ZyXEL Communications WAC6103D-I 802.11 ac Unified Pro Access Point User Manual 2

ZyXEL Communications Corporation 802.11 ac Unified Pro Access Point 2

Contents

User manual-2

Appendix A Importing CertificatesNWA5000 / WAC6000 Series User’s Guide201Removing a Certificate in Internet ExplorerThis section shows you how to remove a public key certificate in Internet Explorer 7 on Windows XP.1Open Internet Explorer and click Tools > Internet Options.2In the Internet Options dialog box, click Content > Certificates.
Appendix A Importing CertificatesNWA5000 / WAC6000 Series User’s Guide2023In the Certificates dialog box, click the Trusted Root Certificates Authorities tab, select the certificate that you want to delete, and then click Remove.4In the Certificates confirmation, click Yes.5In the Root Certificate Store dialog box, click Yes.6The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
Appendix A Importing CertificatesNWA5000 / WAC6000 Series User’s Guide203FirefoxThe following example uses Mozilla Firefox 2 on Windows XP Professional; however, the screens can also apply to Firefox 2 on all platforms.1If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error.2Select Accept this certificate permanently and click OK.3The certificate is stored and you can now connect securely to the Web Configurator. A sealed padlock appears in the address bar, which you can click to open the Page Info > Security window to view the web page’s security information.
Appendix A Importing CertificatesNWA5000 / WAC6000 Series User’s Guide204Installing a Stand-Alone Certificate File in FirefoxRather than browsing to a ZyXEL Web Configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you.1Open Firefox and click Tools > Options.2In the Options dialog box, click Advanced > Encryption > View Certificates.
Appendix A Importing CertificatesNWA5000 / WAC6000 Series User’s Guide2053In the Certificate Manager dialog box, click Web Sites > Import.4Use the Select File dialog box to locate the certificate and then click Open.5The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see the web page’s security information.Removing a Certificate in FirefoxThis section shows you how to remove a public key certificate in Firefox 2.
Appendix A Importing CertificatesNWA5000 / WAC6000 Series User’s Guide2061Open Firefox and click Tools > Options.2In the Options dialog box, click Advanced > Encryption > View Certificates.
Appendix A Importing CertificatesNWA5000 / WAC6000 Series User’s Guide2073In the Certificate Manager dialog box, select the Web Sites tab, select the certificate that you want to remove, and then click Delete.4In the Delete Web Site Certificates dialog box, click OK.5The next time you go to the web site that issued the public key certificate you just removed, a certification error appears.
NWA5000 / WAC6000 Series User’s Guide208APPENDIX BIPv6OverviewIPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 1038 IP addresses. IPv6 AddressingThe 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000. IPv6 addresses can be abbreviated in two ways:• Leading zeros in a block can be omitted. So 2001:0db8:1a2b:0015:0000:0000:1a2f:0000 can be written as 2001:db8:1a2b:15:0:0:1a2f:0. • Any number of consecutive blocks of zeros can be replaced by a double colon. A double colon can only appear once in an IPv6 address. So 2001:0db8:0000:0000:1a2f:0000:0000:0015 can be written as 2001:0db8::1a2f:0000:0000:0015, 2001:0db8:0000:0000:1a2f::0015, 2001:db8::1a2f:0:0:15 or 2001:db8:0:0:1a2f::15.Prefix and Prefix LengthSimilar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address. An IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32means that the first 32 bits (2001:db8) is the subnet prefix. Link-local AddressA link-local address uniquely identifies a device on the local network (the LAN). It is similar to a “private IP address” in IPv4. You can have the same link-local address on multiple interfaces on a device. A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows.Table 85 Link-local Unicast Address Format1111 1110 10 0 Interface ID10 bits 54 bits 64 bits
Appendix B IPv6NWA5000 / WAC6000 Series User’s Guide209Global AddressA global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified AddressAn unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4.Loopback AddressA loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4.Multicast AddressIn IPv6, multicast addresses provide the same functionality as IPv4 broadcast addresses. Broadcasting is not supported in IPv6. A multicast address allows a host to send packets to all hosts in a multicast group. Multicast scope allows you to determine the size of the multicast group. A multicast address has a predefined prefix of ff00::/8. The following table describes some of the predefined multicast addresses. The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 86 Predefined Multicast AddressMULTICAST ADDRESS DESCRIPTIONFF01:0:0:0:0:0:0:1 All hosts on a local node. FF01:0:0:0:0:0:0:2 All routers on a local node.FF02:0:0:0:0:0:0:1 All hosts on a local connected link.FF02:0:0:0:0:0:0:2 All routers on a local connected link.FF05:0:0:0:0:0:0:2 All routers on a local site. FF05:0:0:0:0:0:1:3 All DHCP severs on a local site. Table 87 Reserved Multicast AddressMULTICAST ADDRESSFF00:0:0:0:0:0:0:0FF01:0:0:0:0:0:0:0FF02:0:0:0:0:0:0:0FF03:0:0:0:0:0:0:0FF04:0:0:0:0:0:0:0FF05:0:0:0:0:0:0:0FF06:0:0:0:0:0:0:0FF07:0:0:0:0:0:0:0FF08:0:0:0:0:0:0:0FF09:0:0:0:0:0:0:0
Appendix B IPv6NWA5000 / WAC6000 Series User’s Guide210Subnet MaskingBoth an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000.Interface IDIn IPv6, an interface ID is a 64-bit identifier. It identifies a physical interface (for example, an Ethernet port) or a virtual interface (for example, the management IP address for a VLAN). One interface should have a unique interface ID.EUI-64The EUI-64 (Extended Unique Identifier) defined by the IEEE (Institute of Electrical and Electronics Engineers) is an interface ID format designed to adapt with IPv6. It is derived from the 48-bit (6-byte) Ethernet MAC address as shown next. EUI-64 inserts the hex digits fffe between the third and fourth bytes of the MAC address and complements the seventh bit of the first byte of the MAC address. See the following example. Stateless AutoconfigurationWith stateless autoconfiguration in IPv6, addresses can be uniquely and automatically generated. Unlike DHCPv6 (Dynamic Host Configuration Protocol version six) which is used in IPv6 stateful autoconfiguration, the owner and status of addresses don’t need to be maintained by a DHCP server. Every IPv6 device is able to generate its own and unique IP address automatically when IPv6 is initiated on its interface. It combines the prefix and the interface ID (generated from its own Ethernet MAC address, see Interface ID and EUI-64) to form a complete IPv6 address.When IPv6 is enabled on a device, its interface automatically generates a link-local address (beginning with fe80).When the interface is connected to a network with a router and the NWA/WAC is set to automatically obtain an IPv6 network prefix from the router for the interface, it generates 1another FF0A:0:0:0:0:0:0:0FF0B:0:0:0:0:0:0:0FF0C:0:0:0:0:0:0:0FF0D:0:0:0:0:0:0:0FF0E:0:0:0:0:0:0:0FF0F:0:0:0:0:0:0:0Table 87 Reserved Multicast Address (continued)MULTICAST ADDRESSTable 88 MAC 00 : 13 : 49 : 12 : 34 : 56Table 89 EUI-64 02: 13 : 49 : FF : FE : 12 : 34 : 56
Appendix B IPv6NWA5000 / WAC6000 Series User’s Guide211address which combines its interface ID and global and subnet information advertised from the router. This is a routable global IP address.DHCPv6The Dynamic Host Configuration Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients. DHCPv6 servers and clients exchange DHCP messages using UDP.Each DHCP client and server has a unique DHCP Unique IDentifier (DUID), which is used for identification when they are exchanging DHCPv6 messages. The DUID is generated from the MAC address, time, vendor assigned ID and/or the vendor's private enterprise number registered with the IANA. It should not change over time even after you reboot the device.Identity AssociationAn Identity Association (IA) is a collection of addresses assigned to a DHCP client, through which the server and client can manage a set of related IP addresses. Each IA must be associated with exactly one interface. The DHCP client uses the IA assigned to an interface to obtain configuration from a DHCP server for that interface. Each IA consists of a unique IAID and associated IP information.The IA type is the type of address in the IA. Each IA holds one type of address. IA_NA means an identity association for non-temporary addresses and IA_TA is an identity association for temporary addresses. An IA_NA option contains the T1 and T2 fields, but an IA_TA option does not. The DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1) (from which the addresses in the IA_NA were obtained) a Renew message. If the time T2 is reached and the server does not respond, the client sends a Rebind message to any available server (S2). For an IA_TA, the client may send a Renew or Rebind message at the client's discretion. DHCP Relay AgentA DHCP relay agent is on the same network as the DHCP clients and helps forward messages between the DHCP server and clients. When a client cannot use its link-local address and a well-known multicast address to locate a DHCP server on its network, it then needs a DHCP relay agent to send a message to a DHCP server that is not attached to the same network.The DHCP relay agent can add the remote identification (remote-ID) option and the interface-ID option to the Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, 1. In IPv6, all network interfaces can be associated with several addresses. T1T2Renew RebindRebindto S1Renewto S1Renewto S1Renewto S1Renewto S1Renewto S1to S2to S2
Appendix B IPv6NWA5000 / WAC6000 Series User’s Guide212such as the system name. The interface-ID option provides slot number, port information and the VLAN ID to the DHCPv6 server. The remote-ID option (if any) is stripped from the Relay-Reply messages before the relay agent sends the packets to the clients. The DHCP server copies the interface-ID option from the Relay-Forward message into the Relay-Reply message and sends it to the relay agent. The interface-ID should not change even after the relay agent restarts.Prefix DelegationPrefix delegation enables an IPv6 router to use the IPv6 prefix (network address) received from the ISP (or a connected uplink router) for its LAN. The NWA/WAC uses the received IPv6 prefix (for example, 2001:db2::/48) to generate its LAN IP address. Through sending Router Advertisements (RAs) regularly by multicast, the NWA/WAC passes the IPv6 prefix information to its LAN hosts. The hosts then can use the prefix to generate their IPv6 addresses.ICMPv6Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6. IPv6 nodes use ICMPv6 to report errors encountered in packet processing and perform other diagnostic functions, such as "ping".Neighbor Discovery Protocol (NDP)The Neighbor Discovery Protocol (NDP) is a protocol used to discover other IPv6 devices and track neighbor’s reachability in a network. An IPv6 device uses the following ICMPv6 messages types: • Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. • Neighbor advertisement: A response from a node to announce its link-layer address.• Router solicitation: A request from a host to locate a router that can act as the default router and forward packets.• Router advertisement: A response to a router solicitation or a periodical multicast advertisement from a router to advertise its presence and other parameters.IPv6 CacheAn IPv6 host is required to have a neighbor cache, destination cache, prefix list and default router list. The NWA/WAC maintains and updates its IPv6 caches constantly using the information from response messages. In IPv6, the NWA/WAC configures a link-local address automatically, and then sends a neighbor solicitation message to check if the address is unique. If there is an address to be resolved or verified, the NWA/WAC also sends out a neighbor solicitation message. When the NWA/WAC receives a neighbor advertisement in response, it stores the neighbor’s link-layer address in the neighbor cache. When the NWA/WAC uses a router solicitation message to query for a router and receives a router advertisement message, it adds the router’s information to the neighbor cache, prefix list and destination cache. The NWA/WAC creates an entry in the default router list cache if the router can be used as a default router.When the NWA/WAC needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the NWA/WAC uses the prefix list
Appendix B IPv6NWA5000 / WAC6000 Series User’s Guide213to determine whether the destination address is on-link and can be reached directly without passing through a router. If the address is onlink, the address is considered as the next hop. Otherwise, the NWA/WAC determines the next-hop from the default router list or routing table. Once the next hop IP address is known, the NWA/WAC looks into the neighbor cache to get the link-layer address and sends the packet when the neighbor is reachable. If the NWA/WAC cannot find an entry in the neighbor cache or the state for the neighbor is not reachable, it starts the address resolution process. This helps reduce the number of IPv6 solicitation and advertisement messages.Multicast Listener DiscoveryThe Multicast Listener Discovery (MLD) protocol (defined in RFC 2710) is derived from IPv4's Internet Group Management Protocol version 2 (IGMPv2). MLD uses ICMPv6 message types, rather than IGMP message types. MLDv1 is equivalent to IGMPv2 and MLDv2 is equivalent to IGMPv3.MLD allows an IPv6 switch or router to discover the presence of MLD listeners who wish to receive multicast packets and the IP addresses of multicast groups the hosts want to join on its network. MLD snooping and MLD proxy are analogous to IGMP snooping and IGMP proxy in IPv4. MLD filtering controls which multicast groups a port can join.MLD MessagesA multicast router or switch periodically sends general queries to MLD hosts to update the multicast forwarding table. When an MLD host wants to join a multicast group, it sends an MLD Report message for that address.An MLD Done message is equivalent to an IGMP Leave message. When an MLD host wants to leave a multicast group, it can send a Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group.
Appendix B IPv6NWA5000 / WAC6000 Series User’s Guide214Example - Enabling IPv6 on Windows XP/2003/VistaBy default, Windows XP and Windows 2003 support IPv6. This example shows you how to use the ipv6 install command on Windows XP/2003 to enable IPv6. This also displays how to use the ipconfig command to see auto-generated IP addresses.IPv6 is installed and enabled by default in Windows Vista. Use the ipconfig command to check your automatic configured IPv6 address as well. You should see at least one IPv6 address available for the interface on your computer.Example - Enabling DHCPv6 on Windows XPWindows XP does not support DHCPv6. If your network uses DHCPv6 for IP address assignment, you have to additionally install a DHCPv6 client software on your Windows XP. (Note: If you use static IP addresses or Router Advertisement for IPv6 address assignment in your network, ignore this section.)This example uses Dibbler as the DHCPv6 client. To enable DHCPv6 client on your computer:1Install Dibbler and select the DHCPv6 client option on your computer.2After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service.3Select Start > Control Panel > Administrative Tools > Services.4Double click Dibbler - a DHCPv6 client.C:\>ipv6 installInstalling...Succeeded.C:\>ipconfigWindows IP ConfigurationEthernet adapter Local Area Connection: Connection-specific DNS Suffix . : IP Address. . . . . . . . . . . . : 10.1.1.46 Subnet Mask . . . . . . . . . . . : 255.255.255.0 IP Address. . . . . . . . . . . . : fe80::2d0:59ff:feb8:103c%4 Default Gateway . . . . . . . . . : 10.1.1.254
Appendix B IPv6NWA5000 / WAC6000 Series User’s Guide2155Click Start and then OK.6Now your computer can obtain an IPv6 address from a DHCPv6 server.Example - Enabling IPv6 on Windows 7Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer.To enable IPv6 in Windows 7:1Select Control Panel > Network and Sharing Center > Local Area Connection.2Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it.3Click OK to save the change.
Appendix B IPv6NWA5000 / WAC6000 Series User’s Guide2164Click Close to exit the Local Area Connection Status screen.5Select Start > All Programs > Accessories > Command Prompt.6Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server.C:\>ipconfigWindows IP ConfigurationEthernet adapter Local Area Connection: Connection-specific DNS Suffix . : IPv6 Address. . . . . . . . . . . : 2001:b021:2d::1000 Link-local IPv6 Address . . . . . : fe80::25d8:dcab:c80a:5189%11 IPv4 Address. . . . . . . . . . . : 172.16.100.61 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : fe80::213:49ff:feaa:7125%11 172.16.100.254
NWA5000 / WAC6000 Series User’s Guide217APPENDIX CCustomer SupportIn the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. Regional websites are listed below.See also http://www.zyxel.com/about_zyxel/zyxel_worldwide.shtml.Please have the following information ready when you contact an office.Required Information• Product model and serial number.• Warranty Information.• Date that you received your device.• Brief description of the problem and the steps you took to solve it.Corporate Headquarters (Worldwide)Taiwan• ZyXEL Communications Corporation• http://www.zyxel.comAsiaChina• ZyXEL Communications (Shanghai) Corp.ZyXEL Communications (Beijing) Corp.ZyXEL Communications (Tianjin) Corp.• http://www.zyxel.cnIndia• ZyXEL Technology India Pvt Ltd• http://www.zyxel.inKazakhstan•ZyXEL Kazakhstan• http://www.zyxel.kz
Appendix C Customer SupportNWA5000 / WAC6000 Series User’s Guide218Korea• ZyXEL Korea Corp.• http://www.zyxel.krMalaysia• ZyXEL Malaysia Sdn Bhd.• http://www.zyxel.com.myPakistan• ZyXEL Pakistan (Pvt.) Ltd.• http://www.zyxel.com.pkPhilipines• ZyXEL Philippines• http://www.zyxel.com.phSingapore• ZyXEL Singapore Pte Ltd.• http://www.zyxel.com.sgTaiwan• ZyXEL Communications Corporation• http://www.zyxel.comThailand• ZyXEL Thailand Co., Ltd • http://www.zyxel.co.thVietnam• ZyXEL Communications Corporation-Vietnam Office• http://www.zyxel.com/vn/viEuropeAustria• ZyXEL Deutschland GmbH • http://www.zyxel.de
Appendix C Customer SupportNWA5000 / WAC6000 Series User’s Guide219Belarus•ZyXEL BY • http://www.zyxel.byBelgium• ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/Bulgaria•ZyXEL България• http://www.zyxel.com/bg/bg/ Czech• ZyXEL Communications Czech s.r.o • http://www.zyxel.czDenmark• ZyXEL Communications A/S• http://www.zyxel.dkEstonia•ZyXEL Estonia• http://www.zyxel.com/ee/et/Finland• ZyXEL Communications• http://www.zyxel.fiFrance•ZyXEL France• http://www.zyxel.frGermany• ZyXEL Deutschland GmbH • http://www.zyxel.deHungary• ZyXEL Hungary & SEE • http://www.zyxel.huLatvia•ZyXEL Latvia
Appendix C Customer SupportNWA5000 / WAC6000 Series User’s Guide220• http://www.zyxel.com/lv/lv/homepage.shtmlLithuania• ZyXEL Lithuania• http://www.zyxel.com/lt/lt/homepage.shtmlNetherlands•ZyXEL Benelux• http://www.zyxel.nlNorway• ZyXEL Communications• http://www.zyxel.noPoland• ZyXEL Communications Poland• http://www.zyxel.plRomania•ZyXEL Romania• http://www.zyxel.com/ro/roRussia• ZyXEL Russia • http://www.zyxel.ruSlovakia• ZyXEL Communications Czech s.r.o. organizacna zlozka• http://www.zyxel.skSpain•ZyXEL Spain• http://www.zyxel.esSweden• ZyXEL Communications • http://www.zyxel.seSwitzerland•Studerus AG
Appendix C Customer SupportNWA5000 / WAC6000 Series User’s Guide221• http://www.zyxel.ch/Turkey•ZyXEL Turkey A.S.• http://www.zyxel.com.trUK• ZyXEL Communications UK Ltd.• http://www.zyxel.co.ukUkraine•ZyXEL Ukraine• http://www.ua.zyxel.comLatin AmericaArgentina• ZyXEL Communication Corporation• http://www.zyxel.com/ec/es/Ecuador• ZyXEL Communication Corporation• http://www.zyxel.com/ec/es/Middle EastEgypt• ZyXEL Communication Corporation• http://www.zyxel.com/homepage.shtmlMiddle East• ZyXEL Communication Corporation• http://www.zyxel.com/homepage.shtmlNorth AmericaUSA• ZyXEL Communications, Inc. - North America Headquarters• http://www.us.zyxel.com/
Appendix C Customer SupportNWA5000 / WAC6000 Series User’s Guide222OceaniaAustralia• ZyXEL Communications Corporation• http://www.zyxel.com/au/en/AfricaSouth Africa• Nology (Pty) Ltd.• http://www.zyxel.co.za
NWA5000 / WAC6000 Series User’s Guide223APPENDIX DLegal InformationCopyrightCopyright © 2015 by ZyXEL Communications Corporation.The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.Published by ZyXEL Communications Corporation. All rights reserved.DisclaimersZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice.Your use of the NWA/WAC is subject to the terms and conditions of any related service providers. TrademarksTrademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.Regulatory Notice and StatementUNITED STATE AMERICAThe following information applies if you use the product within USA area.FCC EMC Statement • This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:1This device may not cause harmful interference, and 2this device must accept any interference received, including interference that may cause undesired operation.• Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate theequipment.• This product has been tested and complies with the specifications for a Class B digital device, pursuant to Part 15 of the FCC Rules.These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used according to the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. • If this equipment does cause harmful interference to radio or television reception, which is found by turning the equipment off and on,the user is encouraged to try to correct the interference by one or more of the following measures:1Reorient or relocate the receiving antenna.2Increase the separation between the equipment or devices.3Connect the equipment to an outlet other than the receiver's.4Consult a dealer or an experienced radio/TV technician for assistance.FCC Radiation Exposure Statement• This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment.•This transmitter must be at least 20 cm or 30 cm (WAC6553D-E) from the user and must not be co-located or operating in conjunctionwith any other antenna or transmitter.• Country Code selection feature to be disabled for products marketed to the US/CANADA• Operation of this device is restricted to indoor use only. (WAC6553D-E is a device for outdoor use.)CANADAThe following information applies if you use the product within Canada area.
Appendix D Legal InformationNWA5000 / WAC6000 Series User’s Guide225EUROPEAN UNIONThe following information applies if you use the product within the European Union.Declaration of Conformity with Regard to EU Directive 1999/5/EC (R&TTE Directive)Compliance information for 2.4GHz and/or 5GHz wireless products relevant to the EU and other Countries following the EU Directive 1999/5/EC (R&TTE).Български (Bulgarian) С настоящото ZyXEL декларира, че това оборудване е в съответствие със съществените изисквания и другите приложими разпоредбите на Директива 1999/5/ЕC.Español (Spanish) Por medio de la presente ZyXEL declara que el equipo cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.Čeština (Czech) ZyXEL tímto prohlašuje, že tento zařízení je ve shodě se základními požadavky a dalšími příslušnými ustanoveními směrnice 1999/5/EC.Dansk (Danish) Undertegnede ZyXEL erklærer herved, at følgende udstyr udstyr overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF.Deutsch (German) Hiermit erklärt ZyXEL, dass sich das Gerät Ausstattung in Übereinstimmung mit den grundlegenden Anforderungen und den übrigen einschlägigen Bestimmungen der Richtlinie 1999/5/EU befindet.Eesti keel (Estonian) Käesolevaga kinnitab ZyXEL seadme seadmed vastavust direktiivi 1999/5/EÜ põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele.Ελληνικά (Greek) ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ ZyXEL ∆ΗΛΩΝΕΙ ΟΤΙ εξοπλισμός ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩ∆ΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ∆ΙΑΤΑΞΕΙΣ ΤΗΣ Ο∆ΗΓΙΑΣ 1999/5/ΕC.English Hereby, ZyXEL declares that this equipment is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC.Français (French) Par la présente ZyXEL déclare que l'appareil équipements est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/EC.Hrvatski (Croatian) ZyXEL ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 1999/5/EC.Íslenska (Icelandic) Hér með lýsir, ZyXEL því yfir að þessi búnaður er í samræmi við grunnkröfur og önnur viðeigandi ákvæði tilskipunar 1999/5/EC.Italiano (Italian) Con la presente ZyXEL dichiara che questo attrezzatura è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE.Latviešu valoda (Latvian) Ar šo ZyXEL deklarē, ka iekārtas atbilst Direktīvas 1999/5/EK būtiskajām prasībām un citiem ar to saistītajiem noteikumiem.Lietuvių kalba (Lithuanian) Šiuo ZyXEL deklaruoja, kad šis įranga atitinka esminius reikalavimus ir kitas 1999/5/EB Direktyvos nuostatas.Magyar (Hungarian) Alulírott, ZyXEL nyilatkozom, hogy a berendezés megfelel a vonatkozó alapvetõ követelményeknek és az 1999/5/EK irányelv egyéb elõírásainak.Malti (Maltese) Hawnhekk, ZyXEL, jiddikjara li dan tagħmir jikkonforma mal-ħtiġijiet essenzjali u ma provvedimenti oħrajn relevanti li hemm fid-Dirrettiva 1999/5/EC.Nederlands (Dutch) Hierbij verklaart ZyXEL dat het toestel uitrusting in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EC.Polski (Polish) Niniejszym ZyXEL oświadcza, że sprzęt jest zgodny z zasadniczymi wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC.Português (Portuguese) ZyXEL declara que este equipamento está conforme com os requisitos essenciais e outras disposições da Directiva 1999/5/EC.Română (Romanian) Prin prezenta, ZyXEL declară că acest echipament este în conformitate cu cerinţele esenţiale şi alte prevederi relevante ale Directivei 1999/5/EC.Slovenčina (Slovak) ZyXEL týmto vyhlasuje, že zariadenia spĺňa základné požiadavky a všetky príslušné ustanovenia Smernice 1999/5/EC.Slovenščina (Slovene) ZyXEL izjavlja, da je ta oprema v skladu z bistvenimi zahtevami in ostalimi relevantnimi določili direktive 1999/5/EC.Suomi (Finnish) ZyXEL vakuuttaa täten että laitteet tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen.
Appendix D Legal InformationNWA5000 / WAC6000 Series User’s Guide226National RestrictionsThis product may be used in all EU countries (and other countries following the EU Directive 2014/53/EU) without any limitation except forthe countries mentioned below:Ce produit peut être utilisé dans tous les pays de l’UE (et dans tous les pays ayant transposés la directive 2014/53/UE) sans aucune limitation, excepté pour les pays mentionnés ci-dessous:Questo prodotto è utilizzabile in tutte i paesi EU (ed in tutti gli altri paesi che seguono le direttiva 2014/53/UE) senza nessuna limitazione, eccetto per i paesii menzionati di seguito:Das Produkt kann in allen EU Staaten ohne Einschränkungen eingesetzt werden (sowie in anderen Staaten die der Richtlinie 2014/53/EU folgen) mit Außnahme der folgenden aufgeführten Staaten:In the majority of the EU and other European countries, the 2.4GHz and 5GHz bands have been made available for the use of wireless local area networks (LANs). Later in this document you will find an overview of countries in which additional restrictions or requirements or both are applicable.The requirements for any country may evolve. ZyXEL recommends that you check with the local authorities for the latest status of their national regulations for both the 2.4GHz and 5GHz wireless LANs.The following countries have restrictions and/or requirements in addition to those given in the table labeled “Overview of Regulatory Requirements for Wireless LANs”:.BelgiumThe Belgian Institute for Postal Services and Telecommunications (BIPT) must be notified of any outdoor wireless link having a range exceeding 300 meters. Please check http://www.bipt.be for more details.Draadloze verbindingen voor buitengebruik en met een reikwijdte van meer dan 300 meter dienen aangemeld te worden bij het Belgisch Instituut voor postdiensten en telecommunicatie (BIPT). Zie http://www.bipt.be voor meer gegevens.Les liaisons sans fil pour une utilisation en extérieur d’une distance supérieure à 300 mètres doivent être notifiées à l’Institut Belge des services Postaux et des Télécommunications (IBPT). Visitez http://www.ibpt.be pour de plus amples détails.DenmarkIn Denmark, the band 5150 - 5350 MHz is also allowed for outdoor usage.I Danmark må frekvensbåndet 5150 - 5350 også anvendes udendørs.ItalyThis product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy. Unless this wireless LAN product is operating within the boundaries of the owner's property, its use requires a “general authorization.” Please check http://www.sviluppoeconomico.gov.it/ for more details.Questo prodotto è conforme alla specifiche di Interfaccia Radio Nazionali e rispetta il Piano Nazionale di ripartizione delle frequenze in Italia. Se non viene installato all 'interno del proprio fondo, l'utilizzo di prodotti Wireless LAN richiede una “Autorizzazione Generale”. Consultare http://www.sviluppoeconomico.gov.it/ per maggiori dettagli.LatviaThe outdoor usage of the 2.4 GHz band requires an authorization from the Electronic Communications Office. Please check http:// www.esd.lv for more details.2.4 GHz frekvenèu joslas izmantoðanai ârpus telpâm nepiecieðama atïauja no Elektronisko sakaru direkcijas. Vairâk informâcijas: http://www.esd.lv.Notes:1. Although Norway, Switzerland and Liechtenstein are not EU member states, the EU Directive 2014/53/EU has also been implemented inthose countries.2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by addingthe gain of the antenna used(specified in dBi) to the output power available at the connector (specified in dBm).Svenska (Swedish) Härmed intygar ZyXEL att denna utrustning står I överensstämmelse med de väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv 1999/5/EC.Norsk (Norwegian) Erklærer herved ZyXEL at dette utstyret er I samsvar med de grunnleggende kravene og andre relevante bestemmelser I direktiv 1999/5/EF.
Appendix D Legal InformationNWA5000 / WAC6000 Series User’s Guide227List of national codes Professional installation instruction (WAC6553D-E)Please be advised that due to the unique function supplied by this product, the device is intended for use with our interactive entertainment software and licensed third-party only. The product will be distributed through controlled distribution channel and installed by trained professional and will not be sold directly to the general public through retail store.1Installation personal This product is designed for specific application and needs to be installed by a qualified personal who has RF and related rule knowledge. The general user shall not attempt to install or change the setting.2Installation location The product shall be installed at a location where the radiating antenna can be kept 30 cm from nearby person in normal operation condition to meet regulatory RF exposure requirement.3External antenna Use only the antennas which have been approved by ZyXEL Communications Corporation. The non-approved antenna(s) may produce unwanted spurious or excessive RF transmitting power which may lead to the violation of FCC/IC limit and is prohibited.4Installation procedure Please refer to user's manual for the detail.5Warning Please carefully select the installation position and make sure that the final output power does not exceed the limit set force in relevant rules. The violation of the rule could lead to serious federal penalty.Instructions d'installation professionnelle (WAC6553D-E)Veuillez noter que l'appareil etant dedie a une fonction unique, il doit etre utilise avec notre logiciel proprietaire de divertissement interactif . Ce produit sera propose par un reseau de distribution controle et installe par des professionels; il ne sera pas propose au grand public par le reseau de la grande distribution.1Installation Ce produit est destine a un usage specifique et doit etre installe par un personnel qualifie maitrisant les radiofrequences et les regles s'y rapportant. L'installation et les reglages ne doivent pas etre modifies par l'utilisateur final.2Emplacement d'installationEn usage normal, afin de respecter les exigences reglementaires concernant l'exposition aux radiofrequences, ce produit doit etre installe de facon a respecter une distance de 30 cm entre l'antenne emettrice et les personnes.3Antenn externe.Utiliser uniiquement les antennes approuvees par le fabricant. L'utilisation d'autres antennes peut conduire a un niveau de rayonnement essentiel ou non essentiel depassant les niveaux limites definis par FCC/IC, ce qui est interdit.4Procedure d'installationConsulter le manuel d'utilisation.5AvertissementChoisir avec soin la position d'installation et s'assurer que la puissance de sortie ne depasse pas les limites en vigueur. La violation de cette regle peut conduire a de serieuses penalites federales.COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODEAustria AT Liechtenstein LIBelgium BE Lithuania LTBulgaria BG Luxembourg LUCroatia HR Malta MTCyprus CY Netherlands NLCzech Republic CR Norway NODenmark DK Poland PLEstonia EE Portugal PTFinland FI Romania ROFrance FR Serbia RSGermany DE Slovakia SKGreece GR Slovenia SIHungary HU Spain ESIceland IS Sweden SEIreland IE Switzerland CHItaly IT Turkey TRLatvia LV United Kingdom GB
Appendix D Legal InformationNWA5000 / WAC6000 Series User’s Guide228Safety Warnings• Do NOT use this product near water, for example, in a wet basement or near a swimming pool.• Do NOT expose your device to dampness, dust or corrosive liquids.• Do NOT store things on the device.• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning.• Connect ONLY suitable accessories to the device.• Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel should service or disassemble this device. Please contact your vendor for further information.• Make sure to connect the cables to the correct ports.• Place connecting cables carefully so that no one will step on them or stumble over them.• Always disconnect all cables from this device before servicing or disassembling.• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe).• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord.• Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution.• If the power adaptor or cord is damaged, remove it from the device and the power source.• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a new one.• Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning. • CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO THE INSTRUCTIONS. Dispose them at the applicable collection point for the recycling of electrical and electronic equipment. For detailed information about recycling of this product, please contact your local city office, your household waste disposal service or the store where you purchased the product.• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. • Antenna Warning! This device meets ETSI and FCC certification requirements when using the included antenna(s). Only use the included antenna(s).• If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged. • The PoE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors.• This product is for indoor use only (utilisation intérieure exclusivement). • FOR COUNTRY CODE SELECTION USAGE (WLAN DEVICES)Note: The country code selection is for non-US model only and is not available to all US model. Per FCC regulation, all Wi-Fi product marketed in US must fixed to US operation channels only.The following warnings apply if product is disconnect device:• A readily accessible disconnect device shall be incorporated external to the equipment; and/or• The socket-outlet shall be installed near the equipment and shall be easily accessible.Environment statementErP (Energy-related Products)ZyXEL products put on the EU market in compliance with the requirement of the European Parliament and the Council publishedDirective 2009/125/EC establishing a framework for the setting of ecodesign requirements for energy-related products (recast), so calledas "ErP Directive (Energy-related Products directive) as well as ecodesign requirement laid down in applicable implementing measures, power consumption has satisfied regulation requirements which are:Network standby power consumption < 12W, and/orOff mode power consumption < 0.5W, and/orStandby mode power consumption < 0.5W.Wireless setting, please refer to "Wireless" chapter for more detail.WEEE DirectiveYour product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. "INFORMAZIONI AGLI UTENTI"Ai sensi della Direttiva 2012/19/UE del Parlamento europeo e del Consiglio, del 4 luglio 2012, sui rifiuti di apparecchiature elettriche ed elettroniche (RAEE)
Appendix D Legal InformationNWA5000 / WAC6000 Series User’s Guide229Il simbolo del cassonetto barrato riportato sull’apparecchiatura o sulla sua confezione indica che il prodotto alla fine della propria vita utiledeve essere raccolto separatamente dagli altri rifiuti.La raccolta differenziata della presente apparecchiatura giunta a fine vita e organizzata e gestita dal produttore. L’utente che vorra disfarsidella presente apparecchiatura dovra quindi contattare il produttore e seguire il sistema che questo ha adottato per consentire la raccoltaseparata dell’apparecchiatura giunta a fine vita.L’adeguata raccolta differenziata per l’avvio successivo dell’apparecchiatura dismessa al riciclaggio, al trattamento e allo smaltimentoambientalmente compatibile contribuisce ad evitare possibili effetti negativi sull’ambiente e sulla salute e favorisce il reimpiego e/o riciclodei materiali di cui e composta l’apparecchiatura.Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativavigente."
Appendix D Legal InformationNWA5000 / WAC6000 Series User’s Guide230Environmental Product Declaration
Appendix D Legal InformationNWA5000 / WAC6000 Series User’s Guide231台灣以下訊息僅適用於產品銷售至台灣地區NCC Statement:1) 用 20 cm 計算 MPE 能符合 1mW/cm2電磁波曝露量 MPE 標準值 (MPE) 1mW/cm2，送測產品實值為 0.320 mW/cm2 for WAC6502D-S.電磁波曝露量MPE標準值 (MPE) 1mW/cm2，送測產品實值為 0.403 mW/cm2 for WAC6502D-E.電磁波曝露量MPE標準值 (MPE) 1mW/cm2，送測產品實值為 0.448 mW/cm2 for WAC6103D-I.2) 用 30 cm 計算 MPE 能符合 1mW/cm2電磁波曝露量 MPE 標準值 (MPE) 1mW/cm2，送測產品實值為 0.305 mW/cm2 for WAC6553D-E.802.11b/802.11g 警語：第十二條→經型式認證合格之低功率射頻電機，非經許可，公司，商號或使用者均不得擅自變更頻率、加大功率或變更原設計之特性及功能。第十四條→低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並改善至無干擾時方得繼續使用。前項合法通信，指依電信法規定作業之無線電通信。 低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。802.11a 警語：無線傳輸設備 (UNII) 在 5.25-5.35 秭赫頻帶內操作之無線資訊傳輸設備，限於室內使用。 (4.7.5)無線資訊傳輸設備忍受合法通信之干擾且不得干擾合法通信；如造成干擾，應立即停用，俟無干擾之虞，始得繼續使用。 (4.7.6)無線資訊傳設備的製造廠商應確保頻率穩定性，如依製造廠商使用手冊上所述正常操作，發射的信號應維持於操作頻帶中。(4.7.7)專業安裝警語： (WAC6553D-E)" 本器材須經專業工程人員安裝及設定，始得設置使用，且不得直接販售給一般消費者 "。Viewing CertificationsGo to http://www.zyxel.com to view this product’s documentation and certifications.ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is free from any defects in material or workmanship for a specific period (the Warranty Period) from the date of purchase. The Warranty Period varies by region. Check with your vendor and/or the authorized ZyXEL local distributor for details about the Warranty Period of this product. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.NoteRepair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser.To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php.RegistrationRegister your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com.Open Source LicensesThis product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. If you cannot find it there, contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. To obtain the source code covered under those Licenses, please contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw.
IndexNWA5000 / WAC6000 Series User’s Guide232IndexSymbolsAaccess 28access privileges 13access users 80see also users 80admin users 80multiple logins 85see also users 80alerts 157, 160, 161, 163, 164, 165antenna switch 183AP 12applicationsMBSSID 13Repeater 16Bbacking up configuration files 169Basic Service Setsee BSSboot module 174BSS 13CCAand certificates 113CA (Certificate Authority), see certificatesCAPWAP 59, 61CEF (Common Event Format) 158, 163Certificate Authority (CA)see certificatesCertificate Management Protocol (CMP) 119Certificate Revocation List (CRL) 113vs OCSP 128certificates 112advantages of 113and CA 113and FTP 149and HTTPS 134and SSH 146and WWW 136certification path 113, 121, 126expired 113factory-default 113file formats 113fingerprints 122, 127importing 116not used for encryption 113revoked 113self-signed 113, 118serial number 121, 126storage space 115, 124thumbprint algorithms 114thumbprints 114used for authentication 113verifying fingerprints 114certification requests 118, 119certificationsviewing 231channel 14CLI 17, 33button 33messages 33popup window 33Reference Guide 2cold start 27commands 17sent by Web Configurator 33Common Event Format (CEF) 158, 163comparison table 11configuration 12information 178
IndexNWA5000 / WAC6000 Series User’s Guide233configuration files 167at restart 169backing up 169downloading 170downloading with FTP 148editing 167how applied 168lastgood.conf 169, 172managing 168startup-config.conf 172startup-config-bad.conf 169syntax 167system-default.conf 172uploading 172uploading with FTP 148use without restart 167contact information 217Control and Provisioning of Wireless Access PointsSee CAPWAPcookies 28copyright 223CPU usage 43, 45current date/time 43, 130daylight savings 131setting manually 133time server 133customer support 217Ddate 130daylight savings 131DCS 69DHCP 130and domain name 130diagnostics 178Digital Signature Algorithm public-key algorithm, see DSAdisclaimer 223documentationrelated 2domain name 130DSA 118DTLS 59dual radios 14dual-radio application 14dynamic channel selection 69Ee-maildaily statistics report 154encryption 16RSA 121ESSID 191Extended Service Set IDentification 87FFCC interference statement 223file extensionsconfiguration files 167shell scripts 167file manager 167Firefox 28firmwareand restart 173boot module, see boot modulecurrent version 42, 174getting updated 173uploading 173, 174uploading with FTP 148flash usage 43FTP 17, 148and certificates 149with Transport Layer Security (TLS) 149GGuideCLI Reference 2Quick Start 2HHTTP
IndexNWA5000 / WAC6000 Series User’s Guide234over SSL, see HTTPSredirect to HTTPS 136vs HTTPS 135HTTPS 134and certificates 134authenticating clients 134avoiding warning messages 138example 136vs HTTP 135with Internet Explorer 136with Netscape Navigator 137HyperText Transfer Protocol over Secure Socket Layer, see HTTPSIIEEE 802.1x 88installation 12interfacestatus 44interfacesas DHCP servers 130interference 14Internet Explorer 28Internet Protocol version 6, see IPv6Internet telephony 13IP Address 59gateway IP address 59IP subnet 59IPv6 208addressing 208EUI-64 210global address 209interface ID 210link-local address 208Neighbor Discovery Protocol 208ping 208prefix 208prefix length 208stateless autoconfiguration 210unspecified address 209JJavapermissions 28JavaScripts 28Kkey pairs 112Llastgood.conf 169, 172layer-2 isolation 102example 103MAC 103LED suppression 180LEDs 20Blinking 21, 23, 25Flashing 21, 23, 25, 26Off 21, 23, 25, 26load balancing 69Locator LED 181log messagescategories 161, 163, 164, 165debugging 55regular 55types of 55logoutWeb Configurator 30logse-mail profiles 156e-mailing log messages 57, 160formats 158log consolidation 161settings 156syslog servers 156system 156types of 156
IndexNWA5000 / WAC6000 Series User’s Guide235MMAC addressrange 42maintenance 12management 12Management Information Base (MIB) 150Management ModeCAPWAP and DHCP 60CAPWAP and IP Subnets 61managed AP 60standalone mode 59management mode 12managing the devicegood habits 17using FTP. See FTP.MBSSID 13memory usage 43, 46message bar 36messagesCLI 33warning 36mode 12model name 42My Certificates, see also certificates 115NNetscape Navigator 28network access control 12Network Time Protocol (NTP) 132Oobjectscertificates 112users, accountuser 80Online Certificate Status Protocol (OCSP) 128vs CRL 128operating mode 12other documentation 2overview 11Ppop-up windows 28power off 27power on 27product registration 231Public-Key Infrastructure (PKI) 113public-private key pairs 112QQuick Start Guide 2Rradio 14reboot 27, 185vs reset 185Reference Guide, CLI 2registrationproduct 231related documentation 2remote managementFTP, see FTPTelnet 148WWW, see WWWreportsdaily 154daily e-mail 154reset 194vs reboot 185vs shutdown 186RESET button 27, 194restart 185RF interference 14RFC2510 (Certificate Management Protocol or CMP) 119Rivest, Shamir and Adleman public-key algorithm (RSA) 118root AP 12RSA 118, 121, 127RSSI threshold 93
IndexNWA5000 / WAC6000 Series User’s Guide236SSCEP (Simple Certificate Enrollment Protocol) 119screen resolution 28Secure Socket Layer, see SSLserial number 42service controland users 134limitations 134timeouts 134Service Set 87Service Set Identifiersee SSIDshell scripts 167downloading 176editing 175how applied 168managing 175syntax 167uploading 177shutdown 27, 186vs reset 186Simple Certificate Enrollment Protocol (SCEP) 119Simple Network Management Protocol, see SNMPSNMP 149, 150agents 150Get 150GetNext 150Manager 150managers 150MIB 150network components 150Set 150Trap 150traps 151versions 149SSH 144and certificates 146client requirements 146encryption methods 145for secure Telnet 146how connection is established 144versions 145with Linux 147with Microsoft Windows 147SSID 13SSID profilepre-configured 13SSID profiles 13SSL 134starting the device 27startup-config.conf 172if errors 169missing at restart 169present at restart 169startup-config-bad.conf 169station 69statisticsdaily e-mail report 154status 41status bar 36warning message popup 36stopping the device 27supported browsers 28syslog 158, 163syslog servers, see also logssystem log, see logssystem name 42, 130system uptime 43system-default.conf 172TTelnet 148with SSH 146time 130time servers (default) 132trademarks 223Transport Layer Security (TLS) 149troubleshooting 178Trusted Certificates, see also certificates 123Uupgradingfirmware 173uploadingconfiguration files 172firmware 173
IndexNWA5000 / WAC6000 Series User’s Guide237shell scripts 175usageCPU 43, 45flash 43memory 43, 46onboard flash 43use 12user authentication 80user namerules 81user objects 80users 80access, see also access usersadmin (type) 80admin, see also admin usersand service control 134currently logged in 43default lease time 84, 86default reauthentication time 85, 86lease time 83limited-admin (type) 80lockout 85reauthentication time 83types of 80user (type) 80user names 81VVantage Report (VRPT) 158, 163Virtual Local Area Network 64VLAN 64introduction 64VoIP 13VRPT (Vantage Report) 158, 163Wwarm start 27warning message popup 36warranty 231note 231WDS 12, 16Web Configurator 17, 28access 28requirements 28supported browsers 28web configurator 12WEP (Wired Equivalent Privacy) 88wireless channel 191wireless client 69Wireless Distribution System (WDS) 16wireless LAN 191Wireless networkoverview 68wireless networkexample 68wireless profile 87layer-2 isolation 87MAC filtering 87radio 87security 87SSID 87wireless repeater 12wireless security 13, 191wireless station 69WLAN interface 14WPA2 88WWW 135and certificates 136see also HTTP, HTTPS 135

Navigation menu