User Guide
Page 9
Contents Overview Contents Overview Introduction ...21 Introduction ...23 The Web Configurator ...35 Tutorials ...39 The Web Configurator ...79 Status Screen ...81 Management Mode ...87 AP Controller Mode ...93 System Screens ...109 Wireless Screen ...119 SSID Screen ...149 Wireless Security Screen ...159 RADIUS Screen ...173 Layer-2 Isolation Screen ...177 MAC Filter Screen ......
Contents Overview Contents Overview Introduction ...21 Introduction ...23 The Web Configurator ...35 Tutorials ...39 The Web Configurator ...79 Status Screen ...81 Management Mode ...87 AP Controller Mode ...93 System Screens ...109 Wireless Screen ...119 SSID Screen ...149 Wireless Security Screen ...159 RADIUS Screen ...173 Layer-2 Isolation Screen ...177 MAC Filter Screen ......
User Guide
Page 12
... 3.5.6.2 Testing the Configuration 68 3.6 How to Configure Management Modes 69 3.6.1 Scenario ...69 3.6.2 Your Requirements ...70 3.6.3 Setup ...70 3.6.4 Configure Your NWA in Controller AP Mode 71 3.6.4.1 Secondary AP Controller 71 3.6.4.2 Primary AP Controller 72 3.6.5 Setting Your NWA in Managed AP Mode 73 3.6.6 Configuring the Managed Access Points List 74 3.6.7 Checking your Settings and Testing the Configuration...
... 3.5.6.2 Testing the Configuration 68 3.6 How to Configure Management Modes 69 3.6.1 Scenario ...69 3.6.2 Your Requirements ...70 3.6.3 Setup ...70 3.6.4 Configure Your NWA in Controller AP Mode 71 3.6.4.1 Secondary AP Controller 71 3.6.4.2 Primary AP Controller 72 3.6.5 Setting Your NWA in Managed AP Mode 73 3.6.6 Configuring the Managed Access Points List 74 3.6.7 Checking your Settings and Testing the Configuration...
User Guide
Page 13
... 88 5.2.4 Notes on CAPWAP ...89 5.3 The Management Mode Screen 89 Chapter 6 AP Controller Mode ...93 6.1 Overview ...93 6.1.1 What You Can Do in AP Controller Mode 93 6.1.2 What You Need to Know 93 6.1.3 Before You Begin ...94 6.2 Controller AP Navigation Menu 94 6.3 Controller AP Status Screen 95 6.4 AP Lists Screen ...97 6.4.1 The AP Lists Edit... Screens 109 7.1.2 What You Need To Know About the System Screens 110 7.2 General Screen ...111 7.3 Password Screen ...113 7.4 Time Setting Screen ...115 7.5 Technical Reference ...117 NWA-3160 Series User's Guide 13
... 88 5.2.4 Notes on CAPWAP ...89 5.3 The Management Mode Screen 89 Chapter 6 AP Controller Mode ...93 6.1 Overview ...93 6.1.1 What You Can Do in AP Controller Mode 93 6.1.2 What You Need to Know 93 6.1.3 Before You Begin ...94 6.2 Controller AP Navigation Menu 94 6.3 Controller AP Status Screen 95 6.4 AP Lists Screen ...97 6.4.1 The AP Lists Edit... Screens 109 7.1.2 What You Need To Know About the System Screens 110 7.2 General Screen ...111 7.3 Password Screen ...113 7.4 Time Setting Screen ...115 7.5 Technical Reference ...117 NWA-3160 Series User's Guide 13
User Guide
Page 23
... (unless otherwise stated). Multiple security profiles allow you to easily assign different types of users. The NWA controls network access with Media Access Control (MAC) address filtering, rogue Access Point (AP) detection, layer 2 isolation and an internal authentication server. The ... Access (WPA), WPA2 and Wired Equivalent Privacy (WEP) data encryption. CHAPTER 1 Introduction Note: This User's Guide includes the NWA-3160, NWA-3163 and the NWA-3166. Illustrations used throughout this book are based on how to install, configure and use. It is easy to make hardware ...
... (unless otherwise stated). Multiple security profiles allow you to easily assign different types of users. The NWA controls network access with Media Access Control (MAC) address filtering, rogue Access Point (AP) detection, layer 2 isolation and an internal authentication server. The ... Access (WPA), WPA2 and Wired Equivalent Privacy (WEP) data encryption. CHAPTER 1 Introduction Note: This User's Guide includes the NWA-3160, NWA-3163 and the NWA-3166. Illustrations used throughout this book are based on how to install, configure and use. It is easy to make hardware ...
User Guide
Page 30
..., you are all their configuration information from the controller AP. The managed APs receive all user-configurable. 1.3 CAPWAP The NWA supports Control And Provisioning of the network. The following ZyXEL AP models can be CAPWAP managed APs: • NWA-3160 • NWA-3163 • NWA-3500 • NWA-3550 • NWA-3166 Note: If you should use by Datagram Transport...
..., you are all their configuration information from the controller AP. The managed APs receive all user-configurable. 1.3 CAPWAP The NWA supports Control And Provisioning of the network. The following ZyXEL AP models can be CAPWAP managed APs: • NWA-3160 • NWA-3163 • NWA-3500 • NWA-3550 • NWA-3166 Note: If you should use by Datagram Transport...
User Guide
Page 31
... Habits for troubleshooting by an SNMP manager. Use a password that's not easy to guess and that consists of different types of the NWA using a (supported) web browser. • Command Line Interface (CLI). This is recommended for firmware upgrades and configuration backup and restore... engineers. • File Transfer Protocol (FTP). NWA-3160 Series User's Guide 31 This protocol can be used for Managing the NWA Do the following figure illustrates a CAPWAP wireless network. The user (U) configures the controller AP (C), which then automatically updates the configurations of...
... Habits for troubleshooting by an SNMP manager. Use a password that's not easy to guess and that consists of different types of the NWA using a (supported) web browser. • Command Line Interface (CLI). This is recommended for firmware upgrades and configuration backup and restore... engineers. • File Transfer Protocol (FTP). NWA-3160 Series User's Guide 31 This protocol can be used for Managing the NWA Do the following figure illustrates a CAPWAP wireless network. The user (U) configures the controller AP (C), which then automatically updates the configurations of...
User Guide
Page 37
...), VLAN (Wireless VLAN and RADIUS VLAN), Load Balancing, and DCS. • Click MAINTENANCE to view information about your NWA or upgrade configuration and firmware files. Maintenance features include Association List, Channel Usage, F/W (Firmware) Upload, Configuration (Backup, Restore and Default) ...has been updated. Chapter 2 The Web Configurator Click LOGOUT at the bottom of the screen to configure advanced features such as MGNT MODE (Controller AP, Standalone AP or Managed AP), SYSTEM (General, Password and Time Setting), WIRELESS (Wireless, SSID, Security, RADIUS, Layer-2 Isolation, ...
...), VLAN (Wireless VLAN and RADIUS VLAN), Load Balancing, and DCS. • Click MAINTENANCE to view information about your NWA or upgrade configuration and firmware files. Maintenance features include Association List, Channel Usage, F/W (Firmware) Upload, Configuration (Backup, Restore and Default) ...has been updated. Chapter 2 The Web Configurator Click LOGOUT at the bottom of the screen to configure advanced features such as MGNT MODE (Controller AP, Standalone AP or Managed AP), SYSTEM (General, Password and Time Setting), WIRELESS (Wireless, SSID, Security, RADIUS, Layer-2 Isolation, ...
User Guide
Page 42
The VoIP network (VoIP_SSID) has access to all resources. To configure these settings, you need to know the Media Access Control (MAC) addresses of the devices you want to allow users of the guest network to set up. The following figure shows the multiple... Tutorial: Example MBSSID Setup B A Z The standard network (SSID04) has access to the Internet and the network printer only, and a low QoS setting. Your NWA is marked Z, the main network router is marked A, and your network printer is marked B. Table 2 Tutorial: Example Information Network router (A) MAC address 00:AA:00...
The VoIP network (VoIP_SSID) has access to all resources. To configure these settings, you need to know the Media Access Control (MAC) addresses of the devices you want to allow users of the guest network to set up. The following figure shows the multiple... Tutorial: Example MBSSID Setup B A Z The standard network (SSID04) has access to the Internet and the network printer only, and a low QoS setting. Your NWA is marked Z, the main network router is marked A, and your network printer is marked B. Table 2 Tutorial: Example Information Network router (A) MAC address 00:AA:00...
User Guide
Page 51
NWA-3160 Series User's Guide 51 Chapter 3 Tutorials 3.3.3.2 Set up Layer 2 Isolation Configure layer 2 isolation to control the specific devices you want the users on the guest network to be able to access. The following screen displays. Figure 26 Tutorial: Layer 2 Isolation ...
NWA-3160 Series User's Guide 51 Chapter 3 Tutorials 3.3.3.2 Set up Layer 2 Isolation Configure layer 2 isolation to control the specific devices you want the users on the guest network to be able to access. The following screen displays. Figure 26 Tutorial: Layer 2 Isolation ...
User Guide
Page 69
...are the administrator of a company network wherein a group of this controller AP. These users are using the Web Configurator of users need to connect to manage all 4 NWA APs using several NWA models in each floor of the day. Currently you want to ...yet need stable wireless connection. You want a backup for this newly transformed NWA controller AP. Though the current setup works, it takes a lot of your NWA to configure the NWA's controller AP and managed AP modes. Figure 44 Tutorial: Controller AP with Backup and Managed APs Example Router with DHCP Server You D ...
...are the administrator of a company network wherein a group of this controller AP. These users are using the Web Configurator of users need to connect to manage all 4 NWA APs using several NWA models in each floor of the day. Currently you want to ...yet need stable wireless connection. You want a backup for this newly transformed NWA controller AP. Though the current setup works, it takes a lot of your NWA to configure the NWA's controller AP and managed AP modes. Figure 44 Tutorial: Controller AP with Backup and Managed APs Example Router with DHCP Server You D ...
User Guide
Page 70
... from step 4) to serve as the NWA controller AP.) Note: This tutorial covers only the MGNT MODE and Controller screens. You will have to just one NWA AP (A) as A, to the Managed Access Points List of the NWA primary controller AP. 70 NWA-3160 Series User's Guide You can also... using one IP address to edit the settings of the NWAs in Primary Controller AP (A) mode and enter the IP address of your Secondary Controller AP (E) for backup purposes. This will serve as the secondary controller AP (E). Both controller APs (A and E) are various SSID profiles stored in the...
... from step 4) to serve as the NWA controller AP.) Note: This tutorial covers only the MGNT MODE and Controller screens. You will have to just one NWA AP (A) as A, to the Managed Access Points List of the NWA primary controller AP. 70 NWA-3160 Series User's Guide You can also... using one IP address to edit the settings of the NWAs in Primary Controller AP (A) mode and enter the IP address of your Secondary Controller AP (E) for backup purposes. This will serve as the secondary controller AP (E). Both controller APs (A and E) are various SSID profiles stored in the...
User Guide
Page 71
...SSID profile for this section. 3.6.4 Configure Your NWA in Controller AP Mode The NWA is , it , the controller AP can still appear in the list of available wireless networks for wireless clients. Note: If you are using several NWA models in the NWAs (A and E) of the 1st floor, you...Check your network including an NWA-3166, you should use the NWA-3166 as the Controller AP. 1 Access the Web Configurator of the NWA. Go to MGNT MODE to the Web Configurator. 3.6.4.1 Secondary AP Controller The secondary AP controller is turned on top of being a controller AP. This example uses screens...
...SSID profile for this section. 3.6.4 Configure Your NWA in Controller AP Mode The NWA is , it , the controller AP can still appear in the list of available wireless networks for wireless clients. Note: If you are using several NWA models in the NWAs (A and E) of the 1st floor, you...Check your network including an NWA-3166, you should use the NWA-3166 as the Controller AP. 1 Access the Web Configurator of the NWA. Go to MGNT MODE to the Web Configurator. 3.6.4.1 Secondary AP Controller The secondary AP controller is turned on top of being a controller AP. This example uses screens...
User Guide
Page 72
... any of the managed APs. Then select Secondary AP Controller and click Apply. 3.6.4.2 Primary AP Controller The primary controller AP manages the NWA APs (in managed AP mode) in your NWA in secondary controller AP mode, open the Controller > Redundacy screen (this screen only appears when the NWA is in Controller AP mode) in the Web Configurator of the...
... any of the managed APs. Then select Secondary AP Controller and click Apply. 3.6.4.2 Primary AP Controller The primary controller AP manages the NWA APs (in managed AP mode) in your NWA in secondary controller AP mode, open the Controller > Redundacy screen (this screen only appears when the NWA is in Controller AP mode) in the Web Configurator of the...
User Guide
Page 73
... cannot be viewed anymore. Click Apply. Chapter 3 Tutorials 2 Enable Redundancy. Then select Primary AP Controller and enter the IP address of the NWA primary and secondary controller AP (recommended). Click Apply. Note: Only NWAs in managed AP mode are lost. 1 To set your managed AP to send a request to ... same rule applies to standalone AP mode by pressing the reset button on the casing (NWA-3500 only). This is because its controller AP's Web Configurator. Note: DCHP Server Option 43 enables your NWA in managed AP mode, open the MGNT screen in managed AP mode, its TELNET, FTP...
... cannot be viewed anymore. Click Apply. Chapter 3 Tutorials 2 Enable Redundancy. Then select Primary AP Controller and enter the IP address of the NWA primary and secondary controller AP (recommended). Click Apply. Note: Only NWAs in managed AP mode are lost. 1 To set your managed AP to send a request to ... same rule applies to standalone AP mode by pressing the reset button on the casing (NWA-3500 only). This is because its controller AP's Web Configurator. Note: DCHP Server Option 43 enables your NWA in managed AP mode, open the MGNT screen in managed AP mode, its TELNET, FTP...
User Guide
Page 74
... queue in the Un-Managed Access Points List in the Controller > AP Lists screen. • If the Registration Type is set the Registration Type to the controller's managed AP list. 3.6.6 Configuring the Managed Access Points List At this point, you have 3 NWA managed APs (B, C and D) that can now be managed... by the primary controller AP. For this example, we set to Always Accept, the controller AP immediately adds the AP to the Managed Access Points List in the Web...
... queue in the Un-Managed Access Points List in the Controller > AP Lists screen. • If the Registration Type is set the Registration Type to the controller's managed AP list. 3.6.6 Configuring the Managed Access Points List At this point, you have 3 NWA managed APs (B, C and D) that can now be managed... by the primary controller AP. For this example, we set to Always Accept, the controller AP immediately adds the AP to the Managed Access Points List in the Web...
User Guide
Page 75
...and MAC filter configurations. Chapter 3 Tutorials 1 To add a managed AP to the controller AP's coverage, go to disabled. By default, newly added managed APs in the list have their wireless functions are turned off. NWA-3160 Series User's Guide 75 Click Add. 3 The 2nd, 3rd and 4th floor... now be in the Description field. You can also identify these managed APs by filling in the Manged Access Points List. Note: The NWA controller AP uses WLAN Radio Profile to categorize different wireless settings present in the screen above. Figure 50 Tutorial: AP List (Un-Managed) 2 Select...
...and MAC filter configurations. Chapter 3 Tutorials 1 To add a managed AP to the controller AP's coverage, go to disabled. By default, newly added managed APs in the list have their wireless functions are turned off. NWA-3160 Series User's Guide 75 Click Add. 3 The 2nd, 3rd and 4th floor... now be in the Description field. You can also identify these managed APs by filling in the Manged Access Points List. Note: The NWA controller AP uses WLAN Radio Profile to categorize different wireless settings present in the screen above. Figure 50 Tutorial: AP List (Un-Managed) 2 Select...
User Guide
Page 77
... radio profile enabled for wireless connection. Do the same for the other WLAN radio profiles of the primary controller AP. They are overridden by just opening the Web Configurator of the remaining NWA APs (both controller and managed APs) and check if all the profiles you have set up in the managed APs... not take effect. In the image above, we use a wireless client to test if the setup is the SSID in the list of the primary controller AP. NWA-3160 Series User's Guide 77 You can see Mktg Grp 6 which is working at this example, we can configure the settings of each...
... radio profile enabled for wireless connection. Do the same for the other WLAN radio profiles of the primary controller AP. They are overridden by just opening the Web Configurator of the remaining NWA APs (both controller and managed APs) and check if all the profiles you have set up in the managed APs... not take effect. In the image above, we use a wireless client to test if the setup is the SSID in the list of the primary controller AP. NWA-3160 Series User's Guide 77 You can see Mktg Grp 6 which is working at this example, we can configure the settings of each...
User Guide
Page 82
...LABEL DESCRIPTION Automatic Refresh Interval Enter how often you want the NWA to update this screen. Firmware Version This field displays the current version of the NWA on the NWA. LAN MAC This displays the MAC (Media Access Control) address of the firmware inside the device. The flash memory... is to slow down . The higher the CPU usage, the more likely the NWA is currently in Maintenance > F/W Upload....
...LABEL DESCRIPTION Automatic Refresh Interval Enter how often you want the NWA to update this screen. Firmware Version This field displays the current version of the NWA on the NWA. LAN MAC This displays the MAC (Media Access Control) address of the firmware inside the device. The flash memory... is to slow down . The higher the CPU usage, the more likely the NWA is currently in Maintenance > F/W Upload....
User Guide
Page 87
... network. This screen determines whether the NWA is used in management mode. You (U) configure the controller AP (C), which then automatically updates the configurations of Wireless Access Points (CAPWAP) network. 5.2 About CAPWAP The NWA supports CAPWAP. This is protected by Datagram... Transport Layer Security (DTLS). The CAPWAP dataflow is ZyXEL's implementation of the...
... network. This screen determines whether the NWA is used in management mode. You (U) configure the controller AP (C), which then automatically updates the configurations of Wireless Access Points (CAPWAP) network. 5.2 About CAPWAP The NWA supports CAPWAP. This is protected by Datagram... Transport Layer Security (DTLS). The CAPWAP dataflow is ZyXEL's implementation of the...
User Guide
Page 88
...managed AP with the IP address of the CAPWAP AP controller on IP addresses and subnetting). If the AP is in CAPWAP AP controller mode. 3 If there is an AP controller on your network including an NWA-3166, you should use the NWA-3166 as securely transmitting the DTLS pre-shared key....must have a static IP address; Note: If you are using several NWA models in Manual mode it adds the details of the AP to manage. If the AP controller is ready for information on your network. Furthermore, the AP controller must be a controller AP, standalone AP (default) or a CAPWAP managed AP.
...managed AP with the IP address of the CAPWAP AP controller on IP addresses and subnetting). If the AP is in CAPWAP AP controller mode. 3 If there is an AP controller on your network including an NWA-3166, you should use the NWA-3166 as securely transmitting the DTLS pre-shared key....must have a static IP address; Note: If you are using several NWA models in Manual mode it adds the details of the AP to manage. If the AP controller is ready for information on your network. Furthermore, the AP controller must be a controller AP, standalone AP (default) or a CAPWAP managed AP.