ZyXEL Communications ZyAIR Wireless Gateway Series User manual

ZyAIR
Access Point Series
User's Guide
Version 3.50
March 2004

ZyAIR Access Point Series User’s Guide
ii Copyright
Copyright
Copyright © 2003 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a
retrieval system, translated into any language, or transmitted in any form or by any means, electronic,
mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written
permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or software
described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
ZyXEL further reserves the right to make changes in any products described herein without notice. This
publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc.
Other trademarks mentioned in this publication are used for identification purposes only and may be
properties of their respective owners.

ZyAIR Access Point Series User’s Guide
FCC Statement iii
Federal Communications Commission
(FCC) Interference Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause undesired
operations.
This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to
Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency
energy, and if not installed and used in accordance with the instructions, may cause harmful interference to
radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of
the following measures:
1. Reorient or relocate the receiving antenna.
2. Increase the separation between the equipment and the receiver.
3. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
4. Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance could void the
user's authority to operate the equipment.
Certifications
1. Go to www.zyxel.com
2. Select your product from the drop-down list box on the ZyXEL home page to go to that product's page.
3. Select the certification you wish to view from this page

ZyAIR Access Point Series User’s Guide
iv ZyXEL Warranty
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials
or workmanship for a period of up to two years from the date of purchase. During the warranty period, and
upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or
materials, ZyXEL will, at its discretion, repair or replace the defective products or components without
charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or
components to proper operating condition. Any replacement will consist of a new or re-manufactured
functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL. This warranty
shall not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected
to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This
warranty is in lieu of all other warranties, express or implied, including any implied warranty of
merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect
or consequential damages of any kind of character to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material
Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit
be insured when shipped. Any returned products without proof of purchase or those with an out-dated
warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts
and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address,
Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary
from country to country.
Safety Warnings
1. To reduce the risk of fire, use only No. 26 AWG or larger telephone wire.
2. Do not use this product near water, for example, in a wet basement or near a swimming pool.
3. Avoid using this product during an electrical storm. There may be a remote risk of electric shock from
lightening.

ZyAIR Access Point Series User’s Guide
Customer Support v
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
SUPPORT E-MAIL TELEPHONE1WEB SITEMETHOD
LOCATION SALES E-MAIL FAX1FTP SITE
REGULAR MAIL
[email protected]m.tw [phone] www.zyxel.com
www.europe.zyxel.com
WORLDWIDE
[e-mail] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Taiwan
[email protected]m [phone]
[phone]
www.us.zyxel.comNORTH
AMERICA
[e-mail] [phone] ftp.us.zyxel.com
ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] www.zyxel.deGERMANY
[e-mail] [phone]
ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[phone]FRANCE [email protected]
[phone]
www.zyxel.fr ZyXEL France
1 rue des Vergers
Bat. 1 / C
69760 Limonest
France
[email protected] [phone]SPAIN
[e-mail] [phone]
www.zyxel.es ZyXEL Communications
Alejandro Villegas 33
1º, 28043 Madrid
Spain
[email protected] [phone] www.zyxel.dkDENMARK
[e-mail] [phone]
ZyXEL Communications A/S
Columbusvej 5
2860 Soeborg
Denmark
[email protected] [phone] www.zyxel.noNORWAY
[e-mail] [phone]
ZyXEL Communications A/S
Nils Hansens vei 13
0667 Oslo
Norway
1“+” is the (prefix) number you enter to make an international telephone call.

ZyAIR Access Point Series User’s Guide
vi Customer Support
SUPPORT E-MAIL TELEPHONE1WEB SITEMETHOD
LOCATION SALES E-MAIL FAX1FTP SITE
REGULAR MAIL
[email protected] [phone] www.zyxel.seSWEDEN
[e-mail] [phone]
ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone] www.zyxel.fiFINLAND
[e-mail] [phone]
ZyXEL Communications Oy
Malminkaari 10
00700 Helsinki
Finland

ZyAIR Access Point Series User’s Guide
Table of Contents vii
Table of Contents
Copyright.........................................................................................................................................................ii
Federal Communications Commission (FCC) Interference Statement .....................................................iii
ZyXEL Limited Warranty.............................................................................................................................iv
Customer Support...........................................................................................................................................v
List of Figures................................................................................................................................................xii
List of Tables..................................................................................................................................................xv
Preface..........................................................................................................................................................xvii
OVERVIEW .................................................................................................................................................... I
Chapter 1 Getting to Know Your ZyAIR ...................................................................................................1-1
1.1 Introducing the ZyAIR Access Point Series...............................................................................1-1
1.2 ZyAIR Features..........................................................................................................................1-1
1.3 Applications for the ZyAIR........................................................................................................1-6
1.3.1 Access Point.......................................................................................................................1-7
1.3.2 Multiple ESS ......................................................................................................................1-7
1.3.3 AP + Bridge .......................................................................................................................1-8
1.3.4 Bridge / Repeater................................................................................................................1-9
Chapter 2 Introducing the Web Configurator...........................................................................................2-1
2.1 Accessing the ZyAIR Web Configurator ...................................................................................2-1
2.2 Resetting the ZyAIR ..................................................................................................................2-2
2.2.1 Method of Restoring Factory-Defaults...............................................................................2-2
2.3 Navigating the ZyAIR Web Configurator..................................................................................2-3
Chapter 3 Wizard Setup ..............................................................................................................................3-1
3.1 Wizard Setup Overview .............................................................................................................3-1
3.1.1 Channel ..............................................................................................................................3-1
3.1.2 ESS ID................................................................................................................................3-1
3.1.3 WEP Encryption.................................................................................................................3-1
3.2 Wizard Setup: General Setup .....................................................................................................3-2
3.3 Wizard Setup: Wireless LAN.....................................................................................................3-3
3.4 Wizard Setup: IP Address ..........................................................................................................3-4
3.4.1 IP Address Assignment ......................................................................................................3-5
3.4.2 IP Address and Subnet Mask..............................................................................................3-5
3.5 Basic Setup Complete ................................................................................................................3-7
SYSTEM, WIRELESS, VLAN AND IP.......................................................................................................II
Chapter 4 System Screens ...........................................................................................................................4-1
4.1 System Overview .......................................................................................................................4-1
4.2 Configuring General Setup.........................................................................................................4-1
4.3 Configuring Password................................................................................................................4-2
4.4 Configuring Time Setting...........................................................................................................4-3
Chapter 5 Wireless Configuration and Roaming ......................................................................................5-1

ZyAIR Access Point Series User’s Guide
viii Table of Contents
5.1 Wireless LAN Overview............................................................................................................5-1
5.1.1 IBSS...................................................................................................................................5-1
5.1.2 BSS ....................................................................................................................................5-1
5.1.3 ESS ....................................................................................................................................5-2
5.2 Wireless LAN Basics.................................................................................................................5-3
5.2.1 RTS/CTS............................................................................................................................5-3
5.2.2 Fragmentation Threshold ...................................................................................................5-4
5.3 Spanning Tree Protocol (STP) ...................................................................................................5-5
5.3.1 Rapid STP..........................................................................................................................5-5
5.3.2 STP Terminology...............................................................................................................5-5
5.3.3 How STP Works ................................................................................................................5-6
5.3.4 STP Port States ..................................................................................................................5-6
5.4 Configuring Wireless.................................................................................................................5-6
5.4.1 Access Point Mode ............................................................................................................5-7
5.4.2 Multiple ESS Mode............................................................................................................5-9
5.4.3 Bridge/Repeater Mode .......................................................................................................5-9
5.4.4 AP+Bridge Mode .............................................................................................................5-12
5.5 Configuring Roaming ..............................................................................................................5-14
5.5.1 Requirements for Roaming ..............................................................................................5-15
Chapter 6 Wireless Security........................................................................................................................6-1
6.1 Wireless Security Overview.......................................................................................................6-1
6.2 WEP Overview ..........................................................................................................................6-1
6.2.1 Data Encryption .................................................................................................................6-2
6.2.2 Authentication....................................................................................................................6-2
6.3 Configuring WEP Encryption....................................................................................................6-3
6.4 MAC Filter.................................................................................................................................6-6
6.5 802.1x Overview........................................................................................................................6-7
6.6 Introduction to Local User Database..........................................................................................6-7
6.7 Introduction to RADIUS............................................................................................................6-7
6.7.1 EAP Authentication Overview...........................................................................................6-8
6.8 Dynamic WEP Key Exchange ...................................................................................................6-9
6.9 Introduction to WPA................................................................................................................6-10
6.9.1 User Authentication .........................................................................................................6-10
6.9.2 Encryption........................................................................................................................6-10
6.10 WPA-PSK Application Example .............................................................................................6-11
6.11 WPA with RADIUS Application Example..............................................................................6-11
6.12 Security Parameters Summary.................................................................................................6-12
6.13 Wireless Client WPA Supplicants ...........................................................................................6-13
6.14 Configuring 802.1x and WPA .................................................................................................6-13
6.14.1 Authentication Required: 802.1x .....................................................................................6-14
6.14.2 Authentication Required: WPA .......................................................................................6-17

ZyAIR Access Point Series User’s Guide
Table of Contents ix
6.14.3 Authentication Required: WPA-PSK...............................................................................6-19
6.15 Configuring Local User Database ............................................................................................6-21
6.16 Configuring RADIUS ..............................................................................................................6-23
Chapter 7 Multiple ESS and VLAN ...........................................................................................................7-1
7.1 Wireless LAN Infrastructures ....................................................................................................7-1
7.1.1 Multiple ESS ......................................................................................................................7-1
7.1.2 Notes on Multiple-ESS.......................................................................................................7-1
7.1.3 Multiple ESS Example .......................................................................................................7-1
7.2 VLAN.........................................................................................................................................7-2
7.2.1 Management VLAN ID......................................................................................................7-2
7.2.2 Multi-ESS with VLAN Example .......................................................................................7-2
7.3 Configuring Multiple ESS..........................................................................................................7-3
7.3.1 Edit ESS .............................................................................................................................7-5
7.3.2 MAC Filter Summary.........................................................................................................7-7
7.4 Configuring VLAN ....................................................................................................................7-8
Chapter 8 IP Screen .....................................................................................................................................8-1
8.1 Factory Ethernet Defaults...........................................................................................................8-1
8.2 TCP/IP Parameters .....................................................................................................................8-1
8.2.1 IP Address and Subnet Mask..............................................................................................8-1
8.2.2 WAN IP Address Assignment............................................................................................8-1
8.3 Configuring IP............................................................................................................................8-2
LOGS ............................................................................................................................................................ III
Chapter 9 Logs Screens ...............................................................................................................................9-1
9.1 Configuring View Log ...............................................................................................................9-1
9.2 Configuring Log Settings ...........................................................................................................9-2
MAINTENANCE......................................................................................................................................... IV
Chapter 10 Maintenance ...........................................................................................................................10-1
10.1 Maintenance Overview ............................................................................................................10-1
10.2 System Status Screen ...............................................................................................................10-1
10.2.1 System Statistics...............................................................................................................10-2
10.3 Association List........................................................................................................................10-3
10.4 Channel Usage .........................................................................................................................10-4
10.5 F/W Upload Screen ..................................................................................................................10-7
10.6 Configuration Screen ...............................................................................................................10-9
10.6.1 Backup Configuration ....................................................................................................10-10
10.6.2 Restore Configuration ....................................................................................................10-11
10.6.3 Back to Factory Defaults................................................................................................10-12
10.7 Restart Screen.........................................................................................................................10-13
SMT CONFIGURATION.............................................................................................................................. V
Chapter 11 Introducing the SMT..............................................................................................................11-1
11.1 Connect to your ZyAIR Using Telnet ......................................................................................11-1

ZyAIR Access Point Series User’s Guide
x Table of Contents
11.2 Changing the System Password ...............................................................................................11-1
11.3 ZyAIR SMT Menu Overview Example ...................................................................................11-2
11.4 Navigating the SMT Interface..................................................................................................11-4
11.4.1 System Management Terminal Interface Summary.........................................................11-5
Chapter 12 General Setup......................................................................................................................... 12-1
12.1 General Setup...........................................................................................................................12-1
12.1.1 Procedure To Configure Menu 1......................................................................................12-1
Chapter 13 LAN Setup ..............................................................................................................................13-1
13.1 LAN Setup ...............................................................................................................................13-1
13.2 TCP/IP Ethernet Setup.............................................................................................................13-1
13.3 Wireless LAN Setup ................................................................................................................13-2
13.3.1 Configuring MAC Address Filter ....................................................................................13-5
13.3.2 Configuring Roaming ......................................................................................................13-7
13.3.3 Configuring Multiple ESS (for ZyAIR B-3000 only)......................................................13-9
13.3.4 Configuring Bridge Link (for ZyAIR B-3000 only) ......................................................13-12
Chapter 14 Dial-in User Setup..................................................................................................................14-1
14.1 Dial-in User Setup ...................................................................................................................14-1
Chapter 15 VLAN Setup ...........................................................................................................................15-1
15.1 VLAN Setup ............................................................................................................................15-1
Chapter 16 SNMP Configuration .............................................................................................................16-1
16.1 About SNMP............................................................................................................................16-1
16.2 Supported MIBs.......................................................................................................................16-2
16.3 SNMP Configuration ...............................................................................................................16-2
16.4 SNMP Traps ............................................................................................................................16-3
Chapter 17 System Security......................................................................................................................17-1
17.1 System Security .......................................................................................................................17-1
17.1.1 System Password .............................................................................................................17-1
17.1.2 Configuring External RADIUS Server ............................................................................17-1
17.1.3 802.1x ..............................................................................................................................17-3
Chapter 18 System Information and Diagnosis.......................................................................................18-1
18.1 System Status...........................................................................................................................18-1
18.2 System Information..................................................................................................................18-3
18.2.1 System Information..........................................................................................................18-3
18.2.2 Console Port Speed ..........................................................................................................18-4
18.3 Log and Trace ..........................................................................................................................18-5
18.3.1 Viewing Error Log...........................................................................................................18-5
18.4 Diagnostic ................................................................................................................................18-5
Chapter 19 Firmware and Configuration File Maintenance .................................................................19-1
19.1 Filename Conventions .............................................................................................................19-1
19.2 Backup Configuration..............................................................................................................19-2
19.2.1 Backup Configuration Using FTP....................................................................................19-2