ZyXEL Communications NWD210N Wireless N USB Adapter User Manual SMG 700 User s Guide V1 00 Nov 2004

ZyXEL Communications Corporation Wireless N USB Adapter SMG 700 User s Guide V1 00 Nov 2004

Contents

Part 3

Appendix B Wireless LANsNWD210N User’s Guide112Encryption Both WPA and WPA2 improve data encryption by using Temporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IEEE 802.1x. WPA and WPA2 use Advanced Encryption Standard (AES) in the Counter mode with Cipher block chaining Message authentication code Protocol (CCMP) to offer stronger encryption than TKIP.TKIP uses 128-bit keys that are dynamically generated and distributed by the authentication server. AES (Advanced Encryption Standard) is a block cipher that uses a 256-bit mathematical algorithm called Rijndael. They both include a per-packet key mixing function, a Message Integrity Check (MIC) named Michael, an extended initialization vector (IV) with sequencing rules, and a re-keying mechanism.WPA and WPA2 regularly change and rotate the encryption keys so that the same encryption key is never used twice. The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. This all happens in the background automatically.The Message Integrity Check (MIC) is designed to prevent an attacker from capturing data packets, altering them and resending them. The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC. If they do not match, it is assumed that the data has been tampered with and the packet is dropped. By generating unique data encryption keys for every data packet and by creating an integrity checking mechanism (MIC), with TKIP and AES it is more difficult to decrypt data on a Wi-Fi network than WEP and difficult for an intruder to break into the network. The encryption mechanisms used for WPA(2) and WPA(2)-PSK are the same. The only difference between the two is that WPA(2)-PSK uses a simple common password, instead of user-specific credentials. The common-password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but it’s still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption keys. This prevent all wireless devices sharing the same encryption keys. (a weakness of WEP)User Authentication WPA and WPA2 apply IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and pre-authentication. These two features are optional and may not be supported in all wireless devices.Key caching allows a wireless client to store the PMK it derived through a successful authentication with an AP. The wireless client uses the PMK when it tries to connect to the same AP and does not need to go with the authentication process again.Pre-authentication enables fast roaming by allowing the wireless client (already connecting to an AP) to perform IEEE 802.1x authentication with another AP before connecting to it.
Appendix B Wireless LANsNWD210N User’s Guide 113Wireless Client WPA SupplicantsA wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WPA. At the time of writing, the most widely available supplicant is the WPA patch for Windows XP, Funk Software's Odyssey client. The Windows XP patch is a free download that adds WPA capability to Windows XP's built-in "Zero Configuration" wireless client. However, you must run Windows XP to use it. WPA(2) with RADIUS Application ExampleTo set up WPA(2), you need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared secret. A WPA(2) application example with an external RADIUS server looks as follows. "A" is the RADIUS server. "DS" is the distribution system.1The AP passes the wireless client's authentication request to the RADIUS server.2The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly.3A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client.4The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.Figure 89 WPA(2) with RADIUS Application ExampleWPA(2)-PSK Application ExampleA WPA(2)-PSK application looks as follows.1First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols).2The AP checks each wireless client's password and allows it to join the network only if the password matches.
Appendix B Wireless LANsNWD210N User’s Guide1143The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. 4The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them.Figure 90 WPA(2)-PSK AuthenticationSecurity Parameters SummaryRefer to this table to see what other security parameters you should configure for each authentication method or key management protocol type. MAC address filters are not dependent on how you configure these security features.Table 25 Wireless Security Relational MatrixAUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOLENCRYPTION METHODENTER MANUAL KEY IEEE 802.1XOpen None No DisableEnable without Dynamic WEP KeyOpen WEP No Enable with Dynamic WEP KeyYes Enable without Dynamic WEP KeyYes DisableShared WEP No Enable with Dynamic WEP KeyYes Enable without Dynamic WEP KeyYes DisableWPA TKIP/AES No EnableWPA-PSK TKIP/AES Yes DisableWPA2 TKIP/AES No EnableWPA2-PSK TKIP/AES Yes Disable
Appendix B Wireless LANsNWD210N User’s Guide 115Antenna OverviewAn antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air. The antenna also operates in reverse by capturing RF signals from the air. Positioning the antennas properly increases the range and coverage area of a wireless LAN. Antenna CharacteristicsFrequencyAn antenna in the frequency of 2.4GHz (IEEE 802.11b and IEEE 802.11g) or 5GHz (IEEE 802.11a) is needed to communicate efficiently in a wireless LANRadiation PatternA radiation pattern is a diagram that allows you to visualize the shape of the antenna’s coverage area. Antenna GainAntenna gain, measured in dB (decibel), is the increase in coverage within the RF beam width. Higher antenna gain improves the range of the signal for better communications. For an indoor site, each 1 dB increase in antenna gain results in a range increase of approximately 2.5%. For an unobstructed outdoor site, each 1dB increase in gain results in a range increase of approximately 5%. Actual results may vary depending on the network environment. Antenna gain is sometimes specified in dBi, which is how much the antenna increases the signal power compared to using an isotropic antenna. An isotropic antenna is a theoretical perfect antenna that sends out radio signals equally well in all directions. dBi represents the true gain that the antenna provides. Types of Antennas for WLANThere are two types of antennas used for wireless LAN applications.• Omni-directional antennas send the RF signal out in all directions on a horizontal plane. The coverage area is torus-shaped (like a donut) which makes these antennas ideal for a room environment. With a wide coverage area, it is possible to make circular overlapping coverage areas with multiple access points. • Directional antennas concentrate the RF signal in a beam, like a flashlight does with the light from its bulb. The angle of the beam determines the width of the coverage pattern. Angles typically range from 20 degrees (very directional) to 120 degrees (less directional). Directional antennas are ideal for hallways and outdoor point-to-point applications.
Appendix B Wireless LANsNWD210N User’s Guide116Positioning AntennasIn general, antennas should be mounted as high as practically possible and free of obstructions. In point-to–point application, position both antennas at the same height and in a direct line of sight to each other to attain the best performance. For omni-directional antennas mounted on a table, desk, and so on, point the antenna up. For omni-directional antennas mounted on a wall or ceiling, point the antenna down. For a single AP application, place omni-directional antennas as close to the center of the coverage area as possible. For directional antennas, point the antenna in the direction of the desired coverage area.
NWD210N User’s Guide 117APPENDIX C Windows Wireless ManagementThis appendix shows you how to manage your NWD210N using the Windows Vista and Windows XP wireless configuration tools.Windows VistaTake the following steps to connect to a wireless network using the Windows Vista wireless configuration tool (WLAN AutoConfig).Connecting to a Wireless Network1In the Windows Vista taskbar, click Start () > Connect To. Figure 91 Vista: Start MenuThe Connect To window displays, showing all available networks.
Appendix C Windows Wireless ManagementNWD210N User’s Guide118Figure 92 Vista: The Connect To WindowThe security status of each wireless network displays, as well as an indication of its signal strength. If you use the mouse pointer to hover over a network’s entry, additional information about the network displays.Figure 93 Vista: Additional Information2Double-click the network’s name to join the network, or select a network and click Connect. "If the network to which you want to connect does not display, see the section on setting up a connection manually on page 120.3If security is enabled, you may be prompted to enter your security key.
Appendix C Windows Wireless ManagementNWD210N User’s Guide 119Figure 94 Vista: Enter Security KeyYour computer tries to connect to the wireless network.Figure 95 Vista: ConnectingIf your computer has connected to the wireless network successfully, the following screen displays.
Appendix C Windows Wireless ManagementNWD210N User’s Guide120Figure 96 Vista: Successful Connection4If you will use this network again, ensure that Save this network is selected. If you save the network, you do not have to configure its settings again.5Select Start this connection automatically if you want Windows to always try to use this network when you start up your computer. If you do not select this (but select Save this network) you can connect manually each time by clicking Start > Connect to and selecting the network’s name from the list.Connecting to a Network ManuallyIf the wireless network to which you want to connect does not appear in the Connect to window (if your network’s SSID is hidden, for example), take the following steps to configure your network connection manually1Click Set up a connection or network at the bottom of the Connect to screen. The following screen displays.
Appendix C Windows Wireless ManagementNWD210N User’s Guide 121Figure 97 Vista: Choose a Connection Option2Click Manually connect to a wireless network. The following screen displays.Figure 98 Vista: Connect ManuallyThe following table describes the labels in this screen.Table 26 Vista: Connect ManuallyLABEL DESCRIPTIONNetwork name Enter your network’s SSID (Service Set IDentifier).Security type Select the type of security used by the network to which you want to connect. The types of available security shown depend on your computer’s wireless client.In this field, WPA(2)-Personal is the same as WPA(2)-PSK, and WPA(2)-Enterprise is the same as WPA(2)
Appendix C Windows Wireless ManagementNWD210N User’s Guide1223When you have finished filling in the fields, click Next. the following screen displays.Figure 99 Vista: Successfully Added Network4If you want to make any changes to the settings you just configured, click Change connection settings. Otherwise, click Connect to.... In the window that displays, double-click the new network’s name to connect to the network.Setting Up An Ad-Hoc Network Take the following steps to set up a wireless connection between two computers in Windows Vista. Encryption type Select the type of encryption used by the network.When you use WEP or 802.1x, WEP displays.When you use a WPA mode (WPA(2)-Personal or WPA(2)-Enterprise) you can choose AES or TKIP (if supported by your computer’s wireless client).Security Key / PassphraseIf your network uses WEP or WPA(2)-Personal security, enter the key here.Display Characters Select this if you do not want the security key characters to be hidden.Start this connection automaticallySelect this box if you always want to try to connect to this network at startup. If you leave this box unchecked, you will need to connect manually each time.Connect even if the network is not broadcastingSelect this box if you always want to try to connect to this network at startup, even if the network is not broadcasting its SSID. The warning in this field refers to the fact that if you do this, your computer sends out probe request packets, which contain the network’s SSID and could be used by an attacker to access the network.Next Click this to save your settings and move on to the next page.Cancel Click this to stop setting up your network.Table 26 Vista: Connect ManuallyLABEL DESCRIPTION
Appendix C Windows Wireless ManagementNWD210N User’s Guide 1231Click Start () > Connect To. In the Connect to screen, click Set up a connection or network. The following screen displays.Figure 100 Vista: Set Up An Ad-hoc Network2Select Set up a wireless ad hoc (computer-to-computer) network and click Next. The following screen displays.Figure 101 Vista: Ad-hoc Options 3Enter the Network name (SSID) you want to use for your network. Select a Security type. If you are not sure what kind of security you want to use, click the Help me choose link.
Appendix C Windows Wireless ManagementNWD210N User’s Guide124"Make sure all the wireless clients on your ad-hoc network can support the type of security you select.4Enter the Security key/Passphrase. Everybody on the network must enter this key in their computer’s wireless client in order to access the network. If you want to see the characters you entered, select the Display characters box. Otherwise, leave it empty (dots display instead of the characters).5If you will use this ad-hoc network again, select the Save this network box. If you do this, the next time you click Start > Connect to, you can select the network from the list.6Click Next. The following screen displays.Figure 102 Vista: Ad-hoc Network Ready 7If you want to share files with other computers on the ad-hoc network, or let other computers use your Internet connection, click the Network and Sharing Center link. Otherwise, click Close.Windows XPBe sure you have the Windows XP service pack 2 installed on your computer. Otherwise, you should at least have the Windows XP service pack 1 already on your computer and download the support patch for WPA from the Microsoft web site.Windows XP SP2 screen shots are shown unless otherwise specified. Click the help icon ( ) in most screens, move the cursor to the item that you want the information about and click to view the help.Activating Wireless Zero Configuration1Click Start, Control Panel and double-click Network Connections.
Appendix C Windows Wireless ManagementNWD210N User’s Guide 1252Double-click on the icon for wireless network connection.3The status window displays as shown below. Click Properties.Figure 103 Windows XP SP1: Wireless Network Connection StatusFigure 104 Windows XP SP2: Wireless Network Connection Status4The Wireless Network Connection Properties screen displays. Click the Wireless Networks tab.Make sure the Use Windows to configure my wireless network settings check box is selected.
Appendix C Windows Wireless ManagementNWD210N User’s Guide126Figure 105 Windows XP SP1: Wireless Network Connection PropertiesFigure 106 Windows XP SP2: Wireless Network Connection PropertiesIf you see the following screen, refer to article 871122 on the Microsoft web site for information on starting WZC.
Appendix C Windows Wireless ManagementNWD210N User’s Guide 127Figure 107 Windows XP SP2: WZC Not AvailableConnecting to a Wireless Network 1Double-click the network icon for wireless connections in the system tray to open the Wireless Network Connection Status screen.Figure 108 Windows XP SP2: System Tray IconThe type of the wireless network icon in Windows XP SP2 indicates the status of the NWD210N. Refer to the following table for details.2Windows XP SP2: In the Wireless Network Connection Status screen, click View Wireless Networks to open the Wireless Network Connection screen.Table 27 Windows XP SP2: System Tray IconICON DESCRIPTIONThe NWD210N is connected to a wireless network.The NWD210N is in the process of connecting to a wireless network.The connection to a wireless network is limited because the network did not assign a network address to the computer.The NWD210N is not connected to a wireless network.
Appendix C Windows Wireless ManagementNWD210N User’s Guide128Figure 109 Windows XP SP2: Wireless Network Connection StatusWindows XP SP1: In the Wireless Network Connection Status screen, click Properties and the Wireless Networks tab to open the Wireless Network Connection Properties screen.Figure 110 Windows XP SP1: Wireless Network Connection Status3Windows XP SP2: Click Refresh network list to reload and search for available wireless devices within transmission range. Select a wireless network in the list and click Connect to join the selected wireless network.
Appendix C Windows Wireless ManagementNWD210N User’s Guide 129Figure 111 Windows XP SP2: Wireless Network ConnectionThe following table describes the icons in the wireless network list.Windows XP SP1: Click Refresh to reload and search for available wireless devices within transmission range. Select a wireless network in the Available networks list, click Configure and set the related fields to the same security settings as the associated AP to add the selected network into the Preferred networks table. Click OK to join the selected wireless network. Refer to the section on security settings (discussed later) for more information. Table 28 Windows XP SP2: Wireless Network ConnectionICON DESCRIPTIONThis denotes that wireless security is activated for the wireless network.This denotes that this wireless network is your preferred network. Ordering your preferred networks is important because the NWD210N tries to associate to the preferred network first in the order that you specify. Refer to the section on ordering the preferred networks for detailed information.This denotes the signal strength of the wireless network.Move your cursor to the icon to see details on the signal strength.
Appendix C Windows Wireless ManagementNWD210N User’s Guide130Figure 112 Windows XP SP1: Wireless Network Connection Properties44.Windows XP SP2: If the wireless security is activated for the selected wireless network, the Wireless Network Connection screen displays. You must set the related fields in the Wireless Network Connection screen to the same security settings as the associated AP and click Connect. Refer to the section about security settings for more information. Otherwise click Cancel and connect to another wireless network without data encryption. If there is no security activated for the selected wireless network, a warning screen appears. Click Connect Anyway if wireless security is not your concern.Figure 113 Windows XP SP2: Wireless Network Connection: WEP or WPA-PSK
Appendix C Windows Wireless ManagementNWD210N User’s Guide 131Figure 114 Windows XP SP2: Wireless Network Connection: No Security5Verify that you have successfully connected to the selected network and check the connection status in the wireless network list or the connection icon in the Preferred networks or Available networks list.The following table describes the connection icons.Security SettingsWhen you configure the NWD210N to connect to a secure network but the security settings are not yet enabled on the NWD210N, you will see different screens according to the authentication and encryption methods used by the selected network.AssociationSelect a network in the Preferred networks list and click Properties to view or configure security.Figure 115 Windows XP: Wireless (network) properties: AssociationTable 29 Windows XP: Wireless NetworksICON DESCRIPTIONThis denotes the wireless network is an available wireless network.This denotes the NWD210N is associated to the wireless network.This denotes the wireless network is not available.
Appendix C Windows Wireless ManagementNWD210N User’s Guide132The following table describes the labels in this screen.AuthenticationClick the Authentication tab in the Wireless (network) properties screen to display the screen shown next. The fields on this screen are grayed out when the network is in Ad-Hoc mode or data encryption is disabled.Table 30 Windows XP: Wireless (network) properties: AssociationLABEL DESCRIPTIONNetwork name (SSID) This field displays the SSID (Service Set IDentifier) of each wireless network.Network AuthenticationThis field automatically shows the authentication method (Share, Open, WPA or WPA-PSK) used by the selected network. Data Encryption This field automatically shows the encryption type (TKIP, WEP or Disable) used by the selected network. Network Key Enter the pre-shared key or WEP key.The values for the keys must be set up exactly the same on all wireless devices in the same wireless LAN.Confirm network keyEnter the key again for confirmation.Key index (advanced)Select a default WEP key to use for data encryption.This field is available only when the network use WEP encryption method and the The key is provided for me automatically check box is not selected.The key is provided for me automaticallyIf this check box is selected, the wireless AP assigns the NWD210N a key.This is a computer-to-computer (ad hoc) network; wireless access points are not usedIf this check box is selected, you are connecting to another computer directly.OK Click OK to save your changes.Cancel Click Cancel to leave this screen without saving any changes you may have made.
Appendix C Windows Wireless ManagementNWD210N User’s Guide 133Figure 116 Windows XP: Wireless (network) properties: AuthenticationThe following table describes the labels in this screen.Authentication PropertiesSelect an EAP authentication type in the Wireless (network) properties: Authentication screen and click the Properties button to display the following screen. Table 31 Windows XP: Wireless (network) properties: AuthenticationLABEL DESCRIPTIONEnable IEEE 802.1x authentication for this networkThis field displays whether the IEEE 802.1x authentication is active.If the network authentication is set to Open in the previous screen, you can choose to disable or enable this feature.EAP Type Select the type of EAP authentication. Options are Protected EAP (PEAP) and Smart Card or other Certificate. Properties Click this button to open the properties screen and configure certificates. The screen varies depending on what you select in the EAP type field.Authenticate as computer when computer information is availableSelect this check box to have the computer send its information to the network for authentication when a user is not logged on.Authenticate as guest when user or computer information is unavailableSelect this check box to have the computer access to the network as a guest when a user is not logged on or computer information is not available.OK Click OK to save your changes.Cancel Click Cancel to leave this screen without saving any changes you may have made.
Appendix C Windows Wireless ManagementNWD210N User’s Guide134Protected EAP PropertiesFigure 117 Windows XP: Protected EAP PropertiesThe following table describes the labels in this screen.Table 32 Windows XP: Protected EAP PropertiesLABEL DESCRIPTIONValidate server certificateSelect the check box to verify the certificate of the authentication server.Connect to these serversSelect the check box and specify a domain in the field below to have your computer connect to a server which resides only within this domain.Trusted Root Certification Authorities:Select a trusted certification authority from the list below.Note: You must first have a wired connection to a network and obtain the certificate(s) from a certificate authority (CA). Consult your network administrator for more information.Do not prompt user to authorize new server or trusted certification authorities.Select this check box to verify a new authentication server or trusted CA without prompting.This field is available only if you installed the Windows XP server pack 2.Select Authentication Method: Select an authentication method from the drop-down list box and click Configure to do settings.Enable Fast ReconnectSelect the check box to automatically reconnect to the network (without re-authentication) if the wireless connection goes down.OK Click OK to save your changes.Cancel Click Cancel to leave this screen without saving any changes you may have made.
Appendix C Windows Wireless ManagementNWD210N User’s Guide 135Smart Card or other Certificate PropertiesFigure 118 Windows XP: Smart Card or other Certificate PropertiesThe following table describes the labels in this screen.Ordering the Preferred NetworksFollow the steps below to manage your preferred networks.Table 33 Windows XP: Smart Card or other Certificate PropertiesLABEL DESCRIPTIONUse my smart cardSelect this check box to use the smart card for authentication.Use a certificate on this computerSelect this check box to use a certificate on your computer for authentication.Validate server certificateSelect the check box to check the certificate of the authentication server.Connect to these serversSelect the check box and specify a domain in the field below to have your computer connect to a server which resides only within this domain. Trusted Root Certification Authorities:Select a trusted certification authority from the list below.Note: You must first have a wired connection to a network and obtain the certificate(s) from a certificate authority (CA). Consult your network administrator for more information.View Certificate Click this button if you want to verify the selected certificate.Use a different user name for the connection:Select the check box to use a different user name when the user name in the smart card or certificate is not the same as the user name in the domain that you are logged on to.OK Click OK to save your changes.Cancel Click Cancel to leave this screen without saving any changes you may have made.
Appendix C Windows Wireless ManagementNWD210N User’s Guide1361Windows XP SP2: Click Change the order of preferred networks in the Wireless Network Connection screen (see Figure 111 on page 129). The screen displays as shown. Figure 119 Windows XP SP2: Wireless Networks: Preferred NetworksWindows XP SP1: In the Wireless Network Connection Status screen, click Properties and the Wireless Networks tab to open the screen as shown.Figure 120 Windows XP SP1: Wireless Networks: Preferred Networks2Whenever the NWD210N tries to connect to a new network, the new network is added in the Preferred networks table automatically. Select a network and click Move up or
Appendix C Windows Wireless ManagementNWD210N User’s Guide 137Move down to change it's order, click Remove to delete it or click Properties to view the security, authentication or connection information of the selected network. Click Add to add a preferred network into the list manually.
Appendix C Windows Wireless ManagementNWD210N User’s Guide138
NWD210N User’s Guide 139APPENDIX D Legal InformationCopyrightCopyright © 2007 by ZyXEL Communications Corporation.The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.Published by ZyXEL Communications Corporation. All rights reserved.DisclaimersZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice.TrademarksZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.CertificationsFederal Communications Commission (FCC) Interference StatementThe device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:• This device may not cause harmful interference.• This device must accept any interference received, including interference that may cause undesired operations.This device has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This device generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation.
Appendix D Legal InformationNWD210N User’s Guide140If this device does cause harmful interference to radio/television reception, which can be determined by turning the device off and on, the user is encouraged to try to correct the interference by one or more of the following measures:1Reorient or relocate the receiving antenna.2Increase the separation between the equipment and the receiver.3Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.4Consult the dealer or an experienced radio/TV technician for help.FCC Radiation Exposure Statement• This device has been tested to the FCC exposure requirements (Specific Absorption Rate). • This device complies with the requirements of Health Canada Safety Code 6 for Canada. • Testing was performed on laptop computers with antennas at 0mm spacing. The maximum SAR value is: 0.680 W/kg. The device must not be collocated with any other antennas or transmitters. • This equipment has been SAR-evaluated for use in laptops (notebooks) with side slot configuration.• The device complies with FCC RF radiation exposure limits set forth for an uncontrolled environment, under 47 CFR 2.1093 paragraph (d)(2). End users must follow the specific operating instructions for satisfying RF exposure compliance. To maintain compliance with FCC RF exposure compliance requirements, please follow operation instruction as documented in this manual. • This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. • IEEE 802.11b or 802.11g operation of this product in the U.S.A. is firmware-limited to channels 1 through 11. 注意 !依據 低功率電波輻射性電機管理辦法第十二條 經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。前項合法通信，指依電信規定作業之無線電信。低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。 在 5250MHz~5350MHz 頻帶內操作之無線資訊傳輸設備，限於室內使用。本機限在不干擾合法電臺與不受被干擾保障條件下於室內使用。
Appendix D Legal InformationNWD210N User’s Guide 141Notices Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.This device has been designed for the WLAN 2.4 GHz network throughout the EC region and Switzerland, with restrictions in France.This Class B digital apparatus complies with Canadian ICES-003.Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.Viewing Certifications1Go to http://www.zyxel.com.2Select your product on the ZyXEL home page to go to that product's page.3Select the certification you wish to view from this page.ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.NoteRepair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser.To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit be insured when shipped. Any returned products without proof of purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary from country to country.RegistrationRegister your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com.
Appendix D Legal InformationNWD210N User’s Guide142
NWD210N User’s Guide 143APPENDIX E Customer SupportPlease have the following information ready when you contact customer support.Required Information• Product model and serial number.• Warranty Information.• Date that you received your device.• Brief description of the problem and the steps you took to solve it.“+” is the (prefix) number you dial to make an international telephone call.Corporate Headquarters (Worldwide)• Support E-mail: support@zyxel.com.tw• Sales E-mail: sales@zyxel.com.tw• Telephone: +886-3-578-3942• Fax: +886-3-578-2439• Web: www.zyxel.com, www.europe.zyxel.com• FTP: ftp.zyxel.com, ftp.europe.zyxel.com• Regular Mail: ZyXEL Communications Corp., 6 Innovation Road II, Science Park, Hsinchu 300, TaiwanCosta Rica• Support E-mail: soporte@zyxel.co.cr• Sales E-mail: sales@zyxel.co.cr• Telephone: +506-2017878• Fax: +506-2015098• Web: www.zyxel.co.cr• FTP: ftp.zyxel.co.cr• Regular Mail: ZyXEL Costa Rica, Plaza Roble Escazú, Etapa El Patio, Tercer Piso, San José, Costa RicaCzech Republic• E-mail: info@cz.zyxel.com• Telephone: +420-241-091-350• Fax: +420-241-091-359• Web: www.zyxel.cz
Appendix E Customer SupportNWD210N User’s Guide144• Regular Mail: ZyXEL Communications, Czech s.r.o., Modranská 621, 143 01 Praha 4 - Modrany, Ceská RepublikaDenmark• Support E-mail: support@zyxel.dk• Sales E-mail: sales@zyxel.dk• Telephone: +45-39-55-07-00• Fax: +45-39-55-07-07• Web: www.zyxel.dk • Regular Mail: ZyXEL Communications A/S, Columbusvej, 2860 Soeborg, DenmarkFinland• Support E-mail: support@zyxel.fi• Sales E-mail: sales@zyxel.fi• Telephone: +358-9-4780-8411• Fax: +358-9-4780-8448• Web: www.zyxel.fi• Regular Mail: ZyXEL Communications Oy, Malminkaari 10, 00700 Helsinki, FinlandFrance• E-mail: info@zyxel.fr • Telephone: +33-4-72-52-97-97• Fax: +33-4-72-52-19-20• Web: www.zyxel.fr• Regular Mail: ZyXEL France, 1 rue des Vergers, Bat. 1 / C, 69760 Limonest, FranceGermany• Support E-mail: support@zyxel.de• Sales E-mail: sales@zyxel.de• Telephone: +49-2405-6909-69• Fax: +49-2405-6909-99• Web: www.zyxel.de• Regular Mail: ZyXEL Deutschland GmbH., Adenauerstr. 20/A2 D-52146, Wuerselen, GermanyHungary• Support E-mail: support@zyxel.hu• Sales E-mail: info@zyxel.hu• Telephone: +36-1-3361649• Fax: +36-1-3259100• Web: www.zyxel.hu• Regular Mail: ZyXEL Hungary, 48, Zoldlomb Str., H-1025, Budapest, Hungary
Appendix E Customer SupportNWD210N User’s Guide 145India• Support E-mail: support@zyxel.in• Sales E-mail: sales@zyxel.in• Telephone: +91-11-30888144 to +91-11-30888153• Fax: +91-11-30888149, +91-11-26810715• Web: http://www.zyxel.in• Regular Mail: India - ZyXEL Technology India Pvt Ltd., II-Floor, F2/9 Okhla Phase -1, New Delhi 110020, IndiaJapan• Support E-mail: support@zyxel.co.jp• Sales E-mail: zyp@zyxel.co.jp• Telephone: +81-3-6847-3700• Fax: +81-3-6847-3705• Web: www.zyxel.co.jp• Regular Mail: ZyXEL Japan, 3F, Office T&U, 1-10-10 Higashi-Gotanda, Shinagawa-ku, Tokyo 141-0022, JapanKazakhstan• Support: http://zyxel.kz/support• Sales E-mail: sales@zyxel.kz• Telephone: +7-3272-590-698• Fax: +7-3272-590-689• Web: www.zyxel.kz• Regular Mail: ZyXEL Kazakhstan, 43 Dostyk Ave., Office 414, Dostyk Business Centre, 050010 Almaty, Republic of KazakhstanMalaysia• Support E-mail: support@zyxel.com.my• Sales E-mail: sales@zyxel.com.my• Telephone: +603-8076-9933• Fax: +603-8076-9833• Web: http://www.zyxel.com.my• Regular Mail: ZyXEL Malaysia Sdn Bhd., 1-02 & 1-03, Jalan Kenari 17F, Bandar Puchong Jaya, 47100 Puchong, Selangor Darul Ehsan, MalaysiaNorth America• Support E-mail: support@zyxel.com• Support Telephone: +1-800-978-7222• Sales E-mail: sales@zyxel.com• Sales Telephone: +1-714-632-0882• Fax: +1-714-632-0858• Web: www.zyxel.com
Appendix E Customer SupportNWD210N User’s Guide146• Regular Mail: ZyXEL Communications Inc., 1130 N. Miller St., Anaheim, CA 92806-2001, U.S.A.Norway• Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no• Telephone: +47-22-80-61-80• Fax: +47-22-80-61-81• Web: www.zyxel.no• Regular Mail: ZyXEL Communications A/S, Nils Hansens vei 13, 0667 Oslo, NorwayPoland• E-mail: info@pl.zyxel.com• Telephone: +48-22-333 8250• Fax: +48-22-333 8251• Web: www.pl.zyxel.com• Regular Mail: ZyXEL Communications, ul. Okrzei 1A, 03-715 Warszawa, PolandRussia• Support: http://zyxel.ru/support• Sales E-mail: sales@zyxel.ru• Telephone: +7-095-542-89-29• Fax: +7-095-542-89-25• Web: www.zyxel.ru• Regular Mail: ZyXEL Russia, Ostrovityanova 37a Str., Moscow 117279, RussiaSingapore• Support E-mail: support@zyxel.com.sg• Sales E-mail: sales@zyxel.com.sg• Telephone: +65-6899-6678• Fax: +65-6899-8887• Web: http://www.zyxel.com.sg• Regular Mail: ZyXEL Singapore Pte Ltd., No. 2 International Business Park, The Strategy #03-28, Singapore 609930Spain• Support E-mail: support@zyxel.es• Sales E-mail: sales@zyxel.es• Telephone: +34-902-195-420• Fax: +34-913-005-345• Web: www.zyxel.es • Regular Mail: ZyXEL Communications, Arte, 21 5ª planta, 28033 Madrid, Spain
Appendix E Customer SupportNWD210N User’s Guide 147Sweden• Support E-mail: support@zyxel.se• Sales E-mail: sales@zyxel.se• Telephone: +46-31-744-7700• Fax: +46-31-744-7701• Web: www.zyxel.se• Regular Mail: ZyXEL Communications A/S, Sjöporten 4, 41764 Göteborg, SwedenThailand• Support E-mail: support@zyxel.co.th• Sales E-mail: sales@zyxel.co.th• Telephone: +662-831-5315• Fax: +662-831-5395• Web: http://www.zyxel.co.th• Regular Mail: ZyXEL Thailand Co., Ltd., 1/1 Moo 2, Ratchaphruk Road, Bangrak-Noi, Muang, Nonthaburi 11000, Thailand.Ukraine• Support E-mail: support@ua.zyxel.com• Sales E-mail: sales@ua.zyxel.com• Telephone: +380-44-247-69-78• Fax: +380-44-494-49-32• Web: www.ua.zyxel.com• Regular Mail: ZyXEL Ukraine, 13, Pimonenko Str., Kiev 04050, UkraineUnited Kingdom• Support E-mail: support@zyxel.co.uk• Sales E-mail: sales@zyxel.co.uk• Telephone: +44-1344-303044, 08707-555779 (UK only)• Fax: +44-1344-303034• Web: www.zyxel.co.uk• FTP: ftp.zyxel.co.uk• Regular Mail: ZyXEL Communications UK Ltd., 11 The Courtyard, Eastern Road, Bracknell, Berkshire RG12 2XB, United Kingdom (UK)
Appendix E Customer SupportNWD210N User’s Guide148
IndexNWD210N User’s Guide 149IndexAAbout 67about your ZyXEL Device 21Access Point (AP) 37Access point (AP) 37Access Point. See also AP.ACT LED 22activating a profile 61adapter 61Ad-Hoc 23, 59Advanced Encryption Standard 39See AES.advanced settings 61AES 112antennadirectional 115gain 115omni-directional 115AP 105See also access point.AP MAC address 48authentication 48authentication type 39auto 39open system 39shared key 39auto authentication 39automatic connection 49automatic network scan 32, 56Bband 77Basic Service Set, See BSS 103BSS 103CCA 39, 110CCMP 39Certificate AuthoritySee CA.certifications 139notices 141viewing 141channel 38, 48, 50, 59, 77, 105interference 105configuration method 24important note 24Wireless Zero Configuration (WZC) 24ZyXEL utility 24configuration status 47connection status 47contact information 143continuous access mode 62copyright 139creating a new profile 58credentials 65CTS (Clear to Send) 106current configuration 47current connection status 47customer support 143Ddata encryption 50data rate 77digital ID 39dimensions 77disclaimer 139download 69driver version 67dynamic WEP key exchange 111EEAP (Extensible Authentication Protocol) 39EAP Authentication 109EAP authentication 39EAP type 64EAP-PEAP 39EAP-TLS 39
IndexNWD210N User’s Guide150EAP-TTLS 39encryption 112encryption type 39, 51, 53environmental specifications 77ESS 104Extended Service Set, See ESS 104Ffast power save 62FCC interference statement 139fragmentation threshold 106frequency 38, 77Ggetting started 21Hhardware connections 24help 25hidden node 105humidity 77IIBSS 103IEEE 802.11g 107IEEE 802.1x 39, 54, 64Independent Basic Service SetSee IBSS 103Industrial Scientific Medical Band 77infrastructure 22Initialization Vector (IV) 112installation 24interface 77Internet access 22LLEDs 22lights 22link information 47LINK LED 22link quality 48, 49Mmanual network connection 32Message Integrity Check (MIC) 39, 112modulation 77Nnetwork mode 48network name 48network overlap 37network scan 56network type 48, 50Oonline help 25output power 77Ppacket collisions 49Pairwise Master Key (PMK) 112, 114passphrase 38, 51password 38PEAP 64peer computer 22, 59physical specifications 77power consumption 77power saving 62power saving mode 62preamble 61preamble mode 107product registration 141
IndexNWD210N User’s Guide 151product specifications 77profile 48, 57activation 61add new 58configure 32, 34default 56delete 57edit 57information 57new 57, 58PSK 112QQuick Start Guide 24, 74Rradio band 77radio interference 74radio specifications 77RADIUS 39, 40, 108message types 109messages 109shared secret key 109real-time data traffic statistics 49receive rate 48registrationproduct 141related documentation 3RTS (Request To Send) 106threshold 105, 106Ssafety warnings 6save power 62scan 49scan info 59search 49security 38, 48, 78data encryption 38security settings and Vista 64sensitivity 78Service Set Identity (SSID) 32, 37signal strength 49, 50site information 50site survey 49scan 50security settings 51sleep mode 62SSID 32, 37, 48, 50, 74statistics 48syntax conventions 4system tray 24Ttemperature 77Temporal Key Integrity Protocol (TKIP) 39, 112The 64TLS 64, 65total receive 48total transmit 48trademarks 139transmission rate 48, 57transmit key 51transmit rate 48trend chart 48, 49TTLS 64Uuninstalling the ZyXEL utility 68upgrading the ZyXEL utility 68important step 69user authentication 38utility installation 24utility version 67VVista 64, 65voltage 77Wwarranty 141note 141
IndexNWD210N User’s Guide152weight 77WEP 38, 51automatic setup 38manual setup 38, 51passphrase 38, 51WEP (Wired Equivalent Privacy) 38WEP Encryption 51WEP key generation 38Wi-Fi Protected Access 39, 111Wi-Fi Protected Setup 47Windows 64Windows XP 24, 25wireless client 37wireless client WPA supplicants 113wireless LANintroduction 37security 38wireless LAN (WLAN) 37wireless network 37wireless security 107wireless standard 48, 77wireless station modeadapter 61security settings 51site survey 49trend chart 49wireless tutorial 27WLANinterference 105security parameters 114WPA 39, 52, 64, 111key caching 112pre-authentication 112user authentication 112vs WPA-PSK 112wireless client supplicant 113with RADIUS application example 113WPA2 39, 52, 64, 111user authentication 112vs WPA2-PSK 112wireless client supplicant 113with RADIUS application example 113WPA2-Pre-Shared Key 40, 111WPA2-PSK 40, 52, 111, 112application example 113WPA-PSK 40, 52, 111, 112application example 113WPSsee also Wi-Fi Protected Setup 47WZCactivating 124network connection 127not available 126preferred network 135security setting 131system tray icon 127WZC (Wireless Zero Configuration) 24ZZyXEL Utilityaccessing 25ZyXEL utility 24accessing 25driver version number 67exiting 25help 25reactivating 25status 24system tray icon 24upgrading 68version number 67

Navigation menu