ZyXEL Communications AC240 User's Guide

Vantage RADIUS 50 User’s Guide Version 1.0 August 2004

Vantage RADIUS User’s Guide x Table of Contents Appendix H IP Subnetting...

Vantage RADIUS User’s Guide 7-10 Management Table 7-1 Remote Access LABEL DESCRIPTION No. This field displays the index number. Network IP Address

Vantage RADIUS User’s Guide Management 7-11Table 7-2 Remote Access: Add/Modify IP Address LABEL DESCRIPTION Apply Click this button to save changes

Vantage RADIUS User’s Guide 7-12 Management 7.7 SNMP Simple Network Management Protocol (SNMP) is a protocol used for exchanging management informa

Vantage RADIUS User’s Guide Management 7-13An agent is a management software module that resides in a managed device (Vantage RADIUS). An agent trans

Vantage RADIUS User’s Guide 7-14 Management 7.8 Configuring SNMP1 To configure your SNMP settings, click MAINTENANCE in the main menu, and then cli

Vantage RADIUS User’s Guide Management 7-15Table 7-4 SNMP Agent LABEL DESCRIPTION SNMP Port You may change the server port number for a service if n

Vantage RADIUS User’s Guide 7-16 Management 7.8.1 Insert/Modify Allowed IP Address In the SNMP AGENT screen, click Add to insert a new entry in th

Vantage RADIUS User’s Guide Management 7-17 Figure 7-14 SNMP: Allowed Network Address Table 7-6 SNMP: Allowed Network Address LABEL DESCRIPTION Allow

Appendices IV PPaarrtt IIVV:: APPENDICES This part provides troubleshooting and background information about setting up your computer’s IP

Vantage RADIUS User’s Guide Troubleshooting

Vantage RADIUS User’s Guide List of Figures xi List of Figures Figure 1-1 Secure Wireless Connection ...

Vantage RADIUS User’s Guide A-2 Troubleshooting Chart A-2 Troubleshooting the Ethernet Interface PROBLEM CORRECTIVE ACTION

Vantage RADIUS User’s Guide Troubleshooting

Vantage RADIUS User’s Guide Specifications B-1 Appendix B Specifications Hardware Chart B-1 HARDWARE SPECIFICATIONS Power Specificati

Vantage RADIUS User’s Guide B-2 Specifications CHART B-2 FIRMWARE SPECIFICATIONS Diagnostics Capabilities The access

Vantage RADIUS User’s Guide Power over Ethernet Specifications C-1 Appendix C Power over Ethernet Specifications You can use a pow

Vantage RADIUS User’s Guide Setting Up Your Computer’s IP Address D-1 Appendix D Setting up Your Computer’s

Vantage RADIUS User’s Guide D-2 Setting Up Your Computer’s IP Address Click Start, Settings, Control Panel and double-click the Network icon to open

Vantage RADIUS User’s Guide Setting Up Your Computer’s IP Address D-3 c. Select Microsoft from the list of

Vantage RADIUS User’s Guide xii List of Figures Figure 5-9 ZyAIR RADIUS Settings Example...

Vantage RADIUS User’s Guide D-4 Setting Up Your Computer’s IP Address 2. Click the DNS Configuration tab. -If you do not know your DNS information,

Vantage RADIUS User’s Guide Setting Up Your Computer’s IP Address D-5 remove previously installed gateways

Vantage RADIUS User’s Guide D-6 Setting Up Your Computer’s IP Address 1. For Windows XP, click start, Control Panel. In Windows 2000/NT, click Start,

Vantage RADIUS User’s Guide Setting Up Your Computer’s IP Address D-7 4. Select Internet Protocol

Vantage RADIUS User’s Guide D-8 Setting Up Your Computer’s IP Address 5. The Internet Protocol TCP/IP Properties window opens (the General tab in Win

Vantage RADIUS User’s Guide Setting Up Your Computer’s IP Address D-9 -Click Add. -Repeat the previous th

Vantage RADIUS User’s Guide D-10 Setting Up Your Computer’s IP Address 1. Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP

Vantage RADIUS User’s Guide Setting Up Your Computer’s IP Address D-11 2. Select Ethernet built-in from the

Vantage RADIUS User’s Guide D-12 Setting Up Your Computer’s IP Address 1. Click the Apple menu, and click System Preferences to open the System Prefe

Vantage RADIUS User’s Guide Wireless LAN and IEEE 802.11 E-1 Appendix E Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible d

Vantage RADIUS User’s Guide List of Tables xiii List of Tables Table 2-1 Web Configurator Screens Summary ...

Vantage RADIUS User’s Guide E-2 Wireless LAN and IEE

Vantage RADIUS User’s Guide Wireless LAN and IEEE 802.11 E-3 Diagram E-1 Peer-to-Peer Communication in an Ad-hoc Network Infrastructure Wireless

Vantage RADIUS User’s Guide E-4 Wireless LAN and IEE

Vantage RADIUS User’s Guide Wireless LAN With IEEE 802.1x F-1 Appendix F Wireless LAN With IEEE 802.1x As wireless networks become popular for bo

Vantage RADIUS User’s Guide F-2 Wireless LAN With IEEE

Vantage RADIUS User’s Guide Types of EAP Authentication G-1 Appendix G Types of EAP Authentication This appendix discusses the five popular EAP

Vantage RADIUS User’s Guide G-2 Types of EAP Authentication PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used t

Vantage RADIUS User’s Guide IP Subnetting H-1 Appendix H IP Subnetting IP Addressing Routers “route” based on the network number. The router th

Vantage RADIUS User’s Guide H-2 IP Subnetting  A class “C” network (8 host bits) can have 28 –2 or 254 hosts.  A class “B” address (16 host bits)

Vantage RADIUS User’s Guide IP Subnetting H-3 Subnetting With subnetting, the class arrangement of an IP address is ignored. For example, a clas

Vantage RADIUS User’s Guide xiv List of Tables Table 7-1 Remote Access...

Vantage RADIUS User’s Guide H-4 IP Subnetting Subnet Mask 255.255.255. 0 Subnet Mask (Binary) 11111111.11111111.11111111. 00000000 The first thre

Vantage RADIUS User’s Guide IP Subnetting H-5 Subnet Mask (Binary) 11111111.11111111.11111111. 10000000 Subnet Address: 192.168.1.128 Lowest H

Vantage RADIUS User’s Guide H-6 IP Subnetting IP Address 192.168.1. 64 IP Address (Binary) 11000000.10101000.00000001. 01000000 Subnet Mask (Bin

Vantage RADIUS User’s Guide IP Subnetting H-7 Chart H-11 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS 1

Vantage RADIUS User’s Guide H-8 IP Subnetting The following table is a summary for class “B” subnet planning. Chart H-13 Class B Subnet Planning NO

Vantage RADIUS User’s Guide Command Interpreter I-1 Appendix I Command Interpreter The following describes how to use the command interpreter.

Vantage RADIUS User’s Guide I-2 Command Interpreter Type h or help before a command to see its usage. For example, help https shows that you can t

Vantage RADIUS User’s Guide Command Interpreter I-3 For example, if you wanted to change the IP address on your Vantage RADIUS from 192.168.1.

Vantage RADIUS User’s Guide I-4 Command Interpreter Type http, to show the current status of your HTTP settings. Type http enable to allow remo

Vantage RADIUS User’s Guide Power Adapter Specifications J-1 Appendix J Power Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adap

Vantage RADIUS User’s Guide List of Charts xv List of Charts Chart A-1 Troubleshooting the Start-Up of Your Vantage RADIUS...

Vantage RADIUS User’s Guide J-2 Power Adaptor S

Vantage RADIUS User’s Guide Index K-1 Appendix K Index A Access- Challenge ... 4-6 Access- Request ...

Vantage RADIUS User’s Guide K-2 Index DHCP Client List ... 3-7 DHCP Pool ...

Vantage RADIUS User’s Guide Index K-3 RADIUS Logs ... 4-10 Real Time System ... 4-7 S

Vantage RADIUS User’s Guide K-4 Index Subnet Mask ... 3-1 Subnet Masks ...

Vantage RADIUS User’s Guide Preface xvii Preface About This User's Manual Congratulations on your purchase of Vantage RADIUS 50. This manual is

Vantage RADIUS User’s Guide xviii Preface • Mouse action sequences are denoted using a comma. For example, “click the Apple icon, Control Panels and

Getting Started I Part I: Getting Started This part helps you get to know your Vantage RADIUS, introduces the web configurator and how to config

Vantage RADIUS User’s Guide ii Copyright Copyright Copyright © 2003 by ZyXEL Communications Corporation. The contents of this publication may not be

Vantage RADIUS User’s Guide Getting to Know Your Vantage RADIUS 1-3Chapter 1 Getting to Know Your Vantage RADIUS This chapter introduces the main fea

Vantage RADIUS User’s Guide 1-4 Getting to Know Your Vantage RADIUS Reset Button The reset button is built into the front panel. Use this button to r

Vantage RADIUS User’s Guide Getting to Know Your Vantage RADIUS 1-5Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can have a

Vantage RADIUS User’s Guide 1-6 Getting to Know Your Vantage RADIUS SSH Vantage RADIUS uses the SSH (Secure Shell) secure communication protocol to

Vantage RADIUS User’s Guide Getting to Know Your Vantage RADIUS 1-7Client usernames and passwords are forwarded from a wireless network to Vantage RA

Vantage RADIUS User’s Guide Introducing the Web Configurator 2-1Chapter 2 Introducing the Web Configurator This chapter describes how to access t

Vantage RADIUS User’s Guide 2-2 Introducing the Web Configurator Figure 2-1 Admin Account Step 3. You should now see the web configurator MAIN MENU

Vantage RADIUS User’s Guide Introducing the Web Configurator 2-32.2 Resetting Vantage RADIUS If you forget your password or cannot access the web co

Vantage RADIUS User’s Guide FCC iii Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. O

Vantage RADIUS User’s Guide 2-4 Introducing the Web Configurator 2.3 Navigating the Web Configurator The following summarizes how to navigate the we

Vantage RADIUS User’s Guide Introducing the Web Configurator 2-5Table 2-1 Web Configurator Screens Summary LINK TAB FUNCTION ADVANCED IP Use this

Vantage RADIUS User’s Guide 2-6 Introducing the Web Configurator Table 2-1 Web Configurator Screens Summary LINK TAB FUNCTION USER TRACE Use the

Vantage RADIUS User’s Guide Advanced Settings 3-1Chapter 3 Advanced Settings This chapter provides information on the advanced settings screens.

Vantage RADIUS User’s Guide 3-2 Advanced Settings The subnet mask specifies the network number portion of an IP address. This field must be configure

Vantage RADIUS User’s Guide Advanced Settings 3-3the clients. If DHCP service is disabled, you must have another DHCP server on your LAN, or else the

Vantage RADIUS User’s Guide 3-4 Advanced Settings Figure 3-1 IP Configuration The following table describes the labels in this screen. Table 3-2 IP

Vantage RADIUS User’s Guide Advanced Settings 3-5Table 3-2 IP Configuration LABEL DESCRIPTION MAC Address This field displays the physical address o

Vantage RADIUS User’s Guide 3-6 Advanced Settings Table 3-3 DHCP Server: Setup LABEL DESCRIPTION Set Up DHCP Server Enable/Disable DHCP (Dynamic Hos

Vantage RADIUS User’s Guide Advanced Settings 3-73.10 DHCP Client List Click ADVANCED in the main menu and then DHCP SERVER. Now click the DHCP Clie

Vantage RADIUS User’s Guide iv Information for Canadian Users Information for Canadian Users The Industry Canada label identifies certified equipme

Vantage RADIUS User’s Guide 3-8 Advanced Settings 3.11 Administrator’s Account To change your RADIUS system password (recommended) click ADVANCED and

Vantage RADIUS User’s Guide Advanced Settings 3-93.12 Time Settings Vantage RADIUS uses a system clock to synchronize time across the network and gen

Vantage RADIUS User’s Guide 3-10 Advanced Settings Table 3-6 Time Settings LABEL DESCRIPTION Current Time Year/Month/Day This field displays the dat

Vantage RADIUS User’s Guide Advanced Settings 3-11Table 3-6 Time Settings LABEL DESCRIPTION Daylight Saving Time Select this option if you use dayli

Vantage RADIUS User’s Guide System Logs 4-1Chapter 4 System Logs This chapter details the various logs generated by Vantage RADIUS and their role

Vantage RADIUS User’s Guide 4-2 System Logs 4.2 TFTP Server Trivial File Transfer Protocol (TFTP) is an Internet file transfer protocol similar to FT

Vantage RADIUS User’s Guide System Logs 4-3 Figure 4-1 Syslog Application To avoid confusion about which log came from which Vantage RADIUS, you shou

Vantage RADIUS User’s Guide 4-4 System Logs Table 4-2 System Logs MESSAGE MEANING Admin login Http OK/Fail : user = admin source IP Someone has log

Vantage RADIUS User’s Guide System Logs 4-5 Figure 4-2 Example Of RADIUS Log Messages 4.5.1 Types of RADIUS Messages The following types of RADIUS m

Vantage RADIUS User’s Guide ZyXEL Limited Warranty v ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product i

Vantage RADIUS User’s Guide 4-6 System Logs • Access-Challenge Sent by Vantage RADIUS requesting more information in order to allow access. T

Vantage RADIUS User’s Guide System Logs 4-7Figure 4-3 Example of User Trace Records For a full description of the fields in the above example, see se

Vantage RADIUS User’s Guide 4-8 System Logs Figure 4-4 SYSTEM LOG: Real Time System Logs The following table describes the labels in this screen. T

Vantage RADIUS User’s Guide System Logs 4-9Table 4-3 SYSTEM LOG: Real Time System Logs LABEL DESCRIPTION TFTP Log Now Click this button to send the c

Vantage RADIUS User’s Guide 4-10 System Logs Table 4-4 SYSTEM LOG: Log Files LABEL DESCRIPTION No. This field displays the index of the log file. Da

Vantage RADIUS User’s Guide System Logs 4-11Table 4-5 RADIUS LOG: Real Time RADIUS Logs LABEL DESCRIPTION RADIUS Log List Clear Log Click this butto

Vantage RADIUS User’s Guide 4-12 System Logs The following table describes the labels in this screen. Table 4-6 RADIUS LOG: Log Files LABEL DESCRIPT

Vantage RADIUS User’s Guide System Logs 4-13The following table describes the labels in this screen. Table 4-7 USER TRACE: Real Time User Trace LABE

Vantage RADIUS User’s Guide 4-14 System Logs Figure 4-9 User Trace: Log Files The following table describes the labels in this screen. Table 4-8 RA

Vantage RADIUS User’s Guide System Logs 4-15 Figure 4-10 RADIUS Logs: Log Files The following table describes the labels in this screen. Table 4-9 R

Vantage RADIUS User’s Guide vi Customer Support Customer Support When you contact your customer support representative please have the following info

Vantage RADIUS User’s Guide 4-16 System Logs Table 4-9 RADIUS Logs: Log Files LABEL DESCRIPTION Radius Log Enable this field to record messages pass

Vantage RADIUS User’s Guide System Logs 4-17Table 4-9 RADIUS Logs: Log Files LABEL DESCRIPTION Mail Address3 Type a third e-mail address if you want

RADIUS Server II Part II: RADIUS Server This part introduces the RADIUS Server screens.

Vantage RADIUS Server User’s Guide RADIUS Configuration 5-1Chapter 5 RADIUS Configuration 5.1 802.1x Overview The IEEE 802.1x standard outlines e

Vantage RADIUS Server User’s Guide 5-2 RADIUS Configuration network. In addition to the shared key, password information exchanged is also encrypted

Vantage RADIUS Server User’s Guide RADIUS Configuration 5-3MD5 authentication does not use certificates for authentication. If your wireless clients

Vantage RADIUS Server User’s Guide 5-4 RADIUS Configuration 5.4 Trusted Root CA If your wireless clients use MD5 authentication protocol, you do not

Vantage RADIUS Server User’s Guide RADIUS Configuration 5-5Table 5-1 Trusted Root Certificate LABEL DESCRIPTION State Type up to 30 ASCII characters

Vantage RADIUS Server User’s Guide 5-6 RADIUS Configuration Figure 5-3 Server Certificate The following table describes the labels in this screen. Ta

Vantage RADIUS Server User’s Guide RADIUS Configuration 5-75.6 RADIUS Server Click RADIUS and then RADIUS SERVER in the main menu to set up your Vant

Vantage RADIUS User’s Guide Table of Contents vii Table of Contents Copyright...

Vantage RADIUS Server User’s Guide 5-8 RADIUS Configuration Accounting Port Enter the port number of the accounting server. The default port number i

Vantage RADIUS Server User’s Guide RADIUS Configuration 5-9Description Click the button in this field to edit the information required to access you

Vantage RADIUS Server User’s Guide 5-10 RADIUS Configuration Description Type a description for identification purposes of your wireless AP in the Al

Vantage RADIUS Server User’s Guide RADIUS Configuration 5-11Table 5-5 RADIUS Add New Network Address LABEL DESCRIPTION Allowed Network Address Networ

Vantage RADIUS Server User’s Guide 5-12 RADIUS Configuration Table 5-6 User Account LABEL DESCRIPTION User Account List The maximum number of configu

Vantage RADIUS Server User’s Guide RADIUS Configuration 5-13The following table describes the labels in this screen. Table 5-7 User Account: Add New

Vantage RADIUS Server User’s Guide 5-14 RADIUS Configuration Step 2. Click Install Certificate to open the Certificate Import Wizard as shown below.

Vantage RADIUS Server User’s Guide RADIUS Configuration 5-15Step 3. Click Automatically select the certificate store based on the type of certificat

Vantage RADIUS Server User’s Guide 5-16 RADIUS Configuration Step 5. Click OK to complete the installation. 5.9 Setting Up Your Access Point (AP)

Vantage RADIUS Server User’s Guide RADIUS Configuration 5-17Figure 5-9 ZyAIR RADIUS Settings Example 5.9.2 ZyAIR G-3000 Wireless Authentication Setu

Vantage RADIUS User’s Guide viii Table of Contents 3.8 Basic Network Configuration ...

Vantage RADIUS Server User’s Guide 5-18 RADIUS Configuration The authentication database contains wireless station login information. Vantage RADIUS

Maintenance and Management III Part III: Maintenance and Management This part explains how to maintain and manage your Vantage RADIUS.

Vantage RADIUS User’s Guide Maintenance 6-1Chapter 6 Maintenance This chapter covers system maintenance screens 6.1 Overview The maintenance scre

Vantage RADIUS User’s Guide 6-2 Maintenance Figure 6-1 System Status The following table describes the labels in this screen. Table 6-1 System St

Vantage RADIUS User’s Guide Maintenance 6-3Table 6-1 System Status LABEL DESCRIPTION NAS ID This field displays the wireless client’s IP address. N

Vantage RADIUS User’s Guide 6-4 Maintenance Figure 6-3 F/W Upload LABEL DESCRIPTION Update firmware from local file. Local PC File Path Type in th

Vantage RADIUS User’s Guide Maintenance 6-56.4 Configuration Click MAINTENANCE, and then the Configuration tab. Use this screen to backup or restore

Vantage RADIUS User’s Guide 6-6 Maintenance Table 6-2 Configuration Backup LABEL DESCRIPTION Remote TFTP Server Type the IP address of the TFTP se

Vantage RADIUS User’s Guide Maintenance 6-7 Figure 6-6 Network Temporarily Disconnected If you uploaded the default configuration file you may need t

Vantage RADIUS User’s Guide Table of Contents ix 5.7 User Account...

Vantage RADIUS User’s Guide Management 7-1Chapter 7 Management This chapter details how to configure your Vantage RADIUS for remote access 7.1 R

Vantage RADIUS User’s Guide 7-2 Management 7.1.2 System Timeout There is a system timeout of five minutes (three hundred seconds) for either the

Vantage RADIUS User’s Guide Management 7-3 Figure 7-1 HTTPS Implementation If you disable HTTP (Disable) in the REMOTE ACCESS screen, then Vantage RA

Vantage RADIUS User’s Guide 7-4 Management 7.3.1 How SSH works The following table summarizes how a secure connection is established between two re

Vantage RADIUS User’s Guide Management 7-57.4.1 Example 1: Microsoft Windows This section describes how to access Vantage RADIUS using the Secure S

Vantage RADIUS User’s Guide 7-6 Management A message displays indicating the SSH protocol version supported by Vantage RADIUS. Figure 7-5 SSH Exa

Vantage RADIUS User’s Guide Management 7-7 Figure 7-7 Telnet Configuration on a TCP/IP Network 7.6 Remote Access To configure your Vantage RADIUS for

Vantage RADIUS User’s Guide 7-8 Management Figure 7-8 Remote Access Table 7-1 Remote Access LABEL DESCRIPTION Allowed Access Type Allow Any IP Add

Vantage RADIUS User’s Guide Management 7-9Table 7-1 Remote Access LABEL DESCRIPTION SSH SSH (Secure Shell) is a secure communication protocol that c