ZyXEL Communications ZYAIR B-2000 User manual

ZyAIR B-2000 v.2
Broadband Wireless Sharing Router
Quick Installation Guide
Version 3.50
July 2003

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
3
Table of Contents
1 Introducing the ZyAIR ................................................................................................................. 4
2 Hardware Connections ............................................................................................................... 5
2.1 Side Panel and Connections ................................................................................................. 5
2.2 The Front Panel ..................................................................................................................... 5
3 Setting Up Your Computer’s IP Address................................................................................... 7
3.1 Windows 2000/NT/XP ........................................................................................................... 8
3.2 Checking/Updating Your Computer’s IP Address.................................................................. 9
3.3 Testing the Connection to the ZyAIR..................................................................................... 9
4 Internet Access Setup Using the Web Configurator Wizard ................................................. 10
4.1 Accessing the ZyAIR via the Web Configurator .................................................................. 10
4.2 Common Screen Command Buttons................................................................................... 12
4.3 Configuring the ZyAIR Using the Wizard............................................................................. 12
4.4 Test Your Internet Connection ............................................................................................. 15
5 Key Features .............................................................................................................................. 15
5.1 Wireless LAN Overview.......................................................................................................15
5.2 Configuring Wireless LAN ................................................................................................... 16
5.3 Configuring Roaming........................................................................................................... 18
5.4 Configuring IEEE 802.1x Authentication ............................................................................. 19
5.5 Local User Database and RADIUS Overview ..................................................................... 22
5.6 Enabling Firewall ................................................................................................................. 22
5.7 Define Content Filtering....................................................................................................... 24
5.8 Configuring Firewall Services .............................................................................................. 26
5.9 Remote Management Overview .......................................................................................... 28
5.10 UPnP Overview ................................................................................................................. 29
5.11 Configuring UPnP .............................................................................................................. 29
6 Hardware Installation ................................................................................................................ 30
6.1 Attaching Antennas.............................................................................................................. 30
6.2 Hardware Mounting Installation ........................................................................................... 31
7 Troubleshooting ........................................................................................................................ 34

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
4
1 Introducing the ZyAIR
The ZyAIR B-2000 v.2is a broadband sharing gateway with a built-in wireless LAN access point and four-
port switch that makes it easy for people to set up a small home/office network and share Internet access
via a broadband (cable/DSL) modem. Key features of the ZyAIR include 802.1x wireless LAN security,
Firewall, remote management and UPnP. See your User’s Guide for more details on all ZyAIR features.
You should have an Internet account already set up and have been given most of the following information.
INTERNET ACCOUNT CHECKLIST
Your device’s WAN IP Address (if given): __________________
Encapsulation:
Ethernet Service Type: _______________________
Login Server IP Address: ______________
User Name: ____________ Password: ____________
PPTP User Name: ____________ Password: ____________
Your WAN IP Address: ____________ PPTP Server IP Address: ___________
Connection ID (if required): ____________
PPPoE (PPPoE) Service Name: ____________
User Name: ____________ Password: ____________

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
5
2 Hardware Connections
2.1 Side Panel and Connections
LABEL DESCRIPTION AND FUNCTION
1. LAN Use an Ethernet cable to connect at least one computer for initial ZyAIR configuration.
These ports are auto-negotiating (can connect at 10 or 100Mbps) and auto-crossover
(automatically adjust to the type of Ethernet cable you use (straight-through or
crossover)).
2. WAN Connect your cable/DSL modem to this port with the cable that came with your modem.
3. POWER Connect the end of the included power adaptor (use only this adaptor) to this power
socket.
After you’ve made the connections, connect the power cable to a power supply and look at the front panel
LEDs.
RESET You only need to use this button if you’ve forgotten the ZyAIR’s password. It returns the
ZyAIR to the factory defaults (password is 1234, LAN IP address 192.168.1.1 etc. see
your User’s Guide for details).
2.2 The Front Panel
The PWR LED turns steady on when the power cord is connected. The SYS LED blinks while performing
system testing and then turns steady on if the testing is successful. The link LED and the ZyAIR LED turn
steady on while the wireless card on the ZyAIR is working. The LAN and WAN LEDs turn on, if they are
properly connected. Refer to the User’s Guide for more detailed LED descriptions.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
6
Table 1 Front Panel LED Description
LED COLOR STATUS DESCRIPTION
On The ZyAIR is ready, but is not sending/receiving data through the
wireless LAN.
ZyAIR Blue
Blinking
(Breathing)
The ZyAIR is sending/receiving data through the wireless LAN.
ZyAIR LED

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
7
Table 1 Front Panel LED Description
LED COLOR STATUS DESCRIPTION
On The ZyAIR has a successful 10Mbps Ethernet connection.
Blinking The ZyAIR is sending/receiving data.
Green
Off The ZyAIR does not have a 10Mbps Ethernet connection.
On The ZyAIR has a successful 100Mbps Ethernet connection.
Blinking The ZyAIR is sending/receiving data.
LAN 1-4
Orange
Off The ZyAIR does not have a 100Mbps Ethernet connection.
On The ZyAIR has a successful 10Mbps WAN connection.
Blinking The ZyAIR is sending/receiving data.
Green
Off The ZyAIR does not have 10Mbps WAN connection.
On The ZyAIR has a successful 100Mbps WAN connection.
Blinking The ZyAIR is sending/receiving data.
WAN
Orange
Off The ZyAIR does not have a 100Mbps WAN connection.
On The ZyAIR is functioning properly.Green
Off The ZyAIR is not ready or has malfunctioned.
SYS
Red Blinking The ZyAIR is rebooting.
On The ZyAIR is receiving power.PWR Green
Off The ZyAIR is not receiving power.
3 Setting Up Your Computer’s IP Address
Skip this section if your computer is already set up to accept a dynamic IP
address. This is the default for most new computers.
The ZyAIR is already set up to assign your computer an IP address. Use this section to set up your
computer to receive an IP address or assign it a static IP address in the 192.168.1.2 to 192.168.1.254 range
with a subnet mask of 255.255.255.0. This is necessary to ensure that your computer can communicate with
your ZyAIR.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
8
Your computer must have a network card and TCP/IP installed. TCP/IP should already be installed on
computers using Windows NT/2000/XP, Macintosh OS 7 and later operating systems. Refer to the Setting
Up Your Computer’s IP Address appendix in the User’s Guide for configuring the IP address in other
operating systems.
3.1 Windows 2000/NT/XP
1. In Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control
Panel.
2. In Windows XP, click Network Connections.
In Windows 2000/NT, click Network and Dial-up Connections.
3. Right-click Local Area Connection and then click Properties.
4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties.
5. The Internet Protocol TCP/IP Properties screen
opens (the General tab in Windows XP).
-To have your computer accept a dynamic IP address,
click Obtain an IP address automatically.
-If you want a static IP address, click Use the
following IP Address and fill in the IP address (use
one between192.168.1.2 and 192.168.1.254), Subnet
mask (255.255.255.0), and Default gateway
(192.168.1.1) fields.
Click Advanced.
6. Remove any previously installed gateways in the IP
Settings tab and click OK to go back to the Internet
Protocol TCP/IP Properties screen.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
9
7. Click Obtain DNS server address automatically if
you do not know your DNS server IP address(es).
If you know your DNS server IP address(es), click Use
the following DNS server addresses, and type them
in the Preferred DNS server and Alternate DNS
server fields.
If you have previously configured DNS servers, click
Advanced and then the DNS tab to order them.
8. Click OK to close the Internet Protocol (TCP/IP)
Properties window.
9. Click OK to close the Local Area Connection
Properties window.
Refer to your User’s Guide for detailed IP address configuration for other Windows and Macintosh
computer operating systems.
3.2 Checking/Updating Your Computer’s IP Address
1. In the computer, click Start, (All) Programs, Accessories and then Command Prompt.
2. In the Command Prompt window, type "ipconfig" and then press ENTER to verify that your
computer’s static IP address is in the correct subnet (in the range between 192.168.1.2 and
192.168.1.254 if using the default ZyAIR LAN IP address). Alternatively, to have the ZyAIR assign
your computer a new IP address (from the IP pool), make sure your ZyAIR is turned on, type
"ipconfig/renew" and then press ENTER.
3.3 Testing the Connection to the ZyAIR
The default IP address of the ZyAIR is 192.168.1.1.
1. Click Start, (All) Programs, Accessories and then Command Prompt.
2. In the Command Prompt window, type "ping” followed by a space and the IP address of the ZyAIR.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
10
3. Press ENTER and the reply messages displays.
Your computer can now communicate with the ZyAIR using the LAN port.
4 Internet Access Setup Using the Web
Configurator Wizard
The Compact Guide shows you how to use the web configurator Wizard and
introduces the ZyAIR’s key features. See your User’s Guide for configuration
details and background information on all ZyAIR features using the SMT (System
Management Terminal) and web configurator.
4.1 Accessing the ZyAIR via the Web Configurator
1. Launch your web browser. Enter “192.168.1.1” as the web site address.
C:\>ping 192.168.1.1
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: bytes=32 time=10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 10ms, Average = 2ms
C:\>
Default ZyAIR IP Address

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
11
2. The default password (“1234”) is already in the password field (in non-readable format). Click
Login to proceed to a screen asking you to change your password. Click Reset to revert to the
default password in the password field.
3. It is highly recommended you change the default password! Enter a new password, retype it to
confirm and click Apply; alternatively click Ignore to proceed to the MAIN MENU screen if
you do not want to change the password now.
4. You should now see the web configurator MAIN MENU screen.
Default password.
Change default
password.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
12
4.2 Common Screen Command Buttons
The following table shows common command buttons found on many web configurator screens.
Back Click Back to return to the previous screen.
Apply Click Apply to save your changes back to the ZyAIR.
Reset Click Reset to begin configuring this screen afresh.
4.3 Configuring the ZyAIR Using the Wizard
The wizard consists of a series of screens to help you configure your ZyAIR for wireless stations to access
your wired LAN and set up Internet access. Refer to your User’s Guide for more background information.
1. Click WIZARD SETUP in the main menu to display the first wizard screen. Refer to your
User’s Guide for more background information on each field.
Click WIZARD SETUP to help you
configure your ZyAIR for Internet access
and set up a wireless network.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
13
System Name is a unique name to
identify the ZyAIR in the Ethernet
network. Enter a descriptive name.
The Domain Name entry is what is
propagated to the DHCP clients on
the LAN. If you leave this blank, the
domain name obtained by DHCP
from the ISP is used. Click Next to
continue.
2. Use the second wizard screen to set up the wireless LAN.
ESSID is a unique name to identify
the ZyAIR in the wireless LAN. Enter
a descriptive name.
The range of radio frequencies used
by IEEE 802.11b wireless devices is
called a channel.
Click Scan to have the ZyAIR
automatically select a channel. The
selected channel automatically
appears in the Channel ID field.
WEP (Wired Equivalent Privacy) encrypts data frames before transmitting over the wireless network.
Select either 64-bit or 128-bit from the WEP Encryption drop-down list box to activate WEP encryption. Select Disable
to turn off WEP data encryption.
Select ASCII or HEX WEP key input method and then follow the on-screen instructions to set up the WEP keys.
Click Next to continue.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
14
The wireless stations and ZyAIR must use the same ESSID, channel ID and WEP
encryption key (if WEP is enabled) for wireless communication.
3. The third wizard screen has three variations depending on what encapsulation type you use. Use
the information in the Internet Account Checklist table and the online help to fill in the fields.
Click Next in each screen to continue.
Choose Ethernet when the WAN port is
used as a regular Ethernet. Choose from
Standard or a RoadRunner version.
You’ll need User Name, Password and
Login Server IP Address for some
Roadrunner versions.
Point-to-Point Protocol over Ethernet
(PPPoE) also functions as a dial-up
connection. Therefore you’ll also need a
username and password and possibly
the PPPoE service name.
Your ISP will give you all needed
information.
Choose PPTP if your service provider
uses a DSL terminator with PPTP login.
The ZyAIR must have a static IP address
in this case. You’ll also need a login
name, associated password, the DSL
terminator IP address and possibly a
connection ID.
Click Next to continue.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
15
4. Fill in the fields in the last wizard configuration screen.
WAN IP Address Assignment
Select Get automatically from ISP
to have the ZyAIR obtain an IP
address automatically from the ISP.
Select Use fixed IP address to
give the ZyAIR a fixed, unique IP
address. Enter a subnet mask
appropriate to your network and the
gateway IP address if applicable.
DNS Server Assignment
Select Get automatically from ISP
if your ISP does not give you DNS
server addresses.
If you selected the Use fixed IP
address – Primary/Secondary
DNS Server option, enter the
provided DNS addresses in these
fields.
WAN MAC Address
The WAN MAC address field allows you to configure the WAN port's MAC address by either using the factory default or
cloning the MAC address from a computer on your LAN. Select Factory Default to use the factory assigned default MAC
address. Alternatively, select Spoof this Computer's MAC address - IP Address and enter the IP address of the
computer on the LAN whose MAC address you are cloning
5. In the final screen, click Finish and change the wireless parameter settings in the wireless
stations to match those of the ZyAIR. Refer to the user’s guide for your wireless adapter.
4.4 Test Your Internet Connection
Launch your web browser and navigate to www.zyxel.com. You don’t need a dial-up program such as Dial
Up Networking. Internet access is just the beginning. Refer to the User’s Guide for more detailed
information on the complete range of ZyAIR features.
5 Key Features
This section shows you how to configure some of the advanced features of the ZyAIR.
Refer to your User’s Guide for more information on ZyAIR configurations.
5.1 Wireless LAN Overview
This section introduces the wireless LAN and some basic configurations. A wireless LAN can be as simple
as two computers with wireless adapters communicating in a peer-to-peer network or as complex as a

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
16
number of computers with wireless adapters communicating through access points (APs) which bridge
network traffic to the wired LAN.
5.2 Configuring Wireless LAN
Click ADVANCED and then WIRELESS to open the Wireless screen.
Figure 1 Wireless LAN
The following table describes the fields in this screen.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
17
Table 2 Wireless LAN
LABEL DESCRIPTION
Enable
Wireless LAN
Click the check box to activate wireless LAN.
ESSID ESSID (Extended Service Set ID) is a unique name to identify the ZyAIR in the wireless
LAN. Enter a descriptive name.
Hide ESSID Click this check box to hide the ESSID in the outgoing beacon frame so a station
cannot obtain the ESSID through passive scanning using a site survey tool.
Choose
Channel ID
Adjacent access points (APs) should use a channel different from what you selected to
reduce interference. The wireless stations connected to the ZyAIR must use the same
channel you selected.
Scan Click this button to have the ZyAIR automatically scan for and select a channel with the
least interference.
RTS /CTS
Threshold
(Request To Send) The threshold (number of bytes) for enabling RTS/CTS handshake.
Data with its frame size larger than this value will perform the RTS/CTS handshake.
Setting this attribute to be larger than the maximum MSDU (MAC service data unit) size
turns off the RTS/CTS handshake. Setting this attribute to zero turns on the RTS/CTS
handshake. Enter a value between 0and 2432.
Fragmentation
Threshold
The threshold (number of bytes) for the fragmentation boundary for directed messages.
It is the maximum data fragment size that can be sent. Enter a value between 256 and
2432.
WEP
Encryption WEP (Wired Equivalent Privacy) provides data encryption to prevent unauthorized wireless stations from accessing data transmitted over the wireless network.
Select Disable to allow wireless stations to communicate with the access points without
any data encryption.
Select 64-bit WEP or 128-bit WEP to enable data encryption.
Authentication
Method
Select Auto, Open System or Shared Key from the drop-down list box.
Key 1 to Key
4If you chose 64-bit WEP in the WEP Encryption field, then enter any 5 ASCII
characters or 10 hexadecimal characters ("0-9", "A-F") preceded by 0x for each key.
If you chose 128-bit WEP in the WEP Encryption field, then enter 13 ASCII characters
or 26 hexadecimal characters ("0-9", "A-F") preceded by 0x for each key.
There are four data encryption keys to secure your data from eavesdropping by
unauthorized wireless users. The values for the keys must be set up exactly the same
on the access points as they are on the wireless stations.
The preceding “0x” is entered automatically. You must configure all four keys, but only
one key can be activated at any one time. The default key is key 1.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
18
Table 2 Wireless LAN
LABEL DESCRIPTION
Enable Intra-
BSS Traffic
Select this check box to enable Intra-BSS Traffic.
Intra-BSS traffic is traffic between wireless stations in the BSS. If two wireless stations
connect to the Internet via the ZyAIR, then when Intra-BSS is enabled, both can access
the wired network and communicate with each other. When Intra-BSS is disabled, both
can still access the wired network but cannot communicate with each other
Enable
Breathing
LED
Select this check box to enable the Breathing LED, also known as the ZyAIR LED.
The blue ZyAIR LED is on (dimmed) when the ZyAIR is on and blinks brightly (or
breaths) when data is being transmitted to/from its wireless stations. Clear the check
box to turn this LED off even when the ZyAIR is on and data is being
transmitted/received.
Number of
Wireless
Stations
Allowed
Use this field to set a maximum number of wireless stations that may connect to the
ZyAIR. This may be necessary if for example, there is difficulty with channel
assignment due to a high density of APs within a coverage area.
Enter the number (from 1 to 32) of wireless stations allowed.
Output Power Set the output power of the ZyAIR in this field. If there is a high density of APs within an
area, decrease the output power of the ZyAIR to reduce interference from other APs.
The options are 11dBm (50mW), 13dBm (32mW), 15dBm (20mW) or 17dBm
(12.6mW).
5.3 Configuring Roaming
In a network environment with multiple access points, wireless stations are able to switch from one access
point to another as they move between the coverage areas. This is roaming. As the wireless station moves
from place to place, it is responsible for choosing the most appropriate access point depending on the signal
strength, network utilization or other factors.
If the roaming feature is not enabled on the access points, information is not communicated between the
access points when a wireless station moves between coverage areas. The wireless station may not be able
to communicate with other wireless stations on the network and vice versa.
To enable roaming on your ZyAIR, click ADVANCED, WIRELESS and then the Roaming tab. The
screen appears as shown.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
19
Figure 2 Roaming
The following table describes the fields in this screen.
Table 3 Roaming
LABEL DESCRIPTION
Active Select Yes from the drop-down list box to enable roaming on the ZyAIR if you have two
or more ZyAIRs on the same subnet.
All APs on the same subnet and the wireless stations must have
the same ESSID to allow roaming.
Port Enter the port number to communicate roaming information between access points.
The port number must be the same on all access points. The default is 16290. Make
sure this port is not used by other services.
5.4 Configuring IEEE 802.1x Authentication
The IEEE 802.1x standard outlines enhanced security methods for both the authentication of wireless
stations and encryption key management. Authentication can be done using the local user database internal
to the ZyAIR (authenticate up to 32 users) or an external RADIUS server for an unlimited number of users.
To change your ZyAIR’s authentication settings, click ADVANCED, WIRELESS and then the 802.1x
tab. The screen appears as shown.

ZyAIR B-2000 v.2Broadband Wireless Sharing Router
20
Figure 3 Wireless 802.1x Authentication
The following table describes the fields in this screen.
Table 4 Wireless 802.1x Authentication
LABEL DESCRIPTION
Wireless Port
Control
To control wireless stations access to the wired network, select a control method
from the drop-down list box. Choose from No Authentication Required,
Authentication Required and No Access Allowed.
No Authentication Required allows all wireless stations access to the wired
network without entering usernames and passwords. This is the default setting.
Authentication Required means that all wireless stations have to enter usernames
and passwords before access to the wired network is allowed.
No Access Allowed blocks all wireless stations access to the wired network.
ReAuthentication
Timer
(in seconds)
Specify how often wireless stations have to reenter usernames and passwords in
order to stay connected. This field is activated only when you select Authentication
Required in the Wireless Port Control field.
Enter a time interval between 10 and 9999 seconds. The default time interval is
1800 seconds (30 minutes).
Note: If wireless authentication is done using a RADIUS server, the reauthentication
timer on the RADIUS server has priority.