ZyXEL Communications ZyAIR G-3000H Instruction Manual

1/23
www.zyxel.com
ZyXEL Confidential
ZyXEL
Firmware Release Note
ZyAIR G-3000H
Release 3.50(AAC.5)C0
Date: March 28, 2007
Author: Starich Huang

2/23
www.zyxel.com
ZyXEL Confidential
ZyXEL ZyAIR G-3000H Standard Version
Release 3.50(AAC.5)C0
Release Note
Date: March 28, 2007
Supported Platforms:
ZyXEL ZyAIR G-3000H
Versions:
ZyNOS Version : V3.50(AAC.5)C0 | 03/28/2007 10:14:57
Bootbase Version : V1.03 | 05/25/2005 16:49:07
Notes:
1. ZyAIR G-3000H is a country dependent product. Please setup correct country code before
shipping.
2. When AP is working under MESSID mode and security mode is WEP, 8021X-STATIC64, or
8021X-STATIC128 ( which use static WEP key for encryption / decryption ), only key1 is
usable, no matter which key index is assigned in the security profile. This implies that all
clients can only, and must set WEP key index 1. Other key index will be meaningless.
3. Please use eWC ( WEB ) or CI command to edit SSID profile properties. SMT doesn’t
support SSID profile edit.
4. If STA1 and STA2 connected to same BSS, but got different VLAN number from RADIUS
server, the traffic between STA1 and STA2 won’t be blocked when intra-BSS traffic is
enabled.
5. When AP is running under MESSID mode, the first entry of selected SSID profiles will be
visible. The term “visible” here means AP will send probe response of that SSID when it
receives probe request which is broadcast or doesn’t include any specific SSID. This will
affect client’s wirelesss scan result. For example, if user enabled SSID profile index 3, 5, 7
under MESSID mode and SSID profile index 3 is at the first entry of eight available selections,
then SSID profile 3 will be visible. If the first entry of eight available selections is not
enabled, then no SSID will be visible.

3/23
www.zyxel.com
ZyXEL Confidential
6. WPA2 support of Windows XP service pack 2 may need to install Update for Windows XP
(KB893357) manually. Additionally, please update latest wireless adapter driver from vender
site in order to get WPA2 / WMM support.
7. Please add an additional MAC entry “FF:FF:FF:FF:FF:FF” in the L2isolation when operating
mode is MESSID to make L2isolation work properly.
8. Current MESSID mode can set different security mode for different SSID, but not all types of
combinations can work if supplicant is windows wireless zero configuration ( shorten as WZC
below). If AP is configurated to a security combination which is not listed below, WZC may
not connect to some SSID successfully. Please reference detailed information from the
following table. Other supplicants ( Funk Odyssey / ZyXEL client tool ) may connect to
security combination which is not listed on the table.










 














 zzzzzzzz
 zzzzzzzz
 zzzzzzzz


zzzzzzzz


zzzzzzzz


zzzzzzzz


zzzzzzzz
        z zz  
        z zz  
        z zz  
        z z z z   
        z z z z  
          z 


         z
 zzzzzzz
Compatibility table of Security policies of windows XP supplicant
9. Under MESSID mode, while public SSID status change from enabled to disabled, some STA
will cache this scan result in the space of three minute and user can find this SSID in the STA
scan list. User can disable STA driver to delete the scan result which cache in the STA
Known Issues:
1. WinXP supplicant doesn't work when it configures as 802.1x authentication with static WEP
key.

4/23
www.zyxel.com
ZyXEL Confidential
2. WPA interoperability issue : When centrino station configure as WPA (or WPA-PSK) mode
and data encryption filed set as WEP, it can not work with G-3000H under WPA (or WPA-
PSK) mode and using WEP as group key. In this case, user must configure the data encryption
field as TKIP then stations will automatic switch the group key cipher as WEP after it received
the WPA information element from G-3000H.
3. WDS links will be broken temporarily with heavy traffics.
4. WMM/QoS is always enabled in this release.
5. When AP is configured with WPA2-MIX, or WPA2-PSK-MIX mode, the ZyXEL G-220F
can’t connect with WPA or WPA-PSK.
6. If AP is configurated as
a. AP is working under MESSID mode
b. Two wireless client associate to two different SSID,
c. Two different SSID have same VLAN ID,
the traffic between two wireless client will not be forwarded by AP.
CI Command List:
Features:
Modification in 3.50(AAC.5)C0 | 03/28/2007
1. [FEATURE CHANGE]
Modify to FCS version.
Modification in 3.50(AAC.5)b1 | 03/16/2007
1[BUG FIXED]
SPRID: 061211691; CSO Ticket:13981
Symptom:
When use the WEP from MacOS, the wireless client need try 3-4 attemps
before it connect to the G-3000H.
2 [BUG FIXED]
SPR: 061214930
Symptom:
MacOS (v10.4.8) wireless client utility can’t associate to G-
3000H_v3.50(AAC.4)C0 with static WEP(64/128) encryption (HEX digits).
3 [BUG FIXED]
CSO Ticket: 15907, 16433
Symptom: Connection problem, system will be reset or crashed in heavy traffic
4 [BUG FIXED]
SPRID:
Symptom: Association fail with Acer Ferrari NB 11n wireless client
5 [BUG FIXED]
SPRID: 070125154, 070125237
Symptom:

5/23
www.zyxel.com
ZyXEL Confidential
MacBook with Intel Core 2 Duo CPU connect to DUT with WPA2-PSK, and STA
access to internet, after 30 minutes, MacBook disconnect from DUT.
6 [BUG FIXED]
CSO Ticket: 15935
Symptom:
a query regarding RADIUS Accounting option –
Acct-Session-Id missing in Accounting request packet sending from G-3000 to
Radius server.
7 [BUG FIXED]
CSO Ticket: 15475
Symptom:
Broadcom based wireless client will not re-associate with G-3000H after
disassociation.
Modification in 3.50(AAC.4)C0 | 11/24/2006
2. [FEATURE CHANGE]
Modify to FCS version.
Modification in 3.50(AAC.4)b1 | 11/21/2006
1. [BUG FIXED]
SPRID: 061016450
Symptom: In GUI, Wireless -> Security page, there are two help icons.
Modification in 3.50(AAC.3)C0 | 10/20/2006
3. [FEATURE CHANGE]
Modify to FCS version.
Modification in 3.50(AAC.3)b2 | 10/11/2006
1[BUG FIXED]
SPRID: 060925655
Symptom: "centralized admin account" function has some trouble,it pop the message"Both
User Name and Password are required".
2[BUG FIXED]
CSO Ticket: 12432
Symptom: When G3000H(with roaming activated) ethernet connect with G4100 lan port,
The wireless client can not associate with G3000H.
Condition:The network topology :
G3000H(with Roaming activated)------(LAN)G4100(WAN)------Internet.
The wireless client can not associate with G3000H.
3[BUG FIXED]
Symptom: G3000H cant work with G5100 in Bridge mode or in AP + Bridge mode
Condition:The network topology : G3000H(WDS)------(WDS)G5100
The WDS link can not link up.

6/23
www.zyxel.com
ZyXEL Confidential
4[BUG FIXED]
SPRID: 060927753
Symptom: Please add the "Enable Public SSID " function to the help page at SSID profile
Modification in 3.50(AAC.3)b1 | 09/18/2006
5[FEATURE ENHANCED]
Symptom: Support centralized admin account (MD5)
Condition: Put the administrator into radius server. User can specify a account on
radius server become the system administrator for this device
6[BUG FIXED]
SPRID: 051214840
Symptom: On line help for Local User Database isn’t correct.
7[BUG FIXED]
SPRID: 060530894
Symptom: ’theDataPtr->bkServer=1’ appear when edit security profile and security mode is
set to 802.1x-Only on GUI.
8[BUG FIXED]
SPRID: 060602168
Symptom: Help page with ”Local User Database”, Please remove the description about
PEAP
9[BUG FIXED]
SPRID: 060608550
Symptom: Device exception after 48 hours with 16 stations and from the console show some
message!!
10 [BUG FIXED]
SPRID: 060626642
Symptom: When configure the WAN subnet 255.255.248.0 on the WEB Gui,the system will
pop up the error message ”Subnet Mask Error”
11 [BUG FIXED]
SPRID: 060726753
Symptom: G3000H can not show the second, the third or the fouth ESSID when MESSID is
enabled and four SSID profiles is enabled.
Modification in 3.50(AAC.2)C0 | 06/15/2006
4. [FEATURE CHANGE]
Modify to FCS version.
Modification in 3.50(AAC.2)b1 | 05/29/2006
12 [FEATURE ENHANCED]
Enlarge four public SSID numbers on MSSID mode

7/23
www.zyxel.com
ZyXEL Confidential
13 [FEATURE CHANGED]
Symptom: Change WLAN channel usage of some countries.
Condition:
ch1 ~ ch11: USA, Philippines, Taiwan, India, Brazil.
ch1 ~ ch13: Others
14 [BUG FIXED]
G3000H cant work with G405 in WPA-PSK mode.
(SPRID: 051216017 )
15 [BUG FIXED]
Auto configuration by DHCP can’t run with windows server 2003.
(SPRID: 060112602)
16 [BUG FIXED]
Interoperatility: In MESSID mode, when wireless client associate to DUT(no WEPstatic WEP
WPA-PSK ro WPA2-PSK),wireless can’t get IP address from win2003 DHCP server sometimes.
(Other DHCP server doesn’t get this isse) .
(SPRID: 060308701)
17 [BUG FIXED]
The bridge light won’t turn on
(SPRID: 060314036)
18 [BUG FIXED]
The Enable intra-BSS Traffic check box isn’t cleared when you enable layer-2 isolation.
(SPRID: 051214835)
(SPRID: 060510603)
19 [BUG FIXED]
WPA-PSK\WPA2-PSK cannot work (EAPOL MIC Error v1) after DUT changed security mode from
WPA to WPA-PSK or WPA2-PSK mode
(SPRID: 060213541)
Modification in 3.50(AAC.1)C0 | 10/19/2005
5. [FEATURE CHANGE]
Modify to FCS version.
Modification in 3.50(AAC.1)b5 | 10/04/2005
1. [BUG FIXED]
In SMT or telnet mode, item 23.5 , create max string length profile name, then change the
index from 1 ~ 16, observe the Profile name status, it will show superfluous characters.
2. [BUG FIXED]
In AP mode, set DUT to WPA-PSK or WPA2-PSK mode, let one STA associate to DUT, In
SMT, chenage the DUT mode to MESSID,DUT will reboot.

8/23
www.zyxel.com
ZyXEL Confidential
3. [BUG FIXED]
AP+bridge mode performance is unstable. (Bridge/Repeater mode is fine)
4. [BUG FIXED]
In MIB browser, use AUTO CONFIGURATION Remote Triggering command to update
configuration more than 3 times, DUT would reboot with error message.
5. [BUG FIXED]
SNMP:MIB-pwTrap(1.3.6.1.4.1.890.1.9.2)[Wireless trap / StationAssociated] [Deassociated]
[FailAssociate] [FailAuthenticate] trap function doesn’t work properly.
6. [BUG FIXED]
eWC: Fix incorrect output at Wireless - Channel Usage if SSID is empty.
Modification in 3.50(AAC.1)b4 | 09/14/2005
1. [BUG FIXED]
SNMP autocfg function doesn’t work properly.
2. [BUG FIXED]
There are some issues in WPA2-MIX and WPA2-PSK-MIX mode.
3. [FEATURE CHANGED]
Change MIB name from PROWIRELESS-MIB to ZYXEL-PROWIRELESS-MIB.
4. [FEATURE CHANGED]
Modify limitation of minimum RTS threshold from 0 to 800.
5. [FEATURE CHANGED]
Modify eWC wizard setup. Now it will write appreciate setting to SSID profile 1 and security
profile 1 automatically.
6. [FEATURE ENHANCED]
Change MESSID operation. Now only the first selected SSID will response broadcast probing
request. The others will act as they are hidden SSIDs.
7. [FEATURE ENHANCED]
Support WLM EMS 1.0.
Modification in 3.50(AAC.1)b3 | 08/30/2005
1. [BUG FIXED]
After config SSID profile from Web, then select SSID profile from SMT 3.5 with operating
mode=AccessPoint, device will reboot.
2. [BUG FIXED]
In eWC, when operating mode = AP+Bridge, and AP security is enable ( wep 802.1x, wpa or
wpa2 ), then ” Enable WDS Security ” function enable or not, the WDS always can connect.
3. [BUG FIXED]
Change the output power config items of eWC and SMT 3.5 to be the same.

9/23
www.zyxel.com
ZyXEL Confidential
Modification in 3.50(AAC.1)b2 | 08/11/2005
1. [FEATURE CHANGED]
Change AP code.
UMAC from 2.12.15.0.fix to 2.12.23.0, LMAC from 2.13.8.0 to 2.13.12.0.
2. [FEATURE CHANGED]
Remove VLAN support for RADIUS client.
3. [FEATURE ENHANCED]
Support VLAN assigned by RADIUS server.
4. [FEATURE ENHANCED]
Support local user database authentication for some specific security mode.
5. [FEATURE ENHANCED]
Support encrypted auto configuration script file.
6. [BUG FIXED]
Symptom: In eWC , the WPA-PSK mode can’t accept 63 chars
7. [BUG FIXED]
Symptom:Copy one string with 30 characters, in telnet mode, paste this string in 23.1 ==> old
password, system will reboot.
8. [BUG FIXED]
Symptom: From the SMT command 24.6 ,when restore configation , device crash and show
error message.
9. [BUG FIXED]
Symptom: In eWc ,when config the Security profile ,select WEP mode ,and 64bit or
128bit ,relead the Web page it show error.
10. [FEATURE CHANGED]
Change eWC UI. WEP key will be masked by “*****”.
11. [BUG FIXED]
In eWC, when edit the MAC filter, sometimes device will crash..
12. [BUG FIXED]
Symptom: In WebUI fragmentation threshold range is 256 to 2432, in SMT it is from 800 to
2432.
13. [BUG FIXED]
Symptom: MAC filter function doesn’t work properly.
14. [BUG FIXED]
System: Web will hang after changing setting in RADIUS page.
15. [BUG FIXED]
In web UI page, create 16 different security, edit 8 different SSID setting, sometimes web UI
hang, sometimes DUT reboot with some message.
16. [BUG FIXED]

10/23
www.zyxel.com
ZyXEL Confidential
Fix the problem of creating WDS link between APs, it must set block intra-BSS traffic.
17. [BUG FIXED]
Merge ICMP bug solution from G-3000.
Modification in 3.50(AAC.1)_20050712 | 07/12/2005
1. [FEATURE CHANGED]
Change AP code from FullMAC to SoftMAC.
2. [FEATURE ENHANCED]
Support multiple ESSID feature.
3. [FEATURE ENHANCED]
Support alternative incoming vlan tag.
4. [FEATURE ENHANCED]
Support WPA2 AES encryption.
5. [FEATURE ENHANCED]
Change configuration style to profile-based setting. eWC and SMT menu are changed as
configuration style changes.
6. [FEATURE ENHANCED]
Support for auto configuration, including TFTP client.
7. [FEATURE ENHANCED]
Support for WLAN SNMP proprietery MIB.
8. [FEATURE ENHANCED]
Support QoS policy control for SSID.
Modification in 3.50(AAC.0)C0 | 07/13/2005
1. [FEATURE CHANGE]
Modify to FCS version.
Modification in 3.50(AAC.0)b1 | 05/25/2005
1. First release for C3 firmware