User Guide
Page 19
... default administrator login user name and password are "admin" and "1234" respectively. 1.2 Zones, Interfaces, and Physical Ports Here is where you set up the network and enforce security policies efficiently. Use zones to apply security settings such as firewall. (LAN) Interfaces (Ethernet, VLAN) Physical Ethernet Ports Interfaces are mapped to ge2 and so on ) are logical entities that (layer-3) packets pass through. It also provides captive portal configuration, NAT, port forwarding, policy routing, DHCP server, extensive wireless AP control...
... default administrator login user name and password are "admin" and "1234" respectively. 1.2 Zones, Interfaces, and Physical Ports Here is where you set up the network and enforce security policies efficiently. Use zones to apply security settings such as firewall. (LAN) Interfaces (Ethernet, VLAN) Physical Ethernet Ports Interfaces are mapped to ge2 and so on ) are logical entities that (layer-3) packets pass through. It also provides captive portal configuration, NAT, port forwarding, policy routing, DHCP server, extensive wireless AP control...
User Guide
Page 42
... speed. IPv6 IPv6 Enables or disables IPv6 support on the NXC. Log Settings Log Settings Configure the system log, e-mail logs, and remote syslog servers. 3.3.2.4 Maintenance Menu Use the maintenance menu screens to act as a RADIUS server. Table 15 Maintenance Menu Screens Summary FOLDER OR LINK TAB FUNCTION File Manager Configuration File Manage and upload configuration files for the NXC. NXC Series User's Guide 42 System Host Name Host Name Configure the system and domain name for the connected USB devices. USB Storage USB Storage Configure...
... speed. IPv6 IPv6 Enables or disables IPv6 support on the NXC. Log Settings Log Settings Configure the system log, e-mail logs, and remote syslog servers. 3.3.2.4 Maintenance Menu Use the maintenance menu screens to act as a RADIUS server. Table 15 Maintenance Menu Screens Summary FOLDER OR LINK TAB FUNCTION File Manager Configuration File Manage and upload configuration files for the NXC. NXC Series User's Guide 42 System Host Name Host Name Configure the system and domain name for the connected USB devices. USB Storage USB Storage Configure...
User Guide
Page 47
...; Enable Daylight Savings: Select the option if you configure the following settings: 1 For the NXC: • Country code • Time zone • Daylight saving • IP address • VLAN interfaces 2 For managed APs: • Radio settings • SSID profiles 4.2.1 Step 1 Password and Time Settings Use this screen to configure the NXC's system password, time zone and daylight savings time. It's important to 5.5 (by 0.5 increments). CHAPTER 4 Setup Wizard 4.1 Accessing the Wizard Connect a router or switch with Internet access to port...
...; Enable Daylight Savings: Select the option if you configure the following settings: 1 For the NXC: • Country code • Time zone • Daylight saving • IP address • VLAN interfaces 2 For managed APs: • Radio settings • SSID profiles 4.2.1 Step 1 Password and Time Settings Use this screen to configure the NXC's system password, time zone and daylight savings time. It's important to 5.5 (by 0.5 increments). CHAPTER 4 Setup Wizard 4.1 Accessing the Wizard Connect a router or switch with Internet access to port...
User Guide
Page 60
... field displays the user name used . Click this to re-open appear grayed out. Hover your cursor over a connected interface. Use Widget Settings to update the widget's information immediately. Click the CPU Usage link to view details about the status of users currently logged in a slot. Widgets that are currently open the screen where you hover your cursor over a LED or connected Ethernet port to display a chart...
... field displays the user name used . Click this to re-open appear grayed out. Hover your cursor over a connected interface. Use Widget Settings to update the widget's information immediately. Click the CPU Usage link to view details about the status of users currently logged in a slot. Widgets that are currently open the screen where you hover your cursor over a LED or connected Ethernet port to display a chart...
User Guide
Page 71
... # Port Status Enter how often you want this screen. This field displays the physical port number. TxPkts RxPkts Collisions Tx B/s Speed / Duplex - This field displays the number of collisions on the physical port since it was last connected. Figure 40 Monitor > System Status > Port Statistics The following table describes the labels in this window to be updated automatically, and click Set Interval. NXC Series User's Guide...
... # Port Status Enter how often you want this screen. This field displays the physical port number. TxPkts RxPkts Collisions Tx B/s Speed / Duplex - This field displays the number of collisions on the physical port since it was last connected. Figure 40 Monitor > System Status > Port Statistics The following table describes the labels in this window to be updated automatically, and click Set Interval. NXC Series User's Guide...
User Guide
Page 74
... Interface Status IPv6 Interface Status Name Port Status Use the Interface Status section for more information about IPv6. The Ethernet interface is connected. The VLAN interface is enabled and one of each interface. This field displays the current IP address (and subnet mask) of its IP address, this button to connect the interface. Services Action Interface Statistics Refresh Name DHCP Client - Examples include DHCP relay and DHCP server. Click Renew to send a new DHCP request to update the IP address for IPv6 network settings...
... Interface Status IPv6 Interface Status Name Port Status Use the Interface Status section for more information about IPv6. The Ethernet interface is connected. The VLAN interface is enabled and one of each interface. This field displays the current IP address (and subnet mask) of its IP address, this button to connect the interface. Services Action Interface Statistics Refresh Name DHCP Client - Examples include DHCP relay and DHCP server. Click Renew to send a new DHCP request to update the IP address for IPv6 network settings...
User Guide
Page 75
... connected. NXC Series User's Guide 75 Speed / Duplex - The Ethernet interface is disabled. Down - You use the Traffic Statistics screen to tell the NXC when to and from the NXC on what type of its member Ethernet interfaces is enabled and one . Chapter 6 Monitor Table 26 Monitor > System Status > Interface Status (continued) LABEL DESCRIPTION Status This field displays the current status of each one of its member Ethernet interfaces...
... connected. NXC Series User's Guide 75 Speed / Duplex - The Ethernet interface is disabled. Down - You use the Traffic Statistics screen to tell the NXC when to and from the NXC on what type of its member Ethernet interfaces is enabled and one . Chapter 6 Monitor Table 26 Monitor > System Status > Interface Status (continued) LABEL DESCRIPTION Status This field displays the current status of each one of its member Ethernet interfaces...
User Guide
Page 87
... this button to disable the AP's LED suppression mode. NXC Series User's Guide 87 Radio Information Select an online AP and click this button to go to the Monitor > Log > View Log screen to Log view the selected AP's current log messages. This button is retained when navigating between several devices in the Configuration > Wireless > Controller screen you set to Nebula cloud management mode and removed from the managed AP list right...
... this button to disable the AP's LED suppression mode. NXC Series User's Guide 87 Radio Information Select an online AP and click this button to go to the Monitor > Log > View Log screen to Log view the selected AP's current log messages. This button is retained when navigating between several devices in the Configuration > Wireless > Controller screen you set to Nebula cloud management mode and removed from the managed AP list right...
User Guide
Page 92
... not supported by the AP. The port is connected. Status This displays whether or not the VLAN is a member of broadcast packets transmitted on the AP. IP Address This field displays the IP address of the discovered device. Click OK to save your changes back to access and manage the discovered device using the web configurator. NXC Series User's Guide 92 PVID Speed / Duplex - This field displays the port speed...
... not supported by the AP. The port is connected. Status This displays whether or not the VLAN is a member of broadcast packets transmitted on the AP. IP Address This field displays the IP address of the discovered device. Click OK to save your changes back to access and manage the discovered device using the web configurator. NXC Series User's Guide 92 PVID Speed / Duplex - This field displays the port speed...
User Guide
Page 99
....2.2 Port Setting Edit Use this screen to enable or disable a port on a port so that the frames are forwarded to the VLAN group that the tag defines. Click Cancel to close the window with changes unsaved. 6.11.2.3 VLAN Add/Edit Use this screen, select a port and click the Edit button in the VLAN Configuration table of the Monitor > Wireless > AP Information > AP List > Edit AP List or Configuration > Wireless > AP Management...
....2.2 Port Setting Edit Use this screen to enable or disable a port on a port so that the frames are forwarded to the VLAN group that the tag defines. Click Cancel to close the window with changes unsaved. 6.11.2.3 VLAN Add/Edit Use this screen, select a port and click the Edit button in the VLAN Configuration table of the Monitor > Wireless > AP Information > AP List > Edit AP List or Configuration > Wireless > AP Management...
User Guide
Page 107
... multiple SSIDs or networks. 2.4GHz This shows the number of the SSID profile in which the SSID is defined, Security Mode This indicates which are currently connected to the SSID using the 2.4 GHz frequency band, Click the number to go to refresh the items displayed on this page. 6.15 Station List Use this screen. Refresh Click this to the Station Info > Station List screen. Click Monitor > Wireless...
... multiple SSIDs or networks. 2.4GHz This shows the number of the SSID profile in which the SSID is defined, Security Mode This indicates which are currently connected to the SSID using the 2.4 GHz frequency band, Click the number to go to refresh the items displayed on this page. 6.15 Station List Use this screen. Refresh Click this to the Station Info > Station List screen. Click Monitor > Wireless...
User Guide
Page 122
... several devices in repeater AP mode. This field displays the IP address of the AP. This field displays the MAC address of the AP. Select an AP and click this button to update the APs' firmware version. See Section 6.11.2.4 on the managed AP list (Mgmt) or not (Un-Mgmt). Upgrade Firmware Now Suppression On Suppression Off Locator On # Status Type Description CPU Usage IP Address MAC Address Model R1 Mode...
... several devices in repeater AP mode. This field displays the IP address of the AP. This field displays the MAC address of the AP. Select an AP and click this button to update the APs' firmware version. See Section 6.11.2.4 on the managed AP list (Mgmt) or not (Un-Mgmt). Upgrade Firmware Now Suppression On Suppression Off Locator On # Status Type Description CPU Usage IP Address MAC Address Model R1 Mode...
User Guide
Page 149
... (LINK LOCAL), dynamically assigned (DHCP), or an IPv6 StateLess Address AutoConfiguration IP address (SLAAC). NXC Series User's Guide 149 Table 64 Configuration > Network > Interface > Ethernet LABEL DESCRIPTION Configuration/IPv6 Configuration Edit Activate Inactivate Object Reference # Status Name IP Address Use the Configuration section for IPv6 network settings if you connect your changes back to open a screen that uses the object whenever the interface's IP address settings change LAN's IP address, the NXC automatically updates the corresponding interface-based, LAN subnet...
... (LINK LOCAL), dynamically assigned (DHCP), or an IPv6 StateLess Address AutoConfiguration IP address (SLAAC). NXC Series User's Guide 149 Table 64 Configuration > Network > Interface > Ethernet LABEL DESCRIPTION Configuration/IPv6 Configuration Edit Activate Inactivate Object Reference # Status Name IP Address Use the Configuration section for IPv6 network settings if you connect your changes back to open a screen that uses the object whenever the interface's IP address settings change LAN's IP address, the NXC automatically updates the corresponding interface-based, LAN subnet...
User Guide
Page 192
... 1:1 NAT rule works like the Internet). 1:1 NAT - This field displays for Many 1:1 NAT. The original and mapped IP address subnets or ranges must be an Ethernet or VLAN interface. Service - this NAT rule's specified incoming interface. any for Many 1:1 NAT. Select this NAT rule supports the destination port(s) used by the ISP. User Defined Mapped IP Mapped IP Subnet/Range Port Mapping Type HOST address - this to manually enter an IP address in the NXC. NXC Series User's Guide...
... 1:1 NAT rule works like the Internet). 1:1 NAT - This field displays for Many 1:1 NAT. The original and mapped IP address subnets or ranges must be an Ethernet or VLAN interface. Service - this NAT rule's specified incoming interface. any for Many 1:1 NAT. Select this NAT rule supports the destination port(s) used by the ISP. User Defined Mapped IP Mapped IP Subnet/Range Port Mapping Type HOST address - this to manually enter an IP address in the NXC. NXC Series User's Guide...
User Guide
Page 303
... number of authentication server the NXC supports. • Local user database The NXC uses the built-in addition to) an internal device user database that is a popular protocol used to authenticate administrative users logging into the NXC's Web Configurator or network access users logging into the network through the NXC. LDAP O O X O O X X RADIUS O O X O O X X EXTERNAL RADIUS O O O O O O O AAA Servers Supported by means of an external server instead of (or in local user database to authenticate users by the NXC The following lists the types...
... number of authentication server the NXC supports. • Local user database The NXC uses the built-in addition to) an internal device user database that is a popular protocol used to authenticate administrative users logging into the NXC's Web Configurator or network access users logging into the network through the NXC. LDAP O O X O O X X RADIUS O O X O O X X EXTERNAL RADIUS O O O O O O O AAA Servers Supported by means of an external server instead of (or in local user database to authenticate users by the NXC The following lists the types...
User Guide
Page 369
... configure user profiles that service for a service if needed, however you must use that define allowed SNMPv3 access. The default is the password sent with the IP address that matches the IP address(es) in the Service Control table to access the NXC using this screen to access the NXC. To change the server port number for remote management. Destination Type the IP address of the SNMP manager to which IP addresses the access can be used to configure...
... configure user profiles that service for a service if needed, however you must use that define allowed SNMPv3 access. The default is the password sent with the IP address that matches the IP address(es) in the Service Control table to access the NXC using this screen to access the NXC. To change the server port number for remote management. Destination Type the IP address of the SNMP manager to which IP addresses the access can be used to configure...
User Guide
Page 428
... routes that all the wireless devices in its default bridge mode, ensure that you use a more effective security mechanism. and so on the interface. The interface's IP address may have accessed my WEP-encrypted wireless LAN. To avoid this create an IP address object based on . It is very strict. The wireless security is not following the re-authentication timer setting I configured. The NXC is recommended. Make sure the Internet gateway device (such as a DSL modem) is working...
... routes that all the wireless devices in its default bridge mode, ensure that you use a more effective security mechanism. and so on the interface. The interface's IP address may have accessed my WEP-encrypted wireless LAN. To avoid this create an IP address object based on . It is very strict. The wireless security is not following the re-authentication timer setting I configured. The NXC is recommended. Make sure the Internet gateway device (such as a DSL modem) is working...
User Guide
Page 499
... address of the RADIUS server, its port number (default is the software that runs on a WiFi network than WEP and difficult for Windows XP, Funk Software's Odyssey client. The encryption mechanisms used to generate unique temporal encryption keys. The only difference between the AP and the wireless clients. Pre-authentication enables fast roaming by creating an integrity checking mechanism (MIC), with RADIUS Application Example To set up a key hierarchy and management system, using the PMK to dynamically...
... address of the RADIUS server, its port number (default is the software that runs on a WiFi network than WEP and difficult for Windows XP, Funk Software's Odyssey client. The encryption mechanisms used to generate unique temporal encryption keys. The only difference between the AP and the wireless clients. Pre-authentication enables fast roaming by creating an integrity checking mechanism (MIC), with RADIUS Application Example To set up a key hierarchy and management system, using the PMK to dynamically...
User Guide
Page 523
... daily statistics report 375 encryption 498 ESS 491 Ethernet interfaces 147 and routing protocols 148 Ethernet ports 19 default settings 29 Extended Service Set IDentification 258 Extended Service Set, See ESS 491 F FCC interference statement 516 file extensions configuration files 390 shell scripts 390 file manager 390 Firefox 33 firewall 230 actions 235 and address groups 234 and address objects 234 and NAT 232 and schedules 234 and service groups 235 NXC Series User's Guide 523
... daily statistics report 375 encryption 498 ESS 491 Ethernet interfaces 147 and routing protocols 148 Ethernet ports 19 default settings 29 Extended Service Set IDentification 258 Extended Service Set, See ESS 491 F FCC interference statement 516 file extensions configuration files 390 shell scripts 390 file manager 390 Firefox 33 firewall 230 actions 235 and address groups 234 and address objects 234 and NAT 232 and schedules 234 and service groups 235 NXC Series User's Guide 523
User Guide
Page 529
... 520 Web Configurator 23, 33 access 33 access users 251 requirements 33 supported browsers 33 WEP (Wired Equivalent Privacy) 258 Wi-Fi Protected Access 258, 498 Windows Internet Naming Service, see WINS Windows Internet Naming Service, see VLAN. Index U UDP 293 messages 293 port numbers 293 upgrading firmware 396 uploading configuration files 396 firmware 396 shell scripts 398 usage CPU 60, 63 flash 60 memory 60, 63 onboard flash 60 sessions 64 user authentication 238 external...
... 520 Web Configurator 23, 33 access 33 access users 251 requirements 33 supported browsers 33 WEP (Wired Equivalent Privacy) 258 Wi-Fi Protected Access 258, 498 Windows Internet Naming Service, see WINS Windows Internet Naming Service, see VLAN. Index U UDP 293 messages 293 port numbers 293 upgrading firmware 396 uploading configuration files 396 firmware 396 shell scripts 398 usage CPU 60, 63 flash 60 memory 60, 63 onboard flash 60 sessions 64 user authentication 238 external...