 p2602hwl U0 13 49 F5 1
131. le 5 Change Weather LABEL DESCRIPTION C or F Choose which temperature unit you want the WAP3205 to display Change Select the location for which you want to know the weather If Location the city you want is not listed choose one that is closest to it Finish Click this to apply the settings and refresh the date and time display 2 2 3 2 Time Date Edit One timezone can cover more than one country You can choose a particular country in which the WAP3205 is located and have the WAP3205 display and use the current time and date for its logs Click the icon to change the Weather display Figure 7 Change Password Screen Change time zone GMT 06 00 Central America GMT 06 00 Central Time US amp Canada The following table describes the labels in this screen Table 6 Change Password Screen LABEL DESCRIPTION Change time Select the specific country whose current time and date you zone want the WAP3205 to display Finish Click this to apply the settings and refresh the weather display Note You can also edit the timezone in Section 12 5 on page 109 2 3 Resetting the WAP3205 If you forget your password or IP address or you cannot access the Web Configurator you will need to use the RESET button at the back of the WAP3205 to reload the factory default configuration file This means that you will lose all configurations that you had previously saved the password will
132. lick Apply to save your changes back to the WAP3205 Cancel Click Canel to go back to the previous screen 7 5 1 1 No Security Use this screen if the access point to which you want to connect does not use encryption Figure 29 Client Mode WLAN gt Profile No Security Profile Site Survey WPS Wireless Setup Profile Name Network Name SSID Security Security Mode PROFOO2 No Security w WAP3205 User s Guide Chapter 7 Client Mode The following table describes the labels in this screen Table 21 Client Mode WLAN gt Profile No Security LABEL DESCRIPTION Wireless Setup Profile Name Enter a descriptive name for this profile Network Enter the name of the access point to which you are connecting Name SSID Security Security Select No Security in this field Mode Apply Click Apply to save your changes back to the WAP3205 Cancel Click Canel to go back to the previous screen 7 5 1 2 Static WEP Use this screen if the access point to which you want to connect to uses WEP security mode Figure 30 Client Mode WLAN gt Profile WEP Profile SiteSurvey WPS Wireless Setup Profile Name Network Name SSID Security Security Mode Static WEP Y PassPhrase WEP Encryption 64 bits v Authentication Method Open v Note 64bit WEP Enter 5 ASCII characters or 10 hexadecimal characters 0 9 A F for each Key 1 4 128 bit
133. lisions 0 txqueuelen 100 RX bytes 730412 713 2 Kb TX bytes 1570 1 5 Kb Interrupt 10 Base address 0x1000 root localhost WAP3205 User s Guide Wireless LANs Wireless LAN Topologies This section discusses ad hoc and infrastructure wireless LAN topologies Ad hoc Wireless LAN Configuration The simplest WLAN configuration is an independent Ad hoc WLAN that connects a set of computers with wireless stations A B C Any time two or more wireless adapters are within range of each other they can set up an independent network which is commonly referred to as an Ad hoc network or Independent Basic Service Set IBSS The following diagram shows an example of notebook computers using wireless adapters to form an Ad hoc wireless LAN Figure 113 Peer to Peer Communication in an Ad hoc Network ua om ome m ua A C BSS A Basic Service Set BSS exists when all communications between wireless stations or between a wireless station and a wired network client go through one access point AP Intra BSS traffic is traffic between wireless stations in the BSS When Intra BSS is enabled wireless station A and B can access the wired network and communicate WAP3205 User s Guide 167 Appendix D Wireless LANs with each other When Intra BSS is disabled wireless station A and B can still access the wired network but cannot communicate with each other Figure 114 Basic Servi
134. m Setting Configuration Mode This shows the web configurator mode you are viewing Expert Summary Packet Statistics Click Details to go to the Monitor gt Packet Statistics screen Section 3 4 on page 30 Use this screen to view port status and packet specific statistics WLAN Station Status Click Details to go to the Monitor WLAN Station Status screen Section 3 5 on page 32 Use this screen to view the wireless stations that are currently associated to the WAP3205 6 4 0 1 Navigation Panel Use the menu in the navigation panel to configure WAP3205 features in Access Point mode WAP3205 User s Guide Chapter 6 Access Point Mode The following screen and table show the features you can configure in Access Point mode Figure 23 Menu Access Point Mode MAINTENANCE MONITOR CONFIGURATION Maintenance Monitor Network eam Vireless LAN ME General LAN The following table describes the sub menus Table 17 Navigation Panel Access Point Mode LINK TAB FUNCTION Status This screen shows the WAP3205 s general device system and interface status information Use this screen to access the wizard and summary statistics tables MONITOR Log Use this screen to view the list of activities recorded by your WAP3205 Packet Use this screen to view port status and packet specific Statistics statistics WLAN Station Use this screen to view t
135. mic session key You must configure WEP encryption keys for data encryption Transport Layer Security With EAP TLS digital certifications are needed by both the server and the wireless stations for mutual authentication The server presents a certificate to the client After validating the identity of the server the client sends a different certificate to the server The exchange of certificates is done in the open before a secured tunnel is created This makes user identity vulnerable to passive attacks A digital certificate is an electronic ID card that authenticates the sender s identity However to implement EAP TLS you need a Certificate Authority CA to handle certificates which imposes a management overhead EAP TTLS Tunneled Transport Layer Service EAP TTLS is an extension of the EAP TLS authentication that uses certificates for only the server side authentications to establish a secure connection Client authentication is then done by sending username and password through the secure connection thus client identity is protected For client authentication EAP TTLS supports EAP methods and legacy authentication methods such as PAP CHAP MS CHAP and MS CHAP v2 PEAP Protected EAP LEAP Dynamic Like EAP TTLS server side certificate authentication is used to establish a secure connection then use simple username and password methods through the secured connection to authenticate the clients thus hiding client identi
136. n is subject to the following two conditions This device may not cause harmful interference This device must accept any interference received including interference that may cause undesired operations This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This device generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause WAP3205 User s Guide Appendix F Legal Information harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this device does cause harmful interference to radio television reception which can be determined by turning the device off and on the user is encouraged to try to correct the interference by one or more of the following measures 1 Reorient or relocate the receiving antenna 2 Increase the separation between the equipment and the receiver 3 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected 4 Consult the dealer or an experienced radio TV technician for help fa FCC Radiation Exposure Statement This transmitter must not be co located or operating in conjunction with any other an
137. ne the filter action for the list of MAC addresses in the MAC Address table Select Disable to deactivate the MAC filtering rule you configure below Select Allow to permit access to the WAP3205 MAC addresses not listed will be denied access to the WAP3205 Select Reject to block access to the WAP3205 MAC addresses not listed will be allowed to access the WAP3205 Add a Enter the MAC addresses of the wireless station that are allowed or denied station Mac access to the WAP3205 in these address fields Enter the MAC addresses in Address a valid MAC address format that is six hexadecimal character pairs for example 12 34 56 78 9a bc Click Add MAC Filter Summary Delete Click the delete icon to remove the MAC address from the list MAC This is the MAC address of the wireless station that are allowed or denied Address access to the WAP3205 Apply Click Apply to save your changes back to the WAP3205 Cancel Click Cancel to reload the previous configuration for this screen 10 7 Wireless LAN Advanced Screen Use this screen to allow wireless advanced features such as the output power RTS CTS Threshold and high throughput physical mode settings Click Network gt Wireless LAN gt Advanced The screen appears as shown Figure 56 Network gt Wireless LAN gt Advanced RTSICTS Threshold Output Power Network Mode HT Physical Mode Operating Mode Channel Bandwidth Guard Interval Extension Channel
138. nitor gt Log Figure 8 Monitor gt Log View Log Logs Summary Time Message 1 Jan 1 00 02 51 WAP3205 user info syslog Web management login password success for user admin from 172 13 3 27 2 Jan 1 00 00 12 WAP3205 daemon info dnsmasa 1085 started version 2 40 cachesize 150 3 Jan 1 00 07 10 WAP3205 daemon warn dnsmasq 1085 overflow 7 log entries lost 4 Jan 1 00 07 11 WAP3205 daemon info dnsmasq 6563 started version 2 40 cachesize 150 5 Jan 1 00 07 11 Beers daemon info dnsmasq 6563 compile time options no IPv6 GNU getopt no RTC no MMU no ISC leasefile no DBus na IT 8M 6 Jan 1 00 07 11 WAP3205 daemon warn dnsmasq 6563 running as root d Jan 1 00 07 11 WAP3205 daemon info dnsmasq 5563 reading etc resolv conf 8 Jan 1 00 07 11 WAP3205 daemon info dnsmasq B563 read fetcihosts 2 addresses g Jan 1 00 07 11 WAP3205 daemon info dnsmasq 6563 exiting on receipt of SIGTERM 10 Jan 1 00 07 11 WAP3205 daemon info dnsmasg 7313 started version 2 40 cachesize 150 The following table describes the labels in this screen Table 7 Monitor gt Log LABEL DESCRIPTION This field is a sequential value and is not associated with a specific entry Time This field displays the time the log was recorded Message This field states the reason for the log Refresh Click Refresh to renew the log screen Clear Click Clear to delete all the logs 3 4 Packet Statistics Click the Packet Statis
139. oad the previous configuration for this screen WAP3205 User s Guide LAN 11 1 Overview This chapter describes how to configure LAN settings A Local Area Network LAN is a shared communication system to which many computers are attached A LAN is a computer network limited to the immediate area usually the same building or floor of a building The LAN screens can help you configure a LAN DHCP server manage IP addresses and partition your physical network into logical networks Figure 62 LAN Example P WLAN LAN The LAN screens can help you manage IP addresses 11 2 What You Can Do Use the IP screen Section 11 4 on page 103 to change the IP address for your WAP3205 and DNS server information Usethe IP Alias screen Section 11 5 on page 104 to have the WAP3205 apply IP alias to create LAN subnets WAP3205 User s Guide Chapter 11 LAN 11 3 What You Need To Know There are two separate IP networks one inside the LAN network and the other outside the WAN network as shown next Figure 63 LAN and WAN IP Addresses The LAN parameters of the WAP3205 are preset in the factory with the following values P address of 192 168 1 2 with subnet mask of 255 255 255 0 24 bits 11 3 1 LAN TCP IP The WAP3205 has built in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability 11 3 2 IP Alias IP alias allows you to partition a p
140. ode Table 14 Status Screen in Easy Mode ITEM DESCRIPTION Wireless Network This shows the SSID of the wireless network You can configure Name SSID this in the Wireless Security screen Section 5 6 1 on page 39 Section 10 3 1 1 on page 85 Security This shows the wireless security used by the WAP3205 WAP3205 User s Guide Chapter 5 Easy Mode WAP3205 User s Guide Access Point Mode 6 1 Overview The WAP3205 is set to access point mode by default In this mode your WAP3205 bridges a wired network LAN and wireless LAN WLAN in the same subnet See the figure below for an example Figure 20 Wireless Internet Access in Access Point Mode LAN1 WLAN Note See Chapter 9 on page 73 for an example of setting up a wireless network in Access Point mode 6 2 What You Can Do Use the Status screen Section 6 4 on page 47 to view read only information about your WAP3205 Use the LAN screen Chapter 11 on page 101 to set the IP address for your WAP3205 acting as an access point Use the Wireless LAN screens Chapter 10 on page 83 to configure the wireless settings and wireless security between the wireless clients and the WAP3205 6 3 What You Need to Know See Chapter 9 on page 73 for a tutorial on setting up a network with the WAP3205 as an access point WAP3205 User s Guide Chapter 6 Access Point Mode 6 3 1 Setting your WAP3205 to AP Mode 2 Log into t
141. one network into multiple sub networks In the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the company network for security reasons In this example the company network address is 192 168 1 0 The first three octets of the address 192 168 1 are the network number and the remaining octet is the host ID allowing a maximum of 28 2 or 254 possible hosts The following figure shows the company network before subnetting Figure 88 Subnetting Example Before Subnetting a RR PR ee e a 1 L Li E a E a li n E H I HH E E y E li E Di a LI g 192 168 1 0 24 a CO n m LLL You can borrow one of the host ID bits to divide the network 192 168 1 0 into two separate sub networks The subnet mask is now 25 bits 255 255 255 128 or 25 The borrowed host ID bit can have a value of either O or 1 allowing two subnets 192 168 1 0 25 and 192 168 1 128 25 WAP3205 User s Guide Appendix B IP Addresses and Subnetting The following figure shows the company network after subnetting There are now two sub networks A and B Figure 89 Subnetting Example After Subnetting fs UB B o B lt gt M i f UN f Internet fi it fi fl f a A 7 ni 1 a an g 4 192 168 1 0 25 88192 168 1 128 25 8I 1 4 am mumamam mam PF uum oum um um um im um m In a 25 bit
142. or UTC So in the European Union you would select Last Sunday October The time you type in the o clock field depends on your time zone In Germany for instance you would type 2 because Germany s time zone is one hour ahead of GMT or UTC GMT 1 Apply Click Apply to save your changes back to the WAP3205 Reset Click Reset to begin configuring this screen afresh 12 6 Firmware Upgrade Screen Find firmware at www zyxel com in a file that usually uses the system model name with a bin extension e g WAP3205 bin The upload process uses HTTP Hypertext Transfer Protocol and may take up to two minutes After a successful upload the system will reboot WAP3205 User s Guide Chapter 12 Maintenance Click Maintenance Firmware Upgrade Follow the instructions in this screen to upload firmware to your WAP3205 Figure 69 Maintenance Firmware Upgrade Firmware Upgrade Upgrade Firmware To upgrade the internal device firmware browse to the location of the binary BIN upgrade file and click Upload Upgrade files can be downloaded from website If the upgrade file is compressed ZIP file you must first extract the binary BIN file In some cases you may need to reconfigure File Path The following table describes the labels in this screen Table 47 Maintenance Firmware Upgrade LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this
143. or and selects an available channel This displays the authentication method used by this profile Encryption This displays the data encryption method used by this profile Network Type This displays the network type Infrastructure or Ad Hoc of this profile Add Click this button to create a new profile Delete Select a profile and click this button to remove it Edit Select a profile and click this button to modify it Activate Select a profile and click this button to enable it Note You can activate only one profile at a time WAP3205 User s Guide Chapter 7 Client Mode 7 5 1 Adding a New WLAN Profile Use this screen to create a new wireless LAN profile for your WAP3205 Click the Add button in the Configuration gt Wireless LAN gt Profile screen to open the following screen Figure 28 Client Mode WLAN gt Profile gt Add Profile Site Survey WPS Wireless Setup Profile Name Network Name SSID Security Security Mode PROFOO2 No Security w The following table describes the labels in this screen Table 20 Client Mode WLAN gt Profile gt Add LABEL DESCRIPTION Wireless Setup Profile Name Enter a descriptive name for this profile Network Enter the name of the access point to which you are connecting Name SSID Security Security Select the security mode of the access point to which you want to connect Mode Apply C
144. ou comply with the terms of this License and any applicable licensing terms governing use of the Open Sourced Components ZyXEL is not obligated to provide any maintenance technical or other support for the resultant modified Software You may not copy reverse engineer decompile reverse compile translate adapt or disassemble the Software or any part thereof nor shall you attempt to create the source code from the object code for the Software Except as and only to the extent expressly permitted in this License by applicable licensing terms governing use of the Open Sourced Components or by applicable law you may not market co brand private label or otherwise WAP3205 User s Guide 1 87 Appendix F Legal Information 188 permit third parties to link to the Software or any part thereof You may not use the Software or any part thereof in the operation of a service bureau or for the benefit of any other person or entity You may not cause assist or permit any third party to do any of the foregoing Portions of the Software utilize or include third party software and other copyright material Acknowledgements licensing terms and disclaimers for such material are contained in the online electronic documentation for the Software ftp opensource zyxel com and your use of such material is governed by their respective terms ZyXEL has provided as part of the Software package access to certain third party software as a convenience
145. ou select Manual enter the new time in this field and then click Apply New Date This field displays the last updated date from the time server or the last date configured manually yyyy mm dd When you select Manual enter the new date in this field and then click Apply Get from Time Server Select this radio button to have the WAP3205 get the time and date from the time server you specified below Auto Select Auto to have the WAP3205 automatically search for an available time server and synchronize the date and time with the time server after you click Apply User Defined Time Server Address Select User Defined Time Server Address and enter the IP address or URL up to 20 extended ASCII characters in length of your time server Check with your ISP network administrator if you are unsure of this information Time Zone Setup Time Zone Choose the time zone of your location This will set the time difference between your time zone and Greenwich Mean Time GMT Daylight Savings Daylight saving is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening Select this option if you use Daylight Saving Time WAP3205 User s Guide Chapter 12 Maintenance Table 46 Maintenance Time LABEL DESCRIPTION Start Date Configure the day and time when Daylight Saving T
146. our WAP3205 s time and date click Maintenance gt Time The screen appears as shown Figure 68 Maintenance Time Time Setting Current Time and Date Current Time 04 43 45 Current Date 2000 01 01 Current Time and Date Manual New Time hh mm ss 4 142 152 New Date yyyy mmidd 2000 i1 1 Get from Time Server Auto User Defined Time Server Address Time Zone Setup Time Zone GMT 08 00 Perth Taipei Daylight Savings start Date mmidd o clock End Date o clock WAP3205 User s Guide Chapter 12 Maintenance he following table describes the labels in this screen Table 46 Maintenance Time LABEL DESCRIPTION Current Time and Date Current Time This field displays the time of your WAP3205 Each time you reload this page the WAP3205 synchronizes the time with the time server Current Date This field displays the date of your WAP3205 Each time you reload this page the WAP3205 synchronizes the date with the time server Current Time and Date Manual Select this radio button to enter the time and date manually If you configure a new time and date Time Zone and Daylight Saving at the same time the new time and date you entered has priority and the Time Zone and Daylight Saving settings do not affect it New Time This field displays the last updated time from the time server or the last time configured manually hh mm ss When y
147. out Dynamic WEP Key Yes Disable Shared WEP No Enable with Dynamic WEP Key Yes Enable without Dynamic WEP Key Yes Disable WPA TKIP No Enable WPA PSK TKIP Yes Enable WPA2 AES No Enable WPA2 PSK AES Yes Enable WAP3205 User s Guide Common Services The following table lists some commonly used services and their associated protocols and port numbers For a comprehensive list of port numbers ICMP type code numbers and services visit the IANA Internet Assigned Number Authority web site Name This is a short descriptive name for the service You can use this one or create a different one if you like Protocol This is the type of IP protocol used by the service If this is TCP UDP then the service uses the same port number with TCP and UDP If this is USER DEFI NED the Port s is the IP protocol number not the port number Port s This value depends on the Protocol Please refer to RFC 1700 for further information about port numbers f the Protocol is TCP UDP or TCP UDP this is the IP port number f the Protocol is USER this is the IP protocol number Description This is a brief explanation of the applications that use this service or the situations in which this service is used Table 66 Commonly Used Services NAME PROTOCOL PORT S DESCRIPTION AH User Defined 51 The IPSEC AH Authentication IPSEC TUNNEL Header tunneling protocol uses this service
148. over public networks This is the data channel RCMD TCP 512 Remote Command Service REAL AUDIO TCP 7070 A streaming audio service that enables real time sound over the web REXEC TCP 514 Remote Execution Daemon RLOGIN TCP 513 Remote Login RTELNET TCP 107 Remote Telnet RTSP TCP UDP 554 The Real Time Streaming media control Protocol RTSP is a remote control for multimedia on the Internet SFTP TCP 115 Simple File Transfer Protocol SMTP TCP 25 Simple Mail Transfer Protocol is the message exchange standard for the Internet SMTP enables you to move messages from one e mail server to another SNMP TCP UDP 161 Simple Network Management Program SNMP TRAPS TCP UDP 162 Traps for use with the SNMP RFC 1215 SQL NET TCP 1521 Structured Query Language is an interface to access data on many different types of database systems including mainframes midrange systems UNIX systems and network servers SSH TCP UDP 22 Secure Shell Remote Login Program STRM WORKS UDP 1558 Stream Works Protocol SYSLOG UDP 514 Syslog allows you to send system logs to a UNIX server TACACS UDP 49 Login Host Protocol used for Terminal Access Controller Access Control System TELNET TCP 23 Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments It operates over TCP IP networks Its primary function is to allow users to WAP3205 User s Guide log into remote host systems Appendix E
149. r Defined 2 Internet Group Management Protocol MULTI CAST is used when sending packets to a specific group of hosts IKE UDP 500 The Internet Key Exchange algorithm is used for key distribution and management IRC TCP UDP 6667 This is another popular Internet chat program MSN Messenger TCP 1863 Microsoft Networks messenger service uses this protocol NEW ICQ TCP 5190 An Internet chat program NEWS TCP 144 A protocol for news groups NFS UDP 2049 Network File System NFS is a client server distributed file service that provides transparent file sharing for network environments NNTP TCP 119 Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service PING User Defined 1 Packet I Nternet Groper is a protocol that sends out ICMP echo requests to test whether or not a remote host is reachable POP3 TCP 110 Post Office Protocol version 3 lets a client computer get e mail from a POP3 server through a temporary connection TCP IP or other WAP3205 User s Guide Appendix E Common Services Table 66 Commonly Used Services continued NAME PROTOCOL PORT S DESCRIPTION PPTP TCP 1723 Point to Point Tunneling Protocol enables secure transfer of data over public networks This is the control channel PPTP TUNNEL User Defined 47 PPTP Point to Point Tunneling GRE Protocol enables secure transfer of data
150. re disclaimed 2 Ownership You have no ownership rights in the Software Rather you have a license to use the Software as long as this License Agreement remains in full force and effect Ownership of the Software Documentation and all intellectual property rights therein shall remain at all times with ZyXEL Any other use of the Software by any other entity is strictly forbidden and is a violation of this License Agreement 3 Copyright The Software and Documentation contain material that is protected by United States Copyright Law and trade secret law and by international treaty provisions All rights not granted to you herein are expressly reserved by ZyXEL You may not remove any proprietary notice of ZyXEL or any of its licensors from any copy of the Software or Documentation 4 Restrictions You may not publish display disclose sell rent lease modify store loan distribute or create derivative works of the Software or any part thereof You may not assign sublicense convey or otherwise transfer pledge as security or otherwise encumber the rights and licenses granted hereunder with respect to the Software Certain components of the Software and third party open source programs included with the Software have been or may be made available by ZyXEL on its Open Source web site ftp opensource zyxel com collectively the Open Sourced Components You may modify or replace only these Open Sourced Components provided that y
151. re is an existing wireless router or access point in the network to which you want to connect your local network Go to Section 7 4 on page 55 to view the Status screen in this mode WAP3205 User s Guide 33 Chapter 4 WAP3205 Modes Universal Repeater n this mode the WAP3205 can be an access point and a wireless client at the same time Use this mode if there is an existing wireless router or access point in your network and you also want to allow clients to connect to the WAP3205 wirelessly Go to Section 6 4 on page 47 to view the Status screen in this mode The following figure is a simple illustration of the device configuration modes of the WAP3205 Figure 11 Device Mode Example es en rreng Universal Repeater Client For more information on these modes and to change the mode of your WAP3205 refer to Chapter 12 on page 115 The menu for changing device modes is available in Expert mode only Note Choose your Device Mode carefully to avoid having to change it later In Client mode you should know the SSID and wireless security details of the access point to which you want to connect WAP3205 User s Guide Easy Mode 5 1 Overview The Web Configurator is set to Easy Mode by default You can configure several key features of the WAP3205 in this mode This mode is useful to users who are not fully familiar with some features that are usually intended for network administrators When you log in to t
152. ress of my WAP3205 2 Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide 3 Make sure your Internet browser does not block pop up windows and has JavaScripts and Java enabled See Appendix A on page 131 4 Make sure your computer is in the same subnet as the WAP3205 If you know that there are routers between your computer and the WAP3205 skip this step f there is a DHCP server on your network make sure your computer is using a dynamic IP address See Section 14 3 on page 139 f there is no DHCP server on your network make sure your computer s IP address is in the same subnet as the WAP3205 See Appendix B on page 139 5 Reset the device to its factory defaults and try to access the WAP3205 with the default IP address See Section 12 7 on page 113 6 If the problem continues contact the network administrator or vendor or try one of the advanced suggestions Advanced Suggestion f your computer is connected wirelessly use a computer that is connected to a LAN port can see the Login screen but cannot log in to the WAP3205 1 Make sure you have entered the password correctly The default password is 1234 This field is case sensitive so make sure Caps Lock is not on 2 This can happen when you fail to log out properly from your last session Try logging in again after 5 minutes 3 Disconnect and re connect the power adaptor or cord to the WAP3
153. rol 92 Memory usage 49 56 69 mode 19 N NAT 147 Navigation Panel 49 navigation panel 49 O Operating Channel 48 68 operating mode 19 P port speed 49 56 69 Power Specification 125 Preamble Mode 171 product registration 186 Q Quality of Service QoS 95 R RADIUS 172 Shared Secret Key 173 RADIUS Message Types 173 RADIUS Messages 173 registration product 186 related documentation 3 Reset button 27 Reset the device 27 Restore configuration 113 RF Radio Frequency 126 Roaming 93 RTS Request To Send 170 RTS Threshold 169 170 RTS CTS Threshold 84 93 94 S safety warnings 7 Scheduling 97 Security Parameters 178 WAP3205 User s Guide Index Service Set 40 87 Service Set IDentification 40 87 Service Set IDentity See SSID SSID 40 48 56 68 84 87 subnet 139 Subnet Mask 104 subnet mask 140 subnetting 143 Summary Packet statistics 30 Wireless station status 32 syntax conventions 5 System General Setup 108 System restart 114 T Temperature 125 Time setting 109 U Use Authentication 176 W warranty 186 note 186 Web Configurator how to access 23 Overview 23 web configurator 19 WEP Encryption 60 61 70 71 72 90 91 WEP encryption 89 WEP key 89 Wireless association list 32 wireless LAN scheduling 97 Wireless network basic guidelines 84 channel 84 encryption 85 example 83 MAC address filter 85 overview 83 security 84 SSID 84 Wireless
154. roperties Advanced TCP IP Settings PR IP Settings DNS WINS Options IP addresses IP address Subnet mask DHCP Enabled Default gateways Gateway Metric Automatic metric In the Internet Protocol TCP IP Properties window the General tab in Windows XP Click Obtain DNS server address automatically if you do not know your DNS server IP address es f you know your DNS server IP address es click Use the following DNS server addresses and type them in the Preferred DNS server and Alternate DNS server fields WAP3205 User s Guide 157 Appendix C Setting up Your Computer s IP Address If you have previously configured DNS servers click Advanced and then the DNS tab to order them Figure 99 Windows XP Internet Protocol TCP IP Properties Internet Protocol TCP IP Properties General Alternate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address Obtain DNS server address automatically Use the following DNS server addresses Advanced 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Click Close OK in Windows 2000 NT to close the Local Area Connection Properties window 10 Close the Network Connections window Network and Dial up Conne
155. s to display Network Wireless LAN WPS screen Interface Status Interface This displays the WAP3205 port types The port types are LAN and WLAN Status For the LAN and WAN ports this field displays Down line is down or Up line is up or connected For the WLAN it displays Up when the WLAN is enabled or Down when the WLAN is disabled WAP3205 User s Guide Chapter 8 Universal Repeater Mode Table 26 Status Screen Universal Repeater Mode LABEL DESCRIPTION Rate For the LAN ports this displays the port speed or N A when the line is disconnected For the WLAN it displays the maximum transmission rate when the WLAN is enabled and N A when the WLAN is disabled System Status Item This column shows the type of data the WAP3205 is recording Data This column shows the actual data recorded by the WAP3205 System Up Time This is the total time the WAP3205 has been on Current Date Time This field displays your WAP3205 s present date and time System Resource CPU Usage Memory Usage This displays what percentage of the WAP3205 s processing ability is currently used When this percentage is close to 10096 the WAP3205 is running at full load and the throughput is not going to improve anymore If you want some applications to have more throughput you should turn off other applications for example using bandwidth management This show
156. s what percentage of the heap memory the WAP3205 is using System Setting Configuration Mode This shows the web configurator mode you are viewing Expert Summary Packet Statistics Click Details to go to the Monitor gt Packet Statistics screen Section 3 4 on page 30 Use this screen to view port status and packet specific statistics WLAN Station Status Click Details to go to the Monitor WLAN Station Status screen Section 3 5 on page 32 Use this screen to view the wireless stations that are currently associated to the WAP3205 8 5 Universal Repeater Screen Use this screen to enter the SSID and select the wireless security mode used by the wireless device to which you want to connect Go to Configuration Wireless LAN gt Universal Repeater to open the Universal Repeater screen The screen varies depending on security mode WAP3205 User s Guide Chapter 8 Universal Repeater Mode 8 5 1 No Security Figure 37 Universal Repeater Mode Wireless LAN Universal Repeater No Security General Security MACFilter Advanced QoS WPS WPS Station Scheduling i Universal Repeater Universal Repeater Parameters SSID MAC Address Optional H Security Mode No Security M The following table describes the labels in this screen Table 27 Universal Repeater Mode Wireless LAN gt Universal Repeater No Security LABEL DESCRIPTION Universal
157. s with Canadian I CES 003 Cet appareil num rique de la classe B est conforme la norme NMB 003 du Canada Industry Canada Statement This device complies with RSS 210 of the Industry Canada Rules Operation is subject to the following two conditions 1 this device may not cause interference and 2 this device must accept any interference including interference that may cause undesired operation of the device This device has been designed to operate with an antenna having a maximum gain of 2dBi Antenna having a higher gain is strictly prohibited per regulations of Industry Canada The required antenna impedance is 50 ohms To reduce potential radio interference to other users the antenna type and its gain should be so chosen that the EIRP is not more than required for successful communication IMPORTANT NOTE IC Radiation Exposure Statement This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance 20cm between the radiator amp your body Viewing Certifications 1 Goto http www zyxel com 2 Select your product on the ZyXEL home page to go to that product s page 3 Select the certification you wish to view from this page WAP3205 User s Guide Appendix F Legal Information ZyXEL Limited Warranty ZyXEL warrants to the original end user purchaser that this product is free from any defects
158. security 84 overview 84 type 84 Wireless tutorial 73 WPS 73 WLAN Interference 169 Security Parameters 178 WPA compatible 86 WPA WPA2 175 WPS 20 WAP3205 User s Guide Index WAP3205 User s Guide Index WAP3205 User s Guide Index WAP3205 User s Guide
159. st associated with the WAP3205 s WLAN network Refresh Click Refresh to reload the list 32 WAP3205 User s Guide WAP3205 Modes 4 1 Overview This chapter introduces the different modes available on your WAP3205 First the term mode refers to two things in this User s Guide Web Configurator mode This refers to the Web Configurator interface you want to use for editing WAP3205 features Device mode This is the operating mode of your WAP3205 or simply how the WAP3205 is being used in the network 4 1 1 Web Configurator Modes This refers to the configuration interface of the Web Configurator which has two modes Easy The Web Configurator shows this mode by default Refer to Chapter 5 on page 35 for more information on the screens in this mode This interface may be sufficient for users who just want to use the device Expert Advanced users can change to this mode to customize all the functions of the WAP3205 Click Expert Mode after logging into the Web Configurator The User s Guide Chapter 2 on page 23 through Chapter 12 on page 107 discusses the screens in this mode 4 1 2 Device Modes This refers to the operating mode of the WAP3205 which can act as a Access Point Use this mode if you want to extend your network by allowing network devices to connect to the WAP3205 wirelessly Go to Section 6 4 on page 47 view the Status screen in this mode Client Use this mode if the
160. stem using the pair wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients This all happens in the background automatically WPA2 AES Advanced Encryption Standard is a block cipher that uses a 256 bit mathematical algorithm called Rijndael The Message Integrity Check MIC is designed to prevent an attacker from capturing data packets altering them and resending them The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC If they do not match it is assumed that the data has been tampered with and the packet is dropped By generating unique data encryption keys for every data packet and by creating an integrity checking mechanism MIC TKIP makes it much more difficult to decode data on a Wi Fi network than WEP making it difficult for an intruder to break into the network The encryption mechanisms used for WPA and WPA PSK are the same The only difference between the two is that WPA PSK uses a simple common password instead of user specific credentials The common password approach makes WPA PSK susceptible to brute force password guessing attacks but it s still an improvement over WEP as it employs an easier to use consistent single alphanumeric password User Authentication 176 WPA or WPA2 applies IEEE 802 1x and Extensible Authentication Protoco
161. t 12 V DC 1A Two Ethernet ports Auto negotiating 10 Mbps 100 Mbps in either half duplex or full duplex mode Auto crossover Use either crossover or straight through Ethernet cables LEDs PWR LAN1 2 WLAN WPS Reset Button The reset button is built into the rear panel Use this button to restore the WAP3205 to its factory default settings Press for 1 second to restart the device Press for 5 seconds to restore to factory default settings WPS button Press the WPS on two WPS enabled devices within 120 seconds for a security enabled wireless connection Antenna The WAP3205 is equipped with two 2dBi 2 4GHz detachable antennas to provide clear radio transmission and reception on the wireless network Operation Temperature 09 C 409 C 329F 1049F Environment Humidity 2096 9096 Storage Environment Temperature 309 C 709 C 2229F 1589F Humidity 20 95 Table 51 Firmware Features FEATURE DESCRIPTION Default IP Address 192 168 1 2 Default Subnet Mask 255 255 255 0 24 bits Default Password 1234 Wireless Interface Wireless LAN Default Wireless SSID ZyXEL WAP3205 User s Guide 125 Chapter 14 Product Specifications Table 51 Firmware Features FEATURE DESCRIPTION Device Management Use the Web Configurator to easily configure the rich range of features on the WAP3205 Wireless Functionality Allows IEEE 802 11b IEEE 8
162. t Protocol TCP IP Properties Internet Protocol TCP IP Properties General Alternate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address Obtain DNS server address automatically C Use the following DNS server addresses Advanced 6 If you do not know your gateway s IP address remove any previously installed gateways in the IP Settings tab and click OK Do one or more of the following if you want to configure additional IP addresses In the IP Settings tab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Configure additional default gateways in the IP Settings tab by clicking Add in Default gateways In TCP IP Gateway Address type the IP address of the default gateway in Gateway To manually configure a default metric the number of transmission hops clear the Automatic metric check box and type a metric in Metric Click Add Repeat the previous three steps for each default gateway you want to add WAP3205 User s Guide Appendix C Setting up Your Computer s IP Address Click OK when finished Figure 98 Windows XP Advanced TCP IP P
163. t it has started or stopped accounting In order to ensure network security the access point and the RADIUS server use a shared secret key which is a password they both know The key is not sent over the network In addition to the shared key password information exchanged is also encrypted to protect the network from unauthorized access Types of Authentication This appendix discusses some popular authentication types EAP MD5 EAP TLS EAP TTLS PEAP and LEAP The type of authentication you use depends on the RADIUS server or the AP Consult your network administrator for more information EAP MD5 Message Digest Algorithm 5 MD5 authentication is the simplest one way authentication method The authentication server sends a challenge to the wireless station The wireless station proves that it knows the password by encrypting the password with the challenge and sends back the information Password is not sent in plain text WAP3205 User s Guide 1 T3 Appendix D Wireless LANs EAP TLS However MD5 authentication has some weaknesses Since the authentication server needs to get the plaintext passwords the passwords must be stored Thus someone other than the authentication server may access the password file In addition it is possible to impersonate an authentication server as MD5 authentication method does not perform mutual authentication Finally MD5 authentication method does not support data encryption with dyna
164. ta frame exceeds the RTS CTS value you set between 0 to 2432 bytes the station that wants to transmit this frame must first send an RTS Request To Send message to the AP for permission to send it The AP then responds with a CTS Clear to Send message to all other stations within its range to notify them to defer their transmission It also reserves and confirms with the requesting station the time frame for the requested transmission Stations can send frames smaller than the specified RTS CTS directly to the AP without the RTS Request To Send CTS Clear to Send handshake You should only configure RTS CTS if the possibility of hidden nodes exists on your network and the cost of resending large frames is more than the extra network overhead involved in the RTS Request To Send CTS Clear to Send handshake If the RTS CTS value is greater than the Fragmentation Threshold value see next then the RTS Request To Send CTS Clear to Send handshake will never occur as data frames will be fragmented before they reach RTS CTS size Note Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy WAP3205 User s Guide Appendix D Wireless LANs Fragmentation Threshold A Fragmentation Threshold is the maximum data fragment size between 256 and 2432 bytes that can be sent in the wireless network before the AP will fragment the pack
165. tenna or transmitter EEE 802 11b or 802 11g operation of this product in the U S A is firmware limited to channels 1 through 11 To comply with FCC RF exposure compliance requirements a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons S Am Kd UPR EH PEEL HERE PEU TIR RASA CRRA JERESTHI gt ZH sek HH a eT A SERR TIA tS LTT ERDE E PU ESR B8 FH Mae REA SS o REEL TESSI EXT EIMSS AL AE SB HIRE A o HAE PEKEE ee FSS ike la BIRA EAA ETP ELSE EUR Be eee FD IBC E Ra OZ FH AIRE TR CT US SR SCART BER RR EAE WWD TEMES a ZOE p uj REA f Sa Ki Ep Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment WAP3205 User s Guide Appendix F Legal Information This device has been designed for the WLAN 2 4 GHz network throughout the EC region and Switzerland with restrictions in France This Class B digital apparatus complie
166. ternet Explorer 6 screens are used here Screens for other Internet Explorer versions may vary Internet Explorer Pop up Blockers You may have to disable pop up blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address Disable pop up Blockers 1 In Internet Explorer select Tools Pop up Blocker and then select Turn Off Pop up Blocker Figure 79 Pop up Blocker Mail and News Pop up Blocker Manage Add ons Synchronize Windows Update Windows Messenger Internet Options You can also check if pop up blocking is disabled in the Pop up Blocker section in the Privacy tab WAP3205 User s Guide 131 Appendix A Pop up Windows JavaScripts and Java Permissions 1 In Internet Explorer select Tools Internet Options Privacy 2 Clear the Block pop ups check box in the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled Figure 80 Internet Options Privacy Internet Options PIR General Security Privacy Content Connections Programs Advanced Settings Move the slider to select a privacy setting for the Internet zone Medium Blocks third party cookies that do not have a compact privacy policy Blocks third party cookies that use personally identifiable information without your implicit consent
167. this screen to change your WAP3205 s time and date Setting Firmware Use this screen to upload firmware to your WAP3205 Upgrade Backup Use this screen to backup and restore the configuration or Restore reset the factory defaults to your WAP3205 Reset Restart This screen allows you to reboot the WAP3205 without Restart turning the power off Mna This screen allows you to select whether your device acts Mode as an access point wireless client or both at the same time WAP3205 User s Guide Chapter 6 Access Point Mode 52 WAP3205 User s Guide Client Mode 7 1 Overview Your WAP3205 can act as a wireless client In wireless client mode it can connect to an existing network via an access point Use this mode if you already have an access point or wireless router in your network In the example below one WAP3205 A is configured as a wireless client and another is used as an access point B The WAP3205 has two clients that need to connect to the Internet The WAP3205 wirelessly connects to the available access point B Figure 24 Wireless Client Mode After the WAP3205 and the access point connect the WAP3205 acquires its WAN P address from the access point The clients of the WAP3205 can now surf the Internet 7 2 What You Can Do Use the Status screen Section 7 4 on page 55 to view read only information about your WAP3205 Use the LAN screen Chapter 11 on page 101 to set the
168. tically set IP addresses Manual IP Address Settings Address Subnet Mask Default Gateway Address OK 3 Cancel f you have a dynamic IP address click Automatically obtain I P address settings with and select dhcp from the drop down list f you have a static IP address click Statically set IP Addresses and fill in the Address Subnet mask and Default Gateway Address fields 3 Click OK to save the changes and close the Ethernet Device General screen 4 If you know your DNS server IP address es click the DNS tab in the Network Configuration screen Enter the DNS server information in the fields provided Figure 106 Red Hat 9 0 KDE Network Configuration DNS File Profile Help 689 New Edit Copy Delete Devices Hardware DNS Hosts 4 You may configure the system s hostname domain H name servers and search domain Name servers are used to look up other hosts on the network Hostname Primary DNS Secondary DNS Tertiary DNS DNS Search Path Active Profile Common modified WAP3205 User s Guide 163 Appendix C Setting up Your Computer s IP Address 5 Click the Devices tab 6 Click the Activate button to apply the changes The following screen displays Click Yes to save the changes in all screens Figure 107 Red Hat 9 0 KDE Network Configuration Activate v ETE ex
169. tics Details hyperlink in the Status screen or Monitor gt Packet Statistics Read only information here includes port status WAP3205 User s Guide Chapter 3 Monitor packet specific statistics and the system up time The Poll I nterval s field is configurable and is used for refreshing the screen Figure 9 Summary Packet Statistics Packet Statistics Packet Statistics Packet Statistics Port Status LAN 100M WLAN 300M Poll Interval s None System Up Time 2 hours 29 mins 20 secs TxPkts RxPkts Collisions Tx Bis Rx Bis 22338 32847 0 9493609 4383238 7040 623270 0 88856947 Up Time 02 28 14 02 29 14 v Set Interval Stop The following table describes the labels in this screen Table 8 Summary Packet Statistics LABEL DESCRIPTION Port This is the WAP3205 s port type Status For the LAN ports this displays the port speed or Down when the line is disconnected For the WLAN it displays the maximum transmission rate when the WLAN is enabled and Down when the WLAN is disabled TxPkts This is the number of transmitted packets on this port RxPkts This is the number of received packets on this port Collisions This is the number of collisions on this port Tx B s This displays the transmission speed in bytes per second on this port Rx B s This displays the reception speed in bytes per second on this port Up Time This is the total time t
170. tion is not available anymore 1 Check the hardware connections and make sure the LEDs are behaving as expected See the Quick Start Guide and Section 1 5 on page 20 2 Reboot the WAP3205 3 Ifthe problem continues contact your ISP 122 WAP3205 User s Guide Chapter 13 Troubleshooting The Internet connection is slow or intermittent 1 There might be a lot of traffic on the network Look at the LEDs and check Section 1 5 on page 20 If the WAP3205 is sending or receiving a lot of information try closing some programs that use the Internet especially peer to peer applications 2 Check the signal strength If the signal strength is low try moving the clients closer to the AP if possible and look around to see if there are any devices that might be interfering with the wireless network for example microwaves other wireless networks and so on 3 Reboot the WAP3205 4 Ifthe problem continues contact the network administrator or vendor or try one of the advanced suggestions Advanced Suggestions Check the settings for QoS If it is disabled you might consider activating it 13 4 Resetting the WAP3205 to Its Factory Defaults If you reset the WAP3205 you lose all of the changes you have made The WAP3205 re loads its default settings and the password resets to 1234 You have to make all of your changes again You will lose all of your changes when you push the RESET button To reset t
171. ty However PEAP only supports EAP methods such as EAP MD5 EAP MSCHAPv2 and EAP GTC EAP Generic Token Card for client authentication EAP GTC is implemented only by Cisco LEAP Lightweight Extensible Authentication Protocol is a Cisco implementation of IEEE 802 1x WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server This key expires when the wireless connection times out disconnects or reauthentication times out A new WEP key is generated each time reauthentication is performed 174 WAP3205 User s Guide Appendix D Wireless LANs If this feature is enabled it is not necessary to configure a default encryption key in the Wireless screen You may still configure and store keys here but they will not be used while Dynamic WEP is enabled Note EAP MD5 cannot be used with dynamic WEP key exchange For added security certificate based authentications EAP TLS EAP TTLS and PEAP use dynamic keys for data encryption They are often deployed in corporate environments but for public deployment a simple user name and password pair is more practical The following table is a comparison of the features of authentication types Table 64 Comparison of EAP Authentication Types EAP MD5 EAP TLS EAP TTLS PEAP LEAP Mutual Authentication No Yes Yes Yes Yes Certificate Client No Yes Optional Optional No Certificate Server No Yes Yes Yes No Dynamic Key Exc
172. will turn on between the two times you enter in these fields If you have chosen Off earlier for the WLAN Status the Wireless LAN will turn off between the two times you enter in these fields Apply Click Apply to save your changes back to the WAP3205 Cancel Click Cancel to reload the previous configuration for this screen 98 WAP3205 User s Guide Chapter 10 Wireless LAN 10 12 WDS Screen A Wireless Distribution System WDS is a wireless connection between two or more APs Use this screen to set the operating mode of your WAP3205 to AP Bridge or Bridge and establish wireless links with other APs You need to know the MAC address of the peer device which also must be in bridge mode Note You must enable the same wireless security settings on the WAP3205 and on all wireless clients that you want to associate with it Click Network gt Wireless LAN gt WDS tab The following screen opens with the Basic Setting set to Disabled and Security Mode set to No Security Figure 61 Network gt Wireless LAN gt WDS General Security MAC Filter Advanced QoS WPS WPS Station Scheduling ws WDS Setup Basic Setting AP Bridge w Local MAC Address 00 0C 43 41 88 44 Phy Mode CCK v Remote MAC Address Remote MAC Address Remote MAC Address Remote MAC Address Security Encrypt Type Encrypt Key The following table describes the labels in this screen Table 41 Network Wireless LAN WDS
173. wing this WAP3205 User s Guide Chapter 6 Access Point Mode 6 3 3 Configuring your WLAN LAN and Maintenance Settings See Configuration 81 for information on the configuring your wireless network and LAN settings See Maintenance and Troubleshooting 105 for information on configuring your Maintenance settings 6 4 AP Mode Status Screen Click to open the Status screen Figure 22 Status Screen Access Point Mode ZyXEL war3205 gJ Status A Refresh interval None 4eHeme FAbout Easy Mode Device Information System Status Item Data Item Data Host Name WAP3205 System Up Time 2 hours 48 mins 41 secs Firmware Version V1 00 BFR 0 B1 Current Date Time 2000 01 01 02 49 20 Sys OP Made Access Point Mode System Resource LAN Information CPU Usage MAC Address 00 0C 43 41 88 44 Memory Usage IP Address 17245 1 211 System Setting IP Subnet Mask 255 255 255 0 Configuration Mode Default Gateway 172 16 1 254 DHCP None WLAN Information Suuman WLAN OP Mode Access Point Mode Packet Statistics Details MAC Address 00 0C 43 41 88 44 WLAN Station Status Detalls Status ON Name SSID ZyXEL5D55DD Channel Auto Channel Operating Channel Channel 01 241 2MHz Security Mode WPA2 PSK 802 11 Mode 802 11 b gin WPS Configured ae Interface Status Interface LAN WLAN The following table describes the icons shown in the Status screen
174. wireless device and click this button to add it to a profile 62 WAP3205 User s Guide Chapter 7 Client Mode 7 5 3 WPS Screen Use this screen to enable Wi Fi Protected Setup WPS on the WAP3205 Go to Configuration gt Wireless LAN gt WPS to open the following screen Figure 33 Client Mode WLAN gt WPS Profile Site Survey WPS Wi Fi Protected Setup STA Station Site Survey SSID BSSID Signal Strength Auth Encrypt Status ZyXEL test 3348H 0002CF986E4C 2096 WPA PSK WPA2 PSK TKIP AES Conf pqa 3237 test 0019CB73CCBA 096 WPA PSK TKIP Conf ZyXEL 000099461080 5 OPEN Not Use Unconf sky NET D0023F803A4F8 WPA2 PSK AES 4 Conf hing 3265 1 000098987AAB1 0 WIPA2 PSK AES 1 Unconf ZyLatte 0019CBBB6748 0 OPEN Not Use Conf PiN42847240 Renew PIN Pi Start PBC Start Stop The following table describes the labels in this screen Table 25 Client Mode WLAN gt WPS LABEL DESCRIPTION Station Site Survey Use the radio button to select the wireless device to which you want to connect using WPS SSID This displays the SSID of the wireless device BSSID This displays the MAC address of the wireless device Signal This displays the strength of the wireless signal The signal strength Strength mainly depends on the antenna output power and the distance between your WAP3205 and this device Ch This displays the channel number used by this wireless device
175. without having to configure security settings manually Depending on the devices in your network you can either press a button on the device itself or in its configuration utility or enter a PIN Personal Identification Number in the devices Then they connect and set up a secure network by themselves See how to set up a secure wireless network using WPS in the Section 9 3 on page 73 10 3 1 5 WDS Wireless Distribution System or WDS security is used between bridged APs It is independent of the security between the wired networks and their respective APs If you do not enable WDS security traffic between APs is not encrypted When WDS security is enabled both APs must use the same pre shared key WAP3205 User s Guide Chapter 10 Wireless LAN 10 4 General Wireless LAN Screen Use this screen to enter the SSID select the channel and enable intra BSS traffic Note If you are configuring the WAP3205 from a computer connected to the wireless LAN and you change the WAP3205 s SSID channel or security settings you will lose your wireless connection when you press Apply to confirm You must then change the wireless settings of your computer to match the WAP3205 s new settings Click Network gt Wireless LAN to open the General screen Figure 51 Network gt Wireless LAN gt General General Security MACFilter Advanced QoS WPS WPS Station Scheduling WDS Wireless Setup
176. zyxel com to get it WAP3205 User s Guide Index A alternative subnet mask notation 142 AP 19 AP Access Point 169 AP Mode menu 49 status screen 47 55 67 AP Bridge 19 Bridge Repeater 19 bridged APs security 86 BSS 167 C CA 174 Certificate Authority 174 certifications 183 notices 184 viewing 185 Channel 48 68 169 Interference 169 channel 84 Configuration restore 113 copyright 183 CPU usage 49 56 69 CTS Clear to Send 170 D Daylight saving 110 Dimensions 125 Index disclaimer 183 Dynamic WEP Key Exchange 174 E EAP Authentication 173 Encryption 175 encryption 85 key 86 WPA compatible 86 ESS 168 Extended Service Set 168 F FCC interference statement 183 Firmware upload 111 file extension using HTTP firmware version 48 55 68 Fragmentation Threshold 171 G General wireless LAN screen 87 H Hidden Node 169 I ANA 148 IBSS 167 WAP3205 User s Guide Index IEEE 802 11g 171 Independent Basic Service Set 167 Internet Assigned Numbers Authority See IANA IP Address 104 IP alias 102 E LAN 101 LAN overview 101 LAN setup 101 LAN TCP IP 102 Language 114 Link type 49 56 68 Local Area Network 101 Log 29 MAC 92 MAC address 85 MAC address filter 85 MAC address filtering 92 MAC filter 92 managing the device good habits 20 using the web configurator See web configurator using the WPS See WPS MBSSID 19 Media access cont

ZyXEL WAP3205 User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents