User Guide
Page 9
Contents Overview Contents Overview Introduction ...21 Introducing the NWA ...23 The Web Configurator ...37 Tutorial ...41 The Web Configurator ...81 Status Screens ...83 Management Mode ...87 AP Controller Mode ......IP Screen ...183 Rogue AP Detection ...187 Remote Management Screens 195 Internal RADIUS Server ...209 Certificates ...217 Log Screens ...235 VLAN ...245 Load Balancing ...265 Dynamic Channel Selection ...271 Maintenance ...275 Troubleshooting and Specifications 287 Troubleshooting ...289 Product Specifications ...297 Appendices and Index ...303 NWA-3500/NWA-3550 User's Guide 9
Contents Overview Contents Overview Introduction ...21 Introducing the NWA ...23 The Web Configurator ...37 Tutorial ...41 The Web Configurator ...81 Status Screens ...83 Management Mode ...87 AP Controller Mode ......IP Screen ...183 Rogue AP Detection ...187 Remote Management Screens 195 Internal RADIUS Server ...209 Certificates ...217 Log Screens ...235 VLAN ...245 Load Balancing ...265 Dynamic Channel Selection ...271 Maintenance ...275 Troubleshooting and Specifications 287 Troubleshooting ...289 Product Specifications ...297 Appendices and Index ...303 NWA-3500/NWA-3550 User's Guide 9
User Guide
Page 17
... You Can Do in the VLAN Screen 245 20.1.2 What You Need To Know About VLAN 246 20.2 Wireless VLAN Screen ...247 20.2.1 RADIUS VLAN Screen 248 20.3 Technical Reference ...250 20.3.1 VLAN Tagging ...250 20.3.2 Configuring Management VLAN Example 250 20.3.3 Configuring Microsoft's IAS Server Example 253 20.3.3.1 Configuring VLAN Groups 254 NWA-3500/NWA-3550 User's Guide 17
... You Can Do in the VLAN Screen 245 20.1.2 What You Need To Know About VLAN 246 20.2 Wireless VLAN Screen ...247 20.2.1 RADIUS VLAN Screen 248 20.3 Technical Reference ...250 20.3.1 VLAN Tagging ...250 20.3.2 Configuring Management VLAN Example 250 20.3.3 Configuring Microsoft's IAS Server Example 253 20.3.3.1 Configuring VLAN Groups 254 NWA-3500/NWA-3550 User's Guide 17
User Guide
Page 18
Table of Contents 20.3.3.2 Configuring Remote Access Policies 255 20.3.4 Second Rx VLAN ID Example 263 20.3.4.1 Second Rx VLAN Setup Example 263 Chapter 21 Load Balancing ...265 21.1 Overview ...265 21.1.1 What You Need to Know About Load Balancing 265 21.2 The Load Balancing ... 23.9 Restart Screen ...284 Part III: Troubleshooting and Specifications 287 Chapter 24 Troubleshooting...289 24.1 Overview ...289 24.2 Power, Hardware Connections, and LEDs 289 24.3 NWA Access and Login 290 24.4 AP Management Modes 292 24.5 Internet Access ...294 18 NWA-3500/NWA-3550 User's Guide
Table of Contents 20.3.3.2 Configuring Remote Access Policies 255 20.3.4 Second Rx VLAN ID Example 263 20.3.4.1 Second Rx VLAN Setup Example 263 Chapter 21 Load Balancing ...265 21.1 Overview ...265 21.1.1 What You Need to Know About Load Balancing 265 21.2 The Load Balancing ... 23.9 Restart Screen ...284 Part III: Troubleshooting and Specifications 287 Chapter 24 Troubleshooting...289 24.1 Overview ...289 24.2 Power, Hardware Connections, and LEDs 289 24.3 NWA Access and Login 290 24.4 AP Management Modes 292 24.5 Internet Access ...294 18 NWA-3500/NWA-3550 User's Guide
User Guide
Page 39
SERVER (Setting, Trusted AP, Trusted Users), CERTIFICATES (My Certificates, Trusted CAs), LOGS (View Log and Log Settings), VLAN (Wireless VLAN and RADIUS VLAN), Load Balancing, and DCS. • Click MAINTENANCE to navigate the web configurator from the Status screen. Click LOGOUT at the bottom of the ... Status Screen • Click the links on the left of the screen when you click Apply or OK to exit the web configurator. NWA-3500/NWA-3550 User's Guide 39 Chapter 2 The Web Configurator 2.4 Navigating the Web Configurator The following summarizes how to view information about your...
SERVER (Setting, Trusted AP, Trusted Users), CERTIFICATES (My Certificates, Trusted CAs), LOGS (View Log and Log Settings), VLAN (Wireless VLAN and RADIUS VLAN), Load Balancing, and DCS. • Click MAINTENANCE to navigate the web configurator from the Status screen. Click LOGOUT at the bottom of the ... Status Screen • Click the links on the left of the screen when you click Apply or OK to exit the web configurator. NWA-3500/NWA-3550 User's Guide 39 Chapter 2 The Web Configurator 2.4 Navigating the Web Configurator The following summarizes how to view information about your...
User Guide
Page 81
PART II The Web Configurator System Screens (109) Wireless Configuration (119) SSID Screen (145) Wireless Security Screen (155) RADIUS Screen (169) Layer-2 Isolation Screen (173) MAC Filter Screen (179) IP Screen (183) Rogue AP Detection (187) Remote Management Screens (195) Internal RADIUS Server (209) Certificates (217) Log Screens (235) VLAN (245) Maintenance (275) 81
PART II The Web Configurator System Screens (109) Wireless Configuration (119) SSID Screen (145) Wireless Security Screen (155) RADIUS Screen (169) Layer-2 Isolation Screen (173) MAC Filter Screen (179) IP Screen (183) Rogue AP Detection (187) Remote Management Screens (195) Internal RADIUS Server (209) Certificates (217) Log Screens (235) VLAN (245) Maintenance (275) 81
User Guide
Page 84
Refresh Click this to slow down . 84 NWA-3500/NWA-3550 User's Guide WLAN1 Operating Mode This field displays the current operating mode of the first wireless module. You can change the management VLAN ID, in the VLAN > Wireless VLAN screen. WLAN1 MAC This displays the MAC address of the first... memory is used to slow down . The higher the memory usage, the more likely the NWA is currently in use . Management VLAN This field displays the management VLAN ID if VLAN is active, or Disabled if it across the network. Chapter 4 Status Screens The following table...
Refresh Click this to slow down . 84 NWA-3500/NWA-3550 User's Guide WLAN1 Operating Mode This field displays the current operating mode of the first wireless module. You can change the management VLAN ID, in the VLAN > Wireless VLAN screen. WLAN1 MAC This displays the MAC address of the first... memory is used to slow down . The higher the memory usage, the more likely the NWA is currently in use . Management VLAN This field displays the management VLAN ID if VLAN is active, or Disabled if it across the network. Chapter 4 Status Screens The following table...
User Guide
Page 85
...interfaces. BSSID This field displays the MAC address of wireless security used by the NWA. Security This field displays the type of the wireless adaptor. See Section 4.2.1 on page 281. NWA-3500/NWA-3550 User's Guide 85 It supports up to 128 concurrent associations. SSID Status ...Screen LABEL DESCRIPTION WLAN1 Associations This field displays the number of wireless clients currently associated with the second wireless module. VLAN This field displays the VLAN ID of each of logs produced by each SSID. Logs Click this to see a list of the SSIDs currently...
...interfaces. BSSID This field displays the MAC address of wireless security used by the NWA. Security This field displays the type of the wireless adaptor. See Section 4.2.1 on page 281. NWA-3500/NWA-3550 User's Guide 85 It supports up to 128 concurrent associations. SSID Status ...Screen LABEL DESCRIPTION WLAN1 Associations This field displays the number of wireless clients currently associated with the second wireless module. VLAN This field displays the VLAN ID of each of logs produced by each SSID. Logs Click this to see a list of the SSIDs currently...
User Guide
Page 146
... in the SSID profile) • Wireless > Layer 2 Isolation (the layer 2 isolation list, if activated in the SSID profile) • Also, use the VLAN screen to set to Access Point, AP + Bridge or MBSSID mode, you need to choose the SSID profile(s) you read through this chapter. To configure...settings of your wireless network (see Section 8.3 on page 123 for more information on SSID Configure the fields in an SSID profile. 146 NWA-3500/NWA-3550 User's Guide Each SSID profile references the settings configured in the following terms and concepts may help as you want to allow access ...
... in the SSID profile) • Wireless > Layer 2 Isolation (the layer 2 isolation list, if activated in the SSID profile) • Also, use the VLAN screen to set to Access Point, AP + Bridge or MBSSID mode, you need to choose the SSID profile(s) you read through this chapter. To configure...settings of your wireless network (see Section 8.3 on page 123 for more information on SSID Configure the fields in an SSID profile. 146 NWA-3500/NWA-3550 User's Guide Each SSID profile references the settings configured in the following terms and concepts may help as you want to allow access ...
User Guide
Page 245
...allows a physical network to each other. Only stations within the same group can belong to the server. NWA-3500/NWA-3550 User's Guide 245 The NWA tags all packets from an SSID with the VLAN ID you set in this screen. It allows station B to connect to the server but not to... Virtual LAN setup. Stations on a logical network can talk to be partitioned into multiple logical networks. Your RADIUS server assigns VLAN IDs to configure VLAN on the NWA. CHAPTER 20 VLAN 20.1 Overview This chapter discusses how to a user or user group's traffic based on what you set in this screen...
...allows a physical network to each other. Only stations within the same group can belong to the server. NWA-3500/NWA-3550 User's Guide 245 The NWA tags all packets from an SSID with the VLAN ID you set in this screen. It allows station B to connect to the server but not to... Virtual LAN setup. Stations on a logical network can talk to be partitioned into multiple logical networks. Your RADIUS server assigns VLAN IDs to configure VLAN on the NWA. CHAPTER 20 VLAN 20.1 Overview This chapter discusses how to a user or user group's traffic based on what you set in this screen...
User Guide
Page 246
... Enable VIRTUAL LAN and configure the Management VLAN ID in order to assign VLAN IDs based on page 253 for more information. Chapter 20 VLAN 20.1.2 What You Need To Know About VLAN The following terms and concepts may help as you read through the network). 246 NWA-3500/NWA-3550 User's Guide Note: If no devices...
... Enable VIRTUAL LAN and configure the Management VLAN ID in order to assign VLAN IDs based on page 253 for more information. Chapter 20 VLAN 20.1.2 What You Need To Know About VLAN The following terms and concepts may help as you read through the network). 246 NWA-3500/NWA-3550 User's Guide Note: If no devices...
User Guide
Page 247
... from 1 to 4094 to communicate with the NWA. NWA-3500/NWA-3550 User's Guide 247 Figure 137 VLAN > Wireless VLAN The following screen appears. Chapter 20 VLAN 20.2 Wireless VLAN Screen Use this screen to enable VLAN tagging. The following table describes the labels in your Wireless Virtual LAN setup. Click VLAN > Wireless VLAN. At least one device in this screen...
... from 1 to 4094 to communicate with the NWA. NWA-3500/NWA-3550 User's Guide 247 Figure 137 VLAN > Wireless VLAN The following screen appears. Chapter 20 VLAN 20.2 Wireless VLAN Screen Use this screen to enable VLAN tagging. The following table describes the labels in your Wireless Virtual LAN setup. Click VLAN > Wireless VLAN. At least one device in this screen...
User Guide
Page 248
... name of the SSID profile. Chapter 20 VLAN Table 77 VLAN > Wireless VLAN FIELD DESCRIPTION Native VLAN Check this to save your RADIUS Virtual LAN setup. Leave this VLAN ID configured in this VLAN ID is tagged with this screen. 248 NWA-3500/NWA-3550 User's Guide This is the default VLAN where untagged traffic can use to connect to...
... name of the SSID profile. Chapter 20 VLAN Table 77 VLAN > Wireless VLAN FIELD DESCRIPTION Native VLAN Check this to save your RADIUS Virtual LAN setup. Leave this VLAN ID configured in this VLAN ID is tagged with this screen. 248 NWA-3500/NWA-3550 User's Guide This is the default VLAN where untagged traffic can use to connect to...
User Guide
Page 249
... the RADIUS server do not match a configured Name field. NWA-3500/NWA-3550 User's Guide 249 Figure 138 VLAN > RADIUS VLAN The following screen appears. This is sent to VLAN IDs so that the RADIUS server can access the network through the NWA. Chapter 20 VLAN Click VLAN > RADIUS VLAN. The following table describes the labels in this table to...
... the RADIUS server do not match a configured Name field. NWA-3500/NWA-3550 User's Guide 249 Figure 138 VLAN > RADIUS VLAN The following screen appears. This is sent to VLAN IDs so that the RADIUS server can access the network through the NWA. Chapter 20 VLAN Click VLAN > RADIUS VLAN. The following table describes the labels in this table to...
User Guide
Page 250
... provides some technical background information and configuration examples about the topics covered in -band management. 250 NWA-3500/NWA-3550 User's Guide Chapter 20 VLAN Table 78 VLAN > RADIUS VLAN LABEL Name Apply Reset DESCRIPTION Type a name to configure a tagged VLAN. Access-accept packets sent by the RADIUS server do not match a configured Name field, a wireless station...
... provides some technical background information and configuration examples about the topics covered in -band management. 250 NWA-3500/NWA-3550 User's Guide Chapter 20 VLAN Table 78 VLAN > RADIUS VLAN LABEL Name Apply Reset DESCRIPTION Type a name to configure a tagged VLAN. Access-accept packets sent by the RADIUS server do not match a configured Name field, a wireless station...
User Guide
Page 251
... should be the same as the management VLAN ID on the NWA. 6 Enable Transmitted Packets (Tx) Tagging on the port you want to connect to port 1. Static VLAN NWA-3500/NWA-3550 User's Guide 251 Figure 139 Management VLAN Configuration Example Perform the following figure has the NWA connected to port 2 and your computer. 7 Under Control, select Fixed...
... should be the same as the management VLAN ID on the NWA. 6 Enable Transmitted Packets (Tx) Tagging on the port you want to connect to port 1. Static VLAN NWA-3500/NWA-3550 User's Guide 251 Figure 139 Management VLAN Configuration Example Perform the following figure has the NWA connected to port 2 and your computer. 7 Under Control, select Fixed...
User Guide
Page 252
... in the field provided. 252 NWA-3500/NWA-3550 User's Guide Figure 142 VLAN-Aware Switch - The NWA should be connected to set up your computer and port 2 to connect to the NWA: Figure 139 on page 251. 1 In the NWA web configurator click VLAN to display the following screen displays. Chapter 20 VLAN 8 Click Apply. In the above...
... in the field provided. 252 NWA-3500/NWA-3550 User's Guide Figure 142 VLAN-Aware Switch - The NWA should be connected to set up your computer and port 2 to connect to the NWA: Figure 139 on page 251. 1 In the NWA web configurator click VLAN to display the following screen displays. Chapter 20 VLAN 8 Click Apply. In the above...
User Guide
Page 253
... Microsoft's IAS Server Example Dynamic VLAN assignment can now access and mange the NWA though the Ethernet switch. If this happens, you must reset the NWA to a correctly configured VLAN-aware device, you do not connect the NWA to access it 's respective VLAN. NWA-3500/NWA-3550 User's Guide 253 You ...can be used with a VLAN-aware device. Note: ...
... Microsoft's IAS Server Example Dynamic VLAN assignment can now access and mange the NWA though the Ethernet switch. If this happens, you must reset the NWA to a correctly configured VLAN-aware device, you do not connect the NWA to access it 's respective VLAN. NWA-3500/NWA-3550 User's Guide 253 You ...can be used with a VLAN-aware device. Note: ...
User Guide
Page 254
... Users and Computers administrative tool, create the VLAN Groups that describes the VLAN Group's function. 1b Select the Global Group scope parameter check box. 254 NWA-3500/NWA-3550 User's Guide either the Name you must first define the VLAN Groups on the Active Directory server and assign...4b If the Name is not found , the mapped VLAN ID is used for each VLAN defined on page 261. Chapter 20 VLAN ZyXEL uses the following occurs under Dynamic VLAN Assignment: 1 When you configure your wireless credentials, the NWA sends the information to the IAS server using RADIUS protocol...
... Users and Computers administrative tool, create the VLAN Groups that describes the VLAN Group's function. 1b Select the Global Group scope parameter check box. 254 NWA-3500/NWA-3550 User's Guide either the Name you must first define the VLAN Groups on the Active Directory server and assign...4b If the Name is not found , the mapped VLAN ID is used for each VLAN defined on page 261. Chapter 20 VLAN ZyXEL uses the following occurs under Dynamic VLAN Assignment: 1 When you configure your wireless credentials, the NWA sends the information to the IAS server using RADIUS protocol...
User Guide
Page 255
... Group Members 20.3.3.2 Configuring Remote Access Policies Once the VLAN Groups have been created, the IAS Remote Access Policy needs to add each VLAN Group. NWA-3500/NWA-3550 User's Guide 255 Click the Add button and configure the VLAN group details. 3 Repeat the previous step to be ...defined. Figure 144 New Global Security Group Chapter 20 VLAN 2 In VLAN Group ID Properties, click the Members ...
... Group Members 20.3.3.2 Configuring Remote Access Policies Once the VLAN Groups have been created, the IAS Remote Access Policy needs to add each VLAN Group. NWA-3500/NWA-3550 User's Guide 255 Click the Add button and configure the VLAN group details. 3 Repeat the previous step to be ...defined. Figure 144 New Global Security Group Chapter 20 VLAN 2 In VLAN Group ID Properties, click the Members ...
User Guide
Page 256
... and select New Remote Access Policy. 1b Enter a Policy friendly name that describes the policy. Chapter 20 VLAN 1 Using the Remote Access Policy option on . 256 NWA-3500/NWA-3550 User's Guide Select Add to add a condition for this policy to act on the Internet Authentication Service... management interface, create a new VLAN Policy for VLAN Group 2 The Conditions window displays. The order of the policy list and ...
... and select New Remote Access Policy. 1b Enter a Policy friendly name that describes the policy. Chapter 20 VLAN 1 Using the Remote Access Policy option on . 256 NWA-3500/NWA-3550 User's Guide Select Add to add a condition for this policy to act on the Internet Authentication Service... management interface, create a new VLAN Policy for VLAN Group 2 The Conditions window displays. The order of the policy list and ...