ZyXEL Communications WAC6103D-I 802.11 ac Unified Pro Access Point User Manual 2
ZyXEL Communications Corporation 802.11 ac Unified Pro Access Point 2
Contents
- 1. User manual-1
- 2. User manual-2
User manual-2
Appendix A Importing Certificates Removing a Certificate in Internet Explorer This section shows you how to remove a public key certificate in Internet Explorer 7 on Windows XP. Open I nt e r ne t Ex plor e r and click Tools > I nt e r ne t Opt ions. In the I n t e r n e t Opt ion s dialog box, click Cont e nt > Ce r t ifica t e s. NWA5000 / WAC6000 Series User’s Guide 201 Appendix A Importing Certificates In the Ce r t ifica t e s dialog box, click the Tr ust e d Root Ce r t ifica t e s Aut hor it ie s tab, select the certificate that you want to delete, and then click Re m ove . In the Ce r t ifica t e s confirmation, click Ye s. In the Root Ce r t ifica t e St or e dialog box, click Ye s. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA5000 / WAC6000 Series User’s Guide 202 Appendix A Importing Certificates Firefox The following example uses Mozilla Firefox 2 on Windows XP Professional; however, the screens can also apply to Firefox 2 on all platforms. If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Select Acce pt t his ce r t ifica t e pe r m a ne nt ly and click OK. The certificate is stored and you can now connect securely to the Web Configurator. A sealed padlock appears in the address bar, which you can click to open the Pa ge I nfo > Se cur it y window to view the web page’s security information. NWA5000 / WAC6000 Series User’s Guide 203 Appendix A Importing Certificates Installing a Stand-Alone Certificate File in Firefox Rather than browsing to a ZyXEL Web Configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Fir e fox and click Tools > Opt ion s. In the Opt ions dialog box, click Adva nce d > Encr ypt ion > Vie w Ce r t ifica t e s. NWA5000 / WAC6000 Series User’s Guide 204 Appendix A Importing Certificates In the Ce r t ifica t e M a n a ge r dialog box, click W e b Sit e s > I m por t . Use the Se le ct File dialog box to locate the certificate and then click Ope n . The next time you visit the web site, click the padlock in the address bar to open the Pa ge I n fo > Se cur it y window to see the web page’s security information. Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox 2. NWA5000 / WAC6000 Series User’s Guide 205 Appendix A Importing Certificates Open Fir e fox and click Tools > Opt ion s. In the Opt ions dialog box, click Adva nce d > Encr ypt ion > Vie w Ce r t ifica t e s. NWA5000 / WAC6000 Series User’s Guide 206 Appendix A Importing Certificates In the Ce r t ifica t e M a n a ge r dialog box, select the W e b Sit e s tab, select the certificate that you want to remove, and then click D e le t e . In the D e le t e W e b Sit e Ce r t ifica t e s dialog box, click OK. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA5000 / WAC6000 Series User’s Guide 207 A PPENDIX IPv6 Overview IPv6 (Internet Protocol version 6), is designed to enhance IP address size and features. The increase in IPv6 address size to 128 bits (from the 32-bit IPv4 address) allows up to 3.4 x 1038 IP addresses. IPv6 Addressing The 128-bit IPv6 address is written as eight 16-bit hexadecimal blocks separated by colons (:). This is an example IPv6 address 2001:0db8:1a2b:0015:0000:0000:1a2f:0000. IPv6 addresses can be abbreviated in two ways: • Leading zeros in a block can be omitted. So 2001:0db8:1a2b:0015:0000:0000:1a2f:0000 can be written as 2001:db8:1a2b:15:0:0:1a2f:0. • Any number of consecutive blocks of zeros can be replaced by a double colon. A double colon can only appear once in an IPv6 address. So 2001:0db8:0000:0000:1a2f:0000:0000:0015 can be written as 2001:0db8::1a2f:0000:0000:0015, 2001:0db8:0000:0000:1a2f::0015, 2001:db8::1a2f:0:0:15 or 2001:db8:0:0:1a2f::15. Prefix and Prefix Length Similar to an IPv4 subnet mask, IPv6 uses an address prefix to represent the network address. An IPv6 prefix length specifies how many most significant bits (start from the left) in the address compose the network address. The prefix length is written as “/x” where x is a number. For example, 2001:db8:1a2b:15::1a2f:0/32 means that the first 32 bits (2001:db8) is the subnet prefix. Link-local Address A link-local address uniquely identifies a device on the local network (the LAN). It is similar to a “private IP address” in IPv4. You can have the same link-local address on multiple interfaces on a device. A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 85 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits NWA5000 / WAC6000 Series User’s Guide 208 Appendix B IPv6 Global Address A global address uniquely identifies a device on the Internet. It is similar to a “public IP address” in IPv4. A global unicast address starts with a 2 or 3. Unspecified Address An unspecified address (0:0:0:0:0:0:0:0 or ::) is used as the source address when a device does not have its own address. It is similar to “0.0.0.0” in IPv4. Loopback Address A loopback address (0:0:0:0:0:0:0:1 or ::1) allows a host to send packets to itself. It is similar to “127.0.0.1” in IPv4. Multicast Address In IPv6, multicast addresses provide the same functionality as IPv4 broadcast addresses. Broadcasting is not supported in IPv6. A multicast address allows a host to send packets to all hosts in a multicast group. Multicast scope allows you to determine the size of the multicast group. A multicast address has a predefined prefix of ff00::/8. The following table describes some of the predefined multicast addresses. Table 86 Predefined Multicast Address MULTICAST ADDRESS DESCRIPTION FF01:0:0:0:0:0:0:1 All hosts on a local node. FF01:0:0:0:0:0:0:2 All routers on a local node. FF02:0:0:0:0:0:0:1 All hosts on a local connected link. FF02:0:0:0:0:0:0:2 All routers on a local connected link. FF05:0:0:0:0:0:0:2 All routers on a local site. FF05:0:0:0:0:0:1:3 All DHCP severs on a local site. The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 87 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 NWA5000 / WAC6000 Series User’s Guide 209 Appendix B IPv6 Table 87 Reserved Multicast Address (continued) MULTICAST ADDRESS FF0A:0:0:0:0:0:0:0 FF0B:0:0:0:0:0:0:0 FF0C:0:0:0:0:0:0:0 FF0D:0:0:0:0:0:0:0 FF0E:0:0:0:0:0:0:0 FF0F:0:0:0:0:0:0:0 Subnet Masking Both an IPv6 address and IPv6 subnet mask compose of 128-bit binary digits, which are divided into eight 16-bit blocks and written in hexadecimal notation. Hexadecimal uses four bits for each character (1 ~ 10, A ~ F). Each block’s 16 bits are then represented by four hexadecimal characters. For example, FFFF:FFFF:FFFF:FFFF:FC00:0000:0000:0000. Interface ID In IPv6, an interface ID is a 64-bit identifier. It identifies a physical interface (for example, an Ethernet port) or a virtual interface (for example, the management IP address for a VLAN). One interface should have a unique interface ID. EUI-64 The EUI-64 (Extended Unique Identifier) defined by the IEEE (Institute of Electrical and Electronics Engineers) is an interface ID format designed to adapt with IPv6. It is derived from the 48-bit (6byte) Ethernet MAC address as shown next. EUI-64 inserts the hex digits fffe between the third and fourth bytes of the MAC address and complements the seventh bit of the first byte of the MAC address. See the following example. Table 88 00 : 13 : 49 : 12 : 34 : 56 : 13 : 49 : FF : FE : 12 : 34 M AC Table 89 EUI - 6 4 02 : 56 Stateless Autoconfiguration With stateless autoconfiguration in IPv6, addresses can be uniquely and automatically generated. Unlike DHCPv6 (Dynamic Host Configuration Protocol version six) which is used in IPv6 stateful autoconfiguration, the owner and status of addresses don’t need to be maintained by a DHCP server. Every IPv6 device is able to generate its own and unique IP address automatically when IPv6 is initiated on its interface. It combines the prefix and the interface ID (generated from its own Ethernet MAC address, see Interface ID and EUI-64) to form a complete IPv6 address. When IPv6 is enabled on a device, its interface automatically generates a link-local address (beginning with fe80). When the interface is connected to a network with a router and the NWA/WAC is set to automatically obtain an IPv6 network prefix from the router for the interface, it generates 1another NWA5000 / WAC6000 Series User’s Guide 210 Appendix B IPv6 address which combines its interface ID and global and subnet information advertised from the router. This is a routable global IP address. DHCPv6 The Dynamic Host Configuration Protocol for IPv6 (DHCPv6, RFC 3315) is a server-client protocol that allows a DHCP server to assign and pass IPv6 network addresses, prefixes and other configuration information to DHCP clients. DHCPv6 servers and clients exchange DHCP messages using UDP. Each DHCP client and server has a unique DHCP Unique IDentifier (DUID), which is used for identification when they are exchanging DHCPv6 messages. The DUID is generated from the MAC address, time, vendor assigned ID and/or the vendor's private enterprise number registered with the IANA. It should not change over time even after you reboot the device. Identity Association An Identity Association (IA) is a collection of addresses assigned to a DHCP client, through which the server and client can manage a set of related IP addresses. Each IA must be associated with exactly one interface. The DHCP client uses the IA assigned to an interface to obtain configuration from a DHCP server for that interface. Each IA consists of a unique IAID and associated IP information. The IA type is the type of address in the IA. Each IA holds one type of address. IA_NA means an identity association for non-temporary addresses and IA_TA is an identity association for temporary addresses. An IA_NA option contains the T1 and T2 fields, but an IA_TA option does not. The DHCPv6 server uses T1 and T2 to control the time at which the client contacts with the server to extend the lifetimes on any addresses in the IA_NA before the lifetimes expire. After T1, the client sends the server (S1 ) (from which the addresses in the IA_NA were obtained) a Renew message. If the time T2 is reached and the server does not respond, the client sends a Rebind message to any available server (S2 ). For an IA_TA, the client may send a Renew or Rebind message at the client's discretion. T2 T1 Renew Renew to S1 to S1 Renew Renew to S1 to S1 Renew to S1 Renew to S1 Rebind to S2 Rebind to S2 DHCP Relay Agent A DHCP relay agent is on the same network as the DHCP clients and helps forward messages between the DHCP server and clients. When a client cannot use its link-local address and a wellknown multicast address to locate a DHCP server on its network, it then needs a DHCP relay agent to send a message to a DHCP server that is not attached to the same network. The DHCP relay agent can add the remote identification (remote-ID) option and the interface-ID option to the Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, 1. In IPv6, all network interfaces can be associated with several addresses. NWA5000 / WAC6000 Series User’s Guide 211 Appendix B IPv6 such as the system name. The interface-ID option provides slot number, port information and the VLAN ID to the DHCPv6 server. The remote-ID option (if any) is stripped from the Relay-Reply messages before the relay agent sends the packets to the clients. The DHCP server copies the interface-ID option from the Relay-Forward message into the Relay-Reply message and sends it to the relay agent. The interface-ID should not change even after the relay agent restarts. Prefix Delegation Prefix delegation enables an IPv6 router to use the IPv6 prefix (network address) received from the ISP (or a connected uplink router) for its LAN. The NWA/WAC uses the received IPv6 prefix (for example, 2001:db2::/48) to generate its LAN IP address. Through sending Router Advertisements (RAs) regularly by multicast, the NWA/WAC passes the IPv6 prefix information to its LAN hosts. The hosts then can use the prefix to generate their IPv6 addresses. ICMPv6 Internet Control Message Protocol for IPv6 (ICMPv6 or ICMP for IPv6) is defined in RFC 4443. ICMPv6 has a preceding Next Header value of 58, which is different from the value used to identify ICMP for IPv4. ICMPv6 is an integral part of IPv6. IPv6 nodes use ICMPv6 to report errors encountered in packet processing and perform other diagnostic functions, such as "ping". Neighbor Discovery Protocol (NDP) The Neighbor Discovery Protocol (NDP) is a protocol used to discover other IPv6 devices and track neighbor’s reachability in a network. An IPv6 device uses the following ICMPv6 messages types: • Neighbor solicitation: A request from a host to determine a neighbor’s link-layer address (MAC address) and detect if the neighbor is still reachable. A neighbor being “reachable” means it responds to a neighbor solicitation message (from the host) with a neighbor advertisement message. • Neighbor advertisement: A response from a node to announce its link-layer address. • Router solicitation: A request from a host to locate a router that can act as the default router and forward packets. • Router advertisement: A response to a router solicitation or a periodical multicast advertisement from a router to advertise its presence and other parameters. IPv6 Cache An IPv6 host is required to have a neighbor cache, destination cache, prefix list and default router list. The NWA/WAC maintains and updates its IPv6 caches constantly using the information from response messages. In IPv6, the NWA/WAC configures a link-local address automatically, and then sends a neighbor solicitation message to check if the address is unique. If there is an address to be resolved or verified, the NWA/WAC also sends out a neighbor solicitation message. When the NWA/ WAC receives a neighbor advertisement in response, it stores the neighbor’s link-layer address in the neighbor cache. When the NWA/WAC uses a router solicitation message to query for a router and receives a router advertisement message, it adds the router’s information to the neighbor cache, prefix list and destination cache. The NWA/WAC creates an entry in the default router list cache if the router can be used as a default router. When the NWA/WAC needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the NWA/WAC uses the prefix list NWA5000 / WAC6000 Series User’s Guide 212 Appendix B IPv6 to determine whether the destination address is on-link and can be reached directly without passing through a router. If the address is onlink, the address is considered as the next hop. Otherwise, the NWA/WAC determines the next-hop from the default router list or routing table. Once the next hop IP address is known, the NWA/WAC looks into the neighbor cache to get the linklayer address and sends the packet when the neighbor is reachable. If the NWA/WAC cannot find an entry in the neighbor cache or the state for the neighbor is not reachable, it starts the address resolution process. This helps reduce the number of IPv6 solicitation and advertisement messages. Multicast Listener Discovery The Multicast Listener Discovery (MLD) protocol (defined in RFC 2710) is derived from IPv4's Internet Group Management Protocol version 2 (IGMPv2). MLD uses ICMPv6 message types, rather than IGMP message types. MLDv1 is equivalent to IGMPv2 and MLDv2 is equivalent to IGMPv3. MLD allows an IPv6 switch or router to discover the presence of MLD listeners who wish to receive multicast packets and the IP addresses of multicast groups the hosts want to join on its network. MLD snooping and MLD proxy are analogous to IGMP snooping and IGMP proxy in IPv4. MLD filtering controls which multicast groups a port can join. MLD Messages A multicast router or switch periodically sends general queries to MLD hosts to update the multicast forwarding table. When an MLD host wants to join a multicast group, it sends an MLD Report message for that address. An MLD Done message is equivalent to an IGMP Leave message. When an MLD host wants to leave a multicast group, it can send a Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. NWA5000 / WAC6000 Series User’s Guide 213 Appendix B IPv6 Example - Enabling IPv6 on Windows XP/2003/Vista By default, Windows XP and Windows 2003 support IPv6. This example shows you how to use the ipv6 install command on Windows XP/2003 to enable IPv6. This also displays how to use the ipconfig command to see auto-generated IP addresses. C:\>ipv6 install Installing... Succeeded. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific IP Address. . . . . Subnet Mask . . . . IP Address. . . . . Default Gateway . . DNS . . . . . . . . Suffix . . . . . . . . . . . . . . . . 10.1.1.46 255.255.255.0 fe80::2d0:59ff:feb8:103c%4 10.1.1.254 IPv6 is installed and enabled by default in Windows Vista. Use the ipconfig command to check your automatic configured IPv6 address as well. You should see at least one IPv6 address available for the interface on your computer. Example - Enabling DHCPv6 on Windows XP Windows XP does not support DHCPv6. If your network uses DHCPv6 for IP address assignment, you have to additionally install a DHCPv6 client software on your Windows XP. (Note: If you use static IP addresses or Router Advertisement for IPv6 address assignment in your network, ignore this section.) This example uses Dibbler as the DHCPv6 client. To enable DHCPv6 client on your computer: Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select St a r t > All Pr ogr a m s > D ibble r - D H CPv6 > Clie nt I nst a ll a s se r vice . Select St a r t > Cont r ol Pa n e l > Adm in ist r a t ive Tools > Se r vice s. Double click D ibble r - a D H CPv6 clie nt . NWA5000 / WAC6000 Series User’s Guide 214 Appendix B IPv6 Click St a r t and then OK. Now your computer can obtain an IPv6 address from a DHCPv6 server. Example - Enabling IPv6 on Windows 7 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: Select Cont r ol Pa ne l > N e t w or k a n d Sh a r in g Ce n t e r > Loca l Ar e a Con ne ct ion. Select the I n t e r n e t Pr ot ocol Ve r sion 6 ( TCP/ I Pv6 ) checkbox to enable it. Click OK to save the change. NWA5000 / WAC6000 Series User’s Guide 215 Appendix B IPv6 Click Close to exit the Loca l Ar e a Conn e ct ion St a t us screen. Select St a r t > All Pr ogr a m s > Acce ssor ie s > Com m a nd Pr om pt . Use the ipconfig command to check your dynamic IPv6 address. This example shows a global address (2001:b021:2d::1000) obtained from a DHCP server. C:\>ipconfig Windows IP Configuration Ethernet adapter Local Area Connection: Connection-specific DNS IPv6 Address. . . . . . Link-local IPv6 Address IPv4 Address. . . . . . Subnet Mask . . . . . . Default Gateway . . . . Suffix . . . . . . . . . . . . . . . . . . . . 2001:b021:2d::1000 fe80::25d8:dcab:c80a:5189%11 172.16.100.61 255.255.255.0 fe80::213:49ff:feaa:7125%11 172.16.100.254 NWA5000 / WAC6000 Series User’s Guide 216 A PPENDIX Customer Support In the event of problems that cannot be solved by using this manual, you should contact your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in which you bought the device. Regional websites are listed below. See also ht t p: / / www.zyxel.com / about _zyxel/ zyxel_worldwide.sht m l. Please have the following information ready when you contact an office. Required Information • Product model and serial number. • Warranty Information. • Date that you received your device. • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan • ZyXEL Kazakhstan • http://www.zyxel.kz NWA5000 / WAC6000 Series User’s Guide 217 Appendix C Customer Support Korea • ZyXEL Korea Corp. • http://www.zyxel.kr Malaysia • ZyXEL Malaysia Sdn Bhd. • http://www.zyxel.com.my Pakistan • ZyXEL Pakistan (Pvt.) Ltd. • http://www.zyxel.com.pk Philipines • ZyXEL Philippines • http://www.zyxel.com.ph Singapore • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de NWA5000 / WAC6000 Series User’s Guide 218 Appendix C Customer Support Belarus • ZyXEL BY • http://www.zyxel.by Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland • ZyXEL Communications • http://www.zyxel.fi France • ZyXEL France • http://www.zyxel.fr Germany • ZyXEL Deutschland GmbH • http://www.zyxel.de Hungary • ZyXEL Hungary & SEE • http://www.zyxel.hu Latvia • ZyXEL Latvia NWA5000 / WAC6000 Series User’s Guide 219 Appendix C Customer Support • http://www.zyxel.com/lv/lv/homepage.shtml Lithuania • ZyXEL Lithuania • http://www.zyxel.com/lt/lt/homepage.shtml Netherlands • ZyXEL Benelux • http://www.zyxel.nl Norway • ZyXEL Communications • http://www.zyxel.no Poland • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Spain • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland • Studerus AG NWA5000 / WAC6000 Series User’s Guide 220 Appendix C Customer Support • http://www.zyxel.ch/ Turkey • ZyXEL Turkey A.S. • http://www.zyxel.com.tr UK • ZyXEL Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • ZyXEL Ukraine • http://www.ua.zyxel.com Latin America Argentina • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Ecuador • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Middle East Egypt • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml Middle East • ZyXEL Communication Corporation • http://www.zyxel.com/homepage.shtml North America USA • ZyXEL Communications, Inc. - North America Headquarters • http://www.us.zyxel.com/ NWA5000 / WAC6000 Series User’s Guide 221 Appendix C Customer Support Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za NWA5000 / WAC6000 Series User’s Guide 222 A PPENDIX Legal Information Copyright Copyright © 2015 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimers ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice. Your use of the NWA/WAC is subject to the terms and conditions of any related service providers. Trademarks Trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners. Regulatory Notice and Statement UNITED STATE AMERICA The following information applies if you use the product within USA area. FCC EMC Statement • This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: This device may not cause harmful interference, and this device must accept any interference received, including interference that may cause undesired operation. • Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. • This product has been tested and complies with the specifications for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used according to the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. • If this equipment does cause harmful interference to radio or television reception, which is found by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment or devices. Connect the equipment to an outlet other than the receiver's. Consult a dealer or an experienced radio/TV technician for assistance. FCC Radiation Exposure Statement • • • • This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This transmitter must be at least 20 cm or 30 cm (WAC6553D-E) from the user and must not be co-located or operating in conjunction with any other antenna or transmitter. Country Code selection feature to be disabled for products marketed to the US/CANADA Operation of this device is restricted to indoor use only. (WAC6553D-E is a device for outdoor use.) CANADA The following information applies if you use the product within Canada area. NWA5000 / WAC6000 Series User’s Guide 223 Appendix D Legal Information EUROPEAN UNION The following information applies if you use the product within the European Union. Declaration of Conformity with Regard to EU Directive 1999/5/EC (R&TTE Directive) Compliance information for 2.4GHz and/or 5GHz wireless products relevant to the EU and other Countries following the EU Directive 1999/ 5/EC (R&TTE). Б (Bulgarian) С Español (Spanish) Por medio de la presente ZyXEL declara que el equipo cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. Čeština (Czech) ZyXEL tímto prohlašuje, že tento zařízení je ve shodě se základními požadavky a dalšími příslušnými ustanoveními směrnice 1999/5/EC. Dansk (Danish) Undertegnede ZyXEL erklærer herved, at følgende udstyr udstyr overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF. Deutsch (German) Hiermit erklärt ZyXEL, dass sich das Gerät Ausstattung in Übereinstimmung mit den grundlegenden Anforderungen und den übrigen einschlägigen Bestimmungen der Richtlinie 1999/5/EU befindet. Eesti keel (Estonian) Käesolevaga kinnitab ZyXEL seadme seadmed vastavust direktiivi 1999/5/EÜ põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele. Ε η ά (Greek) я Ε Η Ε ZyXEL Α ΧΕ ,ч Α ZyXEL ∆Η Ω Ε Ε ∆ Α Α Ε Η я 1999/5/ C. ε π σ ός ∆ΗΓ Α 1999/5/ΕC. ΦΩ Ε Α Ω∆Ε Α Α Η Ε Α English Hereby, ZyXEL declares that this equipment is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Français (French) Par la présente ZyXEL déclare que l'appareil équipements est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/EC. Hrvatski (Croatian) ZyXEL ovime izjavljuje da je radijska oprema tipa u skladu s Direktivom 1999/5/EC. Íslenska (Icelandic) Hér með lýsir, ZyXEL því yfir að þessi búnaður er í samræmi við grunnkröfur og önnur viðeigandi ákvæði tilskipunar 1999/5/EC. Italiano (Italian) Con la presente ZyXEL dichiara che questo attrezzatura è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE. Latviešu valoda (Latvian) Ar šo ZyXEL deklarē, ka iekārtas atbilst Direktīvas 1999/5/EK būtiskajām prasībām un citiem ar to saistītajiem noteikumiem. Lietuvių kalba (Lithuanian) Šiuo ZyXEL deklaruoja, kad šis įranga atitinka esminius reikalavimus ir kitas 1999/5/EB Direktyvos nuostatas. Magyar (Hungarian) Alulírott, ZyXEL nyilatkozom, hogy a berendezés megfelel a vonatkozó alapvetõ követelményeknek és az 1999/5/EK irányelv egyéb elõírásainak. Malti (Maltese) Hawnhekk, ZyXEL, jiddikjara li dan tagħmir jikkonforma mal-ħtiġijiet essenzjali u ma provvedimenti oħrajn relevanti li hemm fid-Dirrettiva 1999/5/EC. Nederlands (Dutch) Hierbij verklaart ZyXEL dat het toestel uitrusting in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EC. Polski (Polish) Niniejszym ZyXEL oświadcza, że sprzęt jest zgodny z zasadniczymi wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC. Português (Portuguese) ZyXEL declara que este equipamento está conforme com os requisitos essenciais e outras disposições da Directiva 1999/5/EC. Română (Romanian) Prin prezenta, ZyXEL declară că acest echipament este în conformitate cu cerinţele esenţiale şi alte prevederi relevante ale Directivei 1999/5/EC. Slovenčina (Slovak) ZyXEL týmto vyhlasuje, že zariadenia spĺňa základné požiadavky a všetky príslušné ustanovenia Smernice 1999/5/EC. Slovenščina (Slovene) ZyXEL izjavlja, da je ta oprema v skladu z bistvenimi zahtevami in ostalimi relevantnimi določili direktive 1999/5/EC. Suomi (Finnish) ZyXEL vakuuttaa täten että laitteet tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen. NWA5000 / WAC6000 Series User’s Guide 225 Appendix D Legal Information Svenska (Swedish) Härmed intygar ZyXEL att denna utrustning står I överensstämmelse med de väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv 1999/5/EC. Norsk (Norwegian) Erklærer herved ZyXEL at dette utstyret er I samsvar med de grunnleggende kravene og andre relevante bestemmelser I direktiv 1999/5/EF. National Restrictions This product may be used in all EU countries (and other countries following the EU Directive 2014/53/EU) without any limitation except for the countries mentioned below: Ce produit peut être utilisé dans tous les pays de l’UE (et dans tous les pays ayant transposés la directive 2014/53/UE) sans aucune limitation, excepté pour les pays mentionnés ci-dessous: Questo prodotto è utilizzabile in tutte i paesi EU (ed in tutti gli altri paesi che seguono le direttiva 2014/53/UE) senza nessuna limitazione, eccetto per i paesii menzionati di seguito: Das Produkt kann in allen EU Staaten ohne Einschränkungen eingesetzt werden (sowie in anderen Staaten die der Richtlinie 2014/53/EU folgen) mit Außnahme der folgenden aufgeführten Staaten: In the majority of the EU and other European countries, the 2.4GHz and 5GHz bands have been made available for the use of wireless local area networks (LANs). Later in this document you will find an overview of countries in which additional restrictions or requirements or both are applicable. The requirements for any country may evolve. ZyXEL recommends that you check with the local authorities for the latest status of their national regulations for both the 2.4GHz and 5GHz wireless LANs. The following countries have restrictions and/or requirements in addition to those given in the table labeled “Overview of Regulat ory Requirem ent s for Wireless LANs”:. Belgium The Belgian Institute for Postal Services and Telecommunications (BIPT) must be notified of any outdoor wireless link having a range exceeding 300 meters. Please check http://www.bipt.be for more details. Draadloze verbindingen voor buitengebruik en met een reikwijdte van meer dan 300 meter dienen aangemeld te worden bij het Belgisch Instituut voor postdiensten en telecommunicatie (BIPT). Zie http://www.bipt.be voor meer gegevens. Les liaisons sans fil pour une utilisation en extérieur d’une distance supérieure à 300 mètres doivent être notifiées à l’Institut Belge des services Postaux et des Télécommunications (IBPT). Visitez http://www.ibpt.be pour de plus amples détails. Denmark In Denmark, the band 5150 - 5350 MHz is also allowed for outdoor usage. I Danmark må frekvensbåndet 5150 - 5350 også anvendes udendørs. Italy This product meets the National Radio Interface and the requirements specified in the National Frequency Allocation Table for Italy. Unless this wireless LAN product is operating within the boundaries of the owner's property, its use requires a “general authorization.” Please check http://www.sviluppoeconomico.gov.it/ for more details. Questo prodotto è conforme alla specifiche di Interfaccia Radio Nazionali e rispetta il Piano Nazionale di ripartizione delle frequenze in Italia. Se non viene installato all 'interno del proprio fondo, l'utilizzo di prodotti Wireless LAN richiede una “Autorizzazione Generale”. Consultare http://www.sviluppoeconomico.gov.it/ per maggiori dettagli. Latvia The outdoor usage of the 2.4 GHz band requires an authorization from the Electronic Communications Office. Please check http:// www.esd.lv for more details. 2.4 GHz frekvenèu joslas izmantoðanai ârpus telpâm nepiecieðama atïauja no Elektronisko sakaru direkcijas. Vairâk informâcijas: http:// www.esd.lv. Notes: 1. Although Norway, Switzerland and Liechtenstein are not EU member states, the EU Directive 2014/53/EU has also been implemented in those countries. 2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used(specified in dBi) to the output power available at the connector (specified in dBm). NWA5000 / WAC6000 Series User’s Guide 226 Appendix D Legal Information List of national codes COUNTRY ISO 3166 2 LETTER CODE COUNTRY ISO 3166 2 LETTER CODE Austria AT Liechtenstein LI Belgium BE Lithuania LT Bulgaria BG Luxembourg LU Croatia HR Malta MT Cyprus CY Netherlands NL Czech Republic CR Norway NO Denmark DK Poland PL Estonia EE Portugal PT Finland FI Romania RO France FR Serbia RS Germany DE Slovakia SK Greece GR Slovenia SI Hungary HU Spain ES Iceland IS Sweden SE Ireland IE Switzerland CH Italy IT Turkey TR Latvia LV United Kingdom GB Professional installation instruction (WAC6553D-E) Please be advised that due to the unique function supplied by this product, the device is intended for use with our interactive entertainment software and licensed third-party only. The product will be distributed through controlled distribution channel and installed by trained professional and will not be sold directly to the general public through retail store. Installation personal This product is designed for specific application and needs to be installed by a qualified personal who has RF and related rule knowledge. The general user shall not attempt to install or change the setting. Installation location The product shall be installed at a location where the radiating antenna can be kept 30 cm from nearby person in normal operation condition to meet regulatory RF exposure requirement. External antenna Use only the antennas which have been approved by ZyXEL Communications Corporation. The non-approved antenna(s) may produce unwanted spurious or excessive RF transmitting power which may lead to the violation of FCC/IC limit and is prohibited. Installation procedure Please refer to user's manual for the detail. Warning Please carefully select the installation position and make sure that the final output power does not exceed the limit set force in relevant rules. The violation of the rule could lead to serious federal penalty. Instructions d'installation professionnelle (WAC6553D-E) Veuillez noter que l'appareil etant dedie a une fonction unique, il doit etre utilise avec notre logiciel proprietaire de divertissement interactif . Ce produit sera propose par un reseau de distribution controle et installe par des professionels; il ne sera pas propose au grand public par le reseau de la grande distribution. Installation Ce produit est destine a un usage specifique et doit etre installe par un personnel qualifie maitrisant les radiofrequences et les regles s'y rapportant. L'installation et les reglages ne doivent pas etre modifies par l'utilisateur final. Emplacement d'installation En usage normal, afin de respecter les exigences reglementaires concernant l'exposition aux radiofrequences, ce produit doit etre installe de facon a respecter une distance de 30 cm entre l'antenne emettrice et les personnes. Antenn externe. Utiliser uniiquement les antennes approuvees par le fabricant. L'utilisation d'autres antennes peut conduire a un niveau de rayonnement essentiel ou non essentiel depassant les niveaux limites definis par FCC/IC, ce qui est interdit. Procedure d'installation Consulter le manuel d'utilisation. Avertissement Choisir avec soin la position d'installation et s'assurer que la puissance de sortie ne depasse pas les limites en vigueur. La violation de cette regle peut conduire a de serieuses penalites federales. NWA5000 / WAC6000 Series User’s Guide 227 Appendix D Legal Information Safety Warnings • • • • • • • • • • • • • • • • • • • • • • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. Do NOT expose your device to dampness, dust or corrosive liquids. Do NOT store things on the device. Do NOT install, use, or service this device during a thunderstorm. There is a remote risk of electric shock from lightning. Connect ONLY suitable accessories to the device. Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel should service or disassemble this device. Please contact your vendor for further information. Make sure to connect the cables to the correct ports. Place connecting cables carefully so that no one will step on them or stumble over them. Always disconnect all cables from this device before servicing or disassembling. Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe). Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord. Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution. If the power adaptor or cord is damaged, remove it from the device and the power source. Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a new one. Do not use the device outside, and make sure all the connections are indoors. There is a remote risk of electric shock from lightning. CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO THE INSTRUCTIONS. Dispose them at the applicable collection point for the recycling of electrical and electronic equipment. For detailed information about recycling of this product, please contact your local city office, your household waste disposal service or the store where you purchased the product. Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. Antenna Warning! This device meets ETSI and FCC certification requirements when using the included antenna(s). Only use the included antenna(s). If you wall mount your device, make sure that no electrical lines, gas or water pipes will be damaged. The PoE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. This product is for indoor use only (utilisation intérieure exclusivement). FOR COUNTRY CODE SELECTION USAGE (WLAN DEVICES) Note: The country code selection is for non-US model only and is not available to all US model. Per FCC regulation, all Wi-Fi product marketed in US must fixed to US operation channels only. The following warnings apply if product is disconnect device: • A readily accessible disconnect device shall be incorporated external to the equipment; and/or • The socket-outlet shall be installed near the equipment and shall be easily accessible. Environment statement ErP (Energy-related Products) ZyXEL products put on the EU market in compliance with the requirement of the European Parliament and the Council published Directive 2009/125/EC establishing a framework for the setting of ecodesign requirements for energy-related products (recast), so called as "ErP Directive (Energy-related Products directive) as well as ecodesign requirement laid down in applicable implementing measures, power consumption has satisfied regulation requirements which are: Network standby power consumption < 12W, and/or Off mode power consumption < 0.5W, and/or Standby mode power consumption < 0.5W. Wireless setting, please refer to "Wireless" chapter for more detail. WEEE Directive Your product is marked with this symbol, which is known as the WEEE mark. WEEE stands for Waste Electronics and Electrical Equipment. It means that used electrical and electronic products should not be mixed with general waste. Used electrical and electronic equipment should be treated separately. "INFORMAZIONI AGLI UTENTI" Ai sensi della Direttiva 2012/19/UE del Parlamento europeo e del Consiglio, del 4 luglio 2012, sui rifiuti di apparecchiature elettriche ed elettroniche (RAEE) NWA5000 / WAC6000 Series User’s Guide 228 Appendix D Legal Information Il simbolo del cassonetto barrato riportato sull’apparecchiatura o sulla sua confezione indica che il prodotto alla fine della propria vita utile deve essere raccolto separatamente dagli altri rifiuti. La raccolta differenziata della presente apparecchiatura giunta a fine vita e organizzata e gestita dal produttore. L’utente che vorra disfarsi della presente apparecchiatura dovra quindi contattare il produttore e seguire il sistema che questo ha adottato per consentire la raccolta separata dell’apparecchiatura giunta a fine vita. L’adeguata raccolta differenziata per l’avvio successivo dell’apparecchiatura dismessa al riciclaggio, al trattamento e allo smaltimento ambientalmente compatibile contribuisce ad evitare possibili effetti negativi sull’ambiente e sulla salute e favorisce il reimpiego e/o riciclo dei materiali di cui e composta l’apparecchiatura. Lo smaltimento abusivo del prodotto da parte del detentore comporta l’applicazione delle sanzioni amministrative previste dalla normativa vigente." NWA5000 / WAC6000 Series User’s Guide 229 Appendix D Legal Information Environmental Product Declaration NWA5000 / WAC6000 Series User’s Guide 230 Appendix D Legal Information 灣 以 訊息僅適用於產品銷售至 灣地 NCC Statement: 1) 用 20 cm 計算 MPE 能符合 1mW/cm2 電磁波曝露量 MPE 標準值 (MPE) 1mW/cm2,送測產品實值為 0.320 mW/cm2 for WAC6502D-S. 電磁波曝露量MPE標準值 (MPE) 1mW/cm2,送測產品實值為 0.403 mW/cm2 for WAC6502D-E. 電磁波曝露量MPE標準值 (MPE) 1mW/cm2,送測產品實值為 0.448 mW/cm2 for WAC6103D-I. 2) 用 30 cm 計算 MPE 能符合 1mW/cm2 電磁波曝露量 MPE 標準值 (MPE) 1mW/cm2,送測產品實值為 0.305 mW/cm2 for WAC6553D-E. 802.11b/802.11g 警語 第 二條→經型式認證合格之低 第 四條→低 率射頻電機,非經許 率射頻電機之使用不得影響飛航安 前項合法通信,指依電信法規定作業之無線電通信 ,公司,商 或使用者均不得擅自變更頻率 及干擾合法通信 低 大 率或變更原設計之特性及 能 經發現有干擾現象時,應立即停用,並改善至無干擾時方得繼續使用 率射頻電機須忍受合法通信或工業 科學及醫療用電波輻射性電機設備之干擾 802.11a 警語 無線傳輸設備 (UNII) 在 5.25-5.35 秭赫頻帶 操作之無線資訊傳輸設備,限於室 無線資訊傳輸設備忍受合法通信之干擾且不得干擾合法通信 使用 (4.7.5) 如造成干擾,應立即停用,俟無干擾之 無線資訊傳設備的製造廠商應確保頻率穩定性,如依製造廠商使用手冊 專業安裝警語 所述正常操作,發射的信 ,始得繼續使用 應維持於操作頻帶中 (4.7.6) (4.7.7) (WAC6553D-E) " 本器材須經專業工程人員安裝及設定,始得設置使用,且不得直接販售給一般消費者 " Viewing Certifications Go to http://www.zyxel.com to view this product’s documentation and certifications. ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in material or workmanship for a specific period (the Warranty Period) from the date of purchase. The Warranty Period varies by region. Check with your vendor and/or the authorized ZyXEL local distributor for details about the Warranty Period of this product. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product has been modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions. Note Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser. To obtain the services of this warranty, contact your vendor. You may also refer to the warranty policy for the region in which you bought the device at http://www.zyxel.com/web/support_warranty_info.php. Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com. Open Source Licenses This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. If you cannot find it there, contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. To obtain the source code covered under those Licenses, please contact your vendor or ZyXEL Technical Support at support@zyxel.com.tw. NWA5000 / WAC6000 Series User’s Guide 231 Index Index see certificates Symbols Certificate Management Protocol (CMP) 119 Certificate Revocation List (CRL) 113 vs OCSP 128 certificates 112 advantages of 113 and CA 113 and FTP 149 and HTTPS 134 and SSH 146 and WWW 136 certification path 113, 121, 126 expired 113 factory-default 113 file formats 113 fingerprints 122, 127 importing 116 not used for encryption 113 revoked 113 self-signed 113, 118 serial number 121, 126 storage space 115, 124 thumbprint algorithms 114 thumbprints 114 used for authentication 113 verifying fingerprints 114 access 28 access privileges 13 access users 80 see also users 80 admin users 80 multiple logins 85 see also users 80 alerts 157, 160, 161, 163, 164, 165 antenna switch 183 AP 12 applications MBSSID 13 Repeater 16 certification requests 118, 119 backing up configuration files 169 certifications viewing 231 Basic Service Set see BSS channel 14 boot module 174 CLI 17, 33 button 33 messages 33 popup window 33 Reference Guide 2 CA and certificates 113 commands 17 sent by Web Configurator 33 CA (Certificate Authority), see certificates Common Event Format (CEF) 158, 163 CAPWAP 59, 61 comparison table 11 CEF (Common Event Format) 158, 163 configuration 12 information 178 BSS 13 cold start 27 Certificate Authority (CA) NWA5000 / WAC6000 Series User’s Guide 232 Index configuration files 167 at restart 169 backing up 169 downloading 170 downloading with FTP 148 editing 167 how applied 168 lastgood.conf 169, 172 managing 168 startup-config.conf 172 startup-config-bad.conf 169 syntax 167 system-default.conf 172 uploading 172 uploading with FTP 148 use without restart 167 dual-radio application 14 contact information 217 Control and Provisioning of Wireless Access Points See CAPWAP FCC interference statement 223 dynamic channel selection 69 e-mail daily statistics report 154 encryption 16 RSA 121 ESSID 191 Extended Service Set IDentification 87 file extensions configuration files 167 shell scripts 167 cookies 28 copyright 223 CPU usage 43, 45 file manager 167 current date/time 43, 130 daylight savings 131 setting manually 133 time server 133 Firefox 28 firmware and restart 173 boot module, see boot module current version 42, 174 getting updated 173 uploading 173, 174 uploading with FTP 148 customer support 217 flash usage 43 date 130 FTP 17, 148 and certificates 149 with Transport Layer Security (TLS) 149 daylight savings 131 DCS 69 DHCP 130 and domain name 130 diagnostics 178 Digital Signature Algorithm public-key algorithm, see DSA Guide CLI Reference 2 Quick Start 2 disclaimer 223 documentation related 2 domain name 130 DSA 118 DTLS 59 dual radios 14 HTTP NWA5000 / WAC6000 Series User’s Guide 233 Index over SSL, see HTTPS redirect to HTTPS 136 vs HTTPS 135 Java permissions 28 HTTPS 134 and certificates 134 authenticating clients 134 avoiding warning messages 138 example 136 vs HTTP 135 with Internet Explorer 136 with Netscape Navigator 137 JavaScripts 28 key pairs 112 HyperText Transfer Protocol over Secure Socket Layer, see HTTPS lastgood.conf 169, 172 layer-2 isolation 102 example 103 MAC 103 IEEE 802.1x 88 installation 12 interface status 44 LED suppression 180 interference 14 LEDs 20 Blinking 21, 23, 25 Flashing 21, 23, 25, 26 Off 21, 23, 25, 26 Internet Explorer 28 load balancing 69 Internet Protocol version 6, see IPv6 Locator LED 181 Internet telephony 13 log messages categories 161, 163, 164, 165 debugging 55 regular 55 types of 55 interfaces as DHCP servers 130 IP Address 59 gateway IP address 59 IP subnet 59 IPv6 208 addressing 208 EUI-64 210 global address 209 interface ID 210 link-local address 208 Neighbor Discovery Protocol 208 ping 208 prefix 208 prefix length 208 stateless autoconfiguration 210 unspecified address 209 logout Web Configurator 30 logs e-mail profiles 156 e-mailing log messages 57, 160 formats 158 log consolidation 161 settings 156 syslog servers 156 system 156 types of 156 NWA5000 / WAC6000 Series User’s Guide 234 Index MAC address range 42 pop-up windows 28 maintenance 12 power on 27 management 12 product registration 231 Management Information Base (MIB) 150 Public-Key Infrastructure (PKI) 113 Management Mode CAPWAP and DHCP 60 CAPWAP and IP Subnets 61 managed AP 60 standalone mode 59 public-private key pairs 112 power off 27 management mode 12 managing the device good habits 17 using FTP. See FTP. Quick Start Guide 2 MBSSID 13 memory usage 43, 46 message bar 36 radio 14 messages CLI 33 warning 36 reboot 27, 185 vs reset 185 Reference Guide, CLI 2 mode 12 model name 42 registration product 231 My Certificates, see also certificates 115 related documentation 2 remote management FTP, see FTP Telnet 148 WWW, see WWW reports daily 154 daily e-mail 154 Netscape Navigator 28 network access control 12 Network Time Protocol (NTP) 132 reset 194 vs reboot 185 vs shutdown 186 RESET button 27, 194 restart 185 objects certificates 112 users, account user 80 RF interference 14 Online Certificate Status Protocol (OCSP) 128 vs CRL 128 Rivest, Shamir and Adleman public-key algorithm (RSA) 118 operating mode 12 root AP 12 other documentation 2 RSA 118, 121, 127 overview 11 RSSI threshold 93 RFC 2510 (Certificate Management Protocol or CMP) 119 NWA5000 / WAC6000 Series User’s Guide 235 Index pre-configured 13 SSID profiles 13 SCEP (Simple Certificate Enrollment Protocol) 119 SSL 134 screen resolution 28 starting the device 27 Secure Socket Layer, see SSL startup-config.conf 172 if errors 169 missing at restart 169 present at restart 169 serial number 42 service control and users 134 limitations 134 timeouts 134 startup-config-bad.conf 169 station 69 statistics daily e-mail report 154 Service Set 87 Service Set Identifier see SSID status 41 status bar 36 warning message popup 36 shell scripts 167 downloading 176 editing 175 how applied 168 managing 175 syntax 167 uploading 177 stopping the device 27 supported browsers 28 syslog 158, 163 syslog servers, see also logs system log, see logs shutdown 27, 186 vs reset 186 system name 42, 130 Simple Certificate Enrollment Protocol (SCEP) 119 system uptime 43 Simple Network Management Protocol, see SNMP system-default.conf 172 SNMP 149, 150 agents 150 Get 150 GetNext 150 Manager 150 managers 150 MIB 150 network components 150 Set 150 Trap 150 traps 151 versions 149 Telnet 148 with SSH 146 time 130 time servers (default) 132 trademarks 223 Transport Layer Security (TLS) 149 troubleshooting 178 SSH 144 and certificates 146 client requirements 146 encryption methods 145 for secure Telnet 146 how connection is established 144 versions 145 with Linux 147 with Microsoft Windows 147 Trusted Certificates, see also certificates 123 upgrading firmware 173 uploading configuration files 172 firmware 173 SSID 13 SSID profile NWA5000 / WAC6000 Series User’s Guide 236 Index shell scripts 175 access 28 requirements 28 supported browsers 28 usage CPU 43, 45 flash 43 memory 43, 46 onboard flash 43 web configurator 12 use 12 wireless client 69 user authentication 80 Wireless Distribution System (WDS) 16 user name rules 81 wireless LAN 191 WEP (Wired Equivalent Privacy) 88 wireless channel 191 Wireless network overview 68 user objects 80 users 80 access, see also access users admin (type) 80 admin, see also admin users and service control 134 currently logged in 43 default lease time 84, 86 default reauthentication time 85, 86 lease time 83 limited-admin (type) 80 lockout 85 reauthentication time 83 types of 80 user (type) 80 user names 81 wireless network example 68 wireless profile 87 layer-2 isolation 87 MAC filtering 87 radio 87 security 87 SSID 87 wireless repeater 12 wireless security 13, 191 wireless station 69 WLAN interface 14 WPA2 88 WWW 135 and certificates 136 see also HTTP, HTTPS 135 Vantage Report (VRPT) 158, 163 Virtual Local Area Network 64 VLAN 64 introduction 64 VoIP 13 VRPT (Vantage Report) 158, 163 warm start 27 warning message popup 36 warranty 231 note 231 WDS 12, 16 Web Configurator 17, 28 NWA5000 / WAC6000 Series User’s Guide 237
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.6 Linearized : Yes Encryption : Standard V4.4 (128-bit) User Access : Print, Extract Create Date : 2015:08:25 17:29:27+08:00 Modify Date : 2015:08:25 17:29:39+08:00 Has XFA : No XMP Toolkit : Adobe XMP Core 5.4-c005 78.147326, 2012/08/23-13:03:03 Metadata Date : 2015:08:25 17:29:39+08:00 Format : application/pdf Document ID : uuid:ba46ed6b-22bb-493a-a579-a3e652003aec Instance ID : uuid:65b3b473-ea96-4a66-88e9-32898b116331 Page Count : 37EXIF Metadata provided by EXIF.tools