Home » ZyXEL Manuals » Wireless » ZyXEL WAX620D-6E » Manual Viewer

ZyXEL WAX620D-6E User Guide - Page 195

Configuration > Object > Certificate > Trusted Certificates > Edit

Add to My Manuals
Save this manual to your list of manuals

Page 195 highlights

Chapter 16 Certificates The following table describes the labels in this screen. Table 81 Configuration > Object > Certificate > Trusted Certificates > Edit LABEL DESCRIPTION Configuration Name Certification Path This field displays the identifying name of this certificate. You can change the name. You can use up to 31 alphanumeric and characters. Click the Refresh button to have this read-only text box display the end entity's certificate and a list of certification authority certificates that shows the hierarchy of certification authorities that validate the end entity's certificate. If the issuing certification authority is one that you have imported as a trusted certificate, it may be the only certification authority in the list (along with the end entity's own certificate). The Zyxel Device does not trust the end entity's certificate and displays "Not trusted" in this field if any certificate on the path has expired or been revoked. Refresh Click Refresh to display the certification path. Certificate Validation Enable X.509v3 CRL Distribution Points and OCSP checking Select this check box to have the Zyxel Device check incoming certificates that are signed by this certificate against a Certificate Revocation List (CRL) or an OCSP server. You also need to configure the OSCP or LDAP server details. OCSP Server Select this check box if the directory server uses OCSP (Online Certificate Status Protocol). URL Type the protocol, IP address and pathname of the OCSP server. ID The Zyxel Device may need to authenticate itself in order to assess the OCSP server. Type the login name (up to 31 ASCII characters) from the entity maintaining the server (usually a certification authority). Password Type the password (up to 31 ASCII characters) from the entity maintaining the OCSP server (usually a certification authority). LDAP Server Select this check box if the directory server uses LDAP (Lightweight Directory Access Protocol). LDAP is a protocol over TCP that specifies how clients access directories of certificates and lists of revoked certificates. Address Type the IP address (in dotted decimal notation) of the directory server. Port Use this field to specify the LDAP server port number. You must use the same server port number that the directory server uses. 389 is the default server port number for LDAP. ID The Zyxel Device may need to authenticate itself in order to assess the CRL directory server. Type the login name (up to 31 ASCII characters) from the entity maintaining the server (usually a certification authority). Password Type the password (up to 31 ASCII characters) from the entity maintaining the CRL directory server (usually a certification authority). Certificate Information These read-only fields display detailed information about the certificate. Type This field displays general information about the certificate. CA-signed means that a Certification Authority signed the certificate. Self-signed means that the certificate's owner signed the certificate (not a certification authority). X.509 means that this certificate was created and signed according to the ITU-T X.509 recommendation that defines the formats for public-key certificates. Version This field displays the X.509 version number. Serial Number This field displays the certificate's identification number given by the certification authority. Subject This field displays information that identifies the owner of the certificate, such as Common Name (CN), Organizational Unit (OU), Organization (O) and Country (C). Issuer This field displays identifying information about the certificate's issuing certification authority, such as Common Name, Organizational Unit, Organization and Country. With self-signed certificates, this is the same information as in the Subject Name field. NWA/WAC/WAX Series User's Guide 195

Section	Page
NWA/WAC/WAX Series	1
Document Conventions	3
Contents Overview	4
Table of Contents	5
Introduction	13
1.1 Overview	13
1.2 Zyxel Device Product Feature Comparison	14
1.3 Zyxel Device Roles	22
1.3.1 Root AP	24
1.3.2 Wireless Repeater	24
1.3.3 Radio Frequency (RF) Monitor	26
1.4 Sample Feature Applications	27
1.4.1 MBSSID	27
1.4.2 Dual-Radio/Triple-Radio and BandFlex	28
AP Management	30
2.1 Management Mode	30
2.1.1 Standalone	30
2.1.2 Nebula Control Center	31
2.1.3 AP Controller (AC)	32
2.2 Switching Management Modes	33
2.3 Zyxel One Network (ZON) Utility	34
2.3.1 Requirements	34
2.3.2 Run the ZON Utility	34
2.4 Ways to Access the Zyxel Device	38
2.5 Good Habits for Managing the Zyxel Device	39
Hardware	40
3.1 Grounding (WAC6552D-S and WAC6553D-E)	40
3.2 Zyxel Device Models With Single LEDs	41
3.3 Zyxel Device Single LED	41
3.3.1 NWA1123-ACv2	42
3.3.2 WAC6303D-S, NWA1123-AC HD and NWA5123-AC HD	43
3.3.3 NWA5123-AC	45
3.3.4 WAC500, WAC500H, NWA1123ACv3, NWA110AX, NWA210AX, WAX510D, WAX610D, WAX630S and WAX650S	46
3.3.5 NWA220AX-6E, WAX620D-6E, and WAX640S-6E	49
3.4 Zyxel Device Models With Multiple LEDs	51
3.4.1 NWA1123-AC PRO	51
3.4.2 NWA1302-AC	53
3.4.3 WAC6502D-E, WAC6502D-S, and WAC6503D-S	54
3.4.4 WAC6103D-I	56
3.4.5 WAC5302D-S	58
Web Configurator	61
4.1 Overview	61
4.2 Accessing the Web Configurator	61
4.3 Navigating the Web Configurator	64
4.3.1 Title Bar	65
4.3.2 Navigation Panel	66
4.3.3 Standalone Mode Navigation Panel Menus	67
4.3.4 Cloud Mode Navigation Panel Menus	69
4.3.5 Tables and Lists	70
Standalone Configuration	73
Standalone Configuration	74
5.1 Overview	74
5.2 Starting and Stopping the Zyxel Device	74
Dashboard	76
6.1 Overview	76
6.1.1 CPU Usage	80
6.1.2 Memory Usage	81
Setup Wizard	82
7.1 Accessing the Wizard	82
7.2 Using the Wizard	82
7.2.1 Step 1 Time Settings	82
7.2.2 Step 2 Password and Uplink Connection	83
7.2.3 Step 3 SSID	84
7.2.4 Step 4 Radio	86
7.2.5 Summary	87
Monitor	89
8.1 Overview	89
8.1.1 What You Can Do in this Chapter	89
8.2 What You Need to Know	89
8.3 Network Status	90
8.3.1 Port Statistics Graph	91
8.4 Radio List	92
8.4.1 AP Mode Radio Information	94
8.5 Station List	96
8.6 WDS Link Info	97
8.7 Detected Device	98
8.8 View Log	101
Network	104
9.1 Overview	104
9.1.1 AP Controller Management	104
9.1.2 What You Can Do in this Chapter	106
9.2 IP Setting	107
9.3 VLAN	108
9.4 Storm Control	113
9.5 AC (AP Controller) Discovery	113
9.6 NCC Discovery	115
Wireless	117
10.1 Overview	117
10.1.1 What You Can Do in this Chapter	117
10.1.2 What You Need to Know	118
10.2 AP Management	118
10.3 Rogue AP	124
10.3.1 Add/Edit Rogue/Friendly List	127
10.4 Load Balancing	128
10.4.1 Disassociating and Delaying Connections	129
10.5 DCS	131
10.6 Technical Reference	131
Bluetooth	134
11.1 Overview	134
11.1.1 What You Need To Know	134
11.2 Bluetooth Advertising Settings	135
11.2.1 Edit Advertising Settings	135
User	137
12.1 Overview	137
12.1.1 What You Can Do in this Chapter	137
12.1.2 What You Need To Know	137
12.2 User Summary	138
12.2.1 Add/Edit User	138
12.3 Setting	140
12.3.1 Edit User Authentication Timeout Settings	142
AP Profile	144
13.1 Overview	144
13.1.1 What You Can Do in this Chapter	144
13.1.2 What You Need To Know	144
13.2 Radio	147
13.2.1 Add/Edit Radio Profile	148
13.3 SSID	155
13.3.1 SSID List	155
13.3.2 Add/Edit SSID Profile	156
13.4 Security List	159
13.4.1 Add/Edit Security Profile	160
13.5 MAC Filter List	172
13.5.1 Add/Edit MAC Filter Profile	173
13.6 Layer-2 Isolation List	174
13.6.1 Add/Edit Layer-2 Isolation Profile	175
MON Profile	177
14.1 Overview	177
14.1.1 What You Can Do in this Chapter	177
14.2 MON Profile	177
14.2.1 Add/Edit MON Profile	178
WDS Profile	180
15.1 Overview	180
15.1.1 What You Can Do in this Chapter	180
15.2 WDS Profile	180
15.2.1 Add/Edit WDS Profile	181
Certificates	182
16.1 Overview	182
16.1.1 What You Can Do in this Chapter	182
16.1.2 What You Need to Know	182
16.1.3 Verifying a Certificate	184
16.2 My Certificates	185
16.2.1 Add My Certificates	186
16.2.2 Edit My Certificates	188
16.2.3 Import Certificates	191
16.3 Trusted Certificates	192
16.3.1 Edit Trusted Certificates	193
16.3.2 Import Trusted Certificates	196
16.4 Technical Reference	197
System	198
17.1 Overview	198
17.1.1 What You Can Do in this Chapter	198
17.2 Host Name	198
17.3 Power Mode	199
17.4 Date and Time	200
17.4.1 Pre-defined NTP Time Servers List	202
17.4.2 Time Server Synchronization	202
17.5 WWW Overview	203
17.5.1 Service Access Limitations	203
17.5.2 System Timeout	203
17.5.3 HTTPS	204
17.5.4 Configuring WWW Service Control	204
17.5.5 HTTPS Example	206
17.6 SSH	211
17.6.1 How SSH Works	212
17.6.2 SSH Implementation on the Zyxel Device	213
17.6.3 Requirements for Using SSH	213
17.6.4 Configuring SSH	213
17.6.5 Examples of Secure Telnet Using SSH	214
17.7 FTP	215
17.8 SNMP	216
17.8.1 Supported MIBs	217
17.8.2 SNMP Traps	217
17.8.3 Configuring SNMP	217
17.8.4 Adding or Editing an SNMPv3 User Profile	218
Log and Report	220
18.1 Overview	220
18.1.1 What You Can Do In this Chapter	220
18.2 Email Daily Report	220
18.3 Log Setting	222
18.3.1 Log Setting Screen	223
18.3.2 Edit System Log Settings	224
18.3.3 Edit Remote Server	228
18.3.4 Active Log Summary	229
File Manager	232
19.1 Overview	232
19.1.1 What You Can Do in this Chapter	232
19.1.2 What you Need to Know	232
19.2 Configuration File	233
19.2.1 Example of Configuration File Download Using FTP	237
19.3 Firmware Package	238
19.3.1 Example of Firmware Upload Using FTP	239
19.4 Shell Script	240
Diagnostics	243
20.1 Overview	243
20.1.1 What You Can Do in this Chapter	243
20.2 Diagnostics	243
20.3 Remote Capture	244
LEDs	246
21.1 Overview	246
21.1.1 What You Can Do in this Chapter	246
21.2 Suppression Screen	246
21.3 Locator Screen	247
Antenna Switch	249
22.1 Overview	249
22.1.1 What You Need To Know	249
22.2 Antenna Switch Screen	249
Reboot	251
23.1 Overview	251
23.1.1 What You Need To Know	251
23.2 Reboot	251
Shutdown	252
24.1 Overview	252
24.1.1 What You Need To Know	252
24.2 Shutdown	252
Local Configuration in Cloud Mode	253
Cloud Mode	254
25.1 Overview	254
25.2 Cloud Mode Web Configurator Screens	254
25.3 Dashboard	255
Network	257
26.1 Overview	257
26.1.1 What You Can Do in this Chapter	257
26.2 IP Setting	257
26.3 VLAN	259
Maintenance	260
27.1 Overview	260
27.1.1 What You Can Do in this Chapter	260
27.2 Shell Script	260
27.3 Diagnostics	261
27.4 Remote Capture	262
27.5 View Log	263
Appendices and Troubleshooting	266
Troubleshooting	267
28.1 Overview	267
28.2 Power, Hardware Connections, and LED	267
28.3 Zyxel Device Management, Access, and Login	268
28.4 Internet Access	272
28.5 WiFi Network	273
28.6 Resetting the Zyxel Device	275
28.7 Getting More Troubleshooting Help	275
Importing Certificates	276
IPv6	300
Customer Support	308
Legal Information	313

Match case Limit results 1 per page

Chapter 16 Certificates

NWA/WAC/WAX Series User’s Guide

195

The following table describes the labels in this screen.

Table 81

Configuration > Object > Certificate > Trusted Certificates > Edit

LABEL

DESCRIPTION

Configuration

Name

This field displays the identifying name of this certificate. You can change the name. You

can use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=-

characters.

Certification Path

Click the

Refresh

button to have this read-only text box display the end entity’s certificate and a list of certification

authority certificates that shows the hierarchy of certification authorities that validate the end entity’s certificate. If

the issuing certification authority is one that you have imported as a trusted certificate, it may be the only

certification authority in the list (along with the end entity’s own certificate). The Zyxel Device does not trust the end

entity’s certificate and displays “Not trusted” in this field if any certificate on the path has expired or been revoked.

Refresh

Click

Refresh

to display the certification path.

Certificate Validation

Enable X.509v3 CRL

Distribution Points

and OCSP checking

Select this check box to have the Zyxel Device check incoming certificates that are signed

by this certificate against a Certificate Revocation List (CRL) or an OCSP server. You also

need to configure the OSCP or LDAP server details.

OCSP Server

Select this check box if the directory server uses OCSP (Online Certificate Status Protocol).

URL

Type the protocol, IP address and pathname of the OCSP server.

The Zyxel Device may need to authenticate itself in order to assess the OCSP server. Type

the login name (up to 31 ASCII characters) from the entity maintaining the server (usually a

certification authority).

Password

Type the password (up to 31 ASCII characters) from the entity maintaining the OCSP server

(usually a certification authority).

LDAP Server

Select this check box if the directory server uses LDAP (Lightweight Directory Access

Protocol). LDAP is a protocol over TCP that specifies how clients access directories of

certificates and lists of revoked certificates.

Address

Type the IP address (in dotted decimal notation) of the directory server.

Port

Use this field to specify the LDAP server port number. You must use the same server port

number that the directory server uses. 389 is the default server port number for LDAP.

The Zyxel Device may need to authenticate itself in order to assess the CRL directory server.

Type the login name (up to 31 ASCII characters) from the entity maintaining the server

(usually a certification authority).

Password

Type the password (up to 31 ASCII characters) from the entity maintaining the CRL directory

server (usually a certification authority).

Certificate Information

These read-only fields display detailed information about the certificate.

Type

This field displays general information about the certificate. CA-signed means that a

Certification Authority signed the certificate. Self-signed means that the certificate’s owner

signed the certificate (not a certification authority).

X.509 means that this certificate was

created and signed according to the ITU-T X.509 recommendation that defines the formats

for public-key certificates.

Version

This field displays the X.509 version number.

Serial Number

This field displays the certificate’s identification number given by the certification authority.

Subject

This field displays information that identifies the owner of the certificate, such as Common

Name (CN), Organizational Unit (OU), Organization (O) and Country (C).

Issuer

This field displays identifying information about the certificate’s issuing certification authority,

such as Common Name, Organizational Unit, Organization and Country.

With self-signed certificates, this is the same information as in the

Subject Name

field.