User Guide
Page 13
... ...109 7.1 Overview ...109 7.1.1 What You Can Do in the System Screens 109 7.1.2 What You Need To Know About the System Screens 110 7.2 General Screen ...111 7.3 Password Screen ...113 7.4 Time Setting Screen ...115 7.5 Technical Reference ...117 NWA-3160 Series User's Guide 13
... ...109 7.1 Overview ...109 7.1.1 What You Can Do in the System Screens 109 7.1.2 What You Need To Know About the System Screens 110 7.2 General Screen ...111 7.3 Password Screen ...113 7.4 Time Setting Screen ...115 7.5 Technical Reference ...117 NWA-3160 Series User's Guide 13
User Guide
Page 31
...1.4 Ways to Manage the NWA Use any of characters, such as numbers and letters. • Write down the password and put it more effectively. • Change the password often. The device can be monitored by service engineers. • File Transfer Protocol (FTP). Use a password that's not easy to ...guess and that consists of different types of the following methods to manage it in this User's Guide. 1.5 Good Habits for troubleshooting by an SNMP manager. Chapter 1 Introduction The following things regularly to make the NWA more secure and to...
...1.4 Ways to Manage the NWA Use any of characters, such as numbers and letters. • Write down the password and put it more effectively. • Change the password often. The device can be monitored by service engineers. • File Transfer Protocol (FTP). Use a password that's not easy to ...guess and that consists of different types of the following methods to manage it in this User's Guide. 1.5 Good Habits for troubleshooting by an SNMP manager. Chapter 1 Introduction The following things regularly to make the NWA more secure and to...
User Guide
Page 32
...the configuration (and make sure you won't have to totally re-configure the NWA; The NWA-3160 and NWA-3163 have two antennas. The main antenna can simply restore your last configuration. 1.6 Hardware Connections See your password, you forget your Quick Start Guide for information on making hardware connections. ...settings. When you have only one antenna, attach it ). If you are looking at the NWA from the front, the main antenna is from the NWA-3160. Figure 10 Main Antenna 32 NWA-3160 Series User's Guide Chapter 1 Introduction • Back up an earlier configuration file, you...
...the configuration (and make sure you won't have to totally re-configure the NWA; The NWA-3160 and NWA-3163 have two antennas. The main antenna can simply restore your last configuration. 1.6 Hardware Connections See your password, you forget your Quick Start Guide for information on making hardware connections. ...settings. When you have only one antenna, attach it ). If you are looking at the NWA from the front, the main antenna is from the NWA-3160. Figure 10 Main Antenna 32 NWA-3160 Series User's Guide Chapter 1 Introduction • Back up an earlier configuration file, you...
User Guide
Page 35
... to confirm) then click Apply. if this screen appears every time you to change the password, this is properly connected and prepare your computer or computer network to connect to the NWA (refer to the Quick Start Guide). 2 Launch your web browser. 3 Type "http://...). 4 Type "1234" (default) as shown next. In some versions, the default password appears automatically - NWA-3160 Series User's Guide 35 Note: If you do not change your password (highly recommended) as the password and click Login. CHAPTER 2 The Web Configurator 2.1 Overview This chapter describes how to ...
... to confirm) then click Apply. if this screen appears every time you to change the password, this is properly connected and prepare your computer or computer network to connect to the NWA (refer to the Quick Start Guide). 2 Launch your web browser. 3 Type "http://...). 4 Type "1234" (default) as shown next. In some versions, the default password appears automatically - NWA-3160 Series User's Guide 35 Note: If you do not change your password (highly recommended) as the password and click Login. CHAPTER 2 The Web Configurator 2.1 Overview This chapter describes how to ...
User Guide
Page 36
... to restore defaults (refer to Chapter 23 on page 35 for about the Status screen. The password will be specific to this happens. 2.3 Resetting the NWA If you forget your NWA using File Transfer Protocol (FTP). 2.4 Navigating the Web Configurator The following summarizes how to navigate ...the web configurator from the Status screen. 36 NWA-3160 Series User's Guide This replaces the current configuration file with the factory-default configuration file. Hold this method for cases when the password or IP address of Restoring Factory-Defaults You can erase the...
... to restore defaults (refer to Chapter 23 on page 35 for about the Status screen. The password will be specific to this happens. 2.3 Resetting the NWA If you forget your NWA using File Transfer Protocol (FTP). 2.4 Navigating the Web Configurator The following summarizes how to navigate ...the web configurator from the Status screen. 36 NWA-3160 Series User's Guide This replaces the current configuration file with the factory-default configuration file. Hold this method for cases when the password or IP address of Restoring Factory-Defaults You can erase the...
User Guide
Page 37
... at the bottom of the screen to configure advanced features such as MGNT MODE (Controller AP, Standalone AP or Managed AP), SYSTEM (General, Password and Time Setting), WIRELESS (Wireless, SSID, Security, RADIUS, Layer-2 Isolation, MAC Filter), IP, ROGUE AP (Configuration, Friendly AP, Rogue ...AP), REMOTE MGNT (Telnet, FTP, WWW and SNMP), AUTH. NWA-3160 Series User's Guide 37 SERVER (Setting, Trusted AP, Trusted Users), CERTIFICATES (My Certificates, Trusted CAs), LOGS (View Log and Log Settings), VLAN...
... at the bottom of the screen to configure advanced features such as MGNT MODE (Controller AP, Standalone AP or Managed AP), SYSTEM (General, Password and Time Setting), WIRELESS (Wireless, SSID, Security, RADIUS, Layer-2 Isolation, MAC Filter), IP, ROGUE AP (Configuration, Friendly AP, Rogue ...AP), REMOTE MGNT (Telnet, FTP, WWW and SNMP), AUTH. NWA-3160 Series User's Guide 37 SERVER (Setting, Trusted AP, Trusted Users), CERTIFICATES (My Certificates, Trusted CAs), LOGS (View Log and Log Settings), VLAN...
User Guide
Page 109
... configure your System DNS Servers in the System Screens • Use the General screen (see Section 7.4 on your NWA's time and date. Figure 69 NWA Setup In the figure above, the NWA (ZyXEL Device) connects to a Domain Name Server (DNS) server to avail of a domain name. This screen allows you... device. 7.1.1 What You Can Do in this screen. • Use the System > Password screen (see Section 7.3 on page 113) to manage the password for your NWA and have a RADIUS server authenticate management logins to the NWA. • Use the Time Setting screen (see Section 7.2 on how to identify and...
... configure your System DNS Servers in the System Screens • Use the General screen (see Section 7.4 on your NWA's time and date. Figure 69 NWA Setup In the figure above, the NWA (ZyXEL Device) connects to a Domain Name Server (DNS) server to avail of a domain name. This screen allows you... device. 7.1.1 What You Can Do in this screen. • Use the System > Password screen (see Section 7.3 on page 113) to manage the password for your NWA and have a RADIUS server authenticate management logins to the NWA. • Use the Time Setting screen (see Section 7.2 on how to identify and...
User Guide
Page 112
...recommended). Third DNS Server Select User-Defined if you click Apply. Click Apply to log in with your password again. The field to reload the previous configuration for this screen. 112 NWA-3160 Series User's Guide If you chose User-Defined, but leave the IP address set a second choice ... to None after you do not configure a DNS server, you have to save your DHCP server dynamically assigns DNS server information (and the NWA's Ethernet IP address). The default is None. Very long idle timeouts may have the IP address of a machine in the field to configure...
...recommended). Third DNS Server Select User-Defined if you click Apply. Click Apply to log in with your password again. The field to reload the previous configuration for this screen. 112 NWA-3160 Series User's Guide If you chose User-Defined, but leave the IP address set a second choice ... to None after you do not configure a DNS server, you have to save your DHCP server dynamically assigns DNS server information (and the NWA's Ethernet IP address). The default is None. Very long idle timeouts may have the IP address of a machine in the field to configure...
User Guide
Page 113
...displays. Use new setting Select this check box to have a RADIUS server authenticate management logins to the device. Old Password Type in your NWA by assigning a password to log in this (and configure the other fields in via the console port (not available on the device ("1234... have a RADIUS server authenticate management logins to the NWA using the RADIUS username and password already configured on RADIUS Select this section) to have the device authenticate local management logins to the NWA. Table 20 System > Password LABEL DESCRIPTIONS Enable Admin at Local, you still use...
...displays. Use new setting Select this check box to have a RADIUS server authenticate management logins to the device. Old Password Type in your NWA by assigning a password to log in this (and configure the other fields in via the console port (not available on the device ("1234... have a RADIUS server authenticate management logins to the NWA using the RADIUS username and password already configured on RADIUS Select this section) to have the device authenticate local management logins to the NWA. Table 20 System > Password LABEL DESCRIPTIONS Enable Admin at Local, you still use...
User Guide
Page 114
...RADIUS profile configured for this screen. 114 NWA-3160 Series User's Guide Note that is limited to Active in the RADIUS server. • You must be up to 31 ASCII characters) for this if you type a password, the screen displays a (*) for this password field is to authenticate management logins to ...server, this user account. Select the RADIUS server profile of the RADIUS server that as you want to change the RADIUS username and password the NWA uses to 31 ASCII characters long, including spaces. This name can be set to 14 ASCII characters in your changes. Spaces are ...
...RADIUS profile configured for this screen. 114 NWA-3160 Series User's Guide Note that is limited to Active in the RADIUS server. • You must be up to 31 ASCII characters) for this if you type a password, the screen displays a (*) for this password field is to authenticate management logins to ...server, this user account. Select the RADIUS server profile of the RADIUS server that as you want to change the RADIUS username and password the NWA uses to 31 ASCII characters long, including spaces. This name can be set to 14 ASCII characters in your changes. Spaces are ...
User Guide
Page 117
...whenever you want to change the password, just change a password that you specified. When you turn on the RADIUS server. 7.5.2 Pre-defined NTP Time Servers List When you select Auto in the System > Time Setting screen, the NWA then attempts to manage several NWAs. This is useful if you... need to regularly change it cannot synchronize with one of the following pre-defined list of NTP time servers. Activate administrator authentication on RADIUS in the System > Password screen and configure the...
...whenever you want to change the password, just change a password that you specified. When you turn on the RADIUS server. 7.5.2 Pre-defined NTP Time Servers List When you select Auto in the System > Time Setting screen, the NWA then attempts to manage several NWAs. This is useful if you... need to regularly change it cannot synchronize with one of the following pre-defined list of NTP time servers. Activate administrator authentication on RADIUS in the System > Password screen and configure the...
User Guide
Page 160
... wireless users to support extended authentication. You can make every user log in homes. Then, they can configure up user names and passwords for each user in your users. User Authentication Authentication is the process of verifying whether a wireless device is a server used in ...businesses more than in to the wireless network before they can store the user names and passwords for your NWA. For wireless networks, you cannot set up to use the wireless network. The following terms and concepts may help as follows: ...
... wireless users to support extended authentication. You can make every user log in homes. Then, they can configure up user names and passwords for each user in your users. User Authentication Authentication is the process of verifying whether a wireless device is a server used in ...businesses more than in to the wireless network before they can store the user names and passwords for your NWA. For wireless networks, you cannot set up to use the wireless network. The following terms and concepts may help as follows: ...
User Guide
Page 161
... with a static 64bit WEP key and an authentication server. • 802.1x-Static128. Wi-Fi Protected Access (WPA) is a password shared by the NWA into unreadable text. PSK depending on top of the data can then be used as the "key". The intended recipient of WPA2 standard... data encryption. 10.2 The Security Screen Note: The following screens are configurable only in network communications. Passphrase A passphrase functions like a password. This commands the NWA to use either WPA2 or WPA depending on which security mode the wireless client uses. This commands the...
... with a static 64bit WEP key and an authentication server. • 802.1x-Static128. Wi-Fi Protected Access (WPA) is a password shared by the NWA into unreadable text. PSK depending on top of the data can then be used as the "key". The intended recipient of WPA2 standard... data encryption. 10.2 The Security Screen Note: The following screens are configurable only in network communications. Passphrase A passphrase functions like a password. This commands the NWA to use either WPA2 or WPA depending on which security mode the wireless client uses. This commands the...
User Guide
Page 165
...Note: If wireless station authentication is 0, which means the reauthentication off. The wireless station needs to enter the user name and password again before access to save your changes. Select 802.1x-Only in the Security Mode field to display the following table describes the...this screen to set the selected profile to resend user names and n Timer passwords in this security profile. Chapter 10 Wireless Security Screen 10.2.2 Security: 802.1x Only Use this screen afresh. The NWA automatically disconnects a wireless station from the wired network after a period of inactivity....
...Note: If wireless station authentication is 0, which means the reauthentication off. The wireless station needs to enter the user name and password again before access to save your changes. Select 802.1x-Only in the Security Mode field to display the following table describes the...this screen to set the selected profile to resend user names and n Timer passwords in this security profile. Chapter 10 Wireless Security Screen 10.2.2 Security: 802.1x Only Use this screen afresh. The NWA automatically disconnects a wireless station from the wired network after a period of inactivity....
User Guide
Page 167
... ReAuthentication Timer Specify how often wireless stations have to resend user names and passwords in order to display the following table describes the labels in this field. Select WPA in this screen. NWA-3160 Series User's Guide 167 The NWA automatically disconnects a wireless station from the wired network after a period of inactivity. Security...
... ReAuthentication Timer Specify how often wireless stations have to resend user names and passwords in order to display the following table describes the labels in this field. Select WPA in this screen. NWA-3160 Series User's Guide 167 The NWA automatically disconnects a wireless station from the wired network after a period of inactivity. Security...
User Guide
Page 168
...WPA2 or WPA2-MIX in the Security Mode field to WPA2 or WPA2-MIX security mode. The NWA default is 3600 seconds (or 1 hour). The wireless station needs to enter the user name and password again before access to stay connected. Figure 93 Security:WPA2 or WPA2-MIX 168... NWA-3160 Series User's Guide Chapter 10 Wireless Security Screen Table 42 Security: WPA LABEL DESCRIPTION ReAuthentication Specify...
...WPA2 or WPA2-MIX in the Security Mode field to WPA2 or WPA2-MIX security mode. The NWA default is 3600 seconds (or 1 hour). The wireless station needs to enter the user name and password again before access to stay connected. Figure 93 Security:WPA2 or WPA2-MIX 168... NWA-3160 Series User's Guide Chapter 10 Wireless Security Screen Table 42 Security: WPA LABEL DESCRIPTION ReAuthentication Specify...
User Guide
Page 169
... Cache PreAuthentication Apply Reset Note: If wireless station authentication is allowed. The wireless station needs to enter the username and password again before moving into the new AP's coverage area. Instead of automatically changing the group key for an AP and all clients.... NWA-3160 Series User's Guide 169 ReAuthentication Specify how often wireless stations have to resend usernames and Timer passwords in this screen afresh. Security Mode Choose WPA2 or WPA2-MIX in order to identify...
... Cache PreAuthentication Apply Reset Note: If wireless station authentication is allowed. The wireless station needs to enter the username and password again before moving into the new AP's coverage area. Instead of automatically changing the group key for an AP and all clients.... NWA-3160 Series User's Guide 169 ReAuthentication Specify how often wireless stations have to resend usernames and Timer passwords in this screen afresh. Security Mode Choose WPA2 or WPA2-MIX in order to identify...
User Guide
Page 170
...Security: WPA-PSK, WPA2-PSK or WPA2-PSK-MIX The following screen. Specify how often wireless stations have to resend usernames and passwords in this field. The NWA automatically disconnects a wireless station from 8 to WPA-PSK, WPA2-PSK or WPA2-PSKMIX security mode. Select WPA-PSK, WPA2-PSK...to 63 case-sensitive ASCII characters (including spaces and symbols). The default time interval is that WPA-PSK uses a simple common password, instead of inactivity. Idle Timeout Note: If wireless station authentication is allowed. The wireless station needs to enter the username and...
...Security: WPA-PSK, WPA2-PSK or WPA2-PSK-MIX The following screen. Specify how often wireless stations have to resend usernames and passwords in this field. The NWA automatically disconnects a wireless station from 8 to WPA-PSK, WPA2-PSK or WPA2-PSKMIX security mode. Select WPA-PSK, WPA2-PSK...to 63 case-sensitive ASCII characters (including spaces and symbols). The default time interval is that WPA-PSK uses a simple common password, instead of inactivity. Idle Timeout Note: If wireless station authentication is allowed. The wireless station needs to enter the username and...
User Guide
Page 176
... instructs you to do so. External Select this check box to be shared between the external accounting server and the NWA. Share Secret Enter a password (up to 128 alphanumeric characters) as the key to use the internal authentication server. The key is not sent over... Address, RADIUS Server Port and Share Secret fields are not available when you select Internal. The NWA does not use the NWA's internal authentication server. Share Secret Enter a password (up to 128 alphanumeric characters) as the key to use the internal authentication server when this check...
... instructs you to do so. External Select this check box to be shared between the external accounting server and the NWA. Share Secret Enter a password (up to 128 alphanumeric characters) as the key to use the internal authentication server. The key is not sent over... Address, RADIUS Server Port and Share Secret fields are not available when you select Internal. The NWA does not use the NWA's internal authentication server. Share Secret Enter a password (up to 128 alphanumeric characters) as the key to use the internal authentication server when this check...
User Guide
Page 193
...they are not associating with that of a neighbor (for example) you know are not a threat. This is stationed in -the-middle" attack. NWA-3160 Series User's Guide 193 If you have no way of knowing that they do not add them to the friendly AP list, these APs... outside a company building, using a rogue access point equipped with a powerful antenna. By mimicking a legitimate (company network) AP, the attacker tries to capture usernames, passwords, and other APs. Chapter 15 Rogue AP Detection The friendly AP list displays details of all the access points in your area that you should...
...they are not associating with that of a neighbor (for example) you know are not a threat. This is stationed in -the-middle" attack. NWA-3160 Series User's Guide 193 If you have no way of knowing that they do not add them to the friendly AP list, these APs... outside a company building, using a rogue access point equipped with a powerful antenna. By mimicking a legitimate (company network) AP, the attacker tries to capture usernames, passwords, and other APs. Chapter 15 Rogue AP Detection The friendly AP list displays details of all the access points in your area that you should...