ZyXEL Communications ZyXEL ZyAIR B-3000 User manual

ZyAIR B-3000
Intelligent Wireless LAN Access Point
Quick Installation Guide
Version 3.50
July 2003

ZyAIR B-3000 Intelligent Wireless LAN Access Point
3
Table of Contents
1 Introducing the ZyAIR ................................................................................................................ 4
2 Hardware Connections .............................................................................................................. 4
2.1 Top Panel and Connections...................................................................................................4
2.2 The LED Display.................................................................................................................... 5
3 Set Up Your Computer’s IP Address......................................................................................... 6
3.1 Windows 2000/NT/XP ........................................................................................................... 7
3.2 Testing the Connection to the ZyAIR..................................................................................... 8
4 Configure the ZyAIR................................................................................................................... 8
4.1 Accessing the ZyAIR via the Web Configurator .................................................................... 8
4.2 Common Screen Command Buttons................................................................................... 10
5 Configuring the ZyAIR Using the Wizard ............................................................................... 10
6 Key Features ............................................................................................................................. 12
6.1 Power over Ethernet (PoE).................................................................................................. 12
6.2 Wireless LAN Overview.......................................................................................................13
6.3 Configuring Wireless LAN ................................................................................................... 13
Multiple ESS ........................................................................................................................................15
Edit ESS ...............................................................................................................................................17
MAC Filter Summary...........................................................................................................................18
Configuring Bridge ..............................................................................................................................19
6.4 Configuring Roaming........................................................................................................... 21
6.5 Configuring IEEE802.1x Authentication .............................................................................. 22
6.6 Local User Database and RADIUS Overview ..................................................................... 24
6.7 Configuring VLAN................................................................................................................ 25
7 Hardware Installation ............................................................................................................... 26
7.1 Attaching Antennas.............................................................................................................. 26
7.2 Hardware Mounting Installation ........................................................................................... 26
8 Troubleshooting ....................................................................................................................... 29

ZyAIR B-3000 Intelligent Wireless LAN Access Point
4
1 Introducing the ZyAIR
The ZyAIR B-3000 is an IEEE802.11b compliant 11 Mpbs wireless LAN access point. It is suited for
wireless connections to the wired network in the home and small office environment. The key features of
the ZyAIR are PoE (Power over Ethernet), wireless security, multiple ESS, bridge and VLAN. See your
User’s Guide for more details on all ZyAIR features.
2 Hardware Connections
2.1 Top Panel and Connections
LABEL DESCRIPTION
ETHERNET For initial configuration use an Ethernet cable to connect a computer (with an Ethernet
card) to ETHERNET port. The port is auto-negotiating (can connect at 10 or 100Mbps)
and auto-crossover (automatically adjusts to the type of Ethernet cable you use (straight-
through or crossover)).
RESET You only need to use this button if you’ve forgotten the ZyAIR’s password. It returns the
ZyAIR to the factory defaults (password is 1234 and LAN IP address 192.168.1.2). Refer
to the User’s Guide.
POWER
12VDC
Connect the end of the included power adaptor to this power socket. You only need to
connect the external power adaptor if you are not using PoE. If you simultaneously use
both PoE and the external power adaptor, the ZyAIR will draw power from the PoE
connection only.
Use only the included power adaptor.

ZyAIR B-3000 Intelligent Wireless LAN Access Point
5
2.2 The LED Display
The PWR and the ZyAIR LEDs turn on when the power is connected. The ETHN LED turns on, if the
ETHERNET port is properly connected. See the ZyAIR Front Panel LED Description table for more
information.
Figure 1 ZyAIR Front Panel

ZyAIR B-3000 Intelligent Wireless LAN Access Point
6
Table 1 ZyAIR Front Panel LED Description
LED COLOR STATUS DESCRIPTION
Blinking The ZyAIR is not ready or rebooting.Red
Off The ZyAIR has a successful reboot.
On The ZyAIR has a successful wireless bridge connection.
BRI/RPT
Green
Off The ZyAIR does not have a wireless bridge connection.
Blinking
(Breathing)
The ZyAIR is sending/receiving data through the wireless LAN.ZyAIR Blue
On The ZyAIR is ready, but is not sending/receiving data.
On The ZyAIR has a successful 10Mbps Ethernet connection.
Blinking The ZyAIR is sending/receiving data.
Green
Off The ZyAIR does not have a 10Mbps Ethernet connection.
On The ZyAIR has a successful 100Mbps Ethernet connection.
Blinking The ZyAIR is sending/receiving data.
ETHN
Orange
Off The ZyAIR does not have a 100Mbps Ethernet connection.
On The ZyAIR is receiving power.Green
Off The ZyAIR is not receiving power.
On The ZyAIR is receiving power over the Ethernet cable.
PWR
Orange
Off The ZyAIR is not receiving power over the Ethernet cable.
To access the ZyAIR, configure your computer’s IP address and subnet mask to be in the same range as the
ZyAIR’s.
The default IP address of the ZyAIR is 192.168.1.2.
3 Set Up Your Computer’s IP Address

ZyAIR B-3000 Intelligent Wireless LAN Access Point
7
Skip this section if your computer’s IP address is already in the range of
192.168.1.3 ~ 192.168.1.254 with subnet mask 255.255.255.0.
Your computer must have a network card and TCP/IP installed. TCP/IP should already be installed on
computers using Windows NT/2000/XP, Macintosh OS 7 and later operating systems. Refer to the Setting
Up Your Computer’s IP Address appendix in the User’s Guide for other operating systems.
3.1 Windows 2000/NT/XP
1. In Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings,
Control Panel.
2. In Windows XP, click Network Connections.
In Windows 2000/NT, click Network and Dial-up Connections.
3. Right-click Local Area Connection and then click Properties.
4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties.
5. The Internet Protocol TCP/IP Properties
screen opens (the General tab in
Windows XP).
Configure your computer to use a static IP
address, select Use the following IP
address and fill in the IP address
(192.168.1.3 to 192.168.1.254) and
Subnet mask (255.255.255.0) fields.
6. Leave the Preferred DNS sever and Alternate DNS server fields blank if you do not know the
IP address(es) of the DNS server.
7. Click OK to close the Internet Protocol (TCP/IP) Properties window.
8. Click OK to close the Local Area Connection Properties window.

ZyAIR B-3000 Intelligent Wireless LAN Access Point
8
3.2 Testing the Connection to the ZyAIR
1. Click Start, (All) Programs, Accessories and then Command Prompt.
2. In the Command Prompt window, type "ping 192.168.1.2” followed by a space and the IP address of
the ZyAIR (192.168.1.2 is the default).
3. Press ENTER. The following screen displays.
Your computer can now communicate with the ZyAIR via the ETHERNET port.
4 Configure the ZyAIR
The Compact Guide shows you how to use the web configurator Wizard and
introduces the ZyAIR’s key features. See your User’s Guide for configuration
details and background information on all ZyAIR features using the SMT (System
Management Terminal) and web configurator.
4.1 Accessing the ZyAIR via the Web Configurator
1. Launch your web browser. Enter “192.168.1.2” as the web site address.
C:\>ping 192.168.1.2
Pinging 192.168.1.2 with 32 bytes of data:
Reply from 192.168.1.2: bytes=32 time=10ms TTL=254
Reply from 192.168.1.2: bytes=32 time<10ms TTL=254
Reply from 192.168.1.2: bytes=32 time<10ms TTL=254
Reply from 192.168.1.2: bytes=32 time<10ms TTL=254
Ping statistics for 192.168.1.2:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 10ms, Average = 2ms
C:\>
Default ZyAIR IP address.

ZyAIR B-3000 Intelligent Wireless LAN Access Point
9
2. The default password (“1234”) is already in the password field (in non-readable format). Click
Login to proceed to a screen asking you to change your password. Click Reset to revert to the
default password in the password field.
3. It is highly recommended you change the default password! Enter a new password, retype it to
confirm and click Apply; alternatively click Ignore to proceed to the MAIN MENU screen if you
do not want to change the password now.
Default password.
Change default
password.

ZyAIR B-3000 Intelligent Wireless LAN Access Point
10
4. You should now see the web configurator MAIN MENU screen.
The ZyAIR automatically times out after five minutes (default) of inactivity.
Simply log back into the ZyAIR if this happens.
4.2 Common Screen Command Buttons
The following table shows common command buttons found on many web configurator screens.
Back Click Back to return to the previous screen.
Apply Click Apply to save your changes back to the ZyAIR.
Reset Click Reset to begin configuring this screen afresh.
5 Configuring the ZyAIR Using the Wizard
The wizard consists of a series of screens to help you configure your ZyAIR for wireless stations to access
your wired LAN. Refer to your User’s Guide for more background information.
Click WIZARD SETUP to help
you configure your ZyAIR to
set up a wireless network.

ZyAIR B-3000 Intelligent Wireless LAN Access Point
11
1. Click WIZARD SETUP in the main menu to display the first wizard screen shown next.
System Name is a unique name to
identify the ZyAIR in the Ethernet
network. Enter a descriptive name.
Leave the Domain Name entry
blank and click Next to continue.
2. Use the second wizard screen to set up the wireless LAN.
ESSID is a unique name to identify
the ZyAIR in the wireless LAN.
Enter a descriptive name.
A channel is the range of radio
frequencies used by IEEE 802.11b
wireless devices.
Click Scan to have the ZyAIR
automatically select a channel. The
selected channel automatically
appears in the Channel ID field.
WEP (Wired Equivalent Privacy) encrypts data frames before transmitting over the wireless network. Select either 64-bit
or 128-bit from the WEP Encryption drop-down list box to activate WEP encryption. Select Disable to turn off WEP
data encryption.
Select ASCII or HEX WEP key input method and then follow the on-screen instructions to set up the WEP keys.
Click Next to continue.
The wireless stations and ZyAIR must use the same ESSID, channel ID and WEP
encryption key (if WEP is enabled) for wireless communication.

ZyAIR B-3000 Intelligent Wireless LAN Access Point
12
3. Fill in the fields in the last wizard configuration screen.
Select Get automatically to have the
ZyAIR obtain an IP address from a DHCP
server.
You must know the IP address assigned to
the ZyAIR (by the DHCP server) to access
the ZyAIR again.
Select Use fixed IP address to give the
ZyAIR a fixed, unique IP address. Enter a
subnet mask appropriate to your network
and the gateway IP address if applicable.
Click Finish.
If you changed the ZyAIR’s IP address, you must use the new IP address if you
want to access the web configurator again.
4. Change the wireless parameter settings in the wireless stations to match those of the ZyAIR. Refer
to the user’s guide for your wireless adapter.
6 Key Features
This section shows you how to configure some of the advanced features of the ZyAIR.
Refer to your User’s Guide for more information on ZyAIR configurations.
6.1 Power over Ethernet (PoE)
Power over Ethernet (PoE) is the ability to provide power to your ZyAIR via an 8-pin CAT 5 Ethernet
cable, eliminating the need for a nearby power source. An injector or PoE device (not included) is also
needed to supply the Ethernet cable with power. This feature allows increased flexibility in the locating of
your ZyAIR.
Figure 2 PoE Installation Example

ZyAIR B-3000 Intelligent Wireless LAN Access Point
13
6.2 Wireless LAN Overview
This section introduces the wireless LAN and some basic configurations. A wireless LAN can be as simple
as two computers with wireless adapters communicating in a peer-to-peer network or as complex as a
number of computers with wireless adapters communicating through access points (APs) which bridge
network traffic to the wired LAN.
6.3 Configuring Wireless LAN
Click ADVANCED and then WIRELESS to open the Wireless screen.
Figure 3 Wireless LAN

ZyAIR B-3000 Intelligent Wireless LAN Access Point
14
The following table describes the fields in this screen.
Table 2 Wireless LAN
LABEL DESCRIPTION
Operating
Mode
Select the operating mode from the drop-down list. Options are Access Point, Multiple
ESS and Bridge.
ESSID ESSID (Extended Service Set ID) is a unique name to identify the ZyAIR in the wireless
LAN. Enter a descriptive name (up to 32 characters).
Hide ESSID Select this check box to hide the ESSID in the outgoing beacon frame so a station
cannot obtain the ESSID through passive scanning.
Choose
Channel ID
Adjacent access points (APs) should use a channel different from what you selected to
reduce interference. The wireless stations connected to the ZyAIR must use the same
channel you selected.
Scan Click this button to have the ZyAIR automatically scan for and select a channel with the
least interference.
RTS /CTS
Threshold
(Request To Send) The threshold (number of bytes) for enabling RTS/CTS handshake.
Data with its frame size larger than this value will perform the RTS/CTS handshake.
Setting this attribute to be larger than the maximum MSDU (MAC service data unit) size
turns off the RTS/CTS handshake. Setting this attribute to zero turns on the RTS/CTS
handshake. Enter a value between 0and 2432.
Fragmentation
Threshold
The threshold (number of bytes) for the fragmentation boundary for directed messages.
It is the maximum data fragment size that can be sent. Enter a value between 256 and
2432.
WEP
Encryption WEP (Wired Equivalent Privacy) provides data encryption to prevent unauthorized wireless stations from accessing data transmitted over the wireless network.
Select Disable to allow wireless stations to communicate with the access points without
any data encryption.
Select 64-bit WEP or 128-bit WEP to enable data encryption.
Authentication
Method
Select Auto, Open System or Shared Key from the drop-down list box.

ZyAIR B-3000 Intelligent Wireless LAN Access Point
15
Table 2 Wireless LAN
LABEL DESCRIPTION
Key 1 to Key
4If you chose 64-bit WEP in the WEP Encryption field, then enter any 5 characters
(ASCII string) or 10 hexadecimal characters ("0-9", "A-F") preceded by 0x for each key.
If you chose 128-bit WEP in the WEP Encryption field, then enter 13 characters
(ASCII string) or 26 hexadecimal characters ("0-9", "A-F") preceded by 0x for each key.
There are four data encryption keys to secure your data from eavesdropping by
unauthorized wireless users. The values for the keys must be set up exactly the same
on the access points as they are on the wireless stations.
The preceding “0x” is entered automatically. You must configure all four keys, but only
one key can be activated at any one time. The default key is key 1.
Enable Intra-
BSS Traffic
Intra-BSS traffic is traffic between wireless stations in the same BSS. Select this check
box to enable Intra-BSS traffic. If two wireless stations connect to the Internet via the
ZyAIR, then when Intra-BSS is enabled, both can access the wired network and
communicate with each other. When Intra-BSS is disabled, both can still access the
wired network but cannot communicate with each other.
Enable
Breathing
LED
Select this check box to enable the Breathing LED, also known as the ZyAIR LED.
The blue ZyAIR LED is on (dimmed) when the ZyAIR is on and blinks brightly (or
breaths) when data is being transmitted to/from its wireless stations. Clear the check
box to turn this LED off even when the ZyAIR is on and data is being
transmitted/received.
Number of
Wireless
Stations
Allowed
Use this field to set a maximum number of wireless stations that may connect to the
ZyAIR.
Enter the number (from 1 to 32) of wireless stations allowed.
Output Power Set the output power of the ZyAIR in this field. If there is a high density of APs within an
area, decrease the output power of the ZyAIR to reduce interference from other APs.
The options are 11dBm (50mW), 13dBm (32mW), 15dBm (20mW) or 17dBm
(12.6mW).
Multiple ESS
The ZyAIR’s Multiple ESS (Multi-ESS) function allows multiple ESSs to be configured on just one access
point (the ZyAIR).
Wireless stations can use different ESSIDs to associate with the same AP. Only wireless stations with the
same ESSID can communicate with each other. This allows the AP to logically group wireless stations in a
manner similar to VLAN (Virtual LAN).

ZyAIR B-3000 Intelligent Wireless LAN Access Point
16
Select Multiple ESS from the Operating Mode drop-down list box in the Wireless screen to display the
screen as shown.
Figure 4 Wireless : Multiple ESS
The following table describes the fields in this screen.

ZyAIR B-3000 Intelligent Wireless LAN Access Point
17
Table 3 Wireless : Multiple ESS
LABEL DESCRIPTION
Operating Mode Select Multiple ESS in this field to display the screen as shown in Figure 4.
Extended Service Set (ESS) Summary
# This is the index number of each ESS.
ESSID This is the identification name of each ESS.
ACTIVE This field displays Yes if the ESS is active and No if it is not.
VLAN ID This is the identification number of each VLAN.
Edit Click the radio button next to the ESS index you want to configure and click
Edit to go to the EDIT ESS screen.
Delete Click the radio button next to the ESS index you want to remove and click
Delete to remove the ESS.
Edit ESS
Click Edit on the Wireless screen.
Figure 5 Wireless : Edit ESS

ZyAIR B-3000 Intelligent Wireless LAN Access Point
18
The following table describes the fields in this screen.
Table 4 Wireless : Edit ESS
LABEL DESCRIPTION
ESSID Enter a descriptive name (up to 32 alphanumeric characters) for identification
purposes.
This name is case sensitive.
Active Select this check box to activate this ESS.
VLAN ID Enter a number from 1 to 255. See the Configure VLAN section in this guide for
more information on VLAN.
ASCII Select this option to enter ASCII characters as the WEP keys.
Hex Select this option to enter hexadecimal characters for the WEP keys.
The preceding “0x” is entered automatically.
Unicast WEP key
Key 1 or Key 2 Key 1 or key 2 is used to encrypt unicast transmissions.
If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal
characters ("0-9", "A-F").
If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal
characters ("0-9", "A-F").
You must configure both keys, but only one key can be activated at any one time.
The default key is key 1.
Broadcast/Multicast WEP key
Key 3 or Key 4 Key 3 or key 4 is used to encrypt multicast/broadcast transmissions.
If you chose 64-bit WEP, then enter any 5 ASCII characters or 10 hexadecimal
characters ("0-9", "A-F").
If you chose 128-bit WEP, then enter 13 ASCII characters or 26 hexadecimal
characters ("0-9", "A-F").
You must configure both keys, but only one key can be activated at any one time.
The default key is key 3.
MAC Filter Summary
If you select Multiple ESS in the Operating Mode field in the Wireless screen, the MAC Filter
Summary screen displays as shown when you click the MAC Filter tab.

ZyAIR B-3000 Intelligent Wireless LAN Access Point
19
Figure 6 MAC Filter Summary
The following table describes the fields in this screen.
Table 5 MAC Filter Summary
LABEL DESCRIPTION
Set This is the index number of each ESS.
ESSID This is the identification name of each ESS.
Status This field displays Disable if the MAC filter is inactive, Association Allowed if the
MAC filter is active and filter action is allowed or Association Denied if the MAC filter
is active but filter action is denied.
Edit Click the radio button next to the set you want to configure and click Edit to go to the
MAC Address Filter screen. Refer to the MAC Filter section in the User’s Guide.
Configuring Bridge
The ZyAIR can function as a wireless network bridge allowing you to wirelessly connect two wired
network segments. You need to know the MAC address of the peer device, which also must be in bridge
mode. The wireless bridge connection is also known as a Wireless Distribution System (WDS).

ZyAIR B-3000 Intelligent Wireless LAN Access Point
20
Click ADVANCED, WIRELESS and then the Wireless tab. Select Bridge in the Operating Mode drop-
down list box to display the screen as shown.
Figure 7 Wireless : Bridge
The following table describes the bridge fields in this screen.
Table 6 Wireless : Bridge
LABEL DESCRIPTION
Operating Mode Select Bridge in this field to display the screen as shown in Figure 7.
Peer Bridge
MAC Address
Type the MAC address in valid MAC address format, that is, six hexadecimal
character pairs, for example, 12:34:56:78:9a:bc.