Zyxel-communications NWA3160 User Manual

www.zyxel.comNWA-3160 SeriesIEEE 802.11a/b/g Business WLAN Access PointIEEE 802.11b/g Business WLAN Access PointIEEE WirelessN Business WLAN Access P

Contents OverviewZyXEL NWA-3160 Series User’s Guide10

Chapter 7 System ScreensZyXEL NWA-3160 Series User’s Guide1007.4 Configuring Time SettingTo change your ZyXEL Device’s time and date, click SYSTEM &

Chapter 7 System ScreensZyXEL NWA-3160 Series User’s Guide101The following table describes the labels in this screen.Table 25 SYSTEM > Time Sett

Chapter 7 System ScreensZyXEL NWA-3160 Series User’s Guide1027.5 Pre-defined NTP Time Servers ListWhen you turn on the ZyXEL Device for the first tim

ZyXEL NWA-3160 Series User’s Guide103CHAPTER 8 Wireless ConfigurationThis chapter discusses how to configure the ZyXEL Device’s Wireless screens. 8.1

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide1048.1.2 ESSAn Extended Service Set (ESS) consists of a series of overlapping BSSs,

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide1058.3 Quality of ServiceThis section discusses the Quality of Service (QoS) featu

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide106ATC assigns priority based on packet size, since time-sensitive applications such

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide107The following table shows how priorities are assigned for packets coming from th

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide108DSCP is backward compatible with the three precedence bits in the ToS octet so th

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide1098.4.2 STP TerminologyThe root bridge is the base of the spanning tree; it is th

Table of ContentsZyXEL NWA-3160 Series User’s Guide11Table of ContentsAbout This User's Guide ...

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide1108.4.4 STP Port StatesSTP assigns five port states (see next table) to eliminate

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide1116 Use the MAC Filter screen to allow or restrict access to your wireless network

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide112Figure 64 Wireless: Access Point (NWA-3160 and NWA-3163)The following table des

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide113Choose Channel IDSet the operating frequency/channel depending on your particula

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide1148.7.2 Access Point Mode: NWA-3165This section describes the Access Point mode sc

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide115Channel Width This field is available only when 802.11n/g is selected as the 802

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide1168.7.3 Bridge/Repeater Mode (NWA-3160 and NWA-3163 Only)The ZyXEL Device can act

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide117Figure 67 Bridge Loop: Two Bridges Connected to Hub• If your ZyXEL Device (in

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide118Figure 69 Wireless: Bridge/Repeater (NWA-3160 and NWA-3163 Only) The following

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide119See Table 35 on page 112 for information on the other labels in this screen.Outp

Table of ContentsZyXEL NWA-3160 Series User’s Guide12Chapter 3Tutorial ...

Chapter 8 Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide1208.7.4 AP+Bridge Mode (NWA-3160 and NWA-3163 Only)Select AP+Bridge as the Operati

ZyXEL NWA-3160 Series User’s Guide121CHAPTER 9 Wireless Security ConfigurationThis chapter describes how to use the Security and RADIUS screens to co

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide122Your ZyXEL Device allows you to configure up to four 64-bit, 128-bit or

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide1239.4.1 User Authentication WPA applies IEEE 802.1x and Extensible Authe

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide1243 The AP derives and distributes key information to the wireless clients

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide125Figure 73 WPA(2) with RADIUS Application Example9.6 Security ModesTh

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide1269.7 Wireless Client WPA SupplicantsA wireless client supplicant is the

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide127Figure 74 Wireless > SecurityThe following table describes the lab

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide128Figure 75 WIRELESS > Security: WEPThe following table describes the

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide129Figure 76 Security: 802.1x Only The following table describes the lab

Table of ContentsZyXEL NWA-3160 Series User’s Guide135.2 The Management Mode Screen ...

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide130Figure 77 Security: 802.1x Static 64-bit, 802.1x Static 128-bit The fo

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide1319.9.4 Security: WPASelect WPA in the Security Mode field to display th

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide132Figure 79 Security:WPA2 or WPA2-MIXThe following table describes the l

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide1339.9.6 Security: WPA-PSK, WPA2-PSK, WPA2-PSK-MIXSelect WPA-PSK, WPA2-PS

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide1349.10 Introduction to RADIUS RADIUS is based on a client-sever model tha

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide135Backup If the ZyXEL Device cannot communicate with the Primary accounti

Chapter 9 Wireless Security ConfigurationZyXEL NWA-3160 Series User’s Guide136

ZyXEL NWA-3160 Series User’s Guide137CHAPTER 10 MBSSID and SSIDThis chapter describes how to configure and use your ZyXEL Device’s MBSSID mode and co

Chapter 10 MBSSID and SSIDZyXEL NWA-3160 Series User’s Guide138The switch adds PVID (Port VLAN IDentity) tags to incoming frames that don’t already ha

Chapter 10 MBSSID and SSIDZyXEL NWA-3160 Series User’s Guide139The following table describes the labels in this screen. Table 48 Wireless: Multiple

Table of ContentsZyXEL NWA-3160 Series User’s Guide148.3.3.2 ATC+WMM from WLAN to LAN ...1078.3.4 Ty

Chapter 10 MBSSID and SSIDZyXEL NWA-3160 Series User’s Guide14010.2 SSIDWhen the ZyXEL Device is set to Access Point, AP+Bridge (NWA-3160 and NWA-316

Chapter 10 MBSSID and SSIDZyXEL NWA-3160 Series User’s Guide141Figure 84 SSIDThe following table describes the labels in this screen.10.2.2 Config

Chapter 10 MBSSID and SSIDZyXEL NWA-3160 Series User’s Guide142• WIRELESS > Security (one of the security profiles).• WIRELESS > RADIUS (one of

Chapter 10 MBSSID and SSIDZyXEL NWA-3160 Series User’s Guide143QoS Select the Quality of Service priority for this BSS’s traffic. • In the pre-config

Chapter 10 MBSSID and SSIDZyXEL NWA-3160 Series User’s Guide144

ZyXEL NWA-3160 Series User’s Guide145CHAPTER 11 Other Wireless ConfigurationThis chapter describes how to configure the Layer-2 Isolation and MAC Fil

Chapter 11 Other Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide146Figure 86 Layer-2 Isolation ApplicationMAC addresses that are not listed

Chapter 11 Other Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide147Figure 87 WIRELESS > Layer 2 IsolationThe following table describes

Chapter 11 Other Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide148Figure 88 WIRELESS > Layer-2 Isolation Configuration ScreenThe follow

Chapter 11 Other Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide149" When configuring, remember to select the correct layer-2 isolation

Table of ContentsZyXEL NWA-3160 Series User’s Guide159.10 Introduction to RADIUS ...

Chapter 11 Other Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide150Figure 91 Layer-2 Isolation Example 211.4 The MAC Filter ScreenThe MAC

Chapter 11 Other Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide151The following table describes the labels in this screen.11.4.1 Configuri

Chapter 11 Other Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide152The following table describes the labels in this screen." To activate

Chapter 11 Other Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide153Figure 94 Roaming ExampleThe steps below describe the roaming process.1

Chapter 11 Other Wireless ConfigurationZyXEL NWA-3160 Series User’s Guide154Figure 95 RoamingSelect the Roaming Active check box and click Apply.

ZyXEL NWA-3160 Series User’s Guide155CHAPTER 12 IP ScreenThis chapter discusses how to configure IP settings on the ZyXEL Device.12.1 Factory Ethern

Chapter 12 IP ScreenZyXEL NWA-3160 Series User’s Guide156" Regardless of your particular situation, do not create an arbitrary IP address; always

ZyXEL NWA-3160 Series User’s Guide157CHAPTER 13 Rogue APThis chapter discusses rogue wireless access points (APs) and how to configure the ZyXEL Devi

Chapter 13 Rogue APZyXEL NWA-3160 Series User’s Guide158Figure 97 Rogue AP: Example 13.2.1 “Honeypot” AttackRogue APs need not be connected to the

Chapter 13 Rogue APZyXEL NWA-3160 Series User’s Guide159Figure 98 “Honeypot” Attack13.3 Configuring Rogue AP Detection (NWA-3160 and NWA-3163 Only

Table of ContentsZyXEL NWA-3160 Series User’s Guide1613.3.3 Rogue AP List ...

Chapter 13 Rogue APZyXEL NWA-3160 Series User’s Guide16013.3.1 Rogue AP: ConfigurationClick ROGUE AP > Configuration. The following screen appears

Chapter 13 Rogue APZyXEL NWA-3160 Series User’s Guide161Figure 100 ROGUE AP > Friendly APThe following table describes the labels in this screen

Chapter 13 Rogue APZyXEL NWA-3160 Series User’s Guide162Figure 101 ROGUE AP > Rogue APThe following table describes the labels in this screen. T

ZyXEL NWA-3160 Series User’s Guide163CHAPTER 14 Remote Management ScreensThis chapter provides information on the Remote Management screens. 14.1 Re

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide16414.2 Configuring TelnetYou can configure your ZyXEL Device for remote Telnet

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide16514.3 Configuring FTPYou can upload and download the ZyXEL Device’s firmware

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide16614.4 Configuring WWWTo change your ZyXEL Device’s World Wide Web settings, c

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide16714.5 SNMPSimple Network Management Protocol (SNMP) is a protocol used for e

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide168Figure 106 SNMP Management ModelAn SNMP managed network consists of two mai

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide16914.5.2 SNMP Traps The ZyXEL Device can send the following traps to the SNMP

Table of ContentsZyXEL NWA-3160 Series User’s Guide17Chapter 17Log Screens ...

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide17014.6.1 SNMP v3 and SecuritySNMP v3 enhances security for SNMP management. SN

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide171Figure 107 Remote Management: SNMPThe following table describes the labels

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide17214.6.2.1 The SNMPv3 User Profile Screen (NWA-3165 Only)Use this screen to se

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide173The following table describes the labels in this screen. Table 67 Remote M

Chapter 14 Remote Management ScreensZyXEL NWA-3160 Series User’s Guide174

ZyXEL NWA-3160 Series User’s Guide175CHAPTER 15 Internal RADIUS ServerThe ZyXEL Device can use its internal RADIUS server to authenticate wireless cl

Chapter 15 Internal RADIUS ServerZyXEL NWA-3160 Series User’s Guide176" The internal RADIUS server does not support domain accounts (DOMAIN/user)

Chapter 15 Internal RADIUS ServerZyXEL NWA-3160 Series User’s Guide17715.3 Trusted AP OverviewA trusted AP is an AP that uses the ZyXEL Device’s int

Chapter 15 Internal RADIUS ServerZyXEL NWA-3160 Series User’s Guide178Figure 110 Trusted AP Overview1 Configure an IP address and shared secret in t

Chapter 15 Internal RADIUS ServerZyXEL NWA-3160 Series User’s Guide179Figure 111 Trusted AP ScreenThe following table describes the labels in this

Table of ContentsZyXEL NWA-3160 Series User’s Guide18Chapter 20Troubleshooting...

Chapter 15 Internal RADIUS ServerZyXEL NWA-3160 Series User’s Guide180Figure 112 Trusted Users ScreenThe following table describes the labels in thi

ZyXEL NWA-3160 Series User’s Guide181CHAPTER 16 CertificatesThis chapter gives background information about public-key certificates and explains how

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide182Certification authorities maintain directory servers with databases of valid and revoked c

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide183Figure 114 Certificate Details 4 Use a secure method to verify that the certificate own

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide184Figure 115 My CertificatesThe following table describes the labels in this screen.Table

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide18516.6 Certificate File FormatsThe certification authority certificate that you want to im

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide18616.7 Importing a CertificateClick CERTIFICATES > My Certificates and then Import to op

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide18716.8 Creating a CertificateClick CERTIFICATES > My Certificates and then Create to op

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide188Common Name Select a radio button to identify the certificate’s owner by IP address, doma

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide189After you click Apply in the My Certificate Create screen, you see a screen that tells yo

List of FiguresZyXEL NWA-3160 Series User’s Guide19List of FiguresFigure 1 Access Point Application ...

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide190Figure 118 My Certificate DetailsThe following table describes the labels in this screen

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide191Certificate Path Click the Refresh button to have this read-only text box display the hie

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide19216.10 Trusted CAsClick CERTIFICATES > Trusted CAs to open the Trusted CAs screen. This

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide193The following table describes the labels in this screen.16.11 Importing a Trusted CA’s C

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide194" You must remove any spaces from the certificate’s filename before you can import th

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide195Figure 121 Trusted CA DetailsThe following table describes the labels in this screen.Ta

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide196Certificate InformationThese read-only fields display detailed information about the certi

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide197SHA1 Fingerprint This is the certificate’s message digest that the ZyXEL Device calculate

Chapter 16 CertificatesZyXEL NWA-3160 Series User’s Guide198

ZyXEL NWA-3160 Series User’s Guide199CHAPTER 17 Log ScreensThis chapter contains information about configuring general log settings and viewing the Z

List of FiguresZyXEL NWA-3160 Series User’s Guide20Figure 39 Tutorial: Layer-2 Isolation Edit ...

Chapter 17 Log ScreensZyXEL NWA-3160 Series User’s Guide20017.2 Configuring Log SettingsTo change your ZyXEL Device’s log settings, click LOGS > L

Chapter 17 Log ScreensZyXEL NWA-3160 Series User’s Guide201Figure 123 Log SettingsThe following table describes the labels in this screen.Table 79

Chapter 17 Log ScreensZyXEL NWA-3160 Series User’s Guide20217.3 Example Log MessagesThis section provides descriptions of some example log messages.L

Chapter 17 Log ScreensZyXEL NWA-3160 Series User’s Guide203TELNET Login SuccessfullySomeone has logged on to the router via telnet.TELNET Login Fail

Chapter 17 Log ScreensZyXEL NWA-3160 Series User’s Guide20417.4 Log CommandsGo to the command interpreter interface (the Command Interpreter appendix

Chapter 17 Log ScreensZyXEL NWA-3160 Series User’s Guide20517.5 Log Command ExampleThis example shows how to set the ZyXEL Device to record the erro

Chapter 17 Log ScreensZyXEL NWA-3160 Series User’s Guide206

ZyXEL NWA-3160 Series User’s Guide207CHAPTER 18 VLANThis chapter discusses how to configure VLAN on the ZyXEL Device.18.1 VLANA VLAN (Virtual Local

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide20818.2 Configuring VLANThe ZyXEL Device allows you to configure VLAN based on SSID profile (wireles

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide209Figure 124 WIRELESS VLANThe following table describes the labels in this screen Table 84 WIRE

List of FiguresZyXEL NWA-3160 Series User’s Guide21Figure 82 Multiple BSS with VLAN Example ...

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide21018.2.2 RADIUS VLANClick VLAN > RADIUS VLAN. The following screen appears.Figure 125 RADIUS V

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide211The following table describes the labels in this screen.18.2.3 Configuring Management VLAN Examp

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide212Figure 126 Management VLAN Configuration ExamplePerform the following steps in the switch web co

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide213Figure 129 VLAN-Aware Switch - VLAN StatusFollow the instructions in the Quick Start Guide to s

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide21418.2.4 Configuring Microsoft’s IAS Server ExampleDynamic VLAN assignment can be used with the ZyX

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide215Figure 131 New Global Security Group 2 In VLAN Group ID Properties, click the Members tab.• The

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide216•Enter a Policy friendly name that describes the policy. Each Remote Access Policy will be matched

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide217Figure 135 Adding VLAN Group 6 When the Permissions options screen displays, select Grant remot

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide218Figure 137 Authentication Tab Settings 8 Click the Encryption tab. Select the Strongest encrypti

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide219Figure 139 Connection Attributes Screen 11 The RADIUS Attribute screen displays. From the list,

List of FiguresZyXEL NWA-3160 Series User’s Guide22Figure 125 RADIUS VLAN ...

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide220Figure 141 802 Attribute Setting for Tunnel-Medium-Type 13 Return to the RADIUS Attribute Screen

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide221Figure 143 VLAN Attribute Setting for Tunnel-Type 17 Return to the RADIUS Attribute Screen show

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide22218.2.5 Second Rx VLAN ID ExampleIn this example, the ZyXEL Device is configured to tag packets fr

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide2235 Enter a Second Rx VLAN ID. The following screen shows SSID03 tagged with a VLAN ID of 3 and a S

Chapter 18 VLANZyXEL NWA-3160 Series User’s Guide224

ZyXEL NWA-3160 Series User’s Guide225CHAPTER 19 MaintenanceThis chapter displays system information such as ZyNOS firmware, port IP addresses and por

Chapter 19 MaintenanceZyXEL NWA-3160 Series User’s Guide22619.2.1 System StatisticsClick Maintenance > Show Statistics. Read-only information here

Chapter 19 MaintenanceZyXEL NWA-3160 Series User’s Guide227Figure 149 Association ListThe following table describes the labels in this screen.19.4

Chapter 19 MaintenanceZyXEL NWA-3160 Series User’s Guide228The following table describes the labels in this screen.19.5 F/W Upload ScreenFind firmwar

Chapter 19 MaintenanceZyXEL NWA-3160 Series User’s Guide2291 Do not turn off the ZyXEL Device while firmware upload is in progress!After you see the

List of FiguresZyXEL NWA-3160 Series User’s Guide23Figure 168 Windows XP: Control Panel: Network Connections: Properties ...

Chapter 19 MaintenanceZyXEL NWA-3160 Series User’s Guide230Figure 154 Firmware Upload Error19.6 Configuration ScreenSee Chapter 26 on page 257 for

Chapter 19 MaintenanceZyXEL NWA-3160 Series User’s Guide23119.6.2 Restore Configuration Restore configuration allows you to upload a new or previous

Chapter 19 MaintenanceZyXEL NWA-3160 Series User’s Guide232Figure 158 Configuration Upload Error19.6.3 Back to Factory DefaultsPressing the Reset b

233PART IIITroubleshooting and SpecificationsTroubleshooting (235)Product Specifications (241)

234

ZyXEL NWA-3160 Series User’s Guide235CHAPTER 20 TroubleshootingThis chapter offers some suggestions to solve problems you might encounter. The potent

Chapter 20 TroubleshootingZyXEL NWA-3160 Series User’s Guide23620.2 ZyXEL Device Access and LoginV I forgot the IP address for the ZyXEL Device.1 The

Chapter 20 TroubleshootingZyXEL NWA-3160 Series User’s Guide2372 If this does not work, you have to reset the device to its factory defaults. See Sec

Chapter 20 TroubleshootingZyXEL NWA-3160 Series User’s Guide238V I cannot access the SMT. See the troubleshooting suggestions for I cannot see or acc

Chapter 20 TroubleshootingZyXEL NWA-3160 Series User’s Guide239V I cannot access the Internet anymore. I had access to the Internet (with the ZyXEL D

List of FiguresZyXEL NWA-3160 Series User’s Guide24

Chapter 20 TroubleshootingZyXEL NWA-3160 Series User’s Guide2407 Make sure you allow the ZyXEL Device to be remotely accessed through the WLAN interfa

ZyXEL NWA-3160 Series User’s Guide241CHAPTER 21 Product SpecificationsThe following tables summarize the ZyXEL Device’s hardware and firmware feature

Chapter 21 Product SpecificationsZyXEL NWA-3160 Series User’s Guide242Output Power NWA-3160:IEEE 802.11b/g54Mbps: 16dBm 24Mbps: 17dBm 6Mbps: 18dBm 11M

Chapter 21 Product SpecificationsZyXEL NWA-3160 Series User’s Guide243Approvals EMC: FCC Class B, CE-EMC Class B,C-Tick Class B,Safety: CSA Internati

Chapter 21 Product SpecificationsZyXEL NWA-3160 Series User’s Guide244Wall-mounting InstructionsComplete the following steps to hang your ZyXEL Device

Chapter 21 Product SpecificationsZyXEL NWA-3160 Series User’s Guide245Figure 161 Wall-mounting ExampleThe following are dimensions of an M4 tap scr

Chapter 21 Product SpecificationsZyXEL NWA-3160 Series User’s Guide246Power over Ethernet (PoE) SpecificationsYou can use a power over Ethernet inject

Chapter 21 Product SpecificationsZyXEL NWA-3160 Series User’s Guide2471 Output Transmit Data +2 Output Transmit Data -3 Receive Data +4 Power +5 Powe

Chapter 21 Product SpecificationsZyXEL NWA-3160 Series User’s Guide248

249PART IVAppendices and IndexSetting up Your Computer’s IP Address (263)Wireless LANs (263)Pop-up Windows, JavaScripts and Java Permissions (277)I

List of TablesZyXEL NWA-3160 Series User’s Guide25List of TablesTable 1 Models Covered ...

250

ZyXEL NWA-3160 Series User’s Guide251APPENDIX A Setting up Your Computer’s IPAddressAll computers must have a 10M or 100M Ethernet adapter card and T

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide252Figure 163 WIndows 95/98/Me: Network: ConfigurationInstalling C

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide253Configuring 1 In the Network window Configuration tab, select yo

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide254Figure 165 Windows 95/98/Me: TCP/IP Properties: DNS Configurati

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide255Figure 166 Windows XP: Start Menu2 For Windows XP, click Netwo

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide256Figure 168 Windows XP: Control Panel: Network Connections: Prop

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide257Figure 170 Windows XP: Advanced TCP/IP Settings6 If you do not

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide258If you have previously configured DNS servers, click Advanced and

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide259Figure 172 Macintosh OS 8/9: Apple Menu2 Select Ethernet built

List of TablesZyXEL NWA-3160 Series User’s Guide26Table 39 Wireless Security Levels ...

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide260• Type your IP address in the IP Address box.• Type your subnet m

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide261Figure 175 Macintosh OS X: Network4 For statically assigned se

Appendix A Setting up Your Computer’s IP AddressZyXEL NWA-3160 Series User’s Guide262

ZyXEL NWA-3160 Series User’s Guide263APPENDIX B Wireless LANsWireless LAN TopologiesThis section discusses ad-hoc and infrastructure wireless LAN top

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide264Figure 177 Basic Service SetESSAn Extended Service Set (ESS) consists of a series of ov

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide265Figure 178 Infrastructure WLANChannelA channel is the radio frequency(ies) used by IEE

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide266Figure 179 RTS/CTSWhen station A sends data to the AP, it might not know that the stati

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide267If the Fragmentation Threshold value is smaller than the RTS/CTS value (see previously)

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide268Wireless security methods available on the ZyXEL Device are data encryption, wireless cli

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide269Determines the network services available to authenticated users once they are connected

List of TablesZyXEL NWA-3160 Series User’s Guide27Table 82 Sys log ...

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide270For EAP-TLS authentication type, you must first have a wired connection to the network an

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide271Dynamic WEP Key ExchangeThe AP maps a unique key that is generated with the RADIUS serve

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide272Encryption Both WPA and WPA2 improve data encryption by using Temporal Key Integrity Prot

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide273Wireless Client WPA SupplicantsA wireless client supplicant is the software that runs on

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide2744 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exch

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide275Antenna CharacteristicsFrequencyAn antenna in the frequency of 2.4GHz (IEEE 802.11b) or

Appendix B Wireless LANsZyXEL NWA-3160 Series User’s Guide276For omni-directional antennas mounted on a table, desk, and so on, point the antenna up.

ZyXEL NWA-3160 Series User’s Guide277APPENDIX C Pop-up Windows, JavaScriptsand Java PermissionsIn order to use the web configurator you need to allow

Appendix C Pop-up Windows, JavaScripts and Java PermissionsZyXEL NWA-3160 Series User’s Guide2782 Clear the Block pop-ups check box in the Pop-up Bloc

Appendix C Pop-up Windows, JavaScripts and Java PermissionsZyXEL NWA-3160 Series User’s Guide279Figure 184 Internet Options: Privacy3 Type the IP a

List of TablesZyXEL NWA-3160 Series User’s Guide28

Appendix C Pop-up Windows, JavaScripts and Java PermissionsZyXEL NWA-3160 Series User’s Guide2805 Click Close to return to the Privacy screen. 6 Click

Appendix C Pop-up Windows, JavaScripts and Java PermissionsZyXEL NWA-3160 Series User’s Guide281Figure 187 Security Settings - Java ScriptingJava P

Appendix C Pop-up Windows, JavaScripts and Java PermissionsZyXEL NWA-3160 Series User’s Guide282JAVA (Sun)1 From Internet Explorer, click Too ls, Inte

ZyXEL NWA-3160 Series User’s Guide283APPENDIX D IP Addresses and SubnettingThis appendix introduces IP addresses and subnet masks. IP addresses ident

Appendix D IP Addresses and SubnettingZyXEL NWA-3160 Series User’s Guide284Figure 190 Network Number and Host IDHow much of the IP address is the ne

Appendix D IP Addresses and SubnettingZyXEL NWA-3160 Series User’s Guide285Subnet masks are expressed in dotted decimal notation just like IP address

Appendix D IP Addresses and SubnettingZyXEL NWA-3160 Series User’s Guide286SubnettingYou can use subnetting to divide one network into multiple sub-ne

Appendix D IP Addresses and SubnettingZyXEL NWA-3160 Series User’s Guide287Figure 192 Subnetting Example: After SubnettingIn a 25-bit subnet the ho

Appendix D IP Addresses and SubnettingZyXEL NWA-3160 Series User’s Guide288Example: Eight SubnetsSimilarly, use a 27-bit mask to create eight subnets

Appendix D IP Addresses and SubnettingZyXEL NWA-3160 Series User’s Guide289Subnet PlanningThe following table is a summary for subnet planning on a n

29PART IIntroductionIntroducing the ZyXEL Device (31)Introducing the Web Configurator (41)Tutorial (45)Status Screens (73)Management Mode (77)AP

Appendix D IP Addresses and SubnettingZyXEL NWA-3160 Series User’s Guide290Configuring IP AddressesWhere you obtain your network number depends on you

ZyXEL NWA-3160 Series User’s Guide291APPENDIX E Text File Based AutoConfigurationThis chapter describes how administrators can use text configuration

Appendix E Text File Based Auto ConfigurationZyXEL NWA-3160 Series User’s Guide292" If adjacent APs use the same configuration file, you should l

Appendix E Text File Based Auto ConfigurationZyXEL NWA-3160 Series User’s Guide293Verifying Your Configuration File Upload Via SNMPYou can use SNMP m

Appendix E Text File Based Auto ConfigurationZyXEL NWA-3160 Series User’s Guide294If there are any errors while processing the configuration file, the

Appendix E Text File Based Auto ConfigurationZyXEL NWA-3160 Series User’s Guide295Figure 196 802.1X Configuration File ExampleFigure 197 WPA-PSK

Appendix E Text File Based Auto ConfigurationZyXEL NWA-3160 Series User’s Guide296Figure 198 WPA Configuration File ExampleWlan Command Configuratio

Appendix E Text File Based Auto ConfigurationZyXEL NWA-3160 Series User’s Guide297Figure 199 Wlan Configuration File Example!#ZYXEL PROWLAN!#VERSIO

Appendix E Text File Based Auto ConfigurationZyXEL NWA-3160 Series User’s Guide298

ZyXEL NWA-3160 Series User’s Guide299APPENDIX F Legal InformationCopyrightCopyright © 2008 by ZyXEL Communications Corporation.The contents of this p

About This User's GuideZyXEL NWA-3160 Series User’s Guide3About This User's GuideIntended AudienceThis manual is intended for people who w

30

Appendix F Legal InformationZyXEL NWA-3160 Series User’s Guide300If this device does cause harmful interference to radio/television reception, which c

Appendix F Legal InformationZyXEL NWA-3160 Series User’s Guide301Viewing Certifications1 Go to http://www.zyxel.com.2 Select your product on the ZyXE

Appendix F Legal InformationZyXEL NWA-3160 Series User’s Guide302

[Document Title]303APPENDIX G Customer SupportIn the event of problems that cannot be solved by using this manual, you should contact your vendor. If

Appendix G Customer Support[Document Title]304• Address: 1005F, ShengGao International Tower, No.137 XianXia Rd., Shanghai• Web: http://www.zyxel.cnCo

Appendix G Customer Support[Document Title]305Germany• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +49-2405-6909-69• F

Appendix G Customer Support[Document Title]306Malaysia• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +603-8076-9

Appendix G Customer Support[Document Title]307Singapore• Support E-mail: [email protected]• Sales E-mail: [email protected]• Telephone: +65-6899-

Appendix G Customer Support[Document Title]308Turkey• Support E-mail: [email protected]• Telephone: +90 212 222 55 22• Fax: +90-212-220-2526• Web: http

IndexZyXEL NWA-3160 Series User’s Guide309IndexAaccess 32access point 32access privileges 34address assignment 155address filtering 31administrator au

ZyXEL NWA-3160 Series User’s Guide31CHAPTER 1 Introducing the ZyXEL DeviceThis chapter introduces the main applications and features of the ZyXEL Dev

IndexZyXEL NWA-3160 Series User’s Guide310Dynamic Frequency Selection 110dynamic WEP key exchange 271EEAP 121, 122EAP authentication 269encryption 34,

IndexZyXEL NWA-3160 Series User’s Guide311MBSSID 31, 34Message Integrity Check (MIC) 272mobile access 31mode 31models covered 31MSDU 92, 113, 115, 118

IndexZyXEL NWA-3160 Series User’s Guide312STP (Spanning Tree Protocol) 243STP path costs 109STP port states 110STP terminology 109subnet 283subnet mas

IndexZyXEL NWA-3160 Series User’s Guide313

IndexZyXEL NWA-3160 Series User’s Guide314

Chapter 1 Introducing the ZyXEL DeviceZyXEL NWA-3160 Series User’s Guide32" A different channel should be configured for each WLAN interface to r

Chapter 1 Introducing the ZyXEL DeviceZyXEL NWA-3160 Series User’s Guide33Figure 2 Bridge ApplicationFigure 3 Repeater Application1.2.3 AP + Bri

Chapter 1 Introducing the ZyXEL DeviceZyXEL NWA-3160 Series User’s Guide34In the figure below, A and B use X as an AP to access the wired network, whi

Chapter 1 Introducing the ZyXEL DeviceZyXEL NWA-3160 Series User’s Guide35For example, you might want to set up a wireless network in your office whe

Chapter 1 Introducing the ZyXEL DeviceZyXEL NWA-3160 Series User’s Guide361.3 CAPWAP (NWA-3160 and NWA-3163 Only)CAPWAP allows a single access point

Chapter 1 Introducing the ZyXEL DeviceZyXEL NWA-3160 Series User’s Guide371.6 Hardware ConnectionsSee your Quick Start Guide for information on maki

Chapter 1 Introducing the ZyXEL DeviceZyXEL NWA-3160 Series User’s Guide38Figure 7 LEDsTable 2 LEDsLABEL COLOR STATUS DESCRIPTIONWDS(NWA-3160 and

Chapter 1 Introducing the ZyXEL DeviceZyXEL NWA-3160 Series User’s Guide39ETHERNET Green On The ZyXEL Device has a 10 Mbps Ethernet connection.Blinki

Document ConventionsZyXEL NWA-3160 Series User’s Guide4Document ConventionsWarnings and NotesThese are how warnings and notes are shown in this User’s

Chapter 1 Introducing the ZyXEL DeviceZyXEL NWA-3160 Series User’s Guide40

ZyXEL NWA-3160 Series User’s Guide41CHAPTER 2 Introducing the WebConfiguratorThis chapter describes how to access the ZyXEL Device’s web configurator

Chapter 2 Introducing the Web ConfiguratorZyXEL NWA-3160 Series User’s Guide42If you have more than one ZyXEL Device on your network (that uses the de

Chapter 2 Introducing the Web ConfiguratorZyXEL NWA-3160 Series User’s Guide436 Click Apply in the Replace Certificate screen to create a certificate

Chapter 2 Introducing the Web ConfiguratorZyXEL NWA-3160 Series User’s Guide442.3 Navigating the Web ConfiguratorThe following summarizes how to navi

ZyXEL NWA-3160 Series User’s Guide45CHAPTER 3 TutorialThis chapter first provides an overview of how to configure the wireless LAN on your ZyXEL Devi

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide463.1.2 Wireless LAN Configuration OverviewThe following figure shows the steps you should take t

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide47Figure 12 Configuring Wireless LAN Select Operating ModeAccess Point Bridge

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide483.1.3 Further ReadingUse these links to find more information on the steps:• Choosing 802.11 Mo

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide49Figure 13 Tutorial: Example MBSSID SetupThe standard network (SSID04) has access to all resou

Document ConventionsZyXEL NWA-3160 Series User’s Guide5Icons Used in FiguresFigures in this User’s Guide may use the following generic icons. The ZyX

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide50Figure 14 Tutorial: Wireless LAN: BeforeSelect MBSSID from the Operating Mode drop-down list b

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide51Select the Index box for the entry and click Apply to activate the profile. Your standard wirel

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide52Figure 17 Tutorial: VoIP SSID Profile Edit• Choose a new SSID for the VoIP network. In this ex

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide53Figure 18 Tutorial: VoIP SecurityYou already chose to use the security02 profile for this net

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide54• Click Apply. The WIRELESS > Security screen displays. Ensure that the Profile Name for entr

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide55Figure 22 Tutorial: Guest Edit• Choose a new SSID for the guest network. In this example, ent

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide56• Select WPA-PSK in the Security Mode field. WPA-PSK provides strong security that is supported

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide57Figure 26 Tutorial: Layer 2 Isolation ProfileEnter the MAC addresses of the two network devic

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide58• Try to access each network using the correct security settings, and then using incorrect secur

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide59Figure 28 Tutorial: Wireless Network ExampleIn the figure, the solid circle represents the ra

Safety WarningsZyXEL NWA-3160 Series User’s Guide6Safety Warnings1 For your safety, be sure to read and follow all warning notices and instructions.•

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide60" The ZyXEL Device can detect the MAC addresses of APs automatically. However, it is more s

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide61" You can add APs that are not part of your network to the friendly AP list, as long as yo

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide62Figure 32 Tutorial: Warning5 Save the friendly AP list somewhere it can be accessed by all the

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide632 In the Period (min.) field, enter how often you want the ZyXEL Device to scan for rogue APs.

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide64•In the Send Immediate Alert section, select the events you want to trigger immediate e-mails. E

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide653.4 Using Multiple MAC Filters and L-2 Isolation ProfilesThis example shows you how to allow c

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide66Each SSID profile already uses a different pre-shared key.In this example, you will configure ac

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide67Figure 37 Tutorial: SSID Profile2 Select SERVER_1’s entry and click Edit. The following scree

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide68Figure 39 Tutorial: Layer-2 Isolation EditEnter the network router’s MAC Address and add a Des

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide693.4.5 Configure the SERVER_2 NetworkNext, you will configure the SERVER_2 network that allows

Safety WarningsZyXEL NWA-3160 Series User’s Guide7

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide70Figure 41 Tutorial: SSID Profiles Activated2 Next, click the SSID tab. Check that each configu

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide71• Using another computer and wireless client, but with the correct security settings, attempt t

Chapter 3 TutorialZyXEL NWA-3160 Series User’s Guide72

ZyXEL NWA-3160 Series User’s Guide73CHAPTER 4 Status ScreensThe Status screen displays when you log into the ZyXEL Device, or click STATUS in the nav

Chapter 4 Status ScreensZyXEL NWA-3160 Series User’s Guide74Figure 43 The Status ScreenThe following table describes the labels in this screen.Table

Chapter 4 Status ScreensZyXEL NWA-3160 Series User’s Guide75System ResourcesFlash This field displays the amount of the ZyXEL Device’s flash memory c

Chapter 4 Status ScreensZyXEL NWA-3160 Series User’s Guide76

ZyXEL NWA-3160 Series User’s Guide77CHAPTER 5 Management ModeThis chapter discusses the MGNT MODE (Management Mode) screen (NWA-3160 and NWA-3163 onl

Chapter 5 Management ModeZyXEL NWA-3160 Series User’s Guide782 The AP sends out a management request, looking for an AP in CAPWAP AP controller mode.3

Chapter 5 Management ModeZyXEL NWA-3160 Series User’s Guide795.1.4 Notes on CAPWAPThis section lists some additional features of ZyXEL’s implementat

Safety WarningsZyXEL NWA-3160 Series User’s Guide8

Chapter 5 Management ModeZyXEL NWA-3160 Series User’s Guide80Managed AP Select this to have the ZyXEL Device managed by another ZyXEL Device on your n

ZyXEL NWA-3160 Series User’s Guide81CHAPTER 6 AP Controller Mode (NWA-3160Only)When the ZyXEL Device is an AP controller, it can manage other access

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide82The following table describes the new labels in this screen.6.1.1 The

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide83The following table describes the labels in this screen.6.1.2 The AP

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide846.1.3 The AP Association List ScreenUse this screen to see informatio

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide85When the ZyXEL Device is in AP controller mode, click SSID Informatio

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide866.3 The Controller ScreensThis section discusses the Controller scree

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide87Figure 53 The Controller > AP Lists ScreenThe following table de

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide886.3.2 The AP Lists Edit ScreenUse this screen to change the descripti

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide896.3.3 The Configuration ScreenUse this screen to control the way in

Contents OverviewZyXEL NWA-3160 Series User’s Guide9Contents OverviewIntroduction ...

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide906.4 The Profile Edit ScreensThis section describes the Profile Edit s

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide916.5 The Radio Profile Edit ScreenUse this screen to configure a spec

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide92The following table describes the labels in this screen.Table 22 The

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide93Apply Click this to save your changes.Reset Click this to reload the

Chapter 6 AP Controller Mode (NWA-3160 Only)ZyXEL NWA-3160 Series User’s Guide94

95PART IIThe Web ConfiguratorSystem Screens (97)Wireless Configuration (103)Wireless Security Configuration (121)MBSSID and SSID (137)Other Wirele

96

ZyXEL NWA-3160 Series User’s Guide97CHAPTER 7 System Screens7.1 System OverviewThis section provides information on general system setup.7.2 Config

Chapter 7 System ScreensZyXEL NWA-3160 Series User’s Guide987.3 Administrator Authentication on RADIUSThe administrator authentication on RADIUS feat

Chapter 7 System ScreensZyXEL NWA-3160 Series User’s Guide99Figure 59 SYSTEM > Password.The following table describes the labels in this screen.