User Guide
Page 11
... About This User's Guide ...3 Document Conventions...6 Safety Warnings...8 Contents Overview ...9 Table of Contents...11 Part I: Introduction 21 Chapter 1 Introduction ...23 1.1 Overview ...23 1.2 Applications for the NWA ...24 1.2.1 Access Point ...24 1.2.2 Bridge / Repeater ...25 1.2.2.1 Bridge / Repeater Mode Example 26 1.2.3 AP + Bridge ...28 1.2.4 MBSSID ...28 1.2.5 Pre-Configured SSID Profiles 30 1.3 CAPWAP ...30 1.4 Ways to Manage...
... About This User's Guide ...3 Document Conventions...6 Safety Warnings...8 Contents Overview ...9 Table of Contents...11 Part I: Introduction 21 Chapter 1 Introduction ...23 1.1 Overview ...23 1.2 Applications for the NWA ...24 1.2.1 Access Point ...24 1.2.2 Bridge / Repeater ...25 1.2.2.1 Bridge / Repeater Mode Example 26 1.2.3 AP + Bridge ...28 1.2.4 MBSSID ...28 1.2.5 Pre-Configured SSID Profiles 30 1.3 CAPWAP ...30 1.4 Ways to Manage...
User Guide
Page 12
...Configuration Overview 40 3.2.3 Further Reading ...41 3.3 How to Configure Multiple Wireless Networks 41 3.3.1 Change the Operating Mode 43 3.3.1.1 Access Point 43 3.3.1.2 MBSSID 44 3.3.2 Configure the VoIP Network 45 3.3.2.1 Set Up Security for the VoIP Profile 46 3.3.2.2 Activate the VoIP...Requirements ...70 3.6.3 Setup ...70 3.6.4 Configure Your NWA in Controller AP Mode 71 3.6.4.1 Secondary AP Controller 71 3.6.4.2 Primary AP Controller 72 3.6.5 Setting Your NWA in Managed AP Mode 73 3.6.6 Configuring the Managed Access Points List 74 3.6.7 Checking your Settings and Testing the ...
...Configuration Overview 40 3.2.3 Further Reading ...41 3.3 How to Configure Multiple Wireless Networks 41 3.3.1 Change the Operating Mode 43 3.3.1.1 Access Point 43 3.3.1.2 MBSSID 44 3.3.2 Configure the VoIP Network 45 3.3.2.1 Set Up Security for the VoIP Profile 46 3.3.2.2 Activate the VoIP...Requirements ...70 3.6.3 Setup ...70 3.6.4 Configure Your NWA in Controller AP Mode 71 3.6.4.1 Secondary AP Controller 71 3.6.4.2 Primary AP Controller 72 3.6.5 Setting Your NWA in Managed AP Mode 73 3.6.6 Configuring the Managed Access Points List 74 3.6.7 Checking your Settings and Testing the ...
User Guide
Page 14
... 8.1 Overview ...119 8.1.1 What You Can Do in the Wireless Screen 119 8.1.2 What You Need To Know About the Wireless Screen 120 8.2 The Wireless Screen ...123 8.2.1 Access Point Mode 123 8.2.2 Bridge / Repeater Mode 127 8.2.3 AP + Bridge Mode ...133 8.2.4 MBSSID Mode ...139 8.3 Technical Reference ...143 8.3.1 Spanning Tree Protocol (STP 144 8.3.1.1 Rapid STP 144 8.3.1.2 STP... (ToS 156 9.3.4.1 DiffServ 156 9.3.4.2 DSCP and Per-Hop Behavior 157 9.3.4.3 ToS (Type of Service) and WMM QoS 157 Chapter 10 Wireless Security Screen ...159 14 NWA-3160 Series User's Guide
... 8.1 Overview ...119 8.1.1 What You Can Do in the Wireless Screen 119 8.1.2 What You Need To Know About the Wireless Screen 120 8.2 The Wireless Screen ...123 8.2.1 Access Point Mode 123 8.2.2 Bridge / Repeater Mode 127 8.2.3 AP + Bridge Mode ...133 8.2.4 MBSSID Mode ...139 8.3 Technical Reference ...143 8.3.1 Spanning Tree Protocol (STP 144 8.3.1.1 Rapid STP 144 8.3.1.2 STP... (ToS 156 9.3.4.1 DiffServ 156 9.3.4.2 DSCP and Per-Hop Behavior 157 9.3.4.3 ToS (Type of Service) and WMM QoS 157 Chapter 10 Wireless Security Screen ...159 14 NWA-3160 Series User's Guide
User Guide
Page 23
... used throughout this book are based on the NWA-3166 (unless otherwise stated). 1.1 Overview Your NWA extends the range of users. The embedded Web-based configurator enables simple, straightforward management and maintenance. NWA-3160 Series User's Guide 23 The Quality of... to eight Basic Service Set Identifiers (BSSID) simultaneously. Your NWA is highly versatile as Voice over Internet Protocol (VoIP). The NWA controls network access with Media Access Control (MAC) address filtering, rogue Access Point (AP) detection, layer 2 isolation and an internal authentication ...
... used throughout this book are based on the NWA-3166 (unless otherwise stated). 1.1 Overview Your NWA extends the range of users. The embedded Web-based configurator enables simple, straightforward management and maintenance. NWA-3160 Series User's Guide 23 The Quality of... to eight Basic Service Set Identifiers (BSSID) simultaneously. Your NWA is highly versatile as Voice over Internet Protocol (VoIP). The NWA controls network access with Media Access Control (MAC) address filtering, rogue Access Point (AP) detection, layer 2 isolation and an internal authentication ...
User Guide
Page 24
Chapter 1 Introduction 1.2 Applications for the NWA The NWA can access the wired network through the NWAs. A typical Internet access application for your NWA is an ideal access solution for each operating mode are shown below. 1.2.1 Access Point The NWA is shown as follows. Stations A, B and C can be configured to use the following WLAN operating modes • Access Point • Bridge / Repeater • AP + Bridge • MBSSID Applications for wireless Internet connection. Figure 1 Access Point Application AP1 A B BSS1 AP2 C BSS2 24 NWA-3160 Series User's Guide
Chapter 1 Introduction 1.2 Applications for the NWA The NWA can access the wired network through the NWAs. A typical Internet access application for your NWA is an ideal access solution for each operating mode are shown below. 1.2.1 Access Point The NWA is shown as follows. Stations A, B and C can be configured to use the following WLAN operating modes • Access Point • Bridge / Repeater • AP + Bridge • MBSSID Applications for wireless Internet connection. Figure 1 Access Point Application AP1 A B BSS1 AP2 C BSS2 24 NWA-3160 Series User's Guide
User Guide
Page 25
... on page 127 for details. Figure 2 Bridge Application A B NWA-3160 Series User's Guide 25 When the NWA is not encrypted. If you do not enable WDS security, traffic between devices is compatible with other ZyXEL access points only. At the time of peer sides match one another, the...networks and have a bridge connection (A can act as a wireless network bridge and establish wireless links with other access point's documentation for more details. In the figure below, the two NWAs (A and B) are connected to your other APs. Once the security settings of writing, WDS security is made...
... on page 127 for details. Figure 2 Bridge Application A B NWA-3160 Series User's Guide 25 When the NWA is not encrypted. If you do not enable WDS security, traffic between devices is compatible with other ZyXEL access points only. At the time of peer sides match one another, the...networks and have a bridge connection (A can act as a wireless network bridge and establish wireless links with other access point's documentation for more details. In the figure below, the two NWAs (A and B) are connected to your other APs. Once the security settings of writing, WDS security is made...
User Guide
Page 28
...traffic between the wireless stations and the AP. In Multiple BSS (MBSSID) mode, the NWA 28 NWA-3160 Series User's Guide When the NWA is in bridge mode. Unless specified, the term "security settings" refers to access the wired network, while X and Y communicate in AP + Bridge mode, security ... bridge connection at the same time. The Service Set IDentifier (SSID) is the set of devices forming a single wireless network (usually an access point and one or more wireless clients). When WDS security is not encrypted. If you do not enable WDS security, traffic between APs (WDS)...
...traffic between the wireless stations and the AP. In Multiple BSS (MBSSID) mode, the NWA 28 NWA-3160 Series User's Guide When the NWA is in bridge mode. Unless specified, the term "security settings" refers to access the wired network, while X and Y communicate in AP + Bridge mode, security ... bridge connection at the same time. The Service Set IDentifier (SSID) is the set of devices forming a single wireless network (usually an access point and one or more wireless clients). When WDS security is not encrypted. If you do not enable WDS security, traffic between APs (WDS)...
User Guide
Page 29
... want a regular wireless network for standard users, as well as a 'guest' wireless network for standard users, and Guest_SSID is forbidden access to the wired Land Area Network (LAN) behind the AP and can assign different wireless and security settings to each SSID profile. You... also want to set varying access privileges, and prioritize network traffic to and from certain BSSs. Figure 8 Multiple BSSs NWA-3160 Series User's Guide 29 Chapter 1 Introduction provides multiple virtual APs, each SSID appears to be a different access point. To the wireless clients in any one...
... want a regular wireless network for standard users, as well as a 'guest' wireless network for standard users, and Guest_SSID is forbidden access to the wired Land Area Network (LAN) behind the AP and can assign different wireless and security settings to each SSID profile. You... also want to set varying access privileges, and prioritize network traffic to and from certain BSSs. Figure 8 Multiple BSSs NWA-3160 Series User's Guide 29 Chapter 1 Introduction provides multiple virtual APs, each SSID appears to be a different access point. To the wireless clients in any one...
User Guide
Page 30
... latency. ZyXEL's CAPWAP allows a single access point to manage up to NONE. The managed APs receive all user-configurable. 1.3 CAPWAP The NWA supports Control And Provisioning of the Internet Engineering Task Force's (IETF) CAPWAP protocol. The following ZyXEL AP models can be CAPWAP managed APs: • NWA-3160 • NWA-3163 • NWA-3500 • NWA-3550 • NWA-3166 Note...
... latency. ZyXEL's CAPWAP allows a single access point to manage up to NONE. The managed APs receive all user-configurable. 1.3 CAPWAP The NWA supports Control And Provisioning of the Internet Engineering Task Force's (IETF) CAPWAP protocol. The following ZyXEL AP models can be CAPWAP managed APs: • NWA-3160 • NWA-3163 • NWA-3500 • NWA-3550 • NWA-3166 Note...
User Guide
Page 33
Figure 11 LEDs Table 1 LEDs LABEL COLOR WDS STATUS Off Green On DESCRIPTION Either • The NWA is in Access Point or MBSSID mode and is in this section are from the NWA-3160. The NWA is functioning normally. Your device may differ in AP + Bridge or Bridge / Repeater mode and has not established a Wireless Distribution...
Figure 11 LEDs Table 1 LEDs LABEL COLOR WDS STATUS Off Green On DESCRIPTION Either • The NWA is in Access Point or MBSSID mode and is in this section are from the NWA-3160. The NWA is functioning normally. Your device may differ in AP + Bridge or Bridge / Repeater mode and has not established a Wireless Distribution...
User Guide
Page 39
...want to use the NWA as an access point (see above) while also communicating with other access points. The NWA is a bridge when other APs access your wired Ethernet network through the NWA. • Use AP + Bridge operating mode if you want to use the NWA to communicate with other access points. CHAPTER 3 Tutorials ... to set up the wireless LAN in each step. 3.2.1 Choosing the Wireless Mode • Use Access Point (AP) operating mode if you want to use the NWA as an access point with some groups of users having different security or QoS settings from other groups of Service (QoS)...
...want to use the NWA as an access point (see above) while also communicating with other access points. The NWA is a bridge when other APs access your wired Ethernet network through the NWA. • Use AP + Bridge operating mode if you want to use the NWA to communicate with other access points. CHAPTER 3 Tutorials ... to set up the wireless LAN in each step. 3.2.1 Choosing the Wireless Mode • Use Access Point (AP) operating mode if you want to use the NWA as an access point with some groups of users having different security or QoS settings from other groups of Service (QoS)...
User Guide
Page 40
... Select SSID Profiles. Configure MAC Filter (optional). Access Point Mode. Select 802.11 Mode and Channel ID. Select SSID Profile. Configure RADIUS authentication (optional). Edit Security Profile. Configure SSID Profile. Check your NWA and accessing the Web Configurator). Use the Web Configurator to ...the operating mode you should take to configure the wireless settings according to set up your NWA's wireless network (see your Quick Start Guide for...
... Select SSID Profiles. Configure MAC Filter (optional). Access Point Mode. Select 802.11 Mode and Channel ID. Select SSID Profile. Configure RADIUS authentication (optional). Edit Security Profile. Configure SSID Profile. Check your NWA and accessing the Web Configurator). Use the Web Configurator to ...the operating mode you should take to configure the wireless settings according to set up your NWA's wireless network (see your Quick Start Guide for...
User Guide
Page 41
...3.3 How to Configure Multiple Wireless Networks In this , you already have been using your NWA as an access point for Voice over IP (VoIP) users, and a guest network that allows visitors to your office to access only the Internet and the network printer. To do this example, you have , another ...Profile(s): see Section 10.2 on page 161. • Configuring an external RADIUS server: see Section 11.2 on how to set up your NWA in Access Point mode). You want to make three wireless networks: one standard office wireless network with all the same settings you will cater for information on...
...3.3 How to Configure Multiple Wireless Networks In this , you already have been using your NWA as an access point for Voice over IP (VoIP) users, and a guest network that allows visitors to your office to access only the Internet and the network printer. To do this example, you have , another ...Profile(s): see Section 10.2 on page 161. • Configuring an external RADIUS server: see Section 11.2 on how to set up your NWA in Access Point mode). You want to make three wireless networks: one standard office wireless network with all the same settings you will cater for information on...
User Guide
Page 43
Figure 15 Tutorial: Wireless LAN: Before NWA-3160 Series User's Guide 43 The Wireless screen appears. 3.3.1.1 Access Point Set the NWA is in to use the SSID03 profile. Chapter 3 Tutorials 3.3.1 Change the Operating Mode Log in Access Point operating mode, and is currently set to the NWA (see Section 2.2 on page 35). Click Wireless > Wireless.
Figure 15 Tutorial: Wireless LAN: Before NWA-3160 Series User's Guide 43 The Wireless screen appears. 3.3.1.1 Access Point Set the NWA is in to use the SSID03 profile. Chapter 3 Tutorials 3.3.1 Change the Operating Mode Log in Access Point operating mode, and is currently set to the NWA (see Section 2.2 on page 35). Click Wireless > Wireless.
User Guide
Page 52
...profile, and that the settings of a real device on your network that is not on whether "hide SSID" is enabled. • Try to access each network using the correct security settings, and then using the security settings for the Guest_SSID wireless network) check that the correct layer 2 isolation ... If you can be used. Click the Wireless tab. In the Select SSID Profile table, select the check box for access points. and enter "cmd" in the Guest_SSID profile screen. 52 NWA-3160 Series User's Guide At the c:\> prompt, enter "ping 192.168.1.10" (substitute the IP address of the ...
...profile, and that the settings of a real device on your network that is not on whether "hide SSID" is enabled. • Try to access each network using the correct security settings, and then using the security settings for the Guest_SSID wireless network) check that the correct layer 2 isolation ... If you can be used. Click the Wireless tab. In the Select SSID Profile table, select the check box for access points. and enter "cmd" in the Guest_SSID profile screen. 52 NWA-3160 Series User's Guide At the c:\> prompt, enter "ping 192.168.1.10" (substitute the IP address of the ...
User Guide
Page 53
... in your area. See Chapter 15 on page 191 for background information on the NWA. You also have a network mail/file server, marked NWA-3160 Series User's Guide 53 It consists of four access points (all NWAs) and a variable number of that network. In this example, you how to ... the rogue AP detection feature on the rogue AP function and security considerations. Your access points are no other static wireless networks in an office building. The example also shows how to set the NWA to your wireless network through a rogue AP. The following diagram shows the wireless ...
... in your area. See Chapter 15 on page 191 for background information on the NWA. You also have a network mail/file server, marked NWA-3160 Series User's Guide 53 It consists of four access points (all NWAs) and a variable number of that network. In this example, you how to ... the rogue AP detection feature on the rogue AP function and security considerations. Your access points are no other static wireless networks in an office building. The example also shows how to set the NWA to your wireless network through a rogue AP. The following diagram shows the wireless ...
User Guide
Page 54
The coffee shop's access point is marked 1. When configuring the rogue AP feature on your APs can detect the AP (1) in the following table. You need the IP address of your NWAs in this example, you need the IP addresses of your wireless network, and the dashed circle represents the extent of each ....168.1.1 Access Point B 192.168.1.2 Access Point C 192.168.1.3 Access Point D 192.168.1.4 File / Mail Server E 192.168.1.25 Access Point 1 UNKNOWN MAC ADDRESS 00:AA:00:AA:00:AA AA:00:AA:00:AA:00 A0:0A:A0:0A:A0:0A 0A:A0:0A:A0:0A:A0 N/A AF:AF:AF:FA:FA:FA 54 NWA-3160 Series User...
The coffee shop's access point is marked 1. When configuring the rogue AP feature on your APs can detect the AP (1) in the following table. You need the IP address of your NWAs in this example, you need the IP addresses of your wireless network, and the dashed circle represents the extent of each ....168.1.1 Access Point B 192.168.1.2 Access Point C 192.168.1.3 Access Point D 192.168.1.4 File / Mail Server E 192.168.1.25 Access Point 1 UNKNOWN MAC ADDRESS 00:AA:00:AA:00:AA AA:00:AA:00:AA:00 A0:0A:A0:0A:A0:0A 0A:A0:0A:A0:0A:A0 N/A AF:AF:AF:FA:FA:FA 54 NWA-3160 Series User...
User Guide
Page 55
...00:AA:00:AA AA:00:AA:00:AA:00 A0:0A:A0:0A:A0:0A DESCRIPTION My Access Point _A_ My Access Point _B_ My Access Point _C_ NWA-3160 Series User's Guide 55 Chapter 3 Tutorials Note: The NWA can detect the MAC addresses of auto-detected APs. However, it in the previous figure), open ... the setup. 3.4.1 Set Up and Save a Friendly AP list Take the following steps to set up and save a list of access points you enter the details of access point A (192.168.1.1). Click Add after you want to allow in your network's coverage area. 1 On a computer connected to obtain the correct MAC addresses...
...00:AA:00:AA AA:00:AA:00:AA:00 A0:0A:A0:0A:A0:0A DESCRIPTION My Access Point _A_ My Access Point _B_ My Access Point _C_ NWA-3160 Series User's Guide 55 Chapter 3 Tutorials Note: The NWA can detect the MAC addresses of auto-detected APs. However, it in the previous figure), open ... the setup. 3.4.1 Set Up and Save a Friendly AP list Take the following steps to set up and save a list of access points you enter the details of access point A (192.168.1.1). Click Add after you want to allow in your network's coverage area. 1 On a computer connected to obtain the correct MAC addresses...
User Guide
Page 56
...Click the Configuration tab.The following screen appears. Figure 32 Tutorial: Configuration 56 NWA-3160 Series User's Guide Figure 31 Tutorial: Friendly AP (After Data Entry) 3 Next, you know that they do not pose a threat to your other access points. Chapter 3 Tutorials MAC ADDRESS 0A:A0:0A:A0:0A:A0 AF:AF:...AF:FA:FA:FA DESCRIPTION My Access Point _D_ Coffee Shop Access Point _1_ Note: You can add APs that are not part of friendly APs in order...
...Click the Configuration tab.The following screen appears. Figure 32 Tutorial: Configuration 56 NWA-3160 Series User's Guide Figure 31 Tutorial: Friendly AP (After Data Entry) 3 Next, you know that they do not pose a threat to your other access points. Chapter 3 Tutorials MAC ADDRESS 0A:A0:0A:A0:0A:A0 AF:AF:...AF:FA:FA:FA DESCRIPTION My Access Point _D_ Coffee Shop Access Point _1_ Note: You can add APs that are not part of friendly APs in order...
User Guide
Page 57
Chapter 3 Tutorials 4 Click Export. If a window similar to the following appears, click Save. In this example, save it can be accessed by all the other access points on page 54). Figure 33 Tutorial: Warning 5 Save the friendly AP list somewhere it on the network file server (E in Figure 29 on the network. Figure 34 Tutorial: Save Friendly AP list NWA-3160 Series User's Guide 57 The default filename is "Flist".
Chapter 3 Tutorials 4 Click Export. If a window similar to the following appears, click Save. In this example, save it can be accessed by all the other access points on page 54). Figure 33 Tutorial: Warning 5 Save the friendly AP list somewhere it on the network file server (E in Figure 29 on the network. Figure 34 Tutorial: Save Friendly AP list NWA-3160 Series User's Guide 57 The default filename is "Flist".