ZyXEL NWA50AX User Guide

ZyXEL NWA50AX Manual

Get ZyXEL NWA50AX PDF manuals and user guides View all ZyXEL NWA50AX manuals
Add to My Manuals
Save this manual to your list of manuals

ZyXEL NWA50AX manual content summary:

  • ZyXEL NWA50AX | User Guide - Page 1
    User's Guide NWA50AX 802.11ax (WiFi6) Dual-Radio PoE Access Point Default Login Details Management IP Address User Name Password http://DHCP-assigned IP OR http://192.168.1.2 admin 1234 Version 6.20 Edition 1, 5/2021 Copyright © 2021 Zyxel and/ or its affiliates. All rights reserved.
  • ZyXEL NWA50AX | User Guide - Page 2
    also offers features that are not available when the Zyxel Device is in standalone mode (see Section 2.1.2 on page 20). • NXC Series User's Guide See this User's Guide for instructions on using the NXC as an AP Controller (AC) for the Zyxel Device. This is used when the Zyxel Device is set to
  • ZyXEL NWA50AX | User Guide - Page 3
    navigation panel, then the Network sub menu and finally the IP Setting tab to get to that screen. Icons Used in Figures Figures in this guide may use the following generic icons. The Zyxel Device icon is not an exact representation of your device. Zyxel Device Router Switch Internet Server
  • ZyXEL NWA50AX | User Guide - Page 4
    Manager ...167 Diagnostics ...178 LEDs ...180 Reboot ...183 Shutdown ...184 Local Configuration in Cloud Mode 185 Cloud Mode ...186 Network ...189 Maintenance ...192 Appendices and Troubleshooting 197 Troubleshooting ...198 NWA50AX User's Guide 4
  • ZyXEL NWA50AX | User Guide - Page 5
    Single LED ...28 3.1.1 Zyxel Device LED ...28 Chapter 4 Web Configurator...30 4.1 Overview ...30 4.2 Accessing the Web Configurator 30 4.3 Navigating the Web Configurator 33 NWA50AX User's Guide 5
  • ZyXEL NWA50AX | User Guide - Page 6
    ...55 8.3.1 Port Statistics Graph ...56 8.4 Radio List ...57 8.4.1 AP Mode Radio Information 59 8.5 Station List ...61 8.6 WDS Link Info ...62 8.7 Detected Device ...63 NWA50AX User's Guide 6
  • ZyXEL NWA50AX | User Guide - Page 7
    12.3 SSID ...100 12.3.1 SSID List ...101 12.3.2 Add/Edit SSID Profile ...102 12.4 Security List ...105 12.4.1 Add/Edit Security Profile 105 NWA50AX User's Guide 7
  • ZyXEL NWA50AX | User Guide - Page 8
    Name ...138 16.3 Date and Time ...139 16.3.1 Pre-defined NTP Time Servers List 141 16.3.2 Time Server Synchronization 142 16.4 WWW Overview ...143 16.4.1 Service Access Limitations 143 16.4.2 System Timeout ...143 NWA50AX User
  • ZyXEL NWA50AX | User Guide - Page 9
    Table of Contents 16.4.3 HTTPS ...143 16.4.4 Configuring WWW Service Control 144 16.4.5 HTTPS Example ...145 16.5 SSH ...151 16.5.1 How SSH Works ...152 16.5.2 SSH Implementation on ...179 Chapter 20 LEDs ...180 20.1 Overview ...180 20.1.1 What You Can Do in this Chapter 180 NWA50AX User's Guide 9
  • ZyXEL NWA50AX | User Guide - Page 10
    ...192 25.1.1 What You Can Do in this Chapter 192 25.2 Shell Script ...192 25.3 Diagnostics ...193 25.4 View Log ...194 Part III: Appendices and Troubleshooting 197 NWA50AX User's Guide 10
  • ZyXEL NWA50AX | User Guide - Page 11
    199 26.4 Internet Access ...202 26.5 WiFi Network ...203 26.6 Resetting the Zyxel Device ...205 26.7 Getting More Troubleshooting Help 205 Appendix A Importing Certificates 206 Appendix B IPv6...230 Appendix C Customer Support ...238 Appendix D Legal Information ...244 Index ...251 NWA50AX User
  • ZyXEL NWA50AX | User Guide - Page 12
    This section describes some of the different roles that your Zyxel Device can take up within a network. Not all roles are supported by all models (see Section 1.4 on page 18). The Zyxel Device can serve as a: • Access Point (AP) remove them or use the NXC to quarantine them. NWA50AX User's Guide 12
  • ZyXEL NWA50AX | User Guide - Page 13
    between associated wireless clients and the wired LAN. Clients A and B access the AP and the wired network behind the AP through repeaters Z and Y. NWA50AX User's Guide 13
  • ZyXEL NWA50AX | User Guide - Page 14
    another, the connection between the root and repeater Zyxel Devices is made. To set up a WDS in NXC managed Zyxel Devices, see the NXC User's Guide. 1.2.3 Radio Frequency (RF) Monitor The Zyxel Device can be set to work as an RF monitor to discover nearby Access Points. The information it obtains
  • ZyXEL NWA50AX | User Guide - Page 15
    it scans the environment for wireless signals. To see which Zyxel Devices support the RF Monitor feature, see Section 1.4 on page 18. The MON Mode. Once a rogue AP is detected, the network administrator can manually change the network settings to limit its access to the network using its Guide 15
  • ZyXEL NWA50AX | User Guide - Page 16
    describes some possible scenarios and topologies that you can set up using your Zyxel Device. 1.3.1 MBSSID A Basic Service Set (BSS) is the set of devices forming a single wireless network (usually an access point and (LAN) behind the AP and can access only the Internet. NWA50AX User's Guide 16
  • ZyXEL NWA50AX | User Guide - Page 17
    band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming. NWA50AX User's Guide 17
  • ZyXEL NWA50AX | User Guide - Page 18
    WDS (Wireless Distribution System) - Root AP & Repeater Modes Tunnel Forwarding Mode Layer-2 Isolation Supported PoE Standards Power Detection External Antennas Internal Antennas NWA50AX IEEE 802.11a IEEE802.11b IEEE 802.11g 2 No Yes Yes No No IEEE 802.3at Yes No Yes NWA50AX User's Guide 18
  • ZyXEL NWA50AX | User Guide - Page 19
    Locator LED Suppression AC (AP Controller) Discovery NebulaFlex PRO NCC Discovery 802.11r Fast Roaming Support 802.11k/v Assisted Roaming Bluetooth Low Energy (BLE) USB Port for BLE Ethernet Storm Control event logs A. For NXC managed devices only. See the NXC User's Guide for details. NWA50AX User
  • ZyXEL NWA50AX | User Guide - Page 20
    device. We recommend you use NCC to manage multiple APs (see the NCC User's Guide). Note: Not all models can be managed by NCC or an AC. See Section 1.4 on page 18 to check whether your product supports these. The following table shows the default IP addresses and firmware upload methods for
  • ZyXEL NWA50AX | User Guide - Page 21
    following figure. It also sends reports, alerts, and notifications for events, such as when a site goes offline. Figure 5 Traffic Monitoring Graph From NCC NWA50AX User's Guide 21
  • ZyXEL NWA50AX | User Guide - Page 22
    Chapter 2 AP Management See the NCC (Nebula Control Center) User's Guide for how to configure Nebula managed devices. See Chapter 24 on page 189 if you want to change the Zyxel Device's VLAN setting or manually set its IP address. Note: Make sure your network firewall allows TCP ports 443, 4335, and
  • ZyXEL NWA50AX | User Guide - Page 23
    . Click the OK button to close this screen. Figure 6 Supported Devices and Versions If you want to check the supported models and firmware versions later, you can click the Show information about ZON icon in the upper right hand corner of the screen. Then select the Supported NWA50AX User's Guide 23
  • ZyXEL NWA50AX | User Guide - Page 24
    support. The release notes are in the firmware zip file on the Zyxel web site. Figure 7 ZON Utility Screen 3 Select a network adapter to which your supported devices are connected. Figure 8 Network Adapter 4 Click the Go button for the ZON Utility to discover all supported devices
  • ZyXEL NWA50AX | User Guide - Page 25
    . 3 Reboot Device Use this icon to restart the selected device(s). This may be useful when troubleshooting or upgrading new firmware. 4 Reset Configuration to Default Use this icon to reload the factory-default know the current admin password before changing to a new one. NWA50AX User's Guide 25
  • ZyXEL NWA50AX | User Guide - Page 26
    "Not support Renew IP address" and "Not support Flash Locator LED" respectively. NCC Discovery This field displays if the discovered device supports the Nebula only for troubleshooting if you cannot connect to the Internet. This User's Guide provides information about the Web Configurator.
  • ZyXEL NWA50AX | User Guide - Page 27
    (NCC) mode. With the NCC, you can remotely manage and monitor the Zyxel Device through a cloud-based network management system. See the NCC User's Guide for more information. ZON Utility Zyxel One Network (ZON) Utility is a utility tool that assists you to set up and maintain network devices in
  • ZyXEL NWA50AX | User Guide - Page 28
    Chapter 3 Hardware CHAPTER 3 Hardware See the Quick Start Guide for hardware installation and connections. 3.1 Zyxel Device Single LED The LED of the Zyxel Device can be LED Suppression and Locator menus in standalone mode. 3.1.1 Zyxel Device LED Figure 12 NWA50AX LED NWA50AX User's Guide 28
  • ZyXEL NWA50AX | User Guide - Page 29
    is experiencing system failure. The Zyxel Device is undergoing firmware upgrade. The Uplink port of the Zyxel Device in standalone mode is disconnected. NWA50AX User's Guide 29
  • ZyXEL NWA50AX | User Guide - Page 30
    system setup and management via internet browser. Use a browser that supports HTML5, such Internet Explorer 11, Mozilla Firefox, or Google Chrome. Make sure your Zyxel Device hardware is properly connected. See the Quick Start Guide. 2 If the Zyxel Device and your computer are not connected to a
  • ZyXEL NWA50AX | User Guide - Page 31
    Chapter 4 Web Configurator If a Zyxel Device is in standalone mode and supports NCC, the login page displays as shown in the following figure. Click Nebula Mode to show the following screen the next step. The NCC is a cloud-based network management system that allows you to NWA50AX User's Guide 31
  • ZyXEL NWA50AX | User Guide - Page 32
    the default user name and default password. If you change the password for the default user account, this screen does not appear anymore. NWA50AX User's Guide 32
  • ZyXEL NWA50AX | User Guide - Page 33
    Web Configurator's Main Screen for Cloud Mode The Web Configurator's main screen is divided into these parts: • A - Title Bar • B - Navigation Panel • C - Main Window NWA50AX User's Guide 33
  • ZyXEL NWA50AX | User Guide - Page 34
    to see an overview of links to the Web Configurator screens. Click a screen's link to go to that screen. Figure 16 Site Map NWA50AX User's Guide 34
  • ZyXEL NWA50AX | User Guide - Page 35
    CLI Messages Click Clear to remove the currently displayed information. Note: See the Command Reference Guide for information about the commands. 4.3.2 Navigation Panel Use the menu items on the navigation on page 18 to see which features your Zyxel Device model supports. NWA50AX User's Guide 35
  • ZyXEL NWA50AX | User Guide - Page 36
    be associated with different APs. MON Profile MON Profile Create and manage rogue AP monitoring files that can be associated with different APs. NWA50AX User's Guide 36
  • ZyXEL NWA50AX | User Guide - Page 37
    Device. WWW Service Control Configure HTTP, HTTPS, and general authentication. SSH SSH Configure SSH server and SSH service settings. FTP NCC mode, you only need to use the Web Configurator for troubleshooting if your Zyxel Device cannot connect to the Internet. Dashboard User's Guide 37
  • ZyXEL NWA50AX | User Guide - Page 38
    order • Select which columns to display • Group entries by field • Show entries in groups • Filter by mathematical operators (, or =) or searching for text. NWA50AX User's Guide 38
  • ZyXEL NWA50AX | User Guide - Page 39
    and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time. NWA50AX User's Guide 39
  • ZyXEL NWA50AX | User Guide - Page 40
    it and click Inactivate. Object Reference Select an entry and click Object Reference to open a screen that shows which settings use the entry. NWA50AX User's Guide 40
  • ZyXEL NWA50AX | User Guide - Page 41
    PART I Standalone Configuration 41
  • ZyXEL NWA50AX | User Guide - Page 42
    the reboot command. The Zyxel Device writes all cached data to the local storage, stops the system processes, and then does a warm start. NWA50AX User's Guide 42
  • ZyXEL NWA50AX | User Guide - Page 43
    to the local storage and stops the system processes. Wait for the Zyxel Device to shut down and then manually turn off or remove the power. It does not turn off the power. Disconnecting the power Power off although you may temporarily lose access to network resources. NWA50AX User's Guide 43
  • ZyXEL NWA50AX | User Guide - Page 44
    Name This field displays the model name of this Zyxel Device. Serial Number This field displays the serial number of this Zyxel Device. NWA50AX User's Guide 44
  • ZyXEL NWA50AX | User Guide - Page 45
    user name used to log in to the current session, the amount of reauthentication time remaining, and the amount of lease time remaining. NWA50AX User's Guide 45
  • ZyXEL NWA50AX | User Guide - Page 46
    the radio is in monitor mode. This indicates the radio's operating mode. Operating modes are AP (MBSSID), MON (monitor), Root AP or Repeater. NWA50AX User's Guide 46
  • ZyXEL NWA50AX | User Guide - Page 47
    how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. NWA50AX User's Guide 47
  • ZyXEL NWA50AX | User Guide - Page 48
    how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. NWA50AX User's Guide 48
  • ZyXEL NWA50AX | User Guide - Page 49
    daylight saving begins and ends. Enter a number from 1 to 5.5 (by 0.5 increments). Click Next to proceed. Click Cancel to close the wizard without saving. NWA50AX User's Guide 49
  • ZyXEL NWA50AX | User Guide - Page 50
    Zyxel Device is NOT connected to a router or you want to assign it a fixed IP address. You will need to manually enter: • the Zyxel Device's IP address and subnet mask. • the IP address of the router that helps forward traffic . Click Cancel to close the wizard without saving. NWA50AX User's Guide 50
  • ZyXEL NWA50AX | User Guide - Page 51
    Auto to have the Zyxel Device automatically choose a radio channel that has least interference. Otherwise, select Manual and specify a channel the Zyxel Device will use in the 2.4 GHz or 5 GHz wireless LAN. Cancel to close the wizard without saving. Figure 25 Wizard: Radio NWA50AX User's Guide 51
  • ZyXEL NWA50AX | User Guide - Page 52
    and complete the wizard setup. Otherwise, click Prev to return to the previous screen or click Cancel to close the wizard without saving. NWA50AX User's Guide 52
  • ZyXEL NWA50AX | User Guide - Page 53
    Chapter 7 Setup Wizard Figure 27 Wizard: Summary NWA50AX User's Guide 53
  • ZyXEL NWA50AX | User Guide - Page 54
    as any others that you know are not a threat (those from neighboring networks, for example). See Chapter 13 on page 117 for details. NWA50AX User's Guide 54
  • ZyXEL NWA50AX | User Guide - Page 55
    , this field displays n/a. Port Statistics Table Poll Interval Enter how often you want this window to be updated automatically, and click Set Interval. NWA50AX User's Guide 55
  • ZyXEL NWA50AX | User Guide - Page 56
    a line graph of packet statistics for the Ethernet port. To view, click Monitor > Network Status and then the Switch to Graphic View button. NWA50AX User's Guide 56
  • ZyXEL NWA50AX | User Guide - Page 57
    this screen to view statistics for the Zyxel Device's wireless radio transmitters. To access this screen, click Monitor > Wireless > AP Information > Radio List. NWA50AX User's Guide 57
  • ZyXEL NWA50AX | User Guide - Page 58
    profile name to which the radio belongs. Profile This field is available only on the Zyxel Device that supports WDS. This indicates the AP profile name to which the radio belongs. Frequency Band This field is available clients connected to this radio on the Zyxel Device. NWA50AX User's Guide 58
  • ZyXEL NWA50AX | User Guide - Page 59
    count for the preceding 24 hours. To access this window, select a radio and click the More Information button in the Radio List screen. NWA50AX User's Guide 59
  • ZyXEL NWA50AX | User Guide - Page 60
    preceding 24 hours. # This is the items sequential number in the list. It has no bearing on the actual data in this list. NWA50AX User's Guide 60
  • ZyXEL NWA50AX | User Guide - Page 61
    on the Zyxel Device to which the station is connected. Capability This displays the supported standard currently being used by the station or the standards supported by the station. 802.11 Features This displays whether the station supports IEEE802.11r, IEEE 802.11k, IEEE 802.11v or none of the
  • ZyXEL NWA50AX | User Guide - Page 62
    (s), both the uplink and downlink information would be displayed. # This is the index number of the root AP or repeater in this list. NWA50AX User's Guide 62
  • ZyXEL NWA50AX | User Guide - Page 63
    Detected Device to access this screen. Not all Zyxel Devices support monitor mode (see Section 1.4 on page 18). For 10.3 on page 79. Note: If the Zyxel Device supports monitor mode, the radio or at least one of the the Zyxel Device does not support monitor mode, turn on rogue AP detection in the
  • ZyXEL NWA50AX | User Guide - Page 64
    Chapter 8 Monitor Figure 35 Monitor > Wireless > Detected Device (for Zyxel Device that supports Monitor mode) NWA50AX User's Guide 64
  • ZyXEL NWA50AX | User Guide - Page 65
    Chapter 8 Monitor Figure 36 Monitor > Wireless > Detected Device (for Zyxel Device that does not support Monitor mode) The following table describes the labels in this screen. Table 23 Monitor > Wireless for the Zyxel Device to scan for APs in the network. Detected Device NWA50AX User's Guide 65
  • ZyXEL NWA50AX | User Guide - Page 66
    once you click Search. If you leave the View Log screen and return to it later, the last filter settings would still apply. NWA50AX User's Guide 66
  • ZyXEL NWA50AX | User Guide - Page 67
    filter. Type the source IP address of the incoming packet that generated the log message. Do not include the port in this filter. NWA50AX User's Guide 67
  • ZyXEL NWA50AX | User Guide - Page 68
    the log message. Protocol This displays when you show the filter. Select a service protocol whose log messages you would like to see. Keyword This displays when you that generated the log message. Protocol This field displays the service protocol in the event that generated the log message.
  • ZyXEL NWA50AX | User Guide - Page 69
    . 9.2 IP Setting Use this screen to configure the IP address for your Zyxel Device. To access this screen, click Configuration > Network > IP Setting. NWA50AX User's Guide 69
  • ZyXEL NWA50AX | User Guide - Page 70
    Use Fixed IP Address Select this if you want to specify the IP address, subnet mask, and gateway manually. IP Address Enter the IP address for this interface. Subnet Mask Enter the subnet mask of this interface in Zyxel Device generates itself for the LAN interface. NWA50AX User's Guide 70
  • ZyXEL NWA50AX | User Guide - Page 71
    your Zyxel Device can make it inaccessible. If this happens, you will have to reset the Zyxel Device. Figure 40 Management VLAN Setup NWA50AX User's Guide 71
  • ZyXEL NWA50AX | User Guide - Page 72
    , select it and click Activate. To turn off an entry, select it and click Inactivate. # This is the index number of the port. NWA50AX User's Guide 72
  • ZyXEL NWA50AX | User Guide - Page 73
    to configure the proxy server settings if the Zyxel Device is behind a proxy server. To access this screen, click Configuration > Network > NCC Discovery. NWA50AX User's Guide 73
  • ZyXEL NWA50AX | User Guide - Page 74
    the proxy server. Proxy Server Enter the IP address of the proxy server. Proxy Port Enter the service port number used by the proxy server. Authentication Select this option if the proxy server requires authentication to return the screen to its last-saved settings. NWA50AX User's Guide 74
  • ZyXEL NWA50AX | User Guide - Page 75
    between the APs and the Zyxel Device. • The DCS screen (Section 10.4 on page 83) allows you to configure dynamic radio channel selection. NWA50AX User's Guide 75
  • ZyXEL NWA50AX | User Guide - Page 76
    . 10.2 AP Management Use this screen to manage the Zyxel Device's general wireless settings. Click Configuration > Wireless > AP Management to access this screen. NWA50AX User's Guide 76
  • ZyXEL NWA50AX | User Guide - Page 77
    28 Configuration > Wireless > AP Management LABEL DESCRIPTION Radio 1 Setting Radio 1 Activate Select the check box to enable the Zyxel Device's first (default) radio. NWA50AX User's Guide 77
  • ZyXEL NWA50AX | User Guide - Page 78
    page 14). Root AP means the radio acts as an AP and also supports the wireless connections with other APs (in repeater mode) to form a the applied WDS profile to connect to a root AP or repeater. Select Manual to have the Zyxel Device connect to the root AP or repeater with the User's Guide 78
  • ZyXEL NWA50AX | User Guide - Page 79
    page 14). Root AP means the radio acts as an AP and also supports the wireless connections with other APs (in repeater mode) to form a the applied WDS profile to connect to a root AP or repeater. Select Manual to have the Zyxel Device connect to the root AP or repeater with . NWA50AX User's Guide 79
  • ZyXEL NWA50AX | User Guide - Page 80
    friendly APs in the Monitor > Wireless > Detected Device screen will appear in the Wireless > Rogue AP screen. See Section 1.4 on page 18 to NWA50AX User's Guide 80
  • ZyXEL NWA50AX | User Guide - Page 81
    Chapter 10 Wireless know which models support Rogue AP Detection. Note: Enabling Rogue AP Detection might affect the performance of wireless clients associated with the Zyxel Device. Figure 46 Configuration > Wireless > Rogue AP (for Zyxel Devices that support Monitor mode) NWA50AX User's Guide 81
  • ZyXEL NWA50AX | User Guide - Page 82
    Chapter 10 Wireless Figure 47 Configuration > Wireless > Rogue AP (for Zyxel Devices that support Rogue AP Detection) Each field is described in the following table. Table 29 Configuration > This field is a sequential value, and it is not associated with any interface. NWA50AX User's Guide 82
  • ZyXEL NWA50AX | User Guide - Page 83
    screen to configure dynamic radio channel selection (see Dynamic Channel Selection (DCS) on page 76). Click Configuration > Wireless > DCS to access this screen. NWA50AX User's Guide 83
  • ZyXEL NWA50AX | User Guide - Page 84
    . If the interference becomes too great, then the network administrator must open his AP configuration options and manually change the channel to one that no other AP is using (or at least a channel that has on 2.472 GHz. Figure 50 An Example Three-Channel Deployment NWA50AX User's Guide 84
  • ZyXEL NWA50AX | User Guide - Page 85
    scheme for ETSI, consisting of channels 1, 5, 9, 13. This offers significantly less overlap that the other one. Figure 52 An Alternative Four-Channel Deployment NWA50AX User's Guide 85
  • ZyXEL NWA50AX | User Guide - Page 86
    user logged into the Zyxel Device. User accounts are used in controlling access to configuration and services in the Zyxel Device. User Types These are the types of user accounts the Zyxel Device authenticated locally, regardless of the authentication method setting. NWA50AX User's Guide 86
  • ZyXEL NWA50AX | User Guide - Page 87
    but not to change it • user - this user has access to the Zyxel Device's services but cannot look at the configuration This field displays the description for each user. 11.2.1 Add following characters: • Alphanumeric A-z 0-9 (there is no unicode support) • _ [underscores] NWA50AX User's Guide 87
  • ZyXEL NWA50AX | User Guide - Page 88
    it correctly. Enter the description of each user, if any. You can use up to 60 printable ASCII characters. Default descriptions are provided. NWA50AX User's Guide 88
  • ZyXEL NWA50AX | User Guide - Page 89
    If you want to set authentication timeout to a value other than the default settings, select Use Manual Settings then fill your preferred values in the fields that follow. This field is not available if the Web Configurator, and click Configuration > Object > User > Setting. NWA50AX User's Guide 89
  • ZyXEL NWA50AX | User Guide - Page 90
    that are set to use the default settings. You can still manually configure any user account's authentication timeout settings. Double-click an with a specific entry. These are the kinds of user account the Zyxel Device supports. Lease Time • admin - this user can look at and change the Guide 90
  • ZyXEL NWA50AX | User Guide - Page 91
    for any existing user accounts that are set to use the default settings. You can still manually configure any user account's authentication timeout settings. To access this screen, go to the Configuration 56 User > Setting > Edit User Authentication Timeout Settings NWA50AX User's Guide 91
  • ZyXEL NWA50AX | User Guide - Page 92
    logging out. Click OK to save your changes back to the Zyxel Device. Click Cancel to exit this screen without saving your changes. NWA50AX User's Guide 92
  • ZyXEL NWA50AX | User Guide - Page 93
    Set IDentifier) is the name that identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. In other words, it is the name of the wireless network that clients use to connect to it. NWA50AX User's Guide 93
  • ZyXEL NWA50AX | User Guide - Page 94
    transmitter(s). To access this screen click Configuration > Object > AP Profile. Note: You can have a maximum of 32 radio profiles on the Zyxel Device. NWA50AX User's Guide 94
  • ZyXEL NWA50AX | User Guide - Page 95
    an existing one. To access this screen, click the Add button or select a radio profile from the list and click the Edit button. NWA50AX User's Guide 95
  • ZyXEL NWA50AX | User Guide - Page 96
    as this profile's name. Spaces and underscores are allowed. 802.11 Band Select whether this radio would use the 2.4 GHz or 5 GHz band. NWA50AX User's Guide 96
  • ZyXEL NWA50AX | User Guide - Page 97
    adjusts the transmission rate automatically according to the wireless standard supported by the wireless devices. • 11n: allows IEEE802.11b, the Zyxel Device choose a radio channel that has least interference. • Manual: Choose from the available radio channels in the list. If your Zyxel 's Guide 97
  • ZyXEL NWA50AX | User Guide - Page 98
    the previously selected channels is not supported. Channel ID This field is available only when you set Channel Selection to DCS and set 2.4 GHz Channel Selection Method to manual. 2.4 GHz Channel Deployment Select clean channel or a channel with lower interference. NWA50AX User's Guide 98
  • ZyXEL NWA50AX | User Guide - Page 99
    set 802.11 Mode to 11a or 11b/g. Select this to enable A-MSDU aggregation. RTS/CTS Threshold Mac Service Data Unit (MSDU) aggregation collects Ethernet frames without any of their 802.11n headers and wraps the header-less signal you can require and -105 is the weakest. NWA50AX User's Guide 99
  • ZyXEL NWA50AX | User Guide - Page 100
    reduce network overhead and improve WiFi network performance in high density environments. However, WiFi clients that do not support the minimum data rate will not be able to connect to the AP. Click OK to save your to your APs; a security list, which can assign specific NWA50AX User's Guide 100
  • ZyXEL NWA50AX | User Guide - Page 101
    screen allows you to create and manage SSID configurations that can be used by the APs. An SSID, or Service Set IDentifier, is basically the name of the wireless network to which a wireless client can connect. The SSID . Edit Click this to edit the selected SSID profile. NWA50AX User's Guide 101
  • ZyXEL NWA50AX | User Guide - Page 102
    an existing one. To access this screen, click the Add button or select a SSID profile from the list and click the Edit button. NWA50AX User's Guide 102
  • ZyXEL NWA50AX | User Guide - Page 103
    to create one. Note: It is highly recommended that you create security profiles for all of your SSIDs to enhance your network security. NWA50AX User's Guide 103
  • ZyXEL NWA50AX | User Guide - Page 104
    setting means no MAC filtering is used. Select a Quality of Service (QoS) access category to associate with this SSID. Access cannot see it, the only way you can connect to the SSID is by manually entering the SSID name in your wireless connection setup screen(s) (these vary by User's Guide 104
  • ZyXEL NWA50AX | User Guide - Page 105
    an existing one. To access this screen, click the Add button or select a security profile from the list and click the Edit button. NWA50AX User's Guide 105
  • ZyXEL NWA50AX | User Guide - Page 106
    . OK Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA50AX User's Guide 106
  • ZyXEL NWA50AX | User Guide - Page 107
    to show the fields describe below. Idle Timeout Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued. NWA50AX User's Guide 107
  • ZyXEL NWA50AX | User Guide - Page 108
    not require the wireless clients to support MFP. Management frames will be encrypted if the clients support MFP. OK Cancel Select Required and wireless clients must support MFP in order to join the > Security List > Add/Edit Security Profile> Security Mode: wep (NWA50AX) NWA50AX User's Guide 108
  • ZyXEL NWA50AX | User Guide - Page 109
    . OK Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA50AX User's Guide 109
  • ZyXEL NWA50AX | User Guide - Page 110
    (including spaces and symbols) or 64 hexadecimal characters. Advance Note: Click on the Show Advanced Settings button to show the fields describe below. NWA50AX User's Guide 110
  • ZyXEL NWA50AX | User Guide - Page 111
    clients may support this. support MFP. OK Cancel Select Required and wireless clients must support MFP in order to join the Zyxel Device's wireless network. Click OK to save your changes back to the Zyxel Device. Click Cancel to exit this screen without saving your changes. NWA50AX User's Guide
  • ZyXEL NWA50AX | User Guide - Page 112
    characters (including spaces and symbols) or 64 hexadecimal characters. Note: Click on the Show Advanced Settings button to show the fields describe below. NWA50AX User's Guide 112
  • ZyXEL NWA50AX | User Guide - Page 113
    It is a more recent development over TKIP and considerably more robust. Not all wireless clients may support this. Enter the idle interval (in seconds) that a client can be idle before authentication is is only for management purposes. Spaces and underscores are allowed. NWA50AX User's Guide 113
  • ZyXEL NWA50AX | User Guide - Page 114
    if the clients support MFP. OK Cancel Select Required and wireless clients must support MFP in order to join the Zyxel Device's wireless network. Click OK to save your changes back to the Zyxel Device. Click Cancel to exit this screen without saving your changes. NWA50AX User's Guide 114
  • ZyXEL NWA50AX | User Guide - Page 115
    a MAC filter profile from the list and click the Edit button. Note: Each MAC filtering profile can include a maximum of 512 MAC addresses. NWA50AX User's Guide 115
  • ZyXEL NWA50AX | User Guide - Page 116
    . OK Click OK to save your changes back to the Zyxel Device. Cancel Click Cancel to exit this screen without saving your changes. NWA50AX User's Guide 116
  • ZyXEL NWA50AX | User Guide - Page 117
    Mode screen (Section 10.3 on page 79) to classify them as either rogue or friendly. Not all Zyxel Devices support monitor mode and rogue APs detection. 13.1.1 What You Can Do in this Chapter The MON Profile screen (Section turn off an entry, select it and click Inactivate. NWA50AX User's Guide 117
  • ZyXEL NWA50AX | User Guide - Page 118
    Edit button. See Section 1.2.3 on page 14 for more information about MON Mode. Figure 72 Configuration > Object > MON Profile > Add/Edit MON Profile NWA50AX User's Guide 118
  • ZyXEL NWA50AX | User Guide - Page 119
    Channel List (2.4 GHz) Select manual to set specific channels through which the channel(s) when Scan Channel Mode is set to manual. Set Scan Channel List (5 GHz) These channels are manual. OK Cancel These channels are limited to the 5 GHz range (802.11 a/n/ac/ax). Not all Zyxel Devices support
  • ZyXEL NWA50AX | User Guide - Page 120
    . Profile Name This field indicates the name assigned to the profile. WDS SSID This field shows the SSID specified in this WDS profile. NWA50AX User's Guide 120
  • ZyXEL NWA50AX | User Guide - Page 121
    the APs. Click OK to save your changes back to the Zyxel Device. Click Cancel to exit this screen without saving your changes. NWA50AX User's Guide 121
  • ZyXEL NWA50AX | User Guide - Page 122
    been able to read the message, no-one can have altered it (because they cannot re-sign the message with Tim's private key). NWA50AX User's Guide 122
  • ZyXEL NWA50AX | User Guide - Page 123
    ) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. NWA50AX User's Guide 123
  • ZyXEL NWA50AX | User Guide - Page 124
    Thumbprint fields. The secure method may vary based on your situation. Possible examples would be over the telephone or through an HTTPS connection. NWA50AX User's Guide 124
  • ZyXEL NWA50AX | User Guide - Page 125
    CN (Common Name), OU (Organizational Unit or department), O (Organization or company) and C (Country). It is recommended that each certificate have unique subject information. NWA50AX User's Guide 125
  • ZyXEL NWA50AX | User Guide - Page 126
    Zyxel Device create a self-signed certificate, enroll a certificate with a certification authority or generate a certification request. Figure 76 Configuration > Object > Certificate > My Certificates > Add NWA50AX User's Guide 126
  • ZyXEL NWA50AX | User Guide - Page 127
    . Create a self-signed certificate Create a certification request and save it locally for later manual enrollment Select Client Authentication to use the certificate's key to authenticate clients to the secure Edit screen and then send it to the certification authority. NWA50AX User's Guide 127
  • ZyXEL NWA50AX | User Guide - Page 128
    to open the My Certificate Edit screen. You can use this screen to view in-depth certificate information and change the certificate's name. NWA50AX User's Guide 128
  • ZyXEL NWA50AX | User Guide - Page 129
    Chapter 15 Certificates Figure 77 Configuration > Object > Certificate > My Certificates > Edit NWA50AX User's Guide 129
  • ZyXEL NWA50AX | User Guide - Page 130
    Length Constraint=1" means that there can only be one certification authority in the certificate's path. This field does not display for a certification request. NWA50AX User's Guide 130
  • ZyXEL NWA50AX | User Guide - Page 131
    text editor and save the file on a management computer for later manual enrollment. Export Certificate Only Password Export Certificate with Private Key OK Cancel Import to open the My Certificate Import screen. Follow the instructions in this screen to save an existing certificate to the Guide 131
  • ZyXEL NWA50AX | User Guide - Page 132
    on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certificates. NWA50AX User's Guide 132
  • ZyXEL NWA50AX | User Guide - Page 133
    whether or not you want the Zyxel Device to check a certification authority's list of revoked certificates before trusting a certificate issued by the certification NWA50AX User's Guide 133
  • ZyXEL NWA50AX | User Guide - Page 134
    Chapter 15 Certificates authority. Figure 80 Configuration > Object > Certificate > Trusted Certificates > Edit NWA50AX User's Guide 134
  • ZyXEL NWA50AX | User Guide - Page 135
    the SHA1 hash algorithm). Other certification authorities may use rsa-pkcs1-md5 (RSA public-private key encryption algorithm and the MD5 hash algorithm). NWA50AX User's Guide 135
  • ZyXEL NWA50AX | User Guide - Page 136
    .3.2 Import Trusted Certificates Click Configuration > Object > Certificate > Trusted Certificates > Import to open the Import Trusted Certificates screen. Follow the instructions in this screen to save a trusted certificate to the Zyxel Device. Note: You must remove any spaces from the certificate
  • ZyXEL NWA50AX | User Guide - Page 137
    needs to verify, not a huge list. When the Zyxel Device requests certificate status information, the OCSP server returns a "expired", "current" or "unknown" response. NWA50AX User's Guide 137
  • ZyXEL NWA50AX | User Guide - Page 138
    name by which a device is known on a network. Click Configuration > System > Host Name to open this screen. Figure 82 Configuration > System > Host Name NWA50AX User's Guide 138
  • ZyXEL NWA50AX | User Guide - Page 139
    be accurate. The Zyxel Device has a software mechanism to set the time manually or get the current time and date from an external server. To change System > Date/Time. The screen displays as shown. You can manually set the Zyxel Device's time and date or have the Zyxel Device get the date
  • ZyXEL NWA50AX | User Guide - Page 140
    zone and daylight saving will affect the new time and date you entered. When you enter the time settings manually, the Zyxel Device uses the new setting once you click Apply. New Time (hh:mm:ss) This field or Sync. Now in this screen. • 24-hour intervals after starting up. NWA50AX User's Guide 140
  • ZyXEL NWA50AX | User Guide - Page 141
    :00. The Zyxel Device then attempts to synchronize with one of the following pre-defined list of Network Time Protocol (NTP) time servers. NWA50AX User's Guide 141
  • ZyXEL NWA50AX | User Guide - Page 142
    the View Log screen. Try re-configuring the Date/Time screen. To manually set the Zyxel Device date and time: 1 Click System > Date/Time. 2 Select Manual under Time and Date Setup. 3 Enter the Zyxel Device's time in . 2 Select Get from Time Server under Time and Date Setup. NWA50AX User's Guide 142
  • ZyXEL NWA50AX | User Guide - Page 143
    Figure 85 Secure and Insecure Service Access From the WAN 16.4.1 Service Access Limitations A service cannot be used to access the Zyxel Device when you have disabled that service in the corresponding screen. 16 ensuring confidentiality (an unauthorized party cannot read the NWA50AX User's Guide 143
  • ZyXEL NWA50AX | User Guide - Page 144
    86 HTTP/HTTPS Implementation Note: If you disable HTTP in the WWW screen, then the Zyxel Device blocks all HTTP connection attempts. 16.4.4 Configuring WWW Service Control Click Configuration > System > WWW to open the WWW screen. Use this screen to specify HTTP or HTTPS settings. NWA50AX User
  • ZyXEL NWA50AX | User Guide - Page 145
    to allow or disallow the computer with the IP address that matches the IP address(es) in the Service Control table to access the Zyxel Device Web Configurator using secure HTTPs connections. Server Port The HTTPS or domain name of the Zyxel Device you wish to access. NWA50AX User's Guide 145
  • ZyXEL NWA50AX | User Guide - Page 146
    Learn More... if you want to verify more information about the certificate from the Zyxel Device. Click Advanced > Accept the Risk and Continue. NWA50AX User's Guide 146
  • ZyXEL NWA50AX | User Guide - Page 147
    ). Apply for a certificate from a Certification Authority (CA) that is trusted by the Zyxel Device (see the Zyxel Device's Trusted Certificates Web Configurator screen). NWA50AX User's Guide 147
  • ZyXEL NWA50AX | User Guide - Page 148
    the certificate you double-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate. NWA50AX User's Guide 148
  • ZyXEL NWA50AX | User Guide - Page 149
    Chapter 16 System 3 Enter the password given to you by the CA. 4 Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA50AX User's Guide 149
  • ZyXEL NWA50AX | User Guide - Page 150
    the certificate is correctly installed on your computer. 16.4.5.6 Using a Certificate When Accessing the Zyxel Device To access the Zyxel Device via HTTPS: NWA50AX User's Guide 150
  • ZyXEL NWA50AX | User Guide - Page 151
    B on the Internet uses SSH to securely connect to the Zyxel Device (A) for a management session. Figure 91 SSH Communication Over the WAN Example NWA50AX User's Guide 151
  • ZyXEL NWA50AX | User Guide - Page 152
    and the server. The client then sends its authentication information (user name and password) to the server to log in to the server. NWA50AX User's Guide 152
  • ZyXEL NWA50AX | User Guide - Page 153
    SSH Implementation on the Zyxel Device Your Zyxel Device supports SSH versions 1 and 2 using RSA authentication and that matches the IP address(es) in the Service Control table to access the Zyxel Device CLI using this service. Version 1 Server Port Server Certificate Apply Reset User's Guide 153
  • ZyXEL NWA50AX | User Guide - Page 154
    using the OpenSSH client program that comes with most Linux distributions. 1 Test whether the SSH service is available on the Zyxel Device. Enter "telnet 192.168.1.2 22" at a terminal prompt A message displays indicating the SSH protocol version supported by the Zyxel Device. NWA50AX User's Guide 154
  • ZyXEL NWA50AX | User Guide - Page 155
    settings, click Configuration > System > FTP tab. The screen appears as shown. Use this screen to specify FTP settings. Figure 97 Configuration > System > FTP NWA50AX User's Guide 155
  • ZyXEL NWA50AX | User Guide - Page 156
    the computer with the IP address that matches the IP address(es) in the Service Control table to access the Zyxel Device using this service. TLS required Select the check box to use FTP over TLS (Transport Layer Click Reset to return the screen to its last-saved settings. NWA50AX User's Guide 156
  • ZyXEL NWA50AX | User Guide - Page 157
    more serious attention, such as system errors and attacks. The Zyxel Device provides a system log and supports e-mail profiles and remote syslog servers. The system log is available on the View Log screen, the this screen, click Configuration > Log & Report > Log Setting. NWA50AX User's Guide 157
  • ZyXEL NWA50AX | User Guide - Page 158
    Report, syslog-compatible format. Summary CEF/Syslog - Common Event Format, syslog-compatible format. This field is a summary of the settings for each log. NWA50AX User's Guide 158
  • ZyXEL NWA50AX | User Guide - Page 159
    in the system log (which includes the e-mail profiles). Select a system log entry in the Log Setting screen and click the Edit icon. NWA50AX User's Guide 159
  • ZyXEL NWA50AX | User Guide - Page 160
    Chapter 17 Log and Report Figure 99 Configuration > Log & Report > Log Setting > Edit System Log Setting NWA50AX User's Guide 160
  • ZyXEL NWA50AX | User Guide - Page 161
    log messages, alerts, and debugging information for all categories. The Zyxel Device does not e-mail debugging information, even if this setting is selected. NWA50AX User's Guide 161
  • ZyXEL NWA50AX | User Guide - Page 162
    this to save your changes and return to the previous screen. Click this to return to the previous screen without saving your changes. NWA50AX User's Guide 162
  • ZyXEL NWA50AX | User Guide - Page 163
    a remote server entry in the Log Setting screen and click the Edit icon. Figure 100 Configuration > Log & Report > Log Setting > Edit Remote Server NWA50AX User's Guide 163
  • ZyXEL NWA50AX | User Guide - Page 164
    is e-mailed or remote server names). To access this screen, go to the Log Setting screen, and click the Active Log Summary button. NWA50AX User's Guide 164
  • ZyXEL NWA50AX | User Guide - Page 165
    log messages, alerts, and debugging information for all categories. The Zyxel Device does not e-mail debugging information, even if this setting is selected. NWA50AX User's Guide 165
  • ZyXEL NWA50AX | User Guide - Page 166
    this to save your changes and return to the previous screen. Click this to return to the previous screen without saving your changes. NWA50AX User's Guide 166
  • ZyXEL NWA50AX | User Guide - Page 167
    These files have the same syntax, which is also identical to the way you run CLI commands manually. An example is shown below. Figure 102 Configuration File / Shell Script: Example # enter configuration % wlan-radio-profile default 2g-channel 11 output-power 50% exit write NWA50AX User's Guide 167
  • ZyXEL NWA50AX | User Guide - Page 168
    can also download configuration files from the Zyxel Device to your computer and upload configuration files from your computer to the Zyxel Device. NWA50AX User's Guide 168
  • ZyXEL NWA50AX | User Guide - Page 169
    any errors. Figure 103 Maintenance > File Manager > Configuration File Do not turn off the Zyxel Device while configuration file upload is in progress. NWA50AX User's Guide 169
  • ZyXEL NWA50AX | User Guide - Page 170
    to select it and click Remove to delete it from the Zyxel Device. You can only delete manually saved configuration files. You cannot delete the systemdefault.conf, startup-config.conf and lastgood.conf files. the screen without saving a duplicate of the configuration file. NWA50AX User's Guide 170
  • ZyXEL NWA50AX | User Guide - Page 171
    with an error, you can apply lastgood.conf to return to a valid configuration. This column displays the size (in KB) of a configuration file. NWA50AX User's Guide 171
  • ZyXEL NWA50AX | User Guide - Page 172
    the Zyxel Device to your computer. Type get followed by the name of the configuration file. This examples uses get startup-config.conf. NWA50AX User's Guide 172
  • ZyXEL NWA50AX | User Guide - Page 173
    only need to use the command line interface if you need to recover the firmware. See the CLI Reference Guide for how to determine if you need to recover the firmware and how to recover it. Find the firmware or reset the Zyxel Device while the firmware update is in progress! NWA50AX User's Guide 173
  • ZyXEL NWA50AX | User Guide - Page 174
    Zyxel Device in standalone mode is 192.168.1.2, so set your computer to use a static IP address from 192.168.1.3 ~192.168.1.254. NWA50AX User's Guide 174
  • ZyXEL NWA50AX | User Guide - Page 175
    use the write command, the changes will be lost when the Zyxel Device restarts. You could use multiple write commands in a long script. NWA50AX User's Guide 175
  • ZyXEL NWA50AX | User Guide - Page 176
    your Zyxel Device. Type in the location of the file you want to upload in this field or click Browse... to find it. NWA50AX User's Guide 176
  • ZyXEL NWA50AX | User Guide - Page 177
    Chapter 18 File Manager Table 74 Maintenance > File Manager > Shell Script (continued) LABEL DESCRIPTION Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes. NWA50AX User's Guide 177
  • ZyXEL NWA50AX | User Guide - Page 178
    and diagnostic information. You may need to generate this file and send it to customer support during troubleshooting. All categories of settings and shell script files stored on the Zyxel Device will be click Download to save the most recent diagnostic file to a computer. NWA50AX User's Guide 178
  • ZyXEL NWA50AX | User Guide - Page 179
    traffic going through the Zyxel Device. Stop Click this button to stop the packet analyzer from capturing traffic going through the Zyxel Device. NWA50AX User's Guide 179
  • ZyXEL NWA50AX | User Guide - Page 180
    performing firmware upgrade, the LEDs will light up regardless of the setting in LED suppression. To access this screen, click Maintenance > LEDs > Suppression. NWA50AX User's Guide 180
  • ZyXEL NWA50AX | User Guide - Page 181
    the Zyxel Device restarts. Note: The Locator feature is not affected by the Suppression setting. To access this screen, click Maintenance > LEDs > Locator. NWA50AX User's Guide 181
  • ZyXEL NWA50AX | User Guide - Page 182
    . Default is 10 minutes. Apply Click Apply to save changes in this screen. Refresh Click Refresh to update the information in this screen. NWA50AX User's Guide 182
  • ZyXEL NWA50AX | User Guide - Page 183
    IP address of the Zyxel Device in your Web browser. You can also use the CLI command reboot to restart the Zyxel Device. NWA50AX User's Guide 183
  • ZyXEL NWA50AX | User Guide - Page 184
    > Shutdown. Figure 113 Maintenance > Shutdown Click the Shutdown button to shut down the Zyxel Device. Wait for the Zyxel Device to shut down before you manually turn off or remove the power. It does not turn off the power. You can also use the CLI command shutdown to shut down the
  • ZyXEL NWA50AX | User Guide - Page 185
    PART II Local Configuration in Cloud Mode 185
  • ZyXEL NWA50AX | User Guide - Page 186
    and has been registered in the NCC. If you need to change the Zyxel Device's VLAN setting or manually set its IP address, access its simplified web configurator (see Chapter 4 on page 30). You can check • Configuration > Network > IP Setting • Configuration > Network > VLAN NWA50AX User's Guide 186
  • ZyXEL NWA50AX | User Guide - Page 187
    connecting to the Internet. Nebula Connectivity Status This field displays whether the Zyxel Device can connect to the Zyxel Nebula Control Center (NCC). NWA50AX User's Guide 187
  • ZyXEL NWA50AX | User Guide - Page 188
    the Zyxel Device cannot connect to the Internet or to NCC, an error message is shown on this screen, as in the following. NWA50AX User's Guide 188
  • ZyXEL NWA50AX | User Guide - Page 189
    .2 IP Setting Use this screen to configure the IP address for your Zyxel Device. To access this screen, click Configuration > Network > IP Setting. NWA50AX User's Guide 189
  • ZyXEL NWA50AX | User Guide - Page 190
    if you want to specify the IP address, subnet mask, and gateway manually. IP Address Enter the IP address for this interface. Subnet Mask Enter the the IP address of the proxy server. Proxy Port Enter service port number used by the proxy server. Authentication Select this option Guide 190
  • ZyXEL NWA50AX | User Guide - Page 191
    Click Apply to save your changes back to the Zyxel Device. Reset Click Reset to return the screen to its last-saved settings. NWA50AX User's Guide 191
  • ZyXEL NWA50AX | User Guide - Page 192
    file containing the Zyxel Device's configuration and diagnostic information if you need to provide it to customer support during troubleshooting. • The Log > View Log screen (Section 25.4 on page 194) displays the Zyxel at the same time. Figure 118 Maintenance > Shell Script NWA50AX User's Guide 192
  • ZyXEL NWA50AX | User Guide - Page 193
    a file containing the Zyxel Device's configuration and diagnostic information. You may need to generate this file and send it to customer support during troubleshooting. All categories of settings and shell script files stored on the Zyxel Device will be included in the diagnostic file. Click
  • ZyXEL NWA50AX | User Guide - Page 194
    . Click a column's heading cell to sort the table entries by that column's criteria. Click the heading cell again to reverse the sort order. NWA50AX User's Guide 194
  • ZyXEL NWA50AX | User Guide - Page 195
    of the packet that generated the log message. Protocol This displays when you show the filter. Select a service protocol whose log messages you would like to see. Keyword Search This displays when you show the filter to update the log using the current filter settings. NWA50AX User's Guide 195
  • ZyXEL NWA50AX | User Guide - Page 196
    . Destination Interface This field displays the destination interface of the packet that generated the log message. Protocol This field displays the service protocol in the event that generated the log message. Note This field displays any additional information about the log message. NWA50AX
  • ZyXEL NWA50AX | User Guide - Page 197
    PART III Appendices and Troubleshooting 197
  • ZyXEL NWA50AX | User Guide - Page 198
    CHAPTER 26 Troubleshooting 26.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the the hardware connections. See the Quick Start Guide. 3 Inspect your cables for damage. Contact the vendor to replace any damaged cables.
  • ZyXEL NWA50AX | User Guide - Page 199
    Chapter 26 Troubleshooting 4 Disconnect and re-connect the power adapter or PoE power injector to the Zyxel Device. 5 If the problem continues, connections, and make sure the LED is behaving as expected. See the Quick Start Guide and Section 3.1 on page 28. 3 Make sure your Internet browser does not
  • ZyXEL NWA50AX | User Guide - Page 200
    26 Troubleshooting 6 If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions • Try to access the Zyxel Device using another service, such will have limited functionality when managed through NCC. NWA50AX User's Guide 200
  • ZyXEL NWA50AX | User Guide - Page 201
    Chapter 26 Troubleshooting I enabled NCC Discovery, but the Zyxel Device is still in standalone mode. Make sure your Zyxel Device is registered to maximum number of log messages (see Section 1.4 on page 18), new log messages automatically overwrite the oldest log messages. NWA50AX User's Guide 201
  • ZyXEL NWA50AX | User Guide - Page 202
    Chapter 26 Troubleshooting The commands in my configuration file or shell script are not working Device, and follow the directions in the Quick Start Guide again. 5 Reboot the client and reconnect to the Zyxel Device. 6 If the problem continues, contact your ISP. The Internet connection is slow
  • ZyXEL NWA50AX | User Guide - Page 203
    Troubleshooting or lower the priority for some applications. 5 If the problem continues, contact the network administrator or vendor. 26.5 computer) is IEEE 802.11 compatible and supports the same wireless standard as the Zyxel Device the wireless devices in your network support. WPA2 or WPA2-PSK is
  • ZyXEL NWA50AX | User Guide - Page 204
    Chapter 26 Troubleshooting If a RADIUS server authenticates wireless stations, the re-authentication timer on the RADIUS server has priority. Change the RADIUS the AP profile which contains the load balancing settings is correctly assigned to the Zyxel Devices in question. NWA50AX User's Guide 204
  • ZyXEL NWA50AX | User Guide - Page 205
    Chapter 26 Troubleshooting • The load balancing task may have been terminated because further load balancing on the access the Zyxel Device in standalone mode using the default settings. 26.7 Getting More Troubleshooting Help Search for support information for your model at www.zyxel.com for more
  • ZyXEL NWA50AX | User Guide - Page 206
    first have to store the certificate in your computer and then install it as a Trusted Root CA, as shown in the following tutorials. NWA50AX User's Guide 206
  • ZyXEL NWA50AX | User Guide - Page 207
    Appendix A Importing Certificates Export a Certificate 1 If your device's Web Configurator is set to use SSL certification, then upon browsing with it for the first time, you are presented with a certification error. NWA50AX User's Guide 207
  • ZyXEL NWA50AX | User Guide - Page 208
    Appendix A Importing Certificates 2 Click Advanced > Proceed to x.x.x.x (unsafe). 3 In the Address Bar, click Not Secure > Certificate (Invalid). NWA50AX User's Guide 208
  • ZyXEL NWA50AX | User Guide - Page 209
    Appendix A Importing Certificates 4 In the Certificate dialog box, click Details > Copy to File. 5 In the Certificate Export Wizard, click Next. NWA50AX User's Guide 209
  • ZyXEL NWA50AX | User Guide - Page 210
    Appendix A Importing Certificates 6 Select the format and settings you want to use and then click Next. 7 Type a filename and specify a folder to save the certificate in. Click Next. NWA50AX User's Guide 210
  • ZyXEL NWA50AX | User Guide - Page 211
    storing the certificate in your computer (see Export a Certificate), you need to install it as a trusted root certification authority using the following steps: NWA50AX User's Guide 211
  • ZyXEL NWA50AX | User Guide - Page 212
    Appendix A Importing Certificates 1 Open your web browser, click the menu icon, and click Settings. NWA50AX User's Guide 212
  • ZyXEL NWA50AX | User Guide - Page 213
    Appendix A Importing Certificates 2 Scroll down and click Advanced to expand the menu. Under Privacy and security, click Manage certificates. NWA50AX User's Guide 213
  • ZyXEL NWA50AX | User Guide - Page 214
    Appendix A Importing Certificates 3 In the Certificates pop-up screen, click Trusted Root Certification Authorities. Click Import to start the Certificate Import Wizard. 4 Click Next when the wizard pops up, and then on the following screen click Browse. NWA50AX User's Guide 214
  • ZyXEL NWA50AX | User Guide - Page 215
    Appendix A Importing Certificates 5 Select the certificate file you want to import and click Open. 6 Click Next. NWA50AX User's Guide 215
  • ZyXEL NWA50AX | User Guide - Page 216
    Appendix A Importing Certificates 7 Confirm the settings displayed and click Finish. 8 If presented with a security warning, click Yes. NWA50AX User's Guide 216
  • ZyXEL NWA50AX | User Guide - Page 217
    can install a stand-alone certificate file if one has been issued to you. 1 Double-click the public key certificate file. 2 Click Install Certificate. NWA50AX User's Guide 217
  • ZyXEL NWA50AX | User Guide - Page 218
    Appendix A Importing Certificates 3 Click Next on the first wizard screen, click Place all certificates in the following store, and click Browse. 4 Select Trusted Root Certificate Authorities > OK, and then click Next. NWA50AX User's Guide 218
  • ZyXEL NWA50AX | User Guide - Page 219
    Appendix A Importing Certificates 5 Confirm the information shown on the final wizard screen and click Finish. 6 If presented with a security warning, click Yes. NWA50AX User's Guide 219
  • ZyXEL NWA50AX | User Guide - Page 220
    you how to remove a public key certificate in Google Chrome on Windows 7. 1 Open your web browser, click the menu icon, and click Settings. NWA50AX User's Guide 220
  • ZyXEL NWA50AX | User Guide - Page 221
    Appendix A Importing Certificates 2 Scroll down and click Advanced to expand the menu. Under Privacy and security, click Manage certificates. 3 In the Certificates pop-up screen, click Trusted Root Certification Authorities. NWA50AX User's Guide 221
  • ZyXEL NWA50AX | User Guide - Page 222
    first have to store the certificate in your computer and then install it as a Trusted Root CA, as shown in the following tutorials. NWA50AX User's Guide 222
  • ZyXEL NWA50AX | User Guide - Page 223
    Appendix A Importing Certificates Export a Certificate 1 If your device's Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Click Advanced. 2 Click View Certificate. NWA50AX User's Guide 223
  • ZyXEL NWA50AX | User Guide - Page 224
    3 Click Details > Export. Appendix A Importing Certificates 4 Type a filename and click Save. Import a Certificate After storing the certificate in your computer, you need to import it in trusted root certification authorities using the following steps: NWA50AX User's Guide 224
  • ZyXEL NWA50AX | User Guide - Page 225
    Appendix A Importing Certificates 1 Open Firefox and click Tools > Options. NWA50AX User's Guide 225
  • ZyXEL NWA50AX | User Guide - Page 226
    Appendix A Importing Certificates 2 In the Options page, click Privacy & Security, scroll to the bottom of the page, and then click View Certificates. 3 In the Certificate Manager, click Authorities > Import. NWA50AX User's Guide 226
  • ZyXEL NWA50AX | User Guide - Page 227
    CA to identify websites and click OK. Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox. NWA50AX User's Guide 227
  • ZyXEL NWA50AX | User Guide - Page 228
    Appendix A Importing Certificates 1 Open Firefox and click Tools > Options. 2 In the Options page, click Privacy & Security, scroll to the bottom of the page, and then click View Certificates. NWA50AX User's Guide 228
  • ZyXEL NWA50AX | User Guide - Page 229
    , click OK. 5 The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA50AX User's Guide 229
  • ZyXEL NWA50AX | User Guide - Page 230
    A global address uniquely identifies a device on the Internet. It is similar to a "public IP address" in IPv4. A global unicast address starts with a 2 or 3. NWA50AX User's Guide 230
  • ZyXEL NWA50AX | User Guide - Page 231
    Address In IPv6, multicast addresses provide the same functionality as IPv4 broadcast addresses. Broadcasting is not supported in IPv6. A multicast address allows a host to send packets to all hosts in a :0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 NWA50AX User's Guide 231
  • ZyXEL NWA50AX | User Guide - Page 232
    to DHCP clients. DHCPv6 servers and clients exchange DHCP messages using UDP. 1. In IPv6, all network interfaces can be associated with several addresses. NWA50AX User's Guide 232
  • ZyXEL NWA50AX | User Guide - Page 233
    Zyxel Device passes the IPv6 prefix information to its LAN hosts. The hosts then can use the prefix to generate their IPv6 addresses. NWA50AX User's Guide 233
  • ZyXEL NWA50AX | User Guide - Page 234
    MLDv2 is equivalent to IGMPv3. MLD allows an IPv6 switch or router to discover the presence of MLD listeners who wish to receive NWA50AX User's Guide 234
  • ZyXEL NWA50AX | User Guide - Page 235
    in the group. Example - Enabling IPv6 on Windows XP/2003/Vista By default, Windows XP and Windows 2003 support IPv6. This example shows you how to use the ipv6 install command on Windows XP/2003 to enable IPv6. as the DHCPv6 client. To enable DHCPv6 client on your computer: NWA50AX User's Guide 235
  • ZyXEL NWA50AX | User Guide - Page 236
    3 Select Start > Control Panel > Administrative Tools > Services. 4 Double click Dibbler - a DHCPv6 client. 5 Click Start and then OK. 6 Now your computer can obtain an IPv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled
  • ZyXEL NWA50AX | User Guide - Page 237
    IPv4 Address 172.16.100.61 Subnet Mask 255.255.255.0 Default Gateway fe80::213:49ff:feaa:7125%11 172.16.100.254 NWA50AX User's Guide 237
  • ZyXEL NWA50AX | User Guide - Page 238
    APPENDIX C Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a Zyxel • https://www.zyxel.com/in/en/ Kazakhstan • Zyxel Kazakhstan • https://www.zyxel.kz NWA50AX User's Guide 238
  • ZyXEL NWA50AX | User Guide - Page 239
    Appendix C Customer Support Korea • Zyxel Korea Corp. • http://www.zyxel.kr Malaysia • Zyxel Malaysia Sdn Bhd. • http://www.zyxel.com.my Pakistan • Zyxel Europe Belarus • Zyxel BY • https://www.zyxel.by Belgium • Zyxel Communications B.V. • https://www.zyxel.com/be/nl/ NWA50AX User's Guide 239
  • ZyXEL NWA50AX | User Guide - Page 240
    Appendix C Customer Support • https://www.zyxel.com/be/fr/ Bulgaria • Zyxel https://www.zyxel.com/bg/bg/ Czech Republic • Zyxel Communications Czech s.r.o • https • Zyxel Communications Italy • https://www.zyxel.com/it/it/ Latvia • Zyxel Latvia • https://www.zyxel.com/lv/lv/ NWA50AX User's Guide 240
  • ZyXEL NWA50AX | User Guide - Page 241
    Appendix C Customer Support Lithuania • Zyxel Lithuania • https://www.zyxel.com/lt/lt/ Netherlands • Zyxel Benelux • https://www.zyxel.com/nl/nl/ Norway • Zyxel • https://www.zyxel.com/se/sv/ Switzerland • Studerus AG • https://www.zyxel.ch/de • https://www.zyxel.ch/fr NWA50AX User's Guide 241
  • ZyXEL NWA50AX | User Guide - Page 242
    Appendix C Customer Support Turkey • Zyxel Turkey A.S. • https://www.zyxel.com/tr/tr/ UK • Zyxel Communications UK Ltd. • https://www.zyxel.com/uk/en/ Corporation • https://www.zyxel.com/co/es/ Middle East Israel • Zyxel Communications Corporation • http://il.zyxel.com/ NWA50AX User's Guide 242
  • ZyXEL NWA50AX | User Guide - Page 243
    Appendix C Customer Support Middle East • Zyxel Communications Corporation • https://www.zyxel.com/me/en/ North America USA • Zyxel Communications, Inc. - North America • https://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • https://www.zyxel.com/za/en/ NWA50AX User's Guide 243
  • ZyXEL NWA50AX | User Guide - Page 244
    , mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission terms and conditions of any related service providers. Trademarks Trademarks mentioned in installed and used according to the instructions, may cause harmful interference to Guide 244
  • ZyXEL NWA50AX | User Guide - Page 245
    with a minimum distance of 20 cm between the radio equipment and your body. • The maximum RF power operating for each band as follows: NWA50AX User's Guide 245
  • ZyXEL NWA50AX | User Guide - Page 246
    érieur d'une distance supérieure à 300 mètres doivent être notifiées à l'Institut Belge des services Postaux et des Télécommunications (IBPT). Visitez http://www.ibpt.be pour de plus amples détails. Por oraz pozostałymi stosownymi postanowieniami Dyrektywy 2014/53/EU. NWA50AX User's Guide 246
  • ZyXEL NWA50AX | User Guide - Page 247
    that no one will step on them or stumble over them. • Always disconnect all cables from this device before servicing or disassembling. • Do not remove the plug and connect it to a power outlet by itself; always attach prohibited. Contact your local vendor to order a new one. NWA50AX User's Guide 247
  • ZyXEL NWA50AX | User Guide - Page 248
    incorrect type, dispose of used batteries according to the instruction. Dispose them at the applicable collection point for the of a suitably installed ground conductor. Contact the qualified service personnel if you are uncertain that suitable grounding is älle. NWA50AX User's Guide 248
  • ZyXEL NWA50AX | User Guide - Page 249
    damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. NWA50AX User's Guide 249
  • ZyXEL NWA50AX | User Guide - Page 250
    event be held liable for indirect or consequential damages of any kind to the purchaser. To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in go to: https://www.zyxel.com/form/gpl_oss_software_notice.shtml NWA50AX User's Guide 250
  • ZyXEL NWA50AX | User Guide - Page 251
    22 applications MBSSID 16 Repeater 13 Assisted Roaming, see 802.11k/v B backing up configuration files 169 Basic Service Set see BSS Bluetooth BLE, see Bluetooth Low Energy Bluetooth Low Energy 19 boot module 174 C CA and viewing 250 channel 17 CLI 27, 35 button 35 NWA50AX User's Guide 251
  • ZyXEL NWA50AX | User Guide - Page 252
    setting manually 142 time server 142 customer support 238 Index dual radios 17 dual-radio application 17 dynamic channel selection 76 E encryption 13 ESSID 203 Extended Service Set disclaimer 244 domain name 139 G Guide CLI Reference 2 H HTTP over SSL, see HTTPS redirect to HTTPS 145 NWA50AX User
  • ZyXEL NWA50AX | User Guide - Page 253
    device good habits 27 using FTP, see FTP MBSSID 16 memory usage 45, 48 messages CLI 35 mode, default 20 model name 44 NWA50AX User's Guide 253
  • ZyXEL NWA50AX | User Guide - Page 254
    R radio 17 Radio Frequency monitor 12 reboot 42, 183 vs reset 183 Reference Guide, CLI 2 registration product 250 remote management FTP, see FTP WWW, see WWW see SSL serial number 44 service control and users 143 limitations 143 timeouts 143 Service Set 93 Service Set Identifier see SSID shell
  • ZyXEL NWA50AX | User Guide - Page 255
    users admin (type) 86 admin, see also admin users and service control 143 currently logged in 45 default lease time 90, 92 ) 142 trademarks 244 Transport Layer Security (TLS) 156 troubleshooting 178, 193 Trusted Certificates, see also certificates 132 supported browsers 30 NWA50AX User's Guide 255
  • ZyXEL NWA50AX | User Guide - Page 256
    17 WPA2 94 WWW 144 and certificates 145 see also HTTP, HTTPS 144 Z ZDP 22 ZON Utility 22 Zyxel Discovery Protocol 22 Index NWA50AX User's Guide 256
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
Default Login Details
User’s Guide
NWA50AX
802.11ax (WiFi6) Dual-Radio PoE Access Point
Copyright © 2021 Zyxel and/ or its affiliates. All rights reserved.
Management IP
Address
http://DHCP-assigned IP
OR
User Name
admin
Password
1234
Version 6.20 Edition 1, 5/2021