ZyXEL Communications NWA1120 Series User manual

Quick Start Guide
www.zyxel.com
NWA1120 Series
Wireless LAN Ceiling Mountable PoE Access Point
Version 1.00
Edition 2, 10/2013
Copyright © 2012 ZyXEL Communications Corporation
User’s Guide
Default Login Details
LAN IP Address http://192.168.1.2
User Name admin
Password 1234

NWA1120 Series User’s Guide2
IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features.
Screenshots and graphics in this book may differ slightly from your product due to differences in
your product firmware or your computer operating system. Every effort has been made to ensure
that the information in this manual is accurate.
Related Documentation
•QuickStartGuide
The Quick Start Guide shows how to connect the NWA and access the Web Configurator.

Contents Overview
NWA1120 Series User’s Guide 3
Contents Overview
User’s Guide .........................................................................................................................................9
Introducing the NWA ...............................................................................................................................11
Introducing the Web Configurator ...........................................................................................................19
Dashboard ...............................................................................................................................................25
Tutorial ....................................................................................................................................................29
Technical Reference ..........................................................................................................................47
Monitor ....................................................................................................................................................49
Wireless LAN ..........................................................................................................................................55
LAN .........................................................................................................................................................91
VLAN .......................................................................................................................................................95
System ....................................................................................................................................................97
Log Settings .......................................................................................................................................... 111
Maintenance ..........................................................................................................................................115
Troubleshooting ....................................................................................................................................123

Contents Overview
NWA1120 Series User’s Guide
4

Table of Contents
NWA1120 Series User’s Guide 5
Table of Contents
Contents Overview ..............................................................................................................................3
Table of Contents .................................................................................................................................5
Part I: User’s Guide ...........................................................................................9
Chapter 1
Introducing the NWA ..........................................................................................................................11
1.1 Introducing the NWA .........................................................................................................................11
1.1.1 Dual-Band ................................................................................................................................11
1.2 Wireless Modes .................................................................................................................................12
1.2.1 MBSSID ...................................................................................................................................12
1.2.2 Wireless Client .........................................................................................................................13
1.2.3 Root AP ...................................................................................................................................15
1.2.4 Repeater ..................................................................................................................................15
1.3 Ways to Manage the NWA ................................................................................................................16
1.4 Configuring Your NWA’s Security Features .......................................................................................17
1.4.1 Control Access to Your Device ................................................................................................17
1.4.2 Wireless Security .....................................................................................................................17
1.5 Good Habits for Managing the NWA .................................................................................................17
1.6 Hardware Connections ......................................................................................................................18
1.7 LED ...................................................................................................................................................18
Chapter 2
Introducing the Web Configurator ....................................................................................................19
2.1 Overview ...........................................................................................................................................19
2.2 Accessing the Web Configurator .......................................................................................................19
2.3 Resetting the NWA ............................................................................................................................21
2.3.1 Methods of Restoring Factory-Defaults ...................................................................................21
2.4 Navigating the Web Configurator ......................................................................................................22
2.4.1 Title Bar ...................................................................................................................................22
2.4.2 Navigation Panel .....................................................................................................................23
2.4.3 Main Window ...........................................................................................................................24
Chapter 3
Dashboard...........................................................................................................................................25
3.1 The Dashboard Screen .....................................................................................................................25

Table of Contents
NWA1120 Series User’s Guide
6
Chapter 4
Tutorial.................................................................................................................................................29
4.1 How to Configure the Wireless LAN ..................................................................................................29
4.1.1 Choosing the Wireless Mode ...................................................................................................29
4.1.2 Further Reading .......................................................................................................................29
4.2 How to Configure Multiple Wireless Networks ..................................................................................29
4.2.1 Configure the SSID Profiles .....................................................................................................31
4.2.2 Configure the Standard Network .............................................................................................33
4.2.3 Configure the VoIP Network ....................................................................................................34
4.2.4 Configure the Guest Network ..................................................................................................36
4.2.5 Testing the Wireless Networks ................................................................................................38
4.3 NWA Setup in AP and Wireless Client Modes ..................................................................................38
4.3.1 Scenario ..................................................................................................................................38
4.3.2 Configuring the NWA in MBSSID or Root AP Mode ................................................................39
4.3.3 Configuring the NWA in Wireless Client Mode ........................................................................42
4.3.4 MAC Filter Setup .....................................................................................................................44
4.3.5 Testing the Connection and Troubleshooting ..........................................................................45
Part II: Technical Reference............................................................................47
Chapter 5
Monitor.................................................................................................................................................49
5.1 Overview ...........................................................................................................................................49
5.2 What You Can Do .............................................................................................................................49
5.3 View Logs .........................................................................................................................................49
5.4 Statistics ............................................................................................................................................50
5.5 Association List .................................................................................................................................51
5.6 Channel Usage .................................................................................................................................52
Chapter 6
Wireless LAN.......................................................................................................................................55
6.1 Overview ...........................................................................................................................................55
6.2 What You Can Do in this Chapter .....................................................................................................55
6.3 What You Need To Know ..................................................................................................................56
6.4 Wireless Settings Screen ..................................................................................................................60
6.4.1 Root AP Mode .........................................................................................................................61
6.4.2 Repeater Mode ........................................................................................................................65
6.4.3 Wireless Client Mode ...............................................................................................................68
6.4.4 MBSSID Mode .........................................................................................................................71
6.5 SSID Screen .....................................................................................................................................74
6.5.1 Configuring SSID .....................................................................................................................75

Table of Contents
NWA1120 Series User’s Guide 7
6.6 Wireless Security Screen ..................................................................................................................76
6.6.1 Security: WEP .........................................................................................................................78
6.6.2 Security: WPA, WPA2, WPA2-MIX ..........................................................................................79
6.6.3 Security: WPA-PSK, WPA2-PSK, WPA2-PSK-MIX .................................................................81
6.7 RADIUS Screen ................................................................................................................................82
6.8 Layer-2 Isolation ................................................................................................................................84
6.8.1 Layer-2 Isolation Screen ..........................................................................................................85
6.9 MAC Filter Screen .............................................................................................................................86
6.10 Technical Reference ........................................................................................................................88
6.10.1 Additional Wireless Terms .....................................................................................................89
6.10.2 WMM QoS .............................................................................................................................89
6.10.3 Security Mode Guideline .......................................................................................................90
Chapter 7
LAN ......................................................................................................................................................91
7.1 Overview ...........................................................................................................................................91
7.2 What You Can Do in this Chapter .....................................................................................................91
7.3 What You Need to Know ...................................................................................................................91
7.4 LAN IP Screen ..................................................................................................................................93
Chapter 8
VLAN....................................................................................................................................................95
8.1 Overview ...........................................................................................................................................95
8.1.1 What You Can Do in This Chapter ...........................................................................................95
8.2 What You Need to Know ...................................................................................................................95
8.3 VLAN Screen ....................................................................................................................................96
Chapter 9
System.................................................................................................................................................97
9.1 Overview ...........................................................................................................................................97
9.2 What You Can Do in this Chapter .....................................................................................................97
9.3 What You Need To Know ..................................................................................................................98
9.4 WWW Screen ..................................................................................................................................100
9.5 Certificates Screen ..........................................................................................................................101
9.6 Telnet Screen ..................................................................................................................................102
9.7 SNMP Screen .................................................................................................................................104
9.8 FTP Screen .....................................................................................................................................106
9.9 Technical Reference ........................................................................................................................107
9.9.1 MIB ........................................................................................................................................107
9.9.2 Supported MIBs .....................................................................................................................108
9.9.3 Private-Public Certificates .....................................................................................................108
9.9.4 Certification Authorities ..........................................................................................................108
9.9.5 Checking the Fingerprint of a Certificate on Your Computer .................................................109

Table of Contents
NWA1120 Series User’s Guide
8
Chapter 10
Log Settings...................................................................................................................................... 111
10.1 Overview ....................................................................................................................................... 111
10.2 What You Can Do in this Chapter ................................................................................................. 111
10.3 What You Need To Know ..............................................................................................................112
10.4 Log Settings Screen ......................................................................................................................112
Chapter 11
Maintenance......................................................................................................................................115
11.1 Overview .......................................................................................................................................115
11.2 What You Can Do in this Chapter ..................................................................................................115
11.3 What You Need To Know ...............................................................................................................116
11.4 General Screen .............................................................................................................................116
11.5 Password Screen ..........................................................................................................................117
11.6 Time Screen ..................................................................................................................................118
11.7 Firmware Upgrade Screen ............................................................................................................119
11.8 Configuration File Screen ..............................................................................................................120
11.8.1 Backup Configuration ...........................................................................................................120
11.8.2 Restore Configuration ..........................................................................................................120
11.8.3 Back to Factory Defaults ......................................................................................................121
11.9 Restart Screen ..............................................................................................................................121
Chapter 12
Troubleshooting................................................................................................................................123
12.1 Power, Hardware Connections, and LEDs ....................................................................................123
12.2 NWA Access and Login ................................................................................................................124
12.3 Internet Access .............................................................................................................................125
12.4 Wireless LAN ................................................................................................................................126
Appendix A Setting Up Your Computer’s IP Address ......................................................................129
Appendix B Pop-up Windows, JavaScript and Java Permissions ...................................................157
Appendix C IP Addresses and Subnetting.......................................................................................169
Appendix D IPv6..............................................................................................................................177
Appendix E Wireless LANs..............................................................................................................187
Appendix F Customer Support ........................................................................................................201
Appendix G Legal Information.........................................................................................................207
Index ..................................................................................................................................................213

9
PART I
User’s Guide

10

NWA1120 Series User’s Guide 11
CHAPTER 1
Introducing the NWA
This chapter introduces the main applications and features of the NWA. It also discusses the ways
you can manage your NWA.
1.1 Introducing the NWA
This User’s Guide covers the following models: NWA1121-NI, NWA1123-NI and NWA1123-AC. Your
NWA is an IPv6 wireless AP (Access Point) that can function in several wireless modes. It extends
the range of your existing wired network without additional wiring, providing easy network access
to mobile users.
The NWA controls network access with MAC address filtering and RADIUS server authentication. It
also provides a high level of network traffic security, supporting IEEE 802.1x, Wi-Fi Protected
Access (WPA), WPA2 and WEP data encryption. Its Quality of Service (QoS) features allow you to
prioritize time-sensitive or highly important applications such as VoIP.
Your NWA is easy to install, configure and use. The embedded Web-based configurator enables
simple, straightforward management and maintenance.
See the Quick Start Guide for instructions on how to make hardware connections.
1.1.1 Dual-Band
The NWA1123-NI or NWA1123-AC is a dual-band AP and able to function both 2.4G and 5G
networks at the same time. You could use the 2.4 GHz band for regular Internet surfing and
Table 1 NWA Series Comparison Table
FEATURES NWA1121-NI NWA1123-NI NWA1123-AC
Supported Wireless Standards
IEEE 802.11b
IEEE 802.11g
IEEE 802.11n
IEEE 802.11a
IEEE 802.11b
IEEE 802.11g
IEEE 802.11n
IEEE 802.11a
IEEE 802.11ac
IEEE 802.11b
IEEE 802.11g
IEEE 802.11n
Supported Frequency Bands 2.4 GHz 2.4 GHz
5 GHz 2.4 GHz 5 GHz
Available Security Modes None
WEP
WPA
WPA2
WPA2-MIX
WPA-PSK
WPA2-PSK
WPA2-PSK-MIX
None
WEP
WPA
WPA2
WPA2-MIX
WPA-PSK
WPA2-PSK
WPA2-PSK-MIX
None
WEP
WPA
WPA2
WPA2-MIX
WPA-PSK
WPA2-PSK
WPA2-PSK-MIX
Number of SSID Profiles 8 32 32
Layer-2 Isolation Yes Yes Yes

Chapter 1 Introducing the NWA
NWA1120 Series User’s Guide
12
downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music,
and gaming.
Figure 1 Dual-Band Application
1.2 Wireless Modes
The NWA can be configured to use the following WLAN operating modes:
Applications for each operating mode are shown below.
1.2.1 MBSSID
A Basic Service Set (BSS) is the set of devices forming a single wireless network (usually an access
point and one or more wireless clients). The Service Set IDentifier (SSID) is the name of a BSS. In
Multiple BSS (MBSSID) mode, the NWA provides multiple virtual APs, each forming its own BSS and
using its own individual SSID profile.
You can configure multiple SSID profiles, and have all of them active at any one time.
You can assign different wireless and security settings to each SSID profile. This allows you to
compartmentalize groups of users, set varying access privileges, and prioritize network traffic to
and from certain BSSs.
OPERATING MODE NUMBER OF
SUPPORTED SSID UNIVERSAL REPEATER FUNCTION AP FUNCTION
MBSSID 8 No Yes
Client 1 No No
Root AP 5 Yes Yes
Repeater 1 Yes Yes

Chapter 1 Introducing the NWA
NWA1120 Series User’s Guide 13
To the wireless clients in the network, each SSID appears to be a different access point. As in any
wireless network, clients can associate only with the SSIDs for which they have the correct security
settings.
For example, you might want to set up a wireless network in your office where Internet telephony
(VoIP) users have priority. You also want a regular wireless network for standard users, as well as a
‘guest’ wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority,
SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for
guest users. In this example, the guest user is forbidden access to the wired Land Area Network
(LAN) behind the AP and can access only the Internet.
Figure 2 Multiple BSSs
1.2.2 Wireless Client
The NWA can be used as a wireless client to communicate with an existing network.
Note: The NWA1123-NI or NWA1123-AC is a dual-band AP which contains two different
types of wireless radios to transmit at 2.4 GHz and 5 GHz bands separately and
simultaneously. If one of the NWA1123-NI wireless radio is set to work in client
mode, the other radio will be disabled automatically.

Chapter 1 Introducing the NWA
NWA1120 Series User’s Guide
14
In the figure below, the printer can receive requests from the wired computer clients Aand Bvia
the NWA in Client mode (Z) using only the 2.4 GHz band.
Figure 3 Wireless Client Application

Chapter 1 Introducing the NWA
NWA1120 Series User’s Guide 15
1.2.3 Root AP
In Root AP mode, the NWA (Z) can act as the root AP in a wireless network and also allow repeaters
(Xand Y) to extend the range of its wireless network at the same time. In the figure below, both
clients A, Band Ccan access the wired network through the root AP.
Figure 4 Root AP Application
On the NWA in Root AP mode, you can have multiple SSIDs active for reqular wireless connections
and one SSID for the connection with a repeater (universal repeater SSID). Wireless clients can use
either SSID to associate with the NWA in Root AP mode. A repeater must use the universal repeater
SSID to connect to the NWA in Root AP mode.
When the NWA is in Root AP mode, universal repeater security between the NWA and other
repeater is independent of the security between the wireless clients and the AP or repeater. If you
do not enable universal repeater security, traffic between APs is not encrypted. When universal
repeater security is enabled, both APs and repeaters must use the same pre-shared key. See
Section 6.6 on page 76 for more details.
Unless specified, the term “security settings” refers to the traffic between the wireless clients and
the AP. At the time of writing, universal repeater security is compatible with the NWA only.
1.2.4 Repeater
The NWA can act as a wireless network repeater to extend a root AP’s wireless network range, and
also establish wireless connections with wireless clients.
Using Repeater mode, your NWA can extend the range of the WLAN. In the figure below, the NWA
in Repeater mode (Z) has a wireless connection to the NWA in Root AP mode (X) which is
connected to a wired network and also has a wireless connection to another NWA in Repeater mode
(Y) at the same time. Zand Yact as repeaters that forward traffic between associated wireless

Chapter 1 Introducing the NWA
NWA1120 Series User’s Guide
16
clients and the wired LAN. Clients Aand Baccess the AP and the wired network behind the AP
throught repeaters Zand Y.
Figure 5 Repeater Application
When the NWA is in Repeater mode, universal repeater security between the NWA and other
repeater is independent of the security between the wireless clients and the AP or repeater. If you
do not enable universal repeater security, traffic between APs is not encrypted. When universal
repeater security is enabled, both APs and repeaters must use the same pre-shared key. See
Section 6.6 on page 76 for more details.
Once the security settings of peer sides match one another, the connection between devices is
made.
At the time of writing, universal repeater security is compatible with the NWA only.
1.3 Ways to Manage the NWA
Use any of the following methods to manage the NWA.
• Web Configurator. This is recommended for everyday management of the NWA using a
(supported) web browser.
• FTP (File Transfer Protocol) for firmware upgrades and configuration backup and restore.
• SNMP (Simple Network Management Protocol). The device can be monitored by an SNMP
manager.

Chapter 1 Introducing the NWA
NWA1120 Series User’s Guide 17
1.4 Configuring Your NWA’s Security Features
Your NWA comes with a variety of security features. This section summarizes these features and
provides links to sections in the User’s Guide to configure security settings on your NWA. Follow the
suggestions below to improve security on your NWA and network.
1.4.1 Control Access to Your Device
Ensure only people with permission can access your NWA.
• Control physical access by locating devices in secure areas, such as locked rooms. Most NWAs
have a reset button. If an unauthorized person has access to the reset button, they can then
reset the device’s password to its default password, log in and reconfigure its settings.
• Change any default passwords on the NWA, such as the password used for accessing the NWA’s
web configurator (if it has a web configurator). Use a password with a combination of letters and
numbers and change your password regularly. Write down the password and put it in a safe
place.
•SeeSection 11.5 on page 117 for instructions on changing your password.
• Configure remote management to control who can manage your NWA. See Chapter 9 on page 97
for more information. If you enable remote management, ensure you have enabled remote
management only on the IP addresses, services or interfaces you intended and that other remote
management settings are disabled.
1.4.2 Wireless Security
Wireless devices are especially vulnerable to attack. Take the following measures to improve
wireless security.
• Enable wireless security on your NWA. Choose the most secure encryption method that all
devices on your network support. See Section 6.6 on page 76 for directions on configuring
encryption. If you have a RADIUS server, enable IEEE 802.1x or WPA(2) user identification on
your network so users must log in. This method is more common in business environments.
• Hide your wireless network name (SSID). The SSID can be regularly broadcast and unauthorized
users may use this information to access your network. See Section 6.5 on page 74 for directions
on using the web configurator to hide the SSID.
• Enable the MAC filter to allow only trusted users to access your wireless network or deny
unwanted users access based on their MAC address. See Section 6.9 on page 86 for directions on
configuring the MAC filter.
1.5 Good Habits for Managing the NWA
Do the following things regularly to make the NWA more secure and to manage it more effectively.
• Change the password. Use a password that’s not easy to guess and that consists of different
types of characters, such as numbers and letters.
• Write down the password and put it in a safe place.

Chapter 1 Introducing the NWA
NWA1120 Series User’s Guide
18
• Back up the configuration (and make sure you know how to restore it). Restoring an earlier
working configuration may be useful if the device becomes unstable or even crashes. If you
forget your password, you will have to reset the NWA to its factory default settings. If you backed
up an earlier configuration file, you would not have to totally re-configure the NWA. You could
simply restore your last configuration.
1.6 Hardware Connections
See your Quick Start Guide for information on making hardware connections.
1.7 LED
Figure 6 LED
Table 2 LED
COLOR STATUS DESCRIPTION
Amber On There is system error and the NWA cannot boot up, or the NWA doesn’t
have an Ethernet connection with the LAN.
Flashing The NWA is starting up.
Off The NWA is receiving power and ready for use.
Green On The WLAN is active.
Blinking The WLAN is active, and transmitting or receiving data.
Off The WLAN is not active.

NWA1120 Series User’s Guide 19
CHAPTER 2
Introducing the Web Configurator
This chapter describes how to access the NWA’s web configurator and provides an overview of its
screens.
2.1 Overview
The NWA Web Configurator allows easy management using an Internet browser.
In order to use the Web Configurator, you must:
•Use Internet Explorer 7.0 and later versions, Mozilla Firefox 9.0 and later versions, Safari 4.0 and
later versions, or Google Chrome 10.0 and later versions.
•Allow pop-up windows.
•Enable JavaScript (enabled by default).
•Enable Java permissions (enabled by default).
•Enable cookies.
The recommended screen resolution is 1024 x 768 pixels and higher.
2.2 Accessing the Web Configurator
1Make sure your hardware is properly connected and prepare your computer or computer network to
connect to the NWA (refer to the Quick Start Guide).
2Launch your web browser.

Chapter 2 Introducing the Web Configurator
NWA1120 Series User’s Guide
20
3Type "192.168.1.2" as the URL (default). The login screen appears.
Figure 7 The Login Screen
4Type “admin” as the (default) username and “1234” as the (default) password. Click Login.
5You should see a screen asking you to change your password (highly recommended) as shown
next. Type a new password (and retype it to confirm) then click Apply. Alternatively, click Ignore.
Note: If you do not change the password, the following screen appears every time you
login.
Figure 8 Change Password Screen
You should now see the Dashboard screen. See Chapter 2 on page 19 for details about the
Dashboard screen.