AMX NXA-WAPZD1000 Parts list manual

Operation/Reference Guide
Network/Communication
NXA-WAPZD1000
ZoneDirector Smart WLAN Controller
Initial Release: 3/28/2011

AMX Limited Warranty and Disclaimer
This Limited Warranty and Disclaimer extends only to products purchased directly from AMX or an AMX Authorized Partner which
include AMX Dealers, Distributors, VIP’s or other AMX authorized entity.
AMX warrants its products to be free of defects in material and workmanship under normal use for three (3) years from the date of
purchase, with the following exceptions:
• Electroluminescent and LCD Control Panels are warranted for three (3) years, except for the display and touch overlay compo-
nents are warranted for a period of one (1) year.
• Disk drive mechanisms, pan/tilt heads, power supplies, and MX Series products are warranted for a period of one (1) year.
• AMX lighting products are guaranteed to switch on and off any load that is properly connected to our lighting products, as long
as the AMX lighting products are under warranty. AMX also guarantees the control of dimmable loads that are properly con-
nected to our lighting products. The dimming performance or quality there of is not guaranteed, impart due to the random combi-
nations of dimmers, lamps and ballasts or transformers.
• AMX software is warranted for a period of ninety (90) days.
• Batteries and incandescent lamps are not covered under the warranty.
• AMX AutoPatch Epica, Modula, Modula Series4, Modula CatPro Series and 8Y-3000 product models will be free of defects in
materials and manufacture at the time of sale and will remain in good working order for a period of three (3) years following the
date of the original sales invoice from AMX. The three-year warranty period will be extended to the life of the product (Limited
Lifetime Warranty) if the warranty card is filled out by the dealer and/or end user and returned to AMX so that AMX receives it
within thirty (30) days of the installation of equipment but no later than six (6) months from original AMX sales invoice date. The
life of the product extends until five (5) years after AMX ceases manufacturing the product model. The Limited Lifetime Warranty
applies to products in their original installation only. If a product is moved to a different installation, the Limited Lifetime Warranty
will no longer apply, and the product warranty will instead be the three (3) year Limited Warranty.
All products returned to AMX require a Return Material Authorization (RMA) number. The RMA number is obtained from the AMX
RMA Department. The RMA number must be clearly marked on the outside of each box. The RMA is valid for a 30-day period. After
the 30-day period the RMA will be cancelled. Any shipments received not consistent with the RMA, or after the RMA is cancelled, will
be refused. AMX is not responsible for products returned without a valid RMA number.
AMX is not liable for any damages caused by its products or for the failure of its products to perform. This includes any lost profits, lost
savings, incidental damages, or consequential damages. AMX is not liable for any claim made by a third party or by an AMX Autho-
rized Partner for a third party.
This Limited Warranty does not apply to (a) any AMX product that has been modified, altered or repaired by an unauthorized agent or
improperly transported, stored, installed, used, or maintained; (b) damage caused by acts of nature, including flood, erosion, or earth-
quake; (c) damage caused by a sustained low or high voltage situation or by a low or high voltage disturbance, including brownouts,
sags, spikes, or power outages; or (d) damage caused by war, vandalism, theft, depletion, or obsolescence.
This limitation of liability applies whether damages are sought, or a claim is made, under this warranty or as a tort claim (including
negligence and strict product liability), a contract claim, or any other claim. This limitation of liability cannot be waived or amended by
any person. This limitation of liability will be effective even if AMX or an authorized representative of AMX has been advised of the
possibility of any such damages. This limitation of liability, however, will not apply to claims for personal injury.
Some states do not allow a limitation of how long an implied warranty last. Some states do not allow the limitation or exclusion of inci-
dental or consequential damages for consumer products. In such states, the limitation or exclusion of the Limited Warranty may not
apply. This Limited Warranty gives the owner specific legal rights. The owner may also have other rights that vary from state to state.
The owner is advised to consult applicable state laws for full determination of rights.
EXCEPT AS EXPRESSLY SET FORTH IN THIS WARRANTY, AMX MAKES NO OTHER WARRANTIES, EXPRESSED OR
IMPLIED, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. AMX
EXPRESSLY DISCLAIMS ALL WARRANTIES NOT STATED IN THIS LIMITED WARRANTY. ANY IMPLIED WARRANTIES THAT
MAY BE IMPOSED BY LAW ARE LIMITED TO THE TERMS OF THIS LIMITED WARRANTY. EXCEPT AS OTHERWISE LIMITED
BY APPLICABLE LAW, AMX RESERVES THE RIGHT TO MODIFY OR DISCONTINUE DESIGNS, SPECIFICATIONS, WARRAN-
TIES, PRICES, AND POLICIES WITHOUT NOTICE.

AMX Software License and Warranty Agreement
• LICENSE GRANT. AMX grants to Licensee the non-exclusive right to use the AMX Software in the manner described in this
License. The AMX Software is licensed, not sold. This license does not grant Licensee the right to create derivative works of the
AMX Software. The AMX Software consists of generally available programming and development software, product documenta-
tion, sample applications, tools and utilities, and miscellaneous technical information. Please refer to the README.TXT file on
the compact disc or download for further information regarding the components of the AMX Software. The AMX Software is sub-
ject to restrictions on distribution described in this License Agreement. AMX Dealer, Distributor, VIP or other AMX authorized
entity shall not, and shall not permit any other person to, disclose, display, loan, publish, transfer (whether by sale, assignment,
exchange, gift, operation of law or otherwise), license, sublicense, copy, or otherwise disseminate the AMX Software. Licensee
may not reverse engineer, decompile, or disassemble the AMX Software.
• ACKNOWLEDGEMENT. You hereby acknowledge that you are an authorized AMX dealer, distributor, VIP or other AMX autho-
rized entity in good standing and have the right to enter into and be bound by the terms of this Agreement.
• INTELLECTUAL PROPERTY. The AMX Software is owned by AMX and is protected by United States copyright laws, patent
laws, international treaty provisions, and/or state of Texas trade secret laws. Licensee may make copies of the AMX Software
solely for backup or archival purposes. Licensee may not copy the written materials accompanying the AMX Software.
• TERMINATION. AMX RESERVES THE RIGHT, IN ITS SOLE DISCRETION, TO TERMINATE THIS LICENSE FOR ANY REA-
SON UPON WRITTEN NOTICE TO LICENSEE. In the event that AMX terminates this License, the Licensee shall return or
destroy all originals and copies of the AMX Software to AMX and certify in writing that all originals and copies have been
returned or destroyed.
• PRE-RELEASE CODE. Portions of the AMX Software may, from time to time, as identified in the AMX Software, include PRE-
RELEASE CODE and such code may not be at the level of performance, compatibility and functionality of the GA code. The
PRE-RELEASE CODE may not operate correctly and may be substantially modified prior to final release or certain features may
not be generally released. AMX is not obligated to make or support any PRE-RELEASE CODE. ALL PRE-RELEASE CODE IS
PROVIDED "AS IS” WITH NO WARRANTIES.
• LIMITED WARRANTY. AMX warrants that the AMX Software (other than pre-release code) will perform substantially in accor-
dance with the accompanying written materials for a period of ninety (90) days from the date of receipt. AMX DISCLAIMS ALL
OTHER WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH REGARD TO THE AMX SOFTWARE. THIS LIM-
ITED WARRANTY GIVES LICENSEE SPECIFIC LEGAL RIGHTS. Any supplements or updates to the AMX SOFTWARE,
including without limitation, any (if any) service packs or hot fixes provided to Licensee after the expiration of the ninety (90) day
Limited Warranty period are not covered by any warranty or condition, express, implied or statutory.
• LICENSEE REMEDIES. AMX's entire liability and Licensee's exclusive remedy shall be repair or replacement of the AMX Soft-
ware that does not meet AMX's Limited Warranty and which is returned to AMX in accordance with AMX's current return policy.
This Limited Warranty is void if failure of the AMX Software has resulted from accident, abuse, or misapplication. Any replace-
ment AMX Software will be warranted for the remainder of the original warranty period or thirty (30) days, whichever is longer.
Outside the United States, these remedies may not available. NO LIABILITY FOR CONSEQUENTIAL DAMAGES. IN NO
EVENT SHALL AMX BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES
FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, OR ANY OTHER
PECUNIARY LOSS) ARISING OUT OF THE USE OF OR INABILITY TO USE THIS AMX SOFTWARE, EVEN IF AMX HAS
BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME STATES/COUNTRIES DO NOT ALLOW
THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITA-
TION MAY NOT APPLY TO LICENSEE.
• U.S. GOVERNMENT RESTRICTED RIGHTS. The AMX Software is provided with RESTRICTED RIGHTS. Use, duplication, or
disclosure by the Government is subject to restrictions as set forth in subparagraph ©(1)(ii) of The Rights in Technical Data and
Computer Software clause at DFARS 252.227-7013 or subparagraphs ©(1) and (2) of the Commercial Computer Software
Restricted Rights at 48 CFR 52.227-19, as applicable.
• SOFTWARE AND OTHER MATERIALS FROM AMX.COM MAY BE SUBJECT TO EXPORT CONTROL. The United States
Export Control laws prohibit the export of certain technical data and software to certain territories. No software from this Site may
be downloaded or exported (i) into (or to a national or resident of) Cuba, Iraq, Libya, North Korea, Iran, Syria, or any other coun-
try to which the United States has embargoed goods; or (ii) anyone on the United States Treasury Department's list of Specially
Designated Nationals or the U.S. Commerce Department's Table of Deny Orders. AMX does not authorize the downloading or
exporting of any software or technical data from this site to any jurisdiction prohibited by the United States Export Laws.
This Agreement replaces and supersedes all previous AMX Software License Agreements and is governed by the laws of
the State of Texas, and all disputes will be resolved in the courts in Collin County, Texas, USA. For any questions concern-
ing this Agreement, or to contact AMX for any reason, please write: AMX License and Warranty Department, 3000 Research
Drive, Richardson, TX 75082.

Table of Contents
i
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Table of Contents
Introduction ........................................................................................................9
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller........................................ 9
Overview .................................................................................................................. 9
Product Specifications ............................................................................................ 10
Common Applications............................................................................................. 10
Features.................................................................................................................. 11
Power Adapter Compatibility................................................................................. 11
Installation and Setup .......................................................................................13
Introduction............................................................................................................ 13
Powering the NXA-WAPZD1000 ............................................................................ 13
Resetting the NXA-WAPZD1000 ............................................................................ 13
Configuring the NXA-WAPZD1000......................................................................... 13
Working with the Setup Wizard.................................................................................... 14
Connecting NXA-WAP1000s to your local area Ethernet network................................ 15
Accessing the NXA-WAPZD1000’s Command Line Interface.................................. 15
About Wireless WLAN Security .............................................................................. 17
Enabling Smart Redundancy................................................................................... 17
Configuring the NXA-WAPZD1000 for Smart Redundancy........................................... 17
Forcing Failover to the Backup NXA-WAPZD1000 ....................................................... 18
Browser-Based Configuration Pages ................................................................19
Overview ................................................................................................................ 19
Dashboard ........................................................................................................20
Dashboard Widgets................................................................................................ 21
Monitor Tab ......................................................................................................23
Reviewing Recent Network Events......................................................................... 23
Monitoring Access Point Status.............................................................................. 23
Access Points.......................................................................................................... 24
Assessing Current Performance Using the Access Point Table...................................... 25
Monitoring Individual APs....................................................................................... 25
Neighbor APs................................................................................................................ 26
Restarting an Access Point............................................................................................ 26
Map View................................................................................................................ 27
Image Requirements ..................................................................................................... 27
Placing the Access Point Markers.................................................................................. 28
Using the Map View Tools............................................................................................. 28
AP Icons ........................................................................................................................ 29
Optimizing Access Point Performance Using the Map View ......................................... 29

ii NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Table of Contents
Assessing Current Performance Using the Map View.................................................... 29
Improving AP RF Coverage ........................................................................................... 29
Evaluating and Optimizing Network Coverage............................................................. 30
Moving the APs into More Efficient Positions............................................................... 30
WLANs.................................................................................................................... 31
Viewing a List of APs That Belong to a WLAN Group ................................................... 32
Currently Active Clients .......................................................................................... 33
Generated PSK/Certs.............................................................................................. 35
Managing Automatically Generated User Certificates and Keys................................... 35
Generated Guest Passes......................................................................................... 36
Rogue Devices........................................................................................................ 37
All Events/Activities................................................................................................ 39
Changing the System Log Settings................................................................................ 39
Reviewing the Current Log Contents ............................................................................ 39
Clearing Recent Events/Activities.................................................................................. 39
All Alarms ............................................................................................................... 40
Mesh....................................................................................................................... 41
Real Time Monitoring ............................................................................................. 42
Configure Tab ...................................................................................................43
System .................................................................................................................... 44
Changing the System Name.......................................................................................... 46
Changing the Network Addressing............................................................................... 46
Enabling The Built-in DHCP Server................................................................................ 46
Viewing DHCP Clients................................................................................................... 47
Enabling an Additional Management Interface ............................................................. 47
Checking the Current Log Settings ............................................................................... 47
Setting the System Time ............................................................................................... 48
Setting the Country Code ............................................................................................. 48
Enabling Management via FlexMaster .......................................................................... 48
Configuring SNMP Support........................................................................................... 48
Enabling the SNMP Agent............................................................................................. 49
Enabling SNMP Trap Notifications................................................................................ 49
Trap Notifications Sent by the NXA-WAPZD1000......................................................... 49
NXA-WAPZD1000 Management ACL............................................................................ 50
WLANs.................................................................................................................... 51
Overview of Wireless Networks.................................................................................... 52
Creating a WLAN .......................................................................................................... 53
WLAN Usage Types....................................................................................................... 54
Authentication Method ................................................................................................. 54
Encryption Options................................................................................................. 54

Table of Contents
iii
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Method ......................................................................................................................... 54
Algorithm (Only for WPA or WPA2 encryption methods) ............................................. 55
WEP Key/Passphrase..................................................................................................... 55
Options ......................................................................................................................... 55
Advanced Options......................................................................................................... 56
Creating a New WLAN for Workgroup Use .................................................................. 57
Customizing WLAN Security ......................................................................................... 57
Fine-Tuning the Current Security Mode........................................................................ 58
Switching to a Different Security Mode........................................................................ 58
Using the Built-in EAP Server........................................................................................ 58
Authenticating with an External RADIUS Server ........................................................... 59
If You Change the Internal WLAN to WEP or 802.1X.................................................... 59
Working with WLAN Groups......................................................................................... 59
Creating a WLAN Group............................................................................................... 60
Assigning a WLAN to Provide Hotspot Service............................................................. 60
Working with Dynamic Pre-Shared Keys....................................................................... 60
Enabling Dynamic Pre-Shared Keys on a WLAN............................................................ 61
Setting Dynamic Pre-Shared Key Expiration ................................................................. 61
Generating Multiple Dynamic PSKs............................................................................... 61
Creating a Batch Dynamic PSK Profile .......................................................................... 62
Enabling Automatic User Activation with Zero-IT................................................... 63
Authenticating Clients with Zero-IT............................................................................... 63
Authenticating Clients that Do Not Support Zero-IT..................................................... 64
Activating Web Authentication..................................................................................... 64
Creating a Guest WLAN................................................................................................ 65
Access Points.......................................................................................................... 66
Assigning a WLAN Group to an AP............................................................................... 67
Deploying NXA-WAPZD1000 WLANs in a VLAN Environment..................................... 67
Tagging Management Traffic to a VLAN....................................................................... 67
How Dynamic VLAN Works........................................................................................... 68
Adding New Access Points to the WLAN...................................................................... 69
Connecting the APs to the WLAN................................................................................. 69
Verifying/Approving New APs ...................................................................................... 69
Reviewing Current Access Point Policies....................................................................... 70
Applying Global Configuration Settings to APs............................................................ 71
Managing Access Points Individually............................................................................. 71
Optimizing Access Point Performance .......................................................................... 72
Adjusting AP Settings ................................................................................................... 72
Load Balancing.............................................................................................................. 73
Access Control........................................................................................................ 74
WLAN ACLs and Block Lists .......................................................................................... 75

iv NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Table of Contents
Configuring Access Control Lists................................................................................... 75
L2/MAC Access Control................................................................................................. 75
L3/L4 Access Control..................................................................................................... 76
NXA-WAPZD1000 Management ACL............................................................................ 76
Maps....................................................................................................................... 77
Importing a Floorplan Image......................................................................................... 77
Roles and Policies ................................................................................................... 79
Creating New User Roles .............................................................................................. 79
Controlling Guest Pass Generation Privileges............................................................... 80
Creating a Guest Pass Generation User Role ................................................................ 81
Users....................................................................................................................... 82
Internal User Database.................................................................................................. 83
Managing Current User Accounts.................................................................................. 83
Assigning a Pass Generator Role to a User Account ..................................................... 84
Guest Access........................................................................................................... 85
Configuring System-Wide Guest Access Policy ............................................................. 86
Working with Guest Passes..................................................................................... 87
Activating Guest Pass Generation................................................................................. 87
Generating and Printing a Single Guest Pass ................................................................ 87
Generating and Printing Multiple Guest Passes at Once............................................... 88
Creating a Guest Pass Profile........................................................................................ 89
Monitoring Generated Guest Passes............................................................................. 89
Configuring Guest Subnet Access ................................................................................. 90
Customizing the Guest Login Page ............................................................................... 90
Creating a Custom Guest Pass Printout......................................................................... 90
Guest Pass Printout Tokens........................................................................................... 91
Hotspot Services..................................................................................................... 92
Creating a Hotspot Service ........................................................................................... 93
Mesh....................................................................................................................... 95
Enabling Mesh Capability.............................................................................................. 95
Authentication/Accounting Servers ........................................................................ 96
Using an External AAA Server....................................................................................... 96
Using an External Server for User Authentication......................................................... 97
Active Directory ............................................................................................................ 97
Single Domain Active Directory Authentication............................................................ 97
Multi-Domain Active Directory Authentication.............................................................. 98
LDAP ............................................................................................................................. 98
Advanced LDAP Filtering .............................................................................................. 98
Group Extraction........................................................................................................... 99
RADIUS / RADIUS Accounting....................................................................................... 99
Configuring a Backup RADIUS / RADIUS Accounting Server......................................... 99

Table of Contents
v
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
MAC Authentication with an External RADIUS Server ................................................ 100
Testing Authentication Settings.................................................................................. 100
Alarm Settings...................................................................................................... 101
Setting Up Email Alarm Notification ........................................................................... 101
Events That Trigger Alarm Notifications ..................................................................... 102
Services................................................................................................................. 103
Configuring Self Healing Options................................................................................ 103
Configuring Intrusion Prevention Options................................................................... 104
Configuring Background Scanning.............................................................................. 104
Enabling Rogue DHCP Server Detection..................................................................... 104
Active Client Detection............................................................................................... 105
Certificate............................................................................................................. 106
Creating a Certificate Signing Request ....................................................................... 107
Importing an SSL Certificate ....................................................................................... 108
SSL Certificate Advanced Options........................................................................ 109
Saving an SSL Certificate or Private Key..................................................................... 109
Using an External Server for Administrator Authentication ........................................ 110
Administer Tab ...............................................................................................112
Preferences........................................................................................................... 112
Changing the NXA-WAPZD1000 Administrator User Name and Password ................ 112
Changing the Browser-Based Configuration Pages Display Language........................ 113
Back up/Restore ................................................................................................... 114
Backing Up a Network Configuration.......................................................................... 114
Restoring Archived Settings to the NXA-WAPZD1000 ............................................... 114
Restoring the NXA-WAPZD1000 to Default Factory Settings..................................... 115
Alternate Factory Default Reset Method .................................................................... 115
Restart/Shutdown................................................................................................. 116
Restarting the NXA-WAPZD1000 ............................................................................... 116
Upgrade................................................................................................................ 117
Performing an Upgrade with Smart Redundancy.................................................. 118
License.................................................................................................................. 119
Importing a New License File...................................................................................... 119
Diagnostics ........................................................................................................... 120
Generating a Debug File....................................................................................... 120
Viewing Current AP Logs............................................................................................ 121
Product Registration............................................................................................. 122
Toolbox ..........................................................................................................123
Network Connectivity........................................................................................... 123
Using the Ping and Traceroute Tools.................................................................... 123
Real Time Monitoring ........................................................................................... 124

vi NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Table of Contents
Blocking Client Devices ..................................................................................125
Monitoring Client Devices........................................................................................... 125
Temporarily Disconnecting Specific Client Devices..................................................... 125
Permanently Blocking Specific Client Devices............................................................. 125
Reviewing a List of Previously Blocked Clients............................................................ 125
Deploying a Smart Mesh Network ..................................................................127
Overview of Smart Mesh Networking................................................................... 127
Smart Mesh Networking Terms ............................................................................ 127
Supported Mesh Topologies................................................................................. 128
Standard Topology...................................................................................................... 128
Wireless Bridge Topology ........................................................................................... 128
Hybrid Mesh Topology................................................................................................ 129
Deploying a Wireless Mesh via the NXA-WAPZD1000......................................... 130
Step 1: Prepare for Wireless Mesh Deployment ......................................................... 130
Step 2: Enable Mesh Capability on the NXA-WAPZD1000 ......................................... 130
Step 3: Provision and Deploy Mesh Nodes ................................................................. 130
Step 4: Verify That the Wireless Mesh Network Is Up................................................. 131
Using the ZoneFlex LEDs to Determine the Mesh Status ..................................... 133
WLAN LED................................................................................................................... 133
Signal/Air Quality LED................................................................................................. 133
5G LED........................................................................................................................ 133
Understanding Mesh-related AP Statuses............................................................. 134
Using Action Icons to Configure and Troubleshoot APs in a Mesh ....................... 134
Setting Mesh Uplinks Manually............................................................................. 135
Troubleshooting Isolated Mesh APs ..................................................................... 135
Understanding Isolated Mesh AP Statuses ........................................................... 136
Recovering an Isolated Mesh AP........................................................................... 137
Step 1: Obtain the AP's Last Known Mesh Configuration........................................... 137
Step 2: Set Up Your Computer for Wireless Connection to the AP............................. 137
Step 3: Connect to the AP and Update its ESSID and Passphrase .............................. 137
Smart Mesh Networking Best Practices ..........................................................138
Choosing the Right AP Model for Your Mesh Network ........................................ 138
Calculating the Number of APs Required ............................................................. 138
Step 1.......................................................................................................................... 138
Step 2.......................................................................................................................... 139
Placement and Layout Considerations.................................................................. 139
Signal Quality Verification .................................................................................... 140
Mounting and Orientation of APs......................................................................... 140
Indoor APs - Typical Case: Horizontal Orientation ...................................................... 140
Indoor APs - Vertical Orientation ................................................................................ 140

Table of Contents
vii
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Outdoor APs - Typical Horizontal Orientation............................................................. 140
Elevation of RAPs and MAPs ................................................................................ 140
Best Practice Checklist.......................................................................................... 141
Troubleshooting .............................................................................................143
Troubleshooting Failed User Logins ..................................................................... 143
Fixing User Connections ....................................................................................... 143
If WLAN Connection Problems Persist.................................................................. 143
Measuring Wireless Network Throughput with SpeedFlex................................... 144
Using SpeedFlex in a Multi-Hop Smart Mesh Network......................................... 146
Allowing Users to Measure Their Own Wireless Throughput................................ 147
How to Measure the Speed of Your Wireless Connection.................................... 147
Diagnosing Poor Network Performance ............................................................... 148
Starting a Radio Frequency Scan.......................................................................... 148

viii NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Table of Contents

Introduction
9
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Introduction
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
The NXA-WAPZD1000 (FIG. 1) is a centrally managed wireless LAN (WLAN) controller for homes and
business using multiple NXA-WAP1000 Wireless Access Points, that delivers exceptional performance by
integrating the Ruckus Smart/OS application engine. It delivers advanced features such as smart wireless
meshing, hotspot authentication, elegant guest networking and dynamic Wi-Fi security. Redundant and secure,
the AMX Zone Director provides WLAN-wide network, security, RF and location management within a
single, easy-to-use and affordable WLAN system.
Overview
The NXA-WAPZD1000 serves as a central control system for NXA-WAP1000 Smart Wireless Access Points
(APs). The NXA-WAPZD1000 provides simplified configuration and updates, wireless LAN security control,
RF management, and automatic coordination of Ethernet-connected and mesh-connected APs.
Using the NXA-WAPZD1000 in combination with NXA-WAP1000 APs allows deployment of a Smart Mesh
network, to extend wireless coverage throughout a location without physically connecting each AP to
Ethernet. In a SmartMesh network, the APs form a wireless mesh topology to route client traffic between any
member of the mesh and the wired network. Meshing greatly reduces the cost and time requirements of
deploying an enterprise-class WLAN, in addition to providing much greater flexibility in AP placement.
The NXA-WAPZD1000 also integrates network, radio frequency (RF), and location management within a
single system. User authentication is accomplished with an integrated captive portal and internal database, or
forwarded to existing Authentication, Authorization and Accounting (AAA) servers, such as RADIUS or
Active Directory. Once users are authenticated, client traffic is not required to pass through the NXA-
WAPZD1000, thereby eliminating bottlenecks when higher speed Wi-Fi technologies, such as 802.11n, are
used.
In addition, the NXA-WAPZD1000 supports rogue AP detection and the ability to blacklist client devices from
the network — all of which are easily configured and enabled system-wide. When multiple APs are in close
proximity, the NXA-WAPZD1000 automatically controls the power and the channel settings on each AP to
provide the best possible total coverage and resilience.
The NXA-WAPZD1000 also uses Browser-Based Configuration Pages to customize and manage all aspects of
the device and the network from any PC or other Internet-enabled device with a Web browser.
FIG. 1 NXA-WAPZD1000 ZoneDirector
(rear)
(front)
Power
Status
110 - 240V AC
Input
LED
LED
10/100/1000
Ethernet Output Reset
Console
Port Button

Introduction
10 NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Product Specifications
Common Applications
The NXA-WAPZD1000 is ideal for homes and businesses that require a robust and secure WLAN that can be
easily deployed, centrally managed and automatically tuned. The NXA-WAP1000 is perfect for environments
where high bandwidth applications such as video streaming are accessed simultaneously from several wireless
devices such as iPads, laptops, and gaming consoles.
NXA-WAPZD1000 Specifications
Dimensions (HWD): 1 1/2” x 6 5/16” x 9 13/16” (39 mm x 159 mm x 250 mm)
Weight: 2.2 lbs (1 Kg)
Power Requirements: • Input: 110 - 240V AC
• Output: 12V DC, 1A
Front Panel Components:
Power LED: Green LED: the device is receiving power.
Status LED: • Steady green LED: Device is configured.
• Blinking green LED: Device in factory default settings.
• Steady amber LED: Device is shut down but still connected to a power source.
• Flashing amber LED: Device is starting up or shutting down.
10/100/1000 Ethernet: Two 10/100/1000Mbps RJ-45 ports for Ethernet connectivity.
• Solid green or amber left LED: The port is connected to a device.
• Blinking green or amber left LED: The port is transmitting or receiving data traffic.
• Green right LED: The port is connected to a 1000Mbps device.
• Amber right LED: The port is connected to a 100Mbps or10Mbps device.
Console port: DB-9 port for accessing the NXA-WAPZD1000 command line interface.
Reset Button: Hold the reset button for 8 seconds to reset the device.
Rear Panel Components:
110 - 240V AC Input: One 110-240 power jack.
Operating Environment: • 32°F - 122°F (0°C - 50°C)
• Operating humidity - 15% – 95% (non-condensing)
Certifications: • FCC
•IC
•CE
•C-Tick
• VCCI
• EN 60950-1
•RoHS
Included Accessories: • External power adapter (for more information, refer to the Power Adapter
Compatibility section on page 11)
Other AMX Equipment: • NXA-ENET8POE Gigabit PoE Ethernet Switch (FG2178-62)
• NXA-WAP1000 Smart Wireless Access Point, US Operation
(FG2255-51)
• NXA-WAP1000 Smart Wireless Access Point, Operation Outside US
(FG2255-53)

Introduction
11
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Features
Configure and Install in Minutes - Automatically discovers and configures AMX NXA-WAP1000
Wireless Access Points, making them instantly manageable
Smart Wireless Mesh Networking - Simplifies deployment and reduces installation cost by
eliminating the need to run Ethernet cable to every AMX NXA-WAP1000
Automatically Adapts to Wi-Fi Signal Changes in Real-time - The SmartMesh Networking is self-
organizing, self-optimizing, and self-healing to provide maximum performance and reliability
Complete Centralized WLAN Control - Dynamically controls the RF channel assignment and
transmit power level for each NXA-WAP1000 Wireless Access Point
Integrated Wi-Fi Client Performance Tools - Ruckus SpeedFlex™ allows administrators to
determine client Wi-Fi performance, either locally or remotely, over the wireless LAN to improve
troubleshooting
Secure Admission Control Across the WLAN - The NXA-WAP1000 centralizes authentication and
authorization decisions for all access points
Automatic User Security - Supports Ruckus's patent-pending Dynamic Pre-Shared Key (PSK)
capability eliminating the requirement to configure and update individual PC client devices with
unique encryption keys
Power Adapter Compatibility
The NXA-WAPZD1000 is shipped with an appropriate power adapter for the country in which it is to be used:
FG2255-52: Includes US Power Adapter for use in US, Canada, Colombia, Ecuador, Mexico
FG2255-54K: Includes EU Power Adapter for use in Europe (except UK), Chile, Egypt, Indonesia,
Pakistan, Saudi Arabia (except Dharan), Vietnam
FG2255-55K: Includes AU Power Adapter for use in Australia and New Zealand
FG2255-56K: Includes China AU style CCC certified Power Adapter for use in China
FG2255-57K: Includes India Power Adapter
FG2255-58K: Includes Korea Power Adapter
FG2255-59K: Includes UK Power Adapter for use in the United Kingdom, Hong Kong, Malaysia,
Singapore, and United Arab Emirates (UAE)
FG2255-60K: Includes US Power Adapter with 110 and 220 power input for use in Brazil,
Philippines, Saudi Arabia (Dharan), Taiwan, Thailand, Uruguay

Introduction
12 NXA-WAPZD1000 ZoneDirector Smart WLAN Controller

Installation and Setup
13
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Installation and Setup
Introduction
Setting up a wireless network with the NXA-WAPZD1000 begins when you disperse a number of wireless
access points (APs) for efficient coverage of your worksite. After you connect the APs to the NXA-
WAPZD1000 (through network hubs or switches) and complete the “Zero-IT” setup, you have a secure
wireless network for both registered users and guest users.
After using the Browser-Based Configuration Pages (for more information, please refer to the Browser-Based
Configuration Pages section on page 19) to set up user accounts for staff and other authorized users, your
WLAN can be put to full use, enabling users to share files, print, check email, and more. And as a bonus, guest
workers, contractors and visitors can be granted controlled access to your Ruckus WLAN with a minimum of
setup.
You can now fine-tune and monitor your network through the Browser-Based Configuration Pages, which
enables you to customize additional WLANs for authorized users, manage your users, monitor the network's
security and performance, and expand your radio coverage, if needed.
Powering the NXA-WAPZD1000
To power up the NXA-WAPZD1000, connect the appropriate power adapter (for more information, please
refer to the Power Adapter Compatibility section on page 11) to the power jack at the rear of the device and
press the Power button to apply power. Check the LED in the Power button on the front of the device: if it is
not lit, the device is NOT receiving power. If the power cable or adapter is connected to a power source, verify
that the power cable is connected properly to the power jack.
To shut off the device, press and hold the Power button for one to two seconds, and the Status LED will switch
from green to amber to denote that the device is shut down. Press the button again to restart the device.
Resetting the NXA-WAPZD1000
The NXA-WAPZD1000 may be reset in one of two modes. To reset the device while saving its current
configuration, press the Reset button on the front of the device for one to two seconds.
To restore the device to its factory defaults, press and hold the Reset button for 8 seconds. The Status LED will
now start flashing green to denote its default status.
Configuring the NXA-WAPZD1000
In order to configure the NXA-WAPZD1000, you will need the following items or information:
 A Windows XP/Service Pack 2-equipped PC Sun Java Runtime Environment, v5 or later, installed
on the administration PC
A Web browser; either Internet Explorer (v6 or later) or Mozilla Firefox (v1.4 or later)
The IP address, netmask, gateway and DNS server addresses assigned to the NXA-WAPZD1000, if
it is intended to have a static network address.
“Zero-IT” refers to the NXA-WAPZD1000’s simple setup and ease-of-use features,
which allow end users to easily configure wireless settings on Windows 7, Windows
Vista, Windows XP, Mac OS X, iPhone and iTouch client devices.
Resetting the NXA-WAPZD1000 to its factory default settings will erase all previous
configuration changes.
The NXA-WAPZD1000’s default IP address is 192.168.0.2, with a network mask of
255.255.255.0. The NXA-WAPZD1000 is shipped with its default IP address settings
as "DHCP", but if it is installed outside of a DHCP network, the device will revert to
the default IP address.

Installation and Setup
14 NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
To configure the NXA-WAPZD1000 and its companion NXA-WAP1000 devices:
1. Download the NXA-WAPZD1000 firmware from www.amx.com and copy it to your PC’s desktop.
2. Connect the NXA-WAPZD1000 to a convenient power source and press the power button.
3. After the Power LED is lit, the Status LED is a blinking red light.
4. When the NXA-WAPZD1000 is powered up, the Status LED is a blinking green light, indicating that the
system is in the “factory default” state. After you complete the Setup Wizard, the Status LED will be a
steady green light.
Once the NXA-WAPXZD1000 is on and connected to your network, use your administration PC to “discover”
it, verifying its connection. This automatically starts the Setup Wizard.
1. Open the My Network Places window from your PC desktop.
2. Click the Show icons for networked UPnP (Universal Plug and Play) devices link in the Network Tasks
pane.
3. If the Show UPnP Device Icons confirmation dialog box appears, click Yes to proceed. Windows sets up
the feature, then activates it.
4. After Windows checks the network, a new “NXA-WAPZD1000” icon appears in the My Network Places
window. To proceed with setup, double-click that icon.
5. The NXA-WAPZD1000 ZoneDirector Wireless Setup wizard appears, ready for wireless network
configuration.
If you prefer not to use UPnP, you can type in the NXA-WAPZD1000’s IP address into a Web browser. In case
the LAN has no DHCP server, the NXA-WAPZD1000’s default IP address is 192.168.0.2, with a network
mask of 255.255.255.0. If a DHCP server is used, an IP address is assigned automatically.
Working with the Setup Wizard
Before using the Wireless Setup wizard, obtain and enter the following information to complete the
configuration:
Language: Pick the language you prefer to use in the WebUI application from the drop-down list.
(This is separate from OS/System or browser language settings.)
General: Create a unique Name for the NXA-WAPZD1000. Use only letters and numbers for the
name. Choose country code.
Management IP: If you select DHCP, you must connect your NXA-WAPZD1000 to the local
network via one of the Ethernet ports. The wizard will display the IP address it acquires from the
local network. Write this down, as you will need it later. If you selected Manual, then enter the
required network settings in the (now) active text fields.
Wireless LANs: Enter the network name (ESSID). If you choose WPA-PSK for security, enter a
secure Passphrase for your WLAN. (Make a note of the passphrase, as some users may need it
when connecting their clients.)
Guest WLAN (optional): click the check box to create a Guest WLAN in addition to the corporate
WLAN, then enter the name of the Guest WLAN.
Administrator: Set up both the “admin” account, and the first network user account (representing
you as the administrator).
After you complete the Setup Wizard, the Status LED will be a steady green light.
The user name and password can be any combination of letters and numbers, plus
underscores or hyphens.

Installation and Setup
15
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
1. Review the wizard Confirmation entries. If you need to make a correction, click Back until the
appropriate setup screen appears, then make the changes.
2. When the wizard Finish screen appears, note the instructions, including the IP address now assigned to
the NXA-WAPZD1000.These will enable you to log into the newly-configured NXA-WAPZD1000.
Connecting NXA-WAP1000s to your local area Ethernet network
To connect the NXA-WAP1000s to the local Ethernet network:
1. Distribute the NXA-WAP1000s around your worksite, making sure they are 100 to 200 feet apart to
ensure the best coverage.
2. Record each WAP’s Ethernet MAC address (printed on the bottom of every WAP), and note each devices’
exact worksite location.
3. Connect each NXA-WAP1000 to an Ethernet port. When the NXA-WAP1000s have powered up, they
will automatically discover the NXA-WAPZD1000.
Accessing the NXA-WAPZD1000’s Command Line Interface
Aside from using the NXD-WAPZD1000’s Browser-Based Configuration Pages (page 19), you can also
perform many management and configuration tasks using the NXD-WAPZD1000’s Command Line Interface
(CLI) by connecting directly to the Console port.
To access the NXD-WAPZD1000 CLI:
1. Connect an admin PC to the NXD-WAPZD1000 Console port (FIG. 2), using a DB-9 serial cable.
2. Launch a terminal program, such as Hyperterminal, PuTTy, etc. (FIG. 2)
3. Enter the following connection settings:
Bits per second: 115200
Data bits: 8
Parity: None
Stop bits: 1
Flow control: None
4. Click OK or Open to connect (depending on your terminal client).
5. At the Please Login prompt, enter the admin login name (default: admin) and
password (default: admin).
The Setup Wizard will only appear when connecting to an NXA-WAPZD1000 in the
factory default mode. For more information on returning a device to the factory
default mode, please refer to the Resetting the NXA-WAPZD1000 section on
page 13.
FIG. 2 Configuring a terminal client

Installation and Setup
16 NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
You are now logged into the NXA-WAPZD1000 with limited privileges. As a user with limited privileges, you
can view a history of previously executed commands and ping a device. If you want to run more commands,
you can switch to privileged mode by entering enable at the root prompt.
To view a list of commands that are available at the root level, enter help or ?