Quick Start Guide
Page 15
This causes the NWA-3500 to restart. 6 Procedure to View a Product's Certification(s) 1 Go to www.zyxel.com. 2 Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. 3 Select the certification you disconnect the POWER 12VDC port. ENGLISH " You can connect the NWA-3500 to PoE via the ETHERNET port AND to view from this page. 15 If you do so, do not disconnect the ETHERNET port before you wish to a power source via the POWER 12VDC port.
This causes the NWA-3500 to restart. 6 Procedure to View a Product's Certification(s) 1 Go to www.zyxel.com. 2 Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. 3 Select the certification you disconnect the POWER 12VDC port. ENGLISH " You can connect the NWA-3500 to PoE via the ETHERNET port AND to view from this page. 15 If you do so, do not disconnect the ETHERNET port before you wish to a power source via the POWER 12VDC port.
User Guide
Page 3
...-Based Industrial Park, Hsinchu, 300, Taiwan. Related Documentation • Quick Start Guide The Quick Start Guide is designed to configure the NWA using the web configurator. E-mail: techwriters@zyxel.com.tw NWA-3500/NWA-3550 User's Guide 3 It contains information on setting up and running right away. Thank you get up your network and configuring...
...-Based Industrial Park, Hsinchu, 300, Taiwan. Related Documentation • Quick Start Guide The Quick Start Guide is designed to configure the NWA using the web configurator. E-mail: techwriters@zyxel.com.tw NWA-3500/NWA-3550 User's Guide 3 It contains information on setting up and running right away. Thank you get up your network and configuring...
User Guide
Page 4
If you bought the device. See http://www.zyxel.com/ web/contact_us.php for the region in which you cannot contact your vendor. Please have the following information ready when you contact an office. .... • Date that you received your device. • Brief description of problems that cannot be solved by using this manual, you took to solve it. 4 NWA-3500/NWA-3550 User's Guide About This User's Guide Customer Support In the event of the problem and the steps you should contact your vendor, then contact...
If you bought the device. See http://www.zyxel.com/ web/contact_us.php for the region in which you cannot contact your vendor. Please have the following information ready when you contact an office. .... • Date that you received your device. • Brief description of problems that cannot be solved by using this manual, you took to solve it. 4 NWA-3500/NWA-3550 User's Guide About This User's Guide Customer Support In the event of the problem and the steps you should contact your vendor, then contact...
User Guide
Page 7
... device.) • Antenna Warning! Your product is marked with this symbol, which is damaged, remove it from this device during a thunderstorm. NWA-3500/NWA-3550 User's Guide 7 Safety Warnings Safety Warnings • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT... service this device before servicing or disassembling. • Use ONLY an appropriate power adaptor or cord for Waste Electronics and Electrical Equipment. ZyXEL bears no electrical lines, gas or water pipes will step on the power adaptor or cord. • Do NOT use the included antenna...
... device.) • Antenna Warning! Your product is marked with this symbol, which is damaged, remove it from this device during a thunderstorm. NWA-3500/NWA-3550 User's Guide 7 Safety Warnings Safety Warnings • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT... service this device before servicing or disassembling. • Use ONLY an appropriate power adaptor or cord for Waste Electronics and Electrical Equipment. ZyXEL bears no electrical lines, gas or water pipes will step on the power adaptor or cord. • Do NOT use the included antenna...
User Guide
Page 25
...with B) at the same time. Figure 2 Bridge Application A B NWA-3500/NWA-3550 User's Guide 25 Refer to your other APs. In the figure below, the two NWAs (A and B) are connected to prevent bridge loops. When the NWA is in Bridge / Repeater mode, security between APs (the Wireless ... the security settings of the security between APs is in Figure 3) has no Ethernet connection. When the NWA is not encrypted. See Section 8.2.2 on page 127 for details. Chapter 1 Introducing the NWA 1.2.2 Bridge / Repeater The NWA can communicate with other ZyXEL access points only.
...with B) at the same time. Figure 2 Bridge Application A B NWA-3500/NWA-3550 User's Guide 25 Refer to your other APs. In the figure below, the two NWAs (A and B) are connected to prevent bridge loops. When the NWA is in Bridge / Repeater mode, security between APs (the Wireless ... the security settings of the security between APs is in Figure 3) has no Ethernet connection. When the NWA is not encrypted. See Section 8.2.2 on page 127 for details. Chapter 1 Introducing the NWA 1.2.2 Bridge / Repeater The NWA can communicate with other ZyXEL access points only.
User Guide
Page 31
... Internet Engineering Task Force's (IETF) CAPWAP protocol. The following ZyXEL AP models can be CAPWAP managed APs: • NWA-3160 • NWA-3163 • NWA-3500 • NWA-3550 • NWA-3166 The following figure illustrates a CAPWAP wireless network. Figure 10 CAPWAP Network Example U C M1 M2 M3 M4 NWA-3500/NWA-3550 User's Guide 31 The managed APs receive all...
... Internet Engineering Task Force's (IETF) CAPWAP protocol. The following ZyXEL AP models can be CAPWAP managed APs: • NWA-3160 • NWA-3163 • NWA-3500 • NWA-3550 • NWA-3166 The following figure illustrates a CAPWAP wireless network. Figure 10 CAPWAP Network Example U C M1 M2 M3 M4 NWA-3500/NWA-3550 User's Guide 31 The managed APs receive all...
User Guide
Page 32
...Follow the suggestions below to improve security on your password, you will have to totally re-configure the NWA; This protocol can be used for your NWA and network. 32 NWA-3500/NWA-3550 User's Guide you can be useful if the device becomes unstable or even crashes. The device ...can simply restore your last configuration. • Check the ZyXEL website (www.zyxel.com.tw) regularly for new firmware for ...
...Follow the suggestions below to improve security on your password, you will have to totally re-configure the NWA; This protocol can be used for your NWA and network. 32 NWA-3500/NWA-3550 User's Guide you can be useful if the device becomes unstable or even crashes. The device ...can simply restore your last configuration. • Check the ZyXEL website (www.zyxel.com.tw) regularly for new firmware for ...
User Guide
Page 87
...The CAPWAP dataflow is used in management mode. Figure 56 CAPWAP Network Example U DHCP SERVER C M1 M2 M3 M4 NWA-3500/NWA-3550 User's Guide 87 The following figure illustrates a CAPWAP wireless network. You (U) configure the controller AP (C), which then... automatically updates the configurations of the IETF's CAPWAP protocol (RFC 4118). This screen determines whether the NWA is protected by Datagram Transport Layer Security (DTLS). This is ZyXEL's implementation of the managed APs (M1 ~ M4). CHAPTER 5 Management Mode 5.1 Overview This chapter discusses using ...
...The CAPWAP dataflow is used in management mode. Figure 56 CAPWAP Network Example U DHCP SERVER C M1 M2 M3 M4 NWA-3500/NWA-3550 User's Guide 87 The following figure illustrates a CAPWAP wireless network. You (U) configure the controller AP (C), which then... automatically updates the configurations of the IETF's CAPWAP protocol (RFC 4118). This screen determines whether the NWA is protected by Datagram Transport Layer Security (DTLS). This is ZyXEL's implementation of the managed APs (M1 ~ M4). CHAPTER 5 Management Mode 5.1 Overview This chapter discusses using ...
User Guide
Page 89
NWA-3500/NWA-3550 User's Guide 89 Figure 57 CAPWAP and DHCP Option 43 SUBNET 1 SUBNET 2 CAPWAP TRAFFIC DHCP SERVER + OPTION 43 AP CONTROLLER (STATIC IP) MANAGED AP (DYNAMIC IP) 5.2.4 Notes on CAPWAP This section lists some additional features of ZyXEL's implementation of the CAPWAP protocol. • When the AP controller uses its internal Remote...
NWA-3500/NWA-3550 User's Guide 89 Figure 57 CAPWAP and DHCP Option 43 SUBNET 1 SUBNET 2 CAPWAP TRAFFIC DHCP SERVER + OPTION 43 AP CONTROLLER (STATIC IP) MANAGED AP (DYNAMIC IP) 5.2.4 Notes on CAPWAP This section lists some additional features of ZyXEL's implementation of the CAPWAP protocol. • When the AP controller uses its internal Remote...
User Guide
Page 109
... provides information and instructions on how to identify and manage your local time zone. This screen allows you to change your NWA's time and date. NWA-3500/NWA-3550 User's Guide 109 You can also configure your System DNS Servers in the System Screens • Use the General screen... page 113) to manage the password for your NWA and have a RADIUS server authenticate management logins to the NWA. • Use the Time Setting screen (see Section 7.2 on your NWA over the network. Figure 69 NWA Setup In the figure above, the NWA (ZyXEL Device) connects to a Domain Name Server (DNS...
... provides information and instructions on how to identify and manage your local time zone. This screen allows you to change your NWA's time and date. NWA-3500/NWA-3550 User's Guide 109 You can also configure your System DNS Servers in the System Screens • Use the General screen... page 113) to manage the password for your NWA and have a RADIUS server authenticate management logins to the NWA. • Use the Time Setting screen (see Section 7.2 on your NWA over the network. Figure 69 NWA Setup In the figure above, the NWA (ZyXEL Device) connects to a Domain Name Server (DNS...
User Guide
Page 119
...basic scenarios. Figure 73 Wireless Mode In the figure above, the NWA (ZyXEL Device) allows access to another bridge device (A) and a notebook computer (B) upon verifying their settings and credentials. NWA-3500/NWA-3550 User's Guide 119 CHAPTER 8 Wireless Configuration 8.1 Overview This chapter... discusses the steps to configure the Wireless Settings screen on page 123) to configure the NWA to use a WLAN interface and operate ...
...basic scenarios. Figure 73 Wireless Mode In the figure above, the NWA (ZyXEL Device) allows access to another bridge device (A) and a notebook computer (B) upon verifying their settings and credentials. NWA-3500/NWA-3550 User's Guide 119 CHAPTER 8 Wireless Configuration 8.1 Overview This chapter... discusses the steps to configure the Wireless Settings screen on page 123) to configure the NWA to use a WLAN interface and operate ...
User Guide
Page 129
... to make sure it supports WDS security. This option is a high density of APs in an area, decrease the output power of the NWA to reduce interference with other access point(s). AES Index Active Note: Check your WDS. This is independent of the security settings between two or... Temporal Key Integrity Protocol (TKIP) security on your other ZyXEL access points that support WDS security. Use this speed. Use AES if the other access points on your WDS. • Enter a pre-shared key in your NWA's output power. NWA-3500/NWA-3550 User's Guide 129 This section controls the data rates...
... to make sure it supports WDS security. This option is a high density of APs in an area, decrease the output power of the NWA to reduce interference with other access point(s). AES Index Active Note: Check your WDS. This is independent of the security settings between two or... Temporal Key Integrity Protocol (TKIP) security on your other ZyXEL access points that support WDS security. Use this speed. Use AES if the other access points on your WDS. • Enter a pre-shared key in your NWA's output power. NWA-3500/NWA-3550 User's Guide 129 This section controls the data rates...
User Guide
Page 134
...security and the relevant PSK in the PSK field for each Rate, select an option from 8 to use a different pre-shared key. 134 NWA-3500/NWA-3550 User's Guide Note: Other APs must also set the peer device to 63 case-sensitive ASCII characters (including spaces and symbols). AES Index ...hexadecimal character pairs, for clients. For each access point in a valid MAC address format, that support WDS security. Use this if the other ZyXEL access points that is compatible with other access points on your WDS. Type the MAC address of security you enable WDS security, also do not...
...security and the relevant PSK in the PSK field for each Rate, select an option from 8 to use a different pre-shared key. 134 NWA-3500/NWA-3550 User's Guide Note: Other APs must also set the peer device to 63 case-sensitive ASCII characters (including spaces and symbols). AES Index ...hexadecimal character pairs, for clients. For each access point in a valid MAC address format, that support WDS security. Use this if the other ZyXEL access points that is compatible with other access points on your WDS. Type the MAC address of security you enable WDS security, also do not...
User Guide
Page 142
... can still associate with other APs (Non-ZyXEL APs may not be able to perform this information to another, it scans and uses the channel of access point AP 2. 3 Wireless station Y sends an association request to the wired network through the wired LAN. 142 NWA-3500/NWA-3550 User's Guide Enabling roaming ensures correct...
... can still associate with other APs (Non-ZyXEL APs may not be able to perform this information to another, it scans and uses the channel of access point AP 2. 3 Wireless station Y sends an association request to the wired network through the wired LAN. 142 NWA-3500/NWA-3550 User's Guide Enabling roaming ensures correct...
User Guide
Page 155
Figure 86 Securing the Wireless Network In the figure above, the NWA (ZyXEL Device) checks the identity of devices (A and B) before giving them access to configure the security mode for your NWA. NWA-3500/NWA-3550 User's Guide 155 This screen allows you to the network. Wireless security is...Security Screen Use the Wireless > Security screen (see Section 10.2 on page 157) to use the Wireless Security screen. The NWA secures communications via data encryption, wireless client authentication and MAC address filtering. CHAPTER 10 Wireless Security Screen 10.1 Overview This chapter...
Figure 86 Securing the Wireless Network In the figure above, the NWA (ZyXEL Device) checks the identity of devices (A and B) before giving them access to configure the security mode for your NWA. NWA-3500/NWA-3550 User's Guide 155 This screen allows you to the network. Wireless security is...Security Screen Use the Wireless > Security screen (see Section 10.2 on page 157) to use the Wireless Security screen. The NWA secures communications via data encryption, wireless client authentication and MAC address filtering. CHAPTER 10 Wireless Security Screen 10.1 Overview This chapter...
User Guide
Page 169
... server. CHAPTER 11 RADIUS Screen 11.1 Overview This chapter describes how you can be used to manage user access to large networks. NWA-3500/NWA-3550 User's Guide 169 Remote Authentication Dial In User Service (RADIUS) is based on a client-server model that can use the Wireless... In the figure above, wireless clients A and U are allowed access to access the Internet using the NWA (ZyXEL Device). It is a protocol that supports authentication, authorization and accounting. The NWA in turn queries the RADIUS server if the identity of clients A and U are trying to the Internet...
... server. CHAPTER 11 RADIUS Screen 11.1 Overview This chapter describes how you can be used to manage user access to large networks. NWA-3500/NWA-3550 User's Guide 169 Remote Authentication Dial In User Service (RADIUS) is based on a client-server model that can use the Wireless... In the figure above, wireless clients A and U are allowed access to access the Internet using the NWA (ZyXEL Device). It is a protocol that supports authentication, authorization and accounting. The NWA in turn queries the RADIUS server if the identity of clients A and U are trying to the Internet...
User Guide
Page 179
... which wireless station is allowed or denied access to devices (Allow Association) or exclude devices from accessing the NWA (Deny Association). The MAC address is not in the list of hexadecimal NWA-3500/NWA-3550 User's Guide 179 The MAC filter function allows you can use the Wireless > MAC Filter screen. ... A is either denied association or is assigned at the factory and consists of six pairs of allowed wireless clients specified in the NWA. 13.1.1 What You Can Do in the NWA (ZyXEL Device). CHAPTER 13 MAC Filter Screen 13.1 Overview This chapter discusses how you to configure the...
... which wireless station is allowed or denied access to devices (Allow Association) or exclude devices from accessing the NWA (Deny Association). The MAC address is not in the list of hexadecimal NWA-3500/NWA-3550 User's Guide 179 The MAC filter function allows you can use the Wireless > MAC Filter screen. ... A is either denied association or is assigned at the factory and consists of six pairs of allowed wireless clients specified in the NWA. 13.1.1 What You Can Do in the NWA (ZyXEL Device). CHAPTER 13 MAC Filter Screen 13.1 Overview This chapter discusses how you to configure the...
User Guide
Page 207
... MIB II that is defined in RFC-1215. The NWA can send the following protocol operations: • Get - This trap is sent when the Ethernet link is a collection of variables include such as the proprietary ZyXEL private MIB. Chapter 16 Remote Management Screens device. Examples ...of managed objects. A Management Information Base (MIB) is down. This trap is sent after booting (power on the manager/ agent model. NWA-3500/NWA-3550 User's Guide 207 The manager issues...
... MIB II that is defined in RFC-1215. The NWA can send the following protocol operations: • Get - This trap is sent when the Ethernet link is a collection of variables include such as the proprietary ZyXEL private MIB. Chapter 16 Remote Management Screens device. Examples ...of managed objects. A Management Information Base (MIB) is down. This trap is sent after booting (power on the manager/ agent model. NWA-3500/NWA-3550 User's Guide 207 The manager issues...
User Guide
Page 208
...890.1.5.1 3.0.1 Note: snmpEnableAuthenTraps, OID 1.3.6.1.2.1.11.30 (defined in RFC 1214 and RFC 1907) must be enabled on in WDS mode 208 NWA-3500/NWA-3550 User's Guide "System reboot by user!" Some traps include an SNMP interface index. Use a MIB browser to send authenticationFailure traps.... Chapter 16 Remote Management Screens Table 59 SNMP Traps TRAP NAME OBJECT IDENTIFIER # (OID) authenticationFailure 1.3.6.1.6.3.1.1.5.5 (defined in the ZyXEL Private MIB. Traps defined in RFC-1215) DESCRIPTION The device sends this trap when it receives any SNMP get or set requirements ...
...890.1.5.1 3.0.1 Note: snmpEnableAuthenTraps, OID 1.3.6.1.2.1.11.30 (defined in RFC 1214 and RFC 1907) must be enabled on in WDS mode 208 NWA-3500/NWA-3550 User's Guide "System reboot by user!" Some traps include an SNMP interface index. Use a MIB browser to send authenticationFailure traps.... Chapter 16 Remote Management Screens Table 59 SNMP Traps TRAP NAME OBJECT IDENTIFIER # (OID) authenticationFailure 1.3.6.1.6.3.1.1.5.5 (defined in the ZyXEL Private MIB. Traps defined in RFC-1215) DESCRIPTION The device sends this trap when it receives any SNMP get or set requirements ...
User Guide
Page 214
...ASCII characters in the AUTH. A trusted AP is done. SERVER > Trusted Users screen. Figure 122 Trusted APs Overview ZyXEL RADIUS Server Trusted APs Wireless clients 214 NWA-3500/NWA-3550 User's Guide Apply Reset Note: If you type a password, the screen displays a (*) for this user profile.... Click Apply to the NWA. Wireless clients make access requests to trusted APs, which relay the requests to save your...
...ASCII characters in the AUTH. A trusted AP is done. SERVER > Trusted Users screen. Figure 122 Trusted APs Overview ZyXEL RADIUS Server Trusted APs Wireless clients 214 NWA-3500/NWA-3550 User's Guide Apply Reset Note: If you type a password, the screen displays a (*) for this user profile.... Click Apply to the NWA. Wireless clients make access requests to trusted APs, which relay the requests to save your...