ZyXEL Communications ZyAIR G-3000 User manual

ZyAIR G-3000
802.11g Business Access Point/Bridge/Repeater
User’s Guide
Version 3.50
September 2004

ZyAIR G-3000 User’s Guide
Copyright 2
Copyright
Copyright © 2004 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

ZyAIR G-3000 User’s Guide
3 Federal Communications Commission (FCC) Interference Statement
Federal Communications
Commission (FCC) Interference
Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause
undesired operations.
This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.
Certifications
Go to www.zyxel.com
1Select your product from the drop-down list box on the ZyXEL home page to go to that
product's page.
2Select the certification you wish to view from this page

ZyAIR G-3000 User’s Guide
ZyXEL Limited Warranty 4
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind of character to the
purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.
Safety Warnings
1To reduce the risk of fire, use only No. 26 AWG or larger telephone wire.
2Do not use this product near water, for example, in a wet basement or near a swimming
pool.
3Avoid using this product during an electrical storm. There may be a remote risk of
electric shock from lightening.
This product has been designed for the WLAN 2.4 GHz network throughout the EC region and
Switzerland, with restrictions in France.

ZyAIR G-3000 User’s Guide
5Customer Support
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
•
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONEAWEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE
WORLDWIDE
[email protected] [phone] www.zyxel.com
www.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Taiwa n
[email protected] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
NORTH
AMERICA
[email protected] [phone]
[phone]
www.us.zyxel.com ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] ftp.us.zyxel.com
GERMANY
[email protected] [phone] www.zyxel.de ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[email protected] [phone]
FRANCE
[email protected] [phone] www.zyxel.fr Z yXEL F r a n c e
1 rue des Vergers
Bat. 1 / C
69760 Limonest
France
[phone]
SPAIN
[email protected] [phone] www.zyxel.es Z y X E L C o m m u n i c a t i o n s
A l e j a n d r o V i l l e g a s 3 3
1 º , 2 8 0 4 3 M a d r i d
Spain
[email protected] [phone]
DENMARK
[email protected] [phone] www.zyxel.dk Z y X E L C o m m u n i c a t i o n s A / S
Columbu sve j 5
2860 Soeborg
Denmark
[email protected] [phone]
NORWAY
[email protected] [phone] www.zyxel.no Z y X E L C o m m u n i c a t i o n s A / S
Nils Hansens vei 13
0667 Oslo
Norway
[email protected] [phone]
SWEDEN
[email protected] [phone] www.zyxel.se ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone]

ZyAIR G-3000 User’s Guide
Customer Support 6
FINLAND
[email protected] [phone] www.zyxel.fi Z y X E L C o m m u n i c a t i o n s O y
Malminkaari 10
00700 Helsinki
Finland
[email protected] [phone]
a. “+” is the (prefix) number you enter to make an international telephone call.

ZyAIR G-3000 User’s Guide
Table of Contents 8
Table of Contents
Copyright .................................................................................................................. 2
Federal Communications Commission (FCC) Interference Statement ............... 3
ZyXEL Limited Warranty.......................................................................................... 4
Customer Support.................................................................................................... 5
Preface .................................................................................................................... 24
Chapter 1
Getting to Know Your ZyAIR ................................................................................. 28
1.1 Introducing the ZyAIR .......................................................................................28
1.2 ZyAIR Features ..................................................................................................28
1.2.1 Physical Features .....................................................................................28
1.2.1.1 10/100M Auto-negotiating Ethernet/Fast Ethernet Interface ...........28
1.2.1.2 10/100M Auto-crossover Ethernet/Fast Ethernet Interface .............28
1.2.1.3 Reset Button ...................................................................................28
1.2.1.4 ZyAIR LED ......................................................................................29
1.2.1.5 Bridge/Repeater LED ......................................................................29
1.2.1.6 Power over Ethernet (PoE) ............................................................29
1.2.2 Firmware Features ....................................................................................29
1.2.2.1 Dual WLAN Interface ......................................................................29
1.2.2.2 Wi-Fi Protected Access ...................................................................30
1.2.2.3 VLAN ...............................................................................................30
1.2.2.4 WDS Functionality ...........................................................................30
1.2.2.5 802.11b Wireless LAN Standard .....................................................30
1.2.2.6 802.11g Wireless LAN Standard .....................................................31
1.2.2.7 STP (Spanning Tree Protocol) / RSTP (Rapid STP) .......................31
1.2.2.8 Limit the number of Client Connections ..........................................31
1.2.2.9 SSL Passthrough ............................................................................32
1.2.2.10 Brute-Force Password Guessing Protection ................................32
1.2.2.11 Wireless LAN MAC Address Filtering ............................................32
1.2.2.12 WEP Encryption ............................................................................32
1.2.2.13 IEEE 802.1x Network Security ......................................................32
1.2.2.14 SNMP ............................................................................................32
1.2.2.15 Full Network Management ............................................................32

ZyAIR G-3000 User’s Guide
9Table of Contents
1.2.2.16 Logging and Tracing ......................................................................33
1.2.2.17 Embedded FTP and TFTP Servers ...............................................33
1.2.2.18 Wireless Association List ..............................................................33
1.2.2.19 Wireless LAN Channel Usage .......................................................33
1.3 Applications for the ZyAIR ..................................................................................33
1.3.1 Dual WLAN Interface ................................................................................33
1.3.2 Access Point .............................................................................................34
1.3.3 AP + Bridge ..............................................................................................35
1.3.4 Bridge / Repeater ......................................................................................36
Chapter 2
Introducing the Web Configurator........................................................................ 38
2.1 Accessing the ZyAIR Web Configurator .............................................................38
2.2 Resetting the ZyAIR ...........................................................................................39
2.2.1 Method of Restoring Factory-Defaults ......................................................39
2.3 Navigating the ZyAIR Web Configurator ............................................................40
Chapter 3
Wizard Setup .......................................................................................................... 42
3.1 Wizard Setup Overview ......................................................................................42
3.1.1 Channel ....................................................................................................42
3.1.2 ESS ID ......................................................................................................42
3.1.3 WEP Encryption ........................................................................................42
3.2 Wizard Setup: General Setup ............................................................................43
3.3 Wizard Setup: Wireless LAN ..............................................................................44
3.4 Wizard Setup: IP Address ..................................................................................45
3.4.1 IP Address Assignment ............................................................................45
3.4.2 IP Address and Subnet Mask ...................................................................46
3.5 Basic Setup Complete ........................................................................................48
Chapter 4
System Screens ..................................................................................................... 50
4.1 System Overview ...............................................................................................50
4.2 Configuring General Setup .................................................................................50
4.3 Configuring Password ........................................................................................51
4.4 Configuring Time Setting ...................................................................................52
Chapter 5
Wireless Configuration and Roaming ................................................................. 56
5.1 Wireless LAN Overview .....................................................................................56
5.1.1 IBSS ..........................................................................................................56
5.1.2 BSS ...........................................................................................................56
5.1.3 ESS ...........................................................................................................57

ZyAIR G-3000 User’s Guide
Table of Contents 10
5.2 Wireless LAN Basics ..........................................................................................58
5.2.1 RTS/CTS .................................................................................................58
5.2.2 Fragmentation Threshold ..........................................................................59
5.3 Spanning Tree Protocol (STP) ...........................................................................60
5.3.1 Rapid STP ................................................................................................60
5.3.2 STP Terminology ......................................................................................60
5.3.3 How STP Works .......................................................................................61
5.3.4 STP Port States ........................................................................................61
5.4 Preamble ...........................................................................................................61
5.5 Configuring Wireless ..........................................................................................62
5.5.1 Access Point Mode ...................................................................................62
5.5.2 Bridge/Repeater Mode ..............................................................................65
5.5.3 AP+Bridge Mode ......................................................................................69
5.6 Configuring Roaming .........................................................................................71
5.6.1 Requirements for Roaming .......................................................................72
Chapter 6
Wireless Security ................................................................................................... 74
6.1 Wireless Security Overview ...............................................................................74
6.2 WEP Overview ...................................................................................................74
6.2.1 Data Encryption .......................................................................................75
6.2.2 Authentication ...........................................................................................75
6.3 Configuring WEP Encryption ..............................................................................76
6.4 MAC Filter ..........................................................................................................78
6.5 802.1x Overview ................................................................................................80
6.6 Introduction to Local User Database ..................................................................80
6.7 Introduction to RADIUS ......................................................................................80
6.7.1 Types of RADIUS Messages ....................................................................80
6.8 EAP Authentication Overview ............................................................................81
6.9 Dynamic WEP Key Exchange ............................................................................82
6.10 Introduction to WPA .........................................................................................83
6.10.1 User Authentication ...............................................................................83
6.10.2 Encryption ..............................................................................................83
6.11 WPA-PSK Application Example ........................................................................84
6.12 WPA with RADIUS Application Example ..........................................................84
6.13 Security Parameters Summary ........................................................................86
6.14 Wireless Client WPA Supplicants .....................................................................87
6.15 Configuring 802.1x and WPA ...........................................................................87
6.16 Authentication Required : 802.1x .....................................................................88
6.17 Authentication Required : WPA ........................................................................90
6.18 Authentication Required: WPA-PSK ................................................................91
6.19 Configuring Local User Database ....................................................................92
6.20 Configuring RADIUS ........................................................................................94

ZyAIR G-3000 User’s Guide
11 Table of Contents
Chapter 7
VLAN ....................................................................................................................... 96
7.1 VLAN ..................................................................................................................96
7.1.1 Management VLAN ID ..............................................................................96
7.2 Configuring VLAN ..............................................................................................96
Chapter 8
IP Screen................................................................................................................. 98
8.1 Factory Ethernet Defaults ..................................................................................98
8.2 TCP/IP Parameters ............................................................................................98
8.2.1 IP Address and Subnet Mask ...................................................................98
8.2.2 WAN IP Address Assignment ...................................................................98
8.3 Configuring IP ....................................................................................................99
Chapter 9
Log Screens.......................................................................................................... 102
9.1 Configuring View Log .......................................................................................102
9.2 Configuring Log Settings ..................................................................................103
Chapter 10
Maintenance ......................................................................................................... 106
10.1 Maintenance Overview ...................................................................................106
10.2 System Status Screen ....................................................................................106
10.2.1 System Statistics ...................................................................................107
10.3 Association List ..............................................................................................108
10.4 Channel Usage ..............................................................................................109
10.5 F/W Upload Screen ........................................................................................ 111
10.6 Configuration Screen .....................................................................................113
10.6.1 Backup Configuration ...........................................................................114
10.6.2 Restore Configuration ..........................................................................114
10.6.3 Back to Factory Defaults .......................................................................116
10.7 Restart Screen ...............................................................................................116
Chapter 11
Introducing the SMT ............................................................................................ 118
11.1 Connect to your ZyAIR Using Telnet ..............................................................118
11.2 Changing the System Password ....................................................................118
11.3 ZyAIR SMT Menu Overview Example ............................................................119
11.4 Navigating the SMT Interface .........................................................................120
11.4.1 System Management Terminal Interface Summary ..............................121