ZyXEL Communications G-3000 Guide de l'utilisateur

G-3000H802.11g Wireless Access PointUser’s GuideVersion 3.50 11/2005

G-3000H User’s Guide10 Table of Contents3.1.3 WEP Encryption ...4

G-3000H User’s Guide100 Chapter 7 Multiple ESS, SSID and VLAN7.2.2 Second Rx VLAN IDThe ZyAIR tags Ethernet frames in VLAN 1 with VLAN ID 1 and tags

G-3000H User’s GuideChapter 7 Multiple ESS, SSID and VLAN 101

G-3000H User’s Guide102 Chapter 7 Multiple ESS, SSID and VLAN

G-3000H User’s GuideChapter 8 Other Wireless Configurations 103CHAPTER 8Other Wireless ConfigurationsThis chapter describes how to configure the Layer

G-3000H User’s Guide104 Chapter 8 Other Wireless ConfigurationsFigure 45 Layer-2 Isolation ApplicationMAC addresses that are not listed in the Allow

G-3000H User’s GuideChapter 8 Other Wireless Configurations 105Figure 46 Layer-2 Isolation Configuration ScreenThe following table describes the lab

G-3000H User’s Guide106 Chapter 8 Other Wireless ConfigurationsFigure 47 Layer-2 Isolation Example8.2.2 Layer-2 Isolation Example 1In the following

G-3000H User’s GuideChapter 8 Other Wireless Configurations 107• Select the Enable Layer-2 Isolation check box.• Enter C’s MAC address in the Allow de

G-3000H User’s Guide108 Chapter 8 Other Wireless ConfigurationsFigure 50 Layer-2 Isolation Example 38.3 Configuring MAC FilterThe MAC filter screen

G-3000H User’s GuideChapter 8 Other Wireless Configurations 109Figure 51 MAC Address FilterThe following table describes the labels in this screen.N

G-3000H User’s GuideTable of Contents 116.1.2 Authentication ...

G-3000H User’s Guide110 Chapter 8 Other Wireless ConfigurationsThe roaming feature on the access points allows the access points to relay information

G-3000H User’s GuideChapter 8 Other Wireless Configurations 1118.4.1 Requirements for RoamingThe following requirements must be met in order for wire

G-3000H User’s Guide112 Chapter 8 Other Wireless Configurations

G-3000H User’s GuideChapter 9 VLAN 113CHAPTER 9VLANThis chapter discusses how to configure VLAN on the ZyAIR.9.1 VLANA VLAN (Virtual Local Area Netwo

G-3000H User’s Guide114 Chapter 9 VLANFigure 54 VLANThe following table describes the labels in this screen.Table 34 VLANLABEL DESCRIPTIONEnable V

G-3000H User’s GuideChapter 9 VLAN 1159.2.1 Configuring Management VLAN ExampleThis section shows you how to create a VLAN on an Ethernet switch.By d

G-3000H User’s Guide116 Chapter 9 VLAN5 Type a VLAN Group ID. This should be the same as the management VLAN ID on the ZyAIR. 6 Enable Tx Tagging on t

G-3000H User’s GuideChapter 9 VLAN 1173 Click Apply. Figure 59 VLAN Setup4 The ZyAIR attempts to connect with a VLAN-aware device. You can now acce

G-3000H User’s Guide118 Chapter 9 VLAN1 When you configure your wireless credentials, the ZyAIR sends the information to the IAS server using RADIUS p

G-3000H User’s GuideChapter 9 VLAN 119• The IAS uses group memberships to determine which user accounts belong to which VLAN groups. Click the Add but

G-3000H User’s Guide12 Table of Contents8.2 Configuring Layer-2 Isolation ...1

G-3000H User’s Guide120 Chapter 9 VLANFigure 62 New Remote Access Policy for VLAN Group 2 The Conditions window displays. Select Add to add a condit

G-3000H User’s GuideChapter 9 VLAN 121Figure 64 Adding VLAN Group 6 When the Permissions options screen displays, select Grant remote access permiss

G-3000H User’s Guide122 Chapter 9 VLANFigure 66 Authentication Tab Settings 8 Click the Encryption tab. Select the Strongest encryption option. This

G-3000H User’s GuideChapter 9 VLAN 123Figure 68 Connection Attributes Screen 11The RADIUS Attribute screen displays. From the list, three RADIUS att

G-3000H User’s Guide124 Chapter 9 VLANFigure 69 RADIUS Attribute Screen 12 The Enumerable Attribute Information screen displays. Select the 802 valu

G-3000H User’s GuideChapter 9 VLAN 125Figure 71 VLAN ID Attribute Setting for Tunnel-Pvt-Group-ID 15Return to the RADIUS Attribute Screen shown as F

G-3000H User’s Guide126 Chapter 9 VLANFigure 73 Completed Advanced Tab Note: Repeat the Configuring Remote Access Policies procedure for each VLAN

G-3000H User’s GuideChapter 10 IP Screen 127CHAPTER 10IP ScreenThis chapter discusses how to configure IP on the ZyAIR10.1 Factory Ethernet DefaultsT

G-3000H User’s Guide128 Chapter 10 IP ScreenNote: Regardless of your particular situation, do not create an arbitrary IP address; always follow the gu

G-3000H User’s GuideChapter 11 Certificates 129CHAPTER 11CertificatesThis chapter gives background information about public-key certificates and expla

G-3000H User’s GuideTable of Contents 13Chapter 12Remote Management Screens ...

G-3000H User’s Guide130 Chapter 11 Certificates11.1.1 Advantages of CertificatesCertificates offer the following benefits.• The ZyAIR only has to sto

G-3000H User’s GuideChapter 11 Certificates 131Figure 75 My CertificatesThe following table describes the labels in this screen.Table 38 My Certif

G-3000H User’s Guide132 Chapter 11 Certificates11.5 Certificate File FormatsThe certification authority certificate that you want to import has to be

G-3000H User’s GuideChapter 11 Certificates 133• PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses 64 ASCII characters to con

G-3000H User’s Guide134 Chapter 11 Certificates11.7 Creating a CertificateClick CERTIFICATES, My Certificates and then Create to open the My Certific

G-3000H User’s GuideChapter 11 Certificates 135Organizational Unit Type up to 127 characters to identify the organizational unit or department to whic

G-3000H User’s Guide136 Chapter 11 CertificatesAfter you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyAIR is

G-3000H User’s GuideChapter 11 Certificates 137Figure 78 My Certificate DetailsThe following table describes the labels in this screen.Table 41 My

G-3000H User’s Guide138 Chapter 11 CertificatesCertificate Path Click the Refresh button to have this read-only text box display the hierarchy of cert

G-3000H User’s GuideChapter 11 Certificates 13911.9 Trusted CAsClick CERTIFICATES, Trusted CAs to open the Trusted CAs screen. This screen displays a

G-3000H User’s Guide14 Table of ContentsChapter 16General Setup...

G-3000H User’s Guide140 Chapter 11 CertificatesFigure 79 Trusted CAsThe following table describes the labels in this screen.Table 42 Trusted CAsLA

G-3000H User’s GuideChapter 11 Certificates 14111.10 Importing a Trusted CA’s CertificateClick CERTIFICATES, Trusted CAs to open the Trusted CAs scre

G-3000H User’s Guide142 Chapter 11 Certificates11.11 Trusted CA Certificate DetailsClick CERTIFICATES, Trusted CAs to open the Trusted CAs screen. Cl

G-3000H User’s GuideChapter 11 Certificates 143Figure 81 Trusted CA DetailsThe following table describes the labels in this screen.Table 44 Truste

G-3000H User’s Guide144 Chapter 11 CertificatesCertificate Path Click the Refresh button to have this read-only text box display the end entity’s cert

G-3000H User’s GuideChapter 11 Certificates 145CRL Distribution PointsThis field displays how many directory servers with Lists of revoked certificate

G-3000H User’s Guide146 Chapter 11 Certificates

G-3000H User’s GuideChapter 12 Remote Management Screens 147CHAPTER 12Remote Management ScreensThis chapter provides information on the Remote Managem

G-3000H User’s Guide148 Chapter 12 Remote Management Screens12.1.2 Remote Management and NATWhen NAT is enabled:• Use the ZyAIR’s WAN IP address when

G-3000H User’s GuideChapter 12 Remote Management Screens 149Figure 82 Remote Management: WWWThe following table describes the labels in this screen.

G-3000H User’s GuideTable of Contents 15Chapter 23Firmware and Configuration File Maintenance ... 20723.

G-3000H User’s Guide150 Chapter 12 Remote Management Screens12.3 Configuring TelnetYou can configure your ZyAIR for remote Telnet access as shown nex

G-3000H User’s GuideChapter 12 Remote Management Screens 151Figure 84 Remote Management: TelnetThe following table describes the labels in this scre

G-3000H User’s Guide152 Chapter 12 Remote Management ScreensFigure 85 Remote Management: FTPThe following table describes the labels in this screen.

G-3000H User’s GuideChapter 12 Remote Management Screens 153Figure 86 SNMP Management ModelAn SNMP managed network consists of two main types of com

G-3000H User’s Guide154 Chapter 12 Remote Management Screens12.6.1 Supported MIBsThe ZyAIR supports MIB II that is defined in RFC-1213 and RFC-1215 a

G-3000H User’s GuideChapter 12 Remote Management Screens 15512.7 SNMP Traps Some traps include an SNMP interface index. The following table maps the

G-3000H User’s Guide156 Chapter 12 Remote Management ScreensFigure 87 Remote Management: SNMPThe following table describes the labels in this screen

G-3000H User’s GuideChapter 13 Log Screens 157CHAPTER 13Log ScreensThis chapter contains information about configuring general log settings and viewin

G-3000H User’s Guide158 Chapter 13 Log Screens13.2 Configuring Log SettingsTo change your ZyAIR’s log settings, click the LOGS links under ADVANCED a

G-3000H User’s GuideChapter 13 Log Screens 159Figure 89 Log SettingsThe following table describes the labels in this screen.Table 52 Log SettingsL

G-3000H User’s Guide16 Table of ContentsAppendix B Specifications...

G-3000H User’s Guide160 Chapter 13 Log ScreensLog Schedule This drop-down menu is used to configure the frequency of log messages being sent as E-mail

G-3000H User’s GuideChapter 14 Maintenance 161CHAPTER 14MaintenanceThis chapter displays system information such as ZyNOS firmware, port IP addresses

G-3000H User’s Guide162 Chapter 14 Maintenance14.2.1 System StatisticsRead-only information here includes port status, packet specific statistics and

G-3000H User’s GuideChapter 14 Maintenance 16314.3 Association ListView the wireless stations that are currently associated to the ZyAIR in the Assoc

G-3000H User’s Guide164 Chapter 14 Maintenance14.4 Channel UsageThe Channel Usage screen shows whether a channel is used by another wireless network

G-3000H User’s GuideChapter 14 Maintenance 165Figure 93 Channel UsageThe following table describes the labels in this screen.Table 56 Channel Usag

G-3000H User’s Guide166 Chapter 14 Maintenance14.5 F/W Upload ScreenFind firmware at www.zyxel.com in a file that (usually) uses the system model nam

G-3000H User’s GuideChapter 14 Maintenance 167After you see the Firmware Upload in Process screen, wait two minutes before logging into the ZyAIR agai

G-3000H User’s Guide168 Chapter 14 MaintenanceFigure 97 Firmware Upload Error14.6 Configuration ScreenSee the Firmware and Configuration File Maint

G-3000H User’s GuideChapter 14 Maintenance 169Click Backup to save the ZyAIR’s current configuration to your computer.14.6.2 Restore Configuration Re

G-3000H User’s GuideList of Figures 17List of FiguresFigure 1 PoE Installation Example ...

G-3000H User’s Guide170 Chapter 14 MaintenanceFigure 101 Configuration Upload Error14.6.3 Back to Factory DefaultsPressing the Reset button in this

G-3000H User’s GuideChapter 15 Introducing the SMT 171CHAPTER 15Introducing the SMTThis chapter describes how to access the SMT and provides an overvi

G-3000H User’s Guide172 Chapter 15 Introducing the SMTFigure 105 Menu 23.1 System Security: Change Password 4 Type your new system password in the N

G-3000H User’s GuideChapter 15 Introducing the SMT 17315.4 Navigating the SMT InterfaceThe SMT (System Management Terminal) is the interface that you

G-3000H User’s Guide174 Chapter 15 Introducing the SMTAfter you enter the password, the SMT displays the main menu, as shown next.Figure 106 G-3000H

G-3000H User’s GuideChapter 15 Introducing the SMT 17524 System Maintenance This menu provides system status, diagnostics, software upload, etc.99 Exi

G-3000H User’s Guide176 Chapter 15 Introducing the SMT

G-3000H User’s GuideChapter 16 General Setup 177CHAPTER 16General SetupThe chapter shows you the information on general setup.16.1 General SetupMenu

G-3000H User’s Guide178 Chapter 16 General SetupFirst/Second/Third System DNS ServerPress [SPACE BAR] to select From DHCP, User Defined or None and pr

G-3000H User’s GuideChapter 17 LAN Setup 179CHAPTER 17LAN SetupThis chapter shows you how to configure the LAN on your ZyAIR.17.1 LAN SetupThis secti

G-3000H User’s Guide18 List of FiguresFigure 39 Multi-ESS with VLAN Example ...

G-3000H User’s Guide180 Chapter 17 LAN SetupFigure 109 Menu 3.2 TCP/IP SetupFollow the instructions in the following table on how to configure the f

G-3000H User’s GuideChapter 17 LAN Setup 181Figure 110 Menu 3.5 Wireless LAN SetupThe following table describes the fields in this menu.

G-3000H User’s Guide182 Chapter 17 LAN Setup17.3.1 Configuring MAC Address FilterYour ZyAIR checks the MAC address of the wireless station device aga

G-3000H User’s GuideChapter 17 LAN Setup 183Figure 111 Menu 3.5 Wireless LAN Setup3 Press [SPACE BAR] to select Access Point or AP + Bridge in the O

G-3000H User’s Guide184 Chapter 17 LAN SetupThe following table describes the fields in this menu.17.3.2 Configuring RoamingEnable the roaming featur

G-3000H User’s GuideChapter 17 LAN Setup 185Figure 113 Menu 3.5 Wireless LAN Setup3 Move the cursor to the Edit Roaming Configuration field. Press [

G-3000H User’s Guide186 Chapter 17 LAN Setup17.3.3 Configuring SSID ProfilesFollow the steps below to configure SSID profiles on your ZyAIR.1 From th

G-3000H User’s GuideChapter 17 LAN Setup 187Figure 116 Menu 3.5.6 - SSID Profile EditThe following table describes the fields in this menu.17.3.4 C

G-3000H User’s Guide188 Chapter 17 LAN SetupFigure 117 Menu 3.5 Wireless LAN Setup3 In the Operating Mode field, press [SPACE BAR] to select Bridge

G-3000H User’s GuideChapter 17 LAN Setup 189Figure 118 Menu 3.5.4 Bridge Link ConfigurationThe following table describes the fields in this menu.17.

G-3000H User’s GuideList of Figures 19Figure 82 Remote Management: WWW ...

G-3000H User’s Guide190 Chapter 17 LAN SetupFigure 119 Menu 3.5 Wireless LAN Setup3 Move the cursor to the Edit Layer-2 Isolation field. Press [SPAC

G-3000H User’s GuideChapter 17 LAN Setup 191The following table describes the fields in this menu.Table 69 Menu 3.5.5 Layer-2 IsolationFIELD DESCRIP

G-3000H User’s Guide192 Chapter 17 LAN Setup

G-3000H User’s GuideChapter 18 Dial-in User Setup 193CHAPTER 18Dial-in User SetupThis chapter shows you how to create user accounts on the ZyAIR. 18.1

G-3000H User’s Guide194 Chapter 18 Dial-in User SetupFigure 122 Menu 14.1- Edit Dial-in UserThe following table describes the fields in this screen.

G-3000H User’s GuideChapter 19 VLAN Setup 195CHAPTER 19VLAN SetupThis chapter explains VLAN Setup menu 16. Refer to the Multiple-ESS and VLAN chapter

G-3000H User’s Guide196 Chapter 19 VLAN SetupActive To enable a VLAN mapping profile, press [SPACE BAR] to select Yes and press [ENTER].ID Press [SPAC

G-3000H User’s GuideChapter 20 SNMP Configuration 197CHAPTER 20SNMP ConfigurationThis chapter explains SNMP Configuration menu 22. See the web configu

G-3000H User’s Guide198 Chapter 20 SNMP ConfigurationDestination Type the IP address of the station to send your SNMP traps to.When you have completed

G-3000H User’s GuideChapter 21 System Security 199CHAPTER 21System SecurityThis chapter describes how to configure the system security on the ZyAIR. 2

G-3000H User’s Guide2 CopyrightCopyrightCopyright © 2005 by ZyXEL Communications Corporation.The contents of this publication may not be reproduced in

G-3000H User’s Guide20 List of FiguresFigure 125 Menu 23 System Security ...

G-3000H User’s Guide200 Chapter 21 System SecurityFigure 126 Menu 23 - System SecurityFrom Menu 23 - System Security, enter 5 to display Menu 23.5 –

G-3000H User’s GuideChapter 22 System Information and Diagnosis 201CHAPTER 22System Information andDiagnosisThis chapter covers the information and di

G-3000H User’s Guide202 Chapter 22 System Information and DiagnosisFigure 129 Menu 24.1 System Maintenance: StatusThe following table describes the

G-3000H User’s GuideChapter 22 System Information and Diagnosis 20322.2 System InformationTo get to the System Information:1 Enter 24 to display Menu

G-3000H User’s Guide204 Chapter 22 System Information and Diagnosis22.2.2 Console Port SpeedYou can set up different port speeds for the console port

G-3000H User’s GuideChapter 22 System Information and Diagnosis 205Figure 133 Menu 24.3 System Maintenance: Log and Trace3 Enter 1 from Menu 24.3 –

G-3000H User’s Guide206 Chapter 22 System Information and Diagnosis1 From the main menu, type 24 to open Menu 24 – System Maintenance.2 From this menu

G-3000H User’s GuideChapter 23 Firmware and Configuration File Maintenance 207CHAPTER 23Firmware and Configuration FileMaintenanceThis chapter tells y

G-3000H User’s Guide208 Chapter 23 Firmware and Configuration File MaintenanceThe following table is a summary. Please note that the internal filename

G-3000H User’s GuideChapter 23 Firmware and Configuration File Maintenance 209Figure 136 Menu 24.5 Backup Configuration23.2.2 Using the FTP command

G-3000H User’s GuideList of Figures 21Figure 168 Macintosh OS 8/9: TCP/IP ...

G-3000H User’s Guide210 Chapter 23 Firmware and Configuration File MaintenanceFigure 137 FTP Session ExampleThe following table describes some of th

G-3000H User’s GuideChapter 23 Firmware and Configuration File Maintenance 2113 Enter command “sys stdio 0” to disable the SMT timeout, so the TFTP tr

G-3000H User’s Guide212 Chapter 23 Firmware and Configuration File MaintenanceFigure 138 System Maintenance: Backup Configuration2 The following scr

G-3000H User’s GuideChapter 23 Firmware and Configuration File Maintenance 21323.3.1 Restore Using FTPFor details about backup using (T)FTP please re

G-3000H User’s Guide214 Chapter 23 Firmware and Configuration File Maintenance23.4.1 Firmware UploadFTP is the preferred method for uploading the fir

G-3000H User’s GuideChapter 23 Firmware and Configuration File Maintenance 215To transfer the firmware and the configuration file, follow these exampl

G-3000H User’s Guide216 Chapter 23 Firmware and Configuration File Maintenance2 Put the SMT in command interpreter (CI) mode by entering 8 in Menu 24

G-3000H User’s GuideChapter 23 Firmware and Configuration File Maintenance 217Figure 147 Menu 24.7.1 as seen using the Console PortAfter the "S

G-3000H User’s Guide218 Chapter 23 Firmware and Configuration File MaintenanceFigure 149 Menu 24.7.2 as seen using the Console Port 2 After the &quo

G-3000H User’s GuideChapter 24 System Maintenance and Information 219CHAPTER 24System Maintenance andInformationThis chapter leads you through SMT men

G-3000H User’s Guide22 List of Figures

G-3000H User’s Guide220 Chapter 24 System Maintenance and InformationFigure 151 Menu 24 System MaintenanceFigure 152 Valid CI Commands24.1.1 CNM

G-3000H User’s GuideChapter 24 System Maintenance and Information 221Figure 153 CNM CLThe following table describes the commands in this screen. All

G-3000H User’s Guide222 Chapter 24 System Maintenance and InformationmanagerIp[addr]This command displays the public IP address of the Vantage CNM ser

G-3000H User’s GuideChapter 24 System Maintenance and Information 22324.1.3 Configuration ExampleThis is an example allowing Vantage CNM server (on t

G-3000H User’s Guide224 Chapter 24 System Maintenance and InformationFigure 154 CNM Configuration Example24.2 Time and Date Setting The ZyAIR keeps

G-3000H User’s GuideChapter 24 System Maintenance and Information 225time manually or get the current time and date from an external server when you t

G-3000H User’s Guide226 Chapter 24 System Maintenance and Information24.2.1 Resetting the TimeThe ZyAIR resets the time in three instances:1 On leavi

G-3000H User’s GuideChapter 24 System Maintenance and Information 22724.3.3 WebYou can use the ZyAIR’s embedded web configurator for configuration an

G-3000H User’s Guide228 Chapter 24 System Maintenance and InformationFigure 157 Menu 24.11 Remote Management ControlThe following table describes th

G-3000H User’s GuideChapter 24 System Maintenance and Information 22924.3.5 Remote Management LimitationsRemote management over LAN or WAN will not w

G-3000H User’s GuideList of Tables 23List of TablesTable 1 IEEE 802.11b ...

G-3000H User’s Guide230 Chapter 24 System Maintenance and Information

G-3000H User’s GuideAppendix A Troubleshooting 231Appendix ATroubleshootingThis appendix covers potential problems and possible remedies. After each p

G-3000H User’s Guide232 Appendix A TroubleshootingProblems with the PasswordProblems with TelnetProblems with the WLAN InterfaceTable 85 Troubleshoo

G-3000H User’s GuideAppendix B Specifications 233Appendix B SpecificationsHardwareFirmwareTable 88 HardwarePower Specification DC 12V 1200mAOperatio

G-3000H User’s Guide234 Appendix B SpecificationsDiagnostics Capabilities The access point can perform self-diagnostic tests. These tests check the in

G-3000H User’s GuideAppendix C Power over Ethernet (PoE) Specifications 235Appendix CPower over Ethernet (PoE)SpecificationsYou can use a power over E

G-3000H User’s Guide236 Appendix C Power over Ethernet (PoE) Specifications

G-3000H User’s GuideAppendix D Brute-Force Password Guessing Protection 237Appendix DBrute-Force Password GuessingProtectionThe following describes th

G-3000H User’s Guide238 Appendix D Brute-Force Password Guessing Protection

G-3000H User’s GuideAppendix E Setting up Your Computer’s IP Address 239Appendix ESetting up Your Computer’s IP AddressAll computers must have a 10M o

G-3000H User’s Guide24 List of TablesTable 39 My Certificate Import ...

G-3000H User’s Guide240 Appendix E Setting up Your Computer’s IP AddressFigure 158 WIndows 95/98/Me: Network: ConfigurationInstalling ComponentsThe

G-3000H User’s GuideAppendix E Setting up Your Computer’s IP Address 2413 Select Microsoft from the list of manufacturers.4 Select Client for Microsof

G-3000H User’s Guide242 Appendix E Setting up Your Computer’s IP AddressFigure 160 Windows 95/98/Me: TCP/IP Properties: DNS Configuration4 Click the

G-3000H User’s GuideAppendix E Setting up Your Computer’s IP Address 243Figure 161 Windows XP: Start Menu2 For Windows XP, click Network Connections

G-3000H User’s Guide244 Appendix E Setting up Your Computer’s IP AddressFigure 163 Windows XP: Control Panel: Network Connections: Properties4 Selec

G-3000H User’s GuideAppendix E Setting up Your Computer’s IP Address 245• If you have a static IP address click Use the following IP Address and fill

G-3000H User’s Guide246 Appendix E Setting up Your Computer’s IP Address• Click Obtain DNS server address automatically if you do not know your DNS se

G-3000H User’s GuideAppendix E Setting up Your Computer’s IP Address 247Figure 167 Macintosh OS 8/9: Apple Menu2 Select Ethernet built-in from the C

G-3000H User’s Guide248 Appendix E Setting up Your Computer’s IP Address4 For statically assigned settings, do the following:•From the Configure box,

G-3000H User’s GuideAppendix E Setting up Your Computer’s IP Address 249Figure 170 Macintosh OS X: Network4 For statically assigned settings, do the

G-3000H User’s GuideList of Tables 25Table 82 Menu 24.11 Remote Management Control ... 228Tabl

G-3000H User’s Guide250 Appendix E Setting up Your Computer’s IP Address

G-3000H User’s GuideAppendix F IP Address Assignment Conflicts 251Appendix FIP Address Assignment ConflictsThis appendix describes situations where IP

G-3000H User’s Guide252 Appendix F IP Address Assignment ConflictsFigure 172 IP Address Conflicts: Case BTo solve this problem, make sure the ZyAIR

G-3000H User’s GuideAppendix F IP Address Assignment Conflicts 253Figure 174 IP Address Conflicts: Case DThis problem can be solved by adding a VLAN

G-3000H User’s Guide254 Appendix F IP Address Assignment Conflicts

G-3000H User’s GuideAppendix G Wireless LANs 255Appendix GWireless LANsWireless LAN TopologiesThis section discusses ad-hoc and infrastructure wireles

G-3000H User’s Guide256 Appendix G Wireless LANsFigure 176 Basic Service SetESSAn Extended Service Set (ESS) consists of a series of overlapping BSS

G-3000H User’s GuideAppendix G Wireless LANs 257Figure 177 Infrastructure WLANChannelA channel is the radio frequency(ies) used by IEEE 802.11a/b/g

G-3000H User’s Guide258 Appendix G Wireless LANsFigure 178 RTS/CTSWhen station A sends data to the AP, it might not know that the station B is alre

G-3000H User’s GuideAppendix G Wireless LANs 259A large Fragmentation Threshold is recommended for networks not prone to interference while you should

G-3000H User’s Guide26 List of Tables

G-3000H User’s Guide260 Appendix G Wireless LANsIEEE 802.1xIn June 2001, the IEEE 802.1x standard was designed to extend the features of IEEE 802.11 t

G-3000H User’s GuideAppendix G Wireless LANs 261• Access-ChallengeSent by a RADIUS server requesting more information in order to allow access. The ac

G-3000H User’s Guide262 Appendix G Wireless LANsEAP-TLS (Transport Layer Security)With EAP-TLS, digital certifications are needed by both the server a

G-3000H User’s GuideAppendix G Wireless LANs 263The following table is a comparison of the features of authentication types.WPA(2)Wi-Fi Protected Acce

G-3000H User’s Guide264 Appendix G Wireless LANsThe Message Integrity Check (MIC) is designed to prevent an attacker from capturing data packets, alte

G-3000H User’s GuideAppendix G Wireless LANs 265Shared WEP No Enable with Dynamic WEP KeyYes Enable without Dynamic WEP KeyYes Disable WPA WEP No Yes

G-3000H User’s Guide266 Appendix G Wireless LANs

G-3000H User’s GuideAppendix H IP Subnetting 267Appendix HIP SubnettingIP Addressing Routers “route” based on the network number. The router that deli

G-3000H User’s Guide268 Appendix H IP SubnettingSince the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” add

G-3000H User’s GuideAppendix H IP Subnetting 269Since the mask is always a continuous number of ones beginning from the left, followed by a continuous

G-3000H User’s GuidePreface 27PrefaceCongratulations on your purchase of the G-3000H - 802.11g Wireless Access Point/Bridge/Repeater.An AP acts as a b

G-3000H User’s Guide270 Appendix H IP SubnettingNote: In the following charts, shaded/bolded last octet bit values indicate host ID bits “borrowed” to

G-3000H User’s GuideAppendix H IP Subnetting 271Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” a

G-3000H User’s Guide272 Appendix H IP SubnettingExample Eight SubnetsSimilarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110). T

G-3000H User’s GuideAppendix H IP Subnetting 273Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask al

G-3000H User’s Guide274 Appendix H IP Subnetting

G-3000H User’s GuideAppendix I Command Interpreter 275Appendix ICommand InterpreterThe following describes how to use the command interpreter. Enter 2

G-3000H User’s Guide276 Appendix I Command Interpreter

G-3000H User’s GuideAppendix J Log Descriptions 277Appendix JLog DescriptionsThis appendix provides descriptions of example log messages.Table 110 S

G-3000H User’s Guide278 Appendix J Log DescriptionsLog CommandsGo to the command interpreter interface (the Command Interpreter appendix explains how

G-3000H User’s GuideAppendix J Log Descriptions 279Use sys logs category followed by a log category and a parameter to decide what to record Use the s

G-3000H User’s Guide28 PrefaceUser Guide Feedback Help us help you! E-mail all User Guide-related comments, questions or suggestions for improvement t

G-3000H User’s Guide280 Appendix J Log Descriptions

G-3000H User’s GuideAppendix K Indoor Installation Recommendations 281Appendix KIndoor Installation RecommendationsAn antenna couples RF signals onto

G-3000H User’s Guide282 Appendix K Indoor Installation Recommendations• Omni-directional antennas send the RF signal out in all directions on a horizo

G-3000H User’s GuideAppendix L Power Adaptor Specifications 283Appendix LPower Adaptor SpecificationsTable 114 North American Plug StandardsAC Power

G-3000H User’s Guide284 Appendix L Power Adaptor Specifications

G-3000H User’s GuideIndex 285IndexAAddress Assignment 48, 127Alternative Subnet Mask Notation 269AntennaDirectional 282Omni-directional 282Antenna gai

G-3000H User’s Guide286 IndexFFilename Conventions 207Finland, Contact Information 6Firmware FileMaintenance 166Fragment Threshold 181Fragmentation Th

G-3000H User’s GuideIndex 287PHB (Per-Hop Behavior) 61Ping 206PoE 32, 235Power over Ethernet 32Power Specification 235Preamble Mode 259Priorities 60Pr

G-3000H User’s Guide288 IndexTFTP File Transfer 215TFTP Restrictions 147Time and Date Setting 225Time Setting 53Time Zone 226ToS 60Trace Records 204Tr

G-3000H User’s GuidePreface 29Graphics Icons KeyZyAIR Computer Notebook computerServer DSLAM FirewallModem Switch Router Wireless Signal

G-3000H User’s GuideFederal Communications Commission (FCC) Interference Statement 3Federal CommunicationsCommission (FCC) InterferenceStatementThis d

G-3000H User’s Guide30 Preface

G-3000H User’s GuideChapter 1 Getting to Know Your ZyAIR 31CHAPTER 1Getting to Know Your ZyAIRThis chapter introduces the main features and applicatio

G-3000H User’s Guide32 Chapter 1 Getting to Know Your ZyAIRZyAIR LEDThe blue ZyAIR LED (also known as the Breathing LED) is on when the ZyAIR is on an

G-3000H User’s GuideChapter 1 Getting to Know Your ZyAIR 33VLANA VLAN (Virtual Local Area Network) allows a physical network to be partitioned into mu

G-3000H User’s Guide34 Chapter 1 Getting to Know Your ZyAIRThe 802.11b data rate and corresponding modulation techniques are shown in the table below.

G-3000H User’s GuideChapter 1 Getting to Know Your ZyAIR 35Limit the number of Client ConnectionsYou may set a maximum number of wireless stations tha

G-3000H User’s Guide36 Chapter 1 Getting to Know Your ZyAIRFull Network Management The embedded web configurator is an all-platform web-based utility

G-3000H User’s GuideChapter 1 Getting to Know Your ZyAIR 371.3.1 Access Point The ZyAIR is an ideal access solution for wireless Internet connection.

G-3000H User’s Guide38 Chapter 1 Getting to Know Your ZyAIRFigure 4 Multiple ESS Application1.3.3 AP + BridgeIn AP+Bridge mode, the ZyAIR supports

G-3000H User’s GuideChapter 1 Getting to Know Your ZyAIR 39Figure 5 AP+Bridge Application 1.3.4 Bridge / RepeaterThe ZyAIR can act as a wireless n

G-3000H User’s Guide4 Federal Communications Commission (FCC) Interference StatementCertificationsGo to www.zyxel.com1 Select your product from the dr

G-3000H User’s Guide40 Chapter 1 Getting to Know Your ZyAIRFigure 6 Bridge ApplicationFigure 7 Repeater Application

G-3000H User’s GuideChapter 2 Introducing the Web Configurator 41CHAPTER 2Introducing the WebConfiguratorThis chapter describes how to access the ZyAI

G-3000H User’s Guide42 Chapter 2 Introducing the Web ConfiguratorFigure 8 Change Password Screen6 Click Apply in the Replace Certificate screen to c

G-3000H User’s GuideChapter 2 Introducing the Web Configurator 432.2 Resetting the ZyAIRIf you forget your password or cannot access the web configur

G-3000H User’s Guide44 Chapter 2 Introducing the Web ConfiguratorNote: Follow the instructions you see in the MAIN MENU screen or click the icon (lo

G-3000H User’s GuideChapter 3 Wizard Setup 45CHAPTER 3Wizard SetupThis chapter provides information on the Wizard Setup screens in the web configurato

G-3000H User’s Guide46 Chapter 3 Wizard Setup3.2 Wizard Setup: General SetupGeneral Setup contains administrative and system-related information. Fig

G-3000H User’s GuideChapter 3 Wizard Setup 47Figure 12 Wizard 2: Wireless LAN SetupThe following table describes the labels in this screen.Table 4

G-3000H User’s Guide48 Chapter 3 Wizard Setup3.4 Wizard Setup: IP AddressThe third wizard screen allows you to configure IP address assignment.3.4.1

G-3000H User’s GuideChapter 3 Wizard Setup 49Once you have decided on the network number, pick an IP address that is easy to remember, for instance, 1

G-3000H User’s GuideZyXEL Limited Warranty 5ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is free from a

G-3000H User’s Guide50 Chapter 3 Wizard Setup3.5 Basic Setup CompleteWhen you click Finish in the Wizard 3 IP Address Assignment screen, a warning wi

G-3000H User’s GuideChapter 4 System Screens 51CHAPTER 4System Screens4.1 System OverviewThis section provides information on general system setup.4.

G-3000H User’s Guide52 Chapter 4 System Screens4.3 Configuring PasswordTo change your ZyAIR’s password (recommended), click the SYSTEM link under ADV

G-3000H User’s GuideChapter 4 System Screens 53Figure 16 Password.The following table describes the labels in this screen.4.4 Configuring Time Set

G-3000H User’s Guide54 Chapter 4 System ScreensFigure 17 Time SettingThe following table describes the labels in this screen.Table 9 Time SettingL

G-3000H User’s GuideChapter 4 System Screens 55Time Zone Choose the time zone of your location. This will set the time difference between your time zo

G-3000H User’s Guide56 Chapter 4 System Screens

G-3000H User’s GuideChapter 5 Wireless Configuration 57CHAPTER 5 Wireless ConfigurationThis chapter discusses how to configure Wireless screens on the

G-3000H User’s Guide58 Chapter 5 Wireless ConfigurationFigure 18 Basic Service set5.1.2 ESSAn Extended Service Set (ESS) consists of a series of ov

G-3000H User’s GuideChapter 5 Wireless Configuration 59Figure 19 Extended Service Set5.2 Wireless LAN Basics Refer also to the Wizard Setup chapter

G-3000H User’s Guide6 Customer SupportCustomer SupportPlease have the following information ready when you contact customer support.• Product model an

G-3000H User’s Guide60 Chapter 5 Wireless Configuration5.3 WMM QoSWMM (Wi-Fi MultiMedia) QoS (Quality of Service) ensures quality of service in wirel

G-3000H User’s GuideChapter 5 Wireless Configuration 615.3.2.1 DiffServDiffServ is a class of service (CoS) model that marks packets so that they rec

G-3000H User’s Guide62 Chapter 5 Wireless Configuration5.4 Spanning Tree Protocol (STP)STP detects and breaks network loops and provides backup links

G-3000H User’s GuideChapter 5 Wireless Configuration 63On each bridge, the root port is the port through which this bridge communicates with the root.

G-3000H User’s Guide64 Chapter 5 Wireless Configuration1 Configure the ZyAIR as an AP, an AP+Bridge, a Bridge/Repeater or to use multiple ESS in the W

G-3000H User’s GuideChapter 5 Wireless Configuration 65Figure 21 Wireless: Access PointThe following table describes the general wireless LAN labels

G-3000H User’s Guide66 Chapter 5 Wireless Configuration5.6.2 Bridge/Repeater ModeThe ZyAIR can act as a wireless network bridge and establish wireles

G-3000H User’s GuideChapter 5 Wireless Configuration 67In the example below, when both ZyAIRs are in Bridge/Repeater mode, they form a WDS (Wireless D

G-3000H User’s Guide68 Chapter 5 Wireless ConfigurationFigure 23 Bridge Loop: Two Bridges Connected to HubIf your ZyAIR (in bridge mode) is connecte

G-3000H User’s GuideChapter 5 Wireless Configuration 69Figure 25 Wireless: Bridge/RepeaterThe following table describes the bridge labels in this sc

G-3000H User’s GuideCustomer Support [email protected] +48-22-5286603 www.pl.zyxel.com ZyXEL Communicationsul.Emilli Plater 5300-113 WarszawaPo

G-3000H User’s Guide70 Chapter 5 Wireless ConfigurationSee Table 14 on page 65 for information on the other labels in this screen.5.6.3 AP+Bridge Mod

G-3000H User’s GuideChapter 5 Wireless Configuration 71Figure 26 Wireless: AP+BridgeSee the tables describing the fields in the Access Point and Bri

G-3000H User’s Guide72 Chapter 5 Wireless Configuration

G-3000H User’s GuideChapter 6 Wireless Security Configuration 73CHAPTER 6Wireless Security ConfigurationThis chapter describes how to use the Security

G-3000H User’s Guide74 Chapter 6 Wireless Security Configuration6.1.4 Hide ZyAIR IdentityIf you hide the ESSID, then the ZyAIR cannot be seen when a

G-3000H User’s GuideChapter 6 Wireless Security Configuration 75The following figure shows an overview of authentication when you specify a RADIUS ser

G-3000H User’s Guide76 Chapter 6 Wireless Security Configuration6.6.1 User Authentication WPA applies IEEE 802.1x and Extensible Authentication Proto

G-3000H User’s GuideChapter 6 Wireless Security Configuration 771 First enter identical passwords into the AP and all wireless clients. The Pre-Shared

G-3000H User’s Guide78 Chapter 6 Wireless Security ConfigurationFigure 29 WPA(2) with RADIUS Application Example6.8 Security ModesThe following tab

G-3000H User’s GuideChapter 6 Wireless Security Configuration 796.9 Security Modes and Wireless Client CompatibilityDifferent security modes can be c

G-3000H User’s Guide8 Customer Support

G-3000H User’s Guide80 Chapter 6 Wireless Security ConfigurationThe Funk Software's Odyssey client is bundled free (at the time of writing) with

G-3000H User’s GuideChapter 6 Wireless Security Configuration 81Figure 30 SecurityThe following table describes the labels in this screen.The next s

G-3000H User’s Guide82 Chapter 6 Wireless Security ConfigurationFigure 31 Security: No Access or NoneThe following table describes the labels in thi

G-3000H User’s GuideChapter 6 Wireless Security Configuration 836.12.3 Security: 802.1x Only, 802.1x Static 64-bit WEP, 128-bit WEPSelect 802.1x Only

G-3000H User’s Guide84 Chapter 6 Wireless Security ConfigurationFigure 33 Security: 802.1x Only, 802.1x Static 64-bit WEP, 128-bit WEPThe following

G-3000H User’s GuideChapter 6 Wireless Security Configuration 856.12.4 Security: 802.1x Dynamic 64-bit WEP, 128-bit WEPSelect 802.1x Dynamic 64 or 80

G-3000H User’s Guide86 Chapter 6 Wireless Security Configuration6.12.5 Security: WPA, WPA-MIX, WPA2, WPA2-MIXSelect WPA, WPA-MIX, WPA2 or WPA2-MIX in

G-3000H User’s GuideChapter 6 Wireless Security Configuration 87Figure 35 Security: WPA, WPA-MIX, WPA2 or WPA2-MIXThe following table describes the

G-3000H User’s Guide88 Chapter 6 Wireless Security ConfigurationFigure 36 Security: WPA-PSK, WPA2-PSK or WPA2-PSK-MIXThe following table describes t

G-3000H User’s GuideChapter 6 Wireless Security Configuration 896.13 Introduction to RADIUS RADIUS is based on a client-sever model that supports aut

G-3000H User’s GuideTable of Contents 9Table of ContentsCopyright ...

G-3000H User’s Guide90 Chapter 6 Wireless Security ConfigurationFigure 37 RADIUSThe following table describes the labels in this screen.Table 26 R

G-3000H User’s GuideChapter 6 Wireless Security Configuration 916.15 Configuring Local User DatabaseTo change your ZyAIR’s local user database, click

G-3000H User’s Guide92 Chapter 6 Wireless Security Configuration

G-3000H User’s GuideChapter 7 Multiple ESS, SSID and VLAN 93CHAPTER 7Multiple ESS, SSID and VLANThis chapter describes how to use configure multiple E

G-3000H User’s Guide94 Chapter 7 Multiple ESS, SSID and VLAN7.1.3 Multiple ESS ExampleRefer to the section on ZyAIR applications for more information

G-3000H User’s GuideChapter 7 Multiple ESS, SSID and VLAN 95Figure 40 Wireless: Multiple ESSThe following table describes the labels in this screen.

G-3000H User’s Guide96 Chapter 7 Multiple ESS, SSID and VLANSelect SSID Profile The SSID (Service Set IDentity) identifies the Service Set with which

G-3000H User’s GuideChapter 7 Multiple ESS, SSID and VLAN 977.2 SSIDClick the WIRELESS link under ADVANCED and the SSID tab to display the screen as

G-3000H User’s Guide98 Chapter 7 Multiple ESS, SSID and VLAN7.2.1 Configuring SSIDConfigure appropriate fields in the Wireless, Security, RADIUS, MAC

G-3000H User’s GuideChapter 7 Multiple ESS, SSID and VLAN 99Figure 42 Configuring SSIDThe following table describes the labels in this screen.Table