ZyXEL Communications ZyAIR G-5100 User manual

ZyAIR G-5100
Outdoor 802.11g Business Access Point/Bridge/Repeater
User’s Guide
Version 3.50
11/2004

ZyAIR G-5100 User’s Guide
Copyright 2
Copyright
Copyright © 2004 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

ZyAIR G-5100 User’s Guide
3 Federal Communications Commission (FCC) Interference Statement
Federal Communications
Commission (FCC) Interference
Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause
undesired operations.
This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.
Certifications
Go to www.zyxel.com
1Select your product from the drop-down list box on the ZyXEL home page to go to that
product's page.
2Select the certification you wish to view from this page

ZyAIR G-5100 User’s Guide
ZyXEL Limited Warranty 4
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind of character to the
purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.

ZyAIR G-5100 User’s Guide
5Customer Support
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONEAWEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE
WORLDWIDE
[email protected] [phone] www.zyxel.com
www.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Taiwa n
[email protected] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
NORTH
AMERICA
[email protected] [phone]
[phone]
www.us.zyxel.com ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] ftp.us.zyxel.com
GERMANY
[email protected] [phone] www.zyxel.de ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[email protected] [phone]
FRANCE
[email protected] [phone] www.zyxel.fr Z yXEL F r a n c e
1 rue des Vergers
Bat. 1 / C
69760 Limonest
France
[phone]
SPAIN
[email protected] [phone] www.zyxel.es Z y X E L C o m m u n i c a t i o n s
A l e j a n d r o V i l l e g a s 3 3
1 º , 2 8 0 4 3 M a d r i d
Spain
[email protected] [phone]
DENMARK
[email protected] [phone] www.zyxel.dk Z y X E L C o m m u n i c a t i o n s A / S
Columbu svej 5
2860 Soeborg
Denmark
[email protected] [phone]
NORWAY
[email protected] [phone] www.zyxel.no Z y X E L C o m m u n i c a t i o n s A / S
Nils Hansens vei 13
0667 Oslo
Norway
[email protected] [phone]
SWEDEN
[email protected] [phone] www.zyxel.se ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone]
FINLAND
[email protected] [phone] www.zyxel.fi Z y X E L C o m m u n i c a t i o n s O y
Malminkaari 10
00700 Helsinki
Finland
[email protected] [phone]
a. “+” is the (prefix) number you enter to make an international telephone call.

ZyAIR G-5100 User’s Guide
Table of Contents 6
Table of Contents
Copyright .................................................................................................................. 2
Federal Communications Commission (FCC) Interference Statement ............... 3
ZyXEL Limited Warranty.......................................................................................... 4
Customer Support.................................................................................................... 5
Preface .................................................................................................................... 22
Chapter 1
Getting to Know Your ZyAIR ................................................................................. 26
1.1 Introducing the ZyAIR .......................................................................................26
1.2 ZyAIR Features ..................................................................................................26
1.3 Applications for the ZyAIR ..................................................................................30
1.3.1 Access Point .............................................................................................31
1.3.2 AP + Bridge ..............................................................................................31
1.3.3 Bridge / Repeater ......................................................................................32
Chapter 2
Introducing the Web Configurator........................................................................ 34
2.1 Accessing the ZyAIR Web Configurator .............................................................34
2.2 Resetting the ZyAIR ...........................................................................................35
2.3 Navigating the ZyAIR Web Configurator ............................................................36
Chapter 3
Wizard Setup .......................................................................................................... 40
3.1 Wizard Setup Overview ......................................................................................40
3.1.1 Channel ....................................................................................................40
3.1.2 SS ID ........................................................................................................40
3.1.3 WEP Encryption ........................................................................................40
3.2 Wizard Setup: General Setup ............................................................................41
3.3 Wizard Setup: Wireless LAN ..............................................................................42
3.4 Wizard Setup: IP Address ..................................................................................43
3.4.1 IP Address Assignment ............................................................................43
3.4.2 IP Address and Subnet Mask ...................................................................44
3.5 Basic Setup Complete ........................................................................................46

ZyAIR G-5100 User’s Guide
7Table of Contents
Chapter 4
System Screens ..................................................................................................... 48
4.1 System Overview ...............................................................................................48
4.2 Configuring General Setup .................................................................................48
4.3 Configuring Password ........................................................................................49
4.4 Configuring Time Setting ...................................................................................50
Chapter 5
Wireless Configuration and Roaming ................................................................. 54
5.1 Wireless LAN Overview .....................................................................................54
5.1.1 IBSS ..........................................................................................................54
5.1.2 BSS ...........................................................................................................54
5.1.3 ESS ...........................................................................................................55
5.2 Wireless LAN Basics ..........................................................................................56
5.2.1 RTS/CTS .................................................................................................56
5.2.2 Fragmentation Threshold ..........................................................................57
5.3 Spanning Tree Protocol (STP) ...........................................................................58
5.3.1 Rapid STP ................................................................................................58
5.3.2 STP Terminology ......................................................................................58
5.3.3 How STP Works .......................................................................................59
5.3.4 STP Port States ........................................................................................59
5.4 Configuring Wireless ..........................................................................................59
5.4.1 Access Point Mode ...................................................................................60
5.4.2 Bridge/Repeater Mode ..............................................................................62
5.4.3 AP+Bridge Mode ......................................................................................66
5.5 Configuring Roaming .........................................................................................68
5.5.1 Requirements for Roaming .......................................................................69
Chapter 6
Wireless Security ................................................................................................... 72
6.1 Wireless Security Overview ...............................................................................72
6.2 WEP Overview ...................................................................................................72
6.2.1 Data Encryption .......................................................................................73
6.2.2 Authentication ...........................................................................................73
6.3 Configuring WEP Encryption ..............................................................................74
6.4 MAC Filter ..........................................................................................................76
6.5 IEEE 802.1x Overview .......................................................................................78
6.6 Introduction to Internal RADIUS Server .............................................................78
6.7 Introduction to RADIUS ......................................................................................78
6.7.1 Types of RADIUS Messages ....................................................................78
6.8 EAP Authentication Overview ............................................................................79
6.9 Dynamic WEP Key Exchange ............................................................................80
6.10 Introduction to WPA .........................................................................................81

ZyAIR G-5100 User’s Guide
Table of Contents 8
6.10.1 User Authentication ...............................................................................81
6.10.2 Encryption ..............................................................................................81
6.11 WPA-PSK Application Example ........................................................................81
6.12 WPA with RADIUS Application Example ..........................................................82
6.13 Security Parameters Summary ........................................................................83
6.14 Wireless Client WPA Supplicants .....................................................................84
6.15 Configuring 802.1x and WPA ...........................................................................84
6.16 Authentication Required: 802.1x ......................................................................85
6.17 Authentication Required: WPA .........................................................................89
6.18 Authentication Required: WPA-PSK ................................................................91
Chapter 7
IP Screen................................................................................................................. 94
7.1 Factory Ethernet Defaults ..................................................................................94
7.2 TCP/IP Parameters ............................................................................................94
7.2.1 IP Address and Subnet Mask ...................................................................94
7.2.2 WAN IP Address Assignment ...................................................................94
7.3 Configuring IP ....................................................................................................95
Chapter 8
Authentication Server............................................................................................ 98
8.1 Authentication Server Overview .........................................................................98
8.2 Configuring Authentication Server .....................................................................98
8.3 Configuring Trusted AP ......................................................................................99
8.4 Configuring Trusted Users ...............................................................................100
Chapter 9
Certificates............................................................................................................ 102
9.1 Certificates Overview .......................................................................................102
9.1.1 Advantages of Certificates ......................................................................103
9.2 Self-signed Certificates ....................................................................................103
9.3 Configuration Summary ...................................................................................103
9.4 My Certificates .................................................................................................103
9.5 Certificate File Formats ....................................................................................105
9.6 Importing a Certificate ......................................................................................106
9.7 Creating a Certificate .......................................................................................107
9.8 My Certificate Details .......................................................................................110
9.9 Trusted CAs .....................................................................................................113
9.10 Importing a Trusted CA’s Certificate ...............................................................115
9.11 Trusted CA Certificate Details ........................................................................ 116

ZyAIR G-5100 User’s Guide
9Table of Contents
Chapter 10
Log Screens.......................................................................................................... 120
10.1 Configuring View Log .....................................................................................120
10.2 Configuring Log Settings ................................................................................122
Chapter 11
Maintenance ......................................................................................................... 126
11.1 Maintenance Overview ...................................................................................126
11.2 System Status Screen ....................................................................................126
11.2.1 System Statistics ...................................................................................127
11.3 Association List ..............................................................................................128
11.4 Channel Usage ...............................................................................................129
11.5 F/W Upload Screen ........................................................................................130
11.6 Configuration Screen ......................................................................................132
11.6.1 Backup Configuration ............................................................................133
11.6.2 Restore Configuration ..........................................................................134
11.6.3 Back to Factory Defaults .......................................................................135
11.7 Restart Screen ................................................................................................135
Chapter 12
Introducing the SMT ............................................................................................ 138
12.1 Introduction to the SMT ..................................................................................138
12.2 Accessing the SMT via the Console Port .......................................................138
12.2.1 Initial Screen .........................................................................................138
12.2.2 Entering the Password ..........................................................................139
12.3 Accessing the SMT via Telnet ........................................................................139
12.4 Navigating the SMT Interface .........................................................................140
12.4.1 System Management Terminal Interface Summary ..............................141
12.4.2 SMT Menus at a Glance .......................................................................141
12.5 Changing the System Password ....................................................................142
Chapter 13
General Setup ....................................................................................................... 144
13.1 General Setup ................................................................................................144
13.1.1 Procedure To Configure Menu 1 ...........................................................144
Chapter 14
LAN Setup ............................................................................................................. 146
14.1 LAN Setup ......................................................................................................146
14.2 TCP/IP Ethernet Setup ...................................................................................146
14.3 Wireless LAN Setup .......................................................................................147
14.3.1 Configuring MAC Address Filter ...........................................................150
14.3.2 Configuring Roaming ............................................................................152

ZyAIR G-5100 User’s Guide
Table of Contents 10
14.3.3 Configuring Bridge Link ........................................................................154
Chapter 15
Dial-in User Setup ................................................................................................ 158
15.1 Dial-in User Setup ..........................................................................................158
Chapter 16
SNMP Configuration ............................................................................................ 160
16.1 About SNMP ..................................................................................................160
16.2 Supported MIBs ............................................................................................161
16.3 SNMP Configuration ......................................................................................161
16.4 SNMP Traps ...................................................................................................162
Chapter 17
System Security ................................................................................................... 164
17.1 System Security .............................................................................................164
17.1.1 System Password .................................................................................164
17.1.2 Configuring External RADIUS Server ...................................................164
17.1.3 802.1x ...................................................................................................166
Chapter 18
System Information and Diagnosis .................................................................... 170
18.1 System Status ................................................................................................170
18.2 System Information ........................................................................................172
18.2.1 System Information ...............................................................................172
18.2.2 Console Port Speed ..............................................................................173
18.3 Log and Trace ................................................................................................173
18.3.1 Viewing Error Log .................................................................................174
18.4 Diagnostic ......................................................................................................174
Chapter 19
Firmware and Configuration File Maintenance ................................................. 176
19.1 Filename Conventions ...................................................................................176
19.2 Backup Configuration .....................................................................................177
19.2.1 Backup Configuration Using FTP .........................................................177
19.2.2 Using the FTP command from the DOS Prompt ..................................178
19.2.3 Backup Configuration Using TFTP .......................................................179
19.2.4 Example: TFTP Command ...................................................................179
19.2.5 Backup Via Console Port ......................................................................180
19.3 Restore Configuration ...................................................................................181
19.3.1 Restore Using FTP ...............................................................................181
19.4 Uploading Firmware and Configuration Files .................................................182
19.4.1 Firmware Upload ..................................................................................182