Manuals / Brands / Computer Equipment / Network Router / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications NWA-3550, NWA-3500 manual 216

1 408

Download 408 pages, 11.56 Mb

Chapter 17 Internal RADIUS Server

216
216	NWA-3500/NWA-3550 User’s Guide

Contents

Default Login Details Page About This User's Guide Customer Support Document Conventions Icons Used in Figures Safety Warnings Page Contents Overview Page Table of Contents Page Part II: The Web Configurator Page Page Page Page Page Part IV: Appendices and Index Page PART Introduction Page Introducing the NWA 1.1 Overview 1.2 Applications for the NWA 1.2.1 Access Point 1.2.2 Bridge / Repeater 1.2.2.1 Bridge / Repeater Mode Example Page 1.2.3 AP + Bridge 1.2.4 MBSSID Page 1.2.5 Pre-ConfiguredSSID Profiles 1.2.6Configuring Dual WLAN Adaptors WLAN2 WLAN1 Internet 1.3 CAPWAP 1.4 Ways to Manage the NWA 1.5Good Habits for Managing the NWA 1.6Configuring Your NWA’s Security Features 1.6.1 Control Access to Your Device 1.6.2Wireless Security 1.7 Hardware Connections 1.7.1 Antennas 1.8 LEDs Page Page The Web Configurator 2.1 Overview 2.2Accessing the Web Configurator 2.3 Resetting the NWA 2.3.1 Methods of Restoring Factory-Defaults 2.4 Navigating the Web Configurator Page Tutorial 3.1 Overview 3.2 How to Configure the Wireless LAN 3.2.1Choosing the Wireless Mode 3.2.2 Wireless LAN Configuration Overview 3.2.3 Further Reading 3.3How to Configure Multiple Wireless Networks Page 3.3.1 Change the Operating Mode 3.3.1.1 Access Point 3.3.1.2 MBSSID 3.3.2 Configure the VoIP Network 3.3.2.1 Set Up Security for the VoIP Profile Page 3.3.2.2 Activate the VoIP Profile 3.3.3 Configure the Guest Network Page 3.3.3.1 Set Up Security for the Guest Profile 3.3.3.2 Set up Layer 2 Isolation 3.3.3.3 Activate the Guest Profile 3.3.4 Testing the Wireless Networks 3.4 How to Set Up and Use Rogue AP Detection Page 3.4.1Set Up and Save a Friendly AP list Page Page 3.4.2 Activate Periodic Rogue AP Detection 3.4.3 Set Up E-mailLogs 3.4.4Configure Your Other Access Points 3.4.5 Test the Setup 3.5Using MAC Filters and L-2Isolation Profiles 3.5.1 Scenario 3.5.2Your Requirements 3.5.3Setup 3.5.4 Configure the SERVER_1 Network Page Page 3.5.5 Configure the SERVER_2 Network 3.5.6 Checking your Settings and Testing the Configuration 3.5.6.1 Checking Settings 3.5.6.2 Testing the Configuration 3.6 How to Configure Management Modes 3.6.1 Scenario 3.6.2Your Requirements 3.6.3Setup 3.6.4Configure Your NWA in Controller AP Mode 3.6.4.1 Secondary AP Controller 3.6.4.2 Primary AP Controller 3.6.5Setting Your NWA in Managed AP Mode 3.6.6Configuring the Managed Access Points List Page Page 3.6.7 Checking your Settings and Testing the Configuration Page The Web Configurator Page Status Screens 4.1 Overview 4.2 The Status Screen Page Page 4.2.1 System Statistics Screen Management Mode 5.1 Overview 5.2 About CAPWAP 5.2.1 CAPWAP Discovery and Management 5.2.2CAPWAP and DHCP 5.2.3 CAPWAP and IP Subnets 5.2.4 Notes on CAPWAP 5.3 The Management Mode Screen Page Page AP Controller Mode 6.1 Overview 6.1.1What You Can Do in AP Controller Mode 6.1.2What You Need to Know 6.1.3 Before You Begin 6.2 Controller AP Navigation Menu 6.3 Controller AP Status Screen Page 6.4 AP Lists Screen Page Page 6.4.1 The AP Lists Edit Screen 6.5 Configuration Screen 6.6 Redundancy Screen 6.7 The Profile Edit Screens 6.7.1The Radio Profile Screen 6.7.2 The Radio Profile Edit Screen Page Page Page Page System Screens 7.1 Overview 7.1.1What You Can Do in the System Screens 7.1.2 What You Need To Know About the System Screens 7.2 General Screen Page 7.3 Password Screen Page 7.4 Time Setting Screen Page 7.5 Technical Reference 7.5.1 Administrator Authentication on RADIUS 7.5.2 Pre-definedNTP Time Servers List Page Wireless Configuration 8.1 Overview 8.2 What You Can Do in the Wireless Screen 8.2.1 What You Need To Know About the Wireless Screen Operating Mode SSID Channel Wireless Mode MBSSID 8.3The Wireless Screen 8.3.1 Access Point Mode Page Page 8.3.2 Bridge / Repeater Mode Page Page Page Page 8.3.3 AP + Bridge Mode Page Page Page Page 8.3.4 MBSSID Mode Page Page 8.4 Technical Reference 8.4.1 Spanning Tree Protocol (STP) 8.4.1.1 Rapid STP 8.4.1.2 STP Terminology 8.4.1.3 How STP Works 8.4.1.4 STP Port States 8.4.2 DFS 8.4.3 Roaming Page 8.4.3.1 Requirements for Roaming Page SSID Screen 9.1 Overview 9.1.1 What You Can Do in the SSID Screen 9.1.2 What You Need To Know About SSID 9.2 The SSID Screen 9.2.1 Configuring SSID 9.3 Technical Reference 9.3.1 WMM QoS 9.3.1.1 WMM QoS Priorities 9.3.2 ATC 9.3.3 ATC+WMM 9.3.3.1 ATC+WMM from LAN to WLAN 9.3.3.2 ATC+WMM from WLAN to LAN 9.3.4 Type Of Service (ToS) 9.3.4.1 DiffServ 9.3.4.2 DSCP and Per-HopBehavior 9.3.4.3 ToS (Type of Service) and WMM QoS Page Wireless Security Screen 10.1 Overview 10.1.1 What You Can Do in the Wireless Security Screen 10.1.2 What You Need To Know About Wireless Security 10.2 The Security Screen Page 10.2.1 Security: WEP Page 10.2.2 Security: 802.1x Only 10.2.3 Security: 802.1x Static 64-bit,802.1x Static 128-bit 10.2.4 Security: WPA 10.2.5 Security: WPA2 or WPA2-MIX Page 10.2.6 Security: WPA-PSK, WPA2-PSK, WPA2-PSK-MIX 10.3 Technical Reference Page RADIUS Screen 11.1 Overview 11.1.1 What You Can Do in the RADIUS Screen 11.1.2 What You Need To Know About RADIUS 11.2 The RADIUS Screen Page Layer-2Isolation Screen 12.1 Overview 12.1.1 What You Can Do in the Layer-2Isolation Screen 12.1.2 What You Need To Know About Layer-2Isolation 12.2 The Layer-2Isolation Screen 12.2.1 Configuring Layer-2Isolation 12.3 Technical Reference Example 1: Restricting Access to Server Example 2: Restricting Access to Client MAC Filter Screen 13.1 Overview 13.1.1 What You Can Do in the MAC Filter Screen 13.1.2 What You Should Know About MAC Filter 13.2 The MAC Filter Screen 13.2.1 Configuring the MAC Filter Page Page IP Screen 14.1 Overview 14.1.1 What You Can Do in the IP Screen 14.1.2 What You Need To Know About IP 14.2 The IP Screen 14.3 Technical Reference 14.3.1 WAN IP Address Assignment Page Rogue AP Detection 15.1 Overview 15.1.1What You Can Do in the Rogue AP Screen 15.1.2What You Need To Know About Rogue AP “Honeypot” Attack 15.2 Configuration Screen 15.2.1 Friendly AP Screen 15.2.2 Rogue AP Screen Page Page Remote Management Screens 16.1 Overview 16.1.1What You Can Do in the Remote Management Screens 16.1.2What You Need To Know About Remote Management Remote Management Limitations 16.2 The Telnet Screen 16.3 The FTP Screen 16.4 The WWW Screen Page Page 16.5 The SNMP Screen Page 16.5.1 SNMPv3 User Profile 16.6 Technical Reference 16.6.1 MIB 16.6.2Supported MIBs 16.6.3 SNMP Traps Page Internal RADIUS Server 17.1 Overview 17.1.1What You Can Do in this Chapter 17.1.2What You Need To Know 17.2 Internal RADIUS Server Setting Screen Page 17.3 The Trusted AP Screen 17.4 The Trusted Users Screen 17.5 Technical Reference Page Page Certificates 18.1 Overview 18.1.1What You Can Do in the Certificates Screen 18.1.2 What You Need To Know About Certificates 18.2My Certificates Screen Page 18.2.1 My Certificates Import Screen Page 18.2.2 My Certificates Create Screen Page Page 18.2.3 My Certificates Details Screen Page Page 18.3 Trusted CAs Screen 18.3.1 Trusted CAs Import Screen 18.3.2 Trusted CAs Details Screen Page Page 18.4 Technical Reference 18.4.1 Private-PublicCertificates 18.4.2 Certification Authorities 18.4.3 Checking the Fingerprint of a Certificate Log Screens 19.1 Overview 19.1.1What You Can Do in the Log Screens 19.1.2What You Need To Know About Logs 19.2 The View Log Screen Page 19.3 The Log Settings Screen Page 19.4 Technical Reference 19.4.1 Example Log Messages Page 19.4.2 Log Commands 19.4.3 Configuring What You Want the NWA to Log 19.4.4 Displaying Logs 19.4.5 Log Command Example Page VLAN 20.1 Overview 20.1.1What You Can Do in the VLAN Screen 20.1.2 What You Need To Know About VLAN 20.2 Wireless VLAN Screen 20.2.1 RADIUS VLAN Screen Page 20.3 Technical Reference 20.3.1 VLAN Tagging 20.3.2 Configuring Management VLAN Example Page Page 20.3.3 Configuring Microsoft’s IAS Server Example 20.3.3.1 Configuring VLAN Groups 20.3.3.2 Configuring Remote Access Policies Page Page Page Page Page Page Page 20.3.4 Second Rx VLAN ID Example 20.3.4.1 Second Rx VLAN Setup Example Page Load Balancing 21.1 Overview 21.1.1 What You Need to Know About Load Balancing Page 21.2The Load Balancing Screen 21.2.1 Disassociating and Delaying Connections Page Page Dynamic Channel Selection 22.1 Overview 22.2 The DCS Screen Page Page Maintenance 23.1 Overview 23.2What You Can Do in the Maintenance Screens 23.3What You Need To Know 23.4 System Status Screen 23.4.1 Show Statistics Screen Page 23.5 Association List Screen 23.6 Channel Usage Screen 23.7 F/W Upload Screen Do not turn off the NWA while firmware upload is in progress 23.8 Configuration Screen 23.8.1 Backup Configuration 23.8.2 Restore Configuration 23.8.3 Back to Factory Defaults 23.9 Restart Screen Page Page ART Troubleshooting and Specifications Page Troubleshooting 24.1 Overview 24.2Power, Hardware Connections, and LEDs 24.3NWA Access and Login Page 24.4AP Management Modes Page 24.5 Internet Access 24.6 Wireless Router/AP Troubleshooting Page Product Specifications Page Page Page Compatible ZyXEL Antennas Compatible ZyXEL Antenna Cables Power over Ethernet (PoE) Specifications Appendices and Index Page Setting Up Your Computer’s IP Address Windows XP/NT/2000 Page Page Verifying Settings Windows Vista Page Page Page Mac OS X: 10.3 and Page Page Mac OS X: Page Page Page Linux: Ubuntu 8 (GNOME) Page Page Page Page Linux: openSUSE 10.3 (KDE) Page Page Page Page Page Wireless LAN Topologies Page Channel RTS/CTS Page Fragmentation Threshold Preamble Type IEEE 802.11g Wireless LAN Wireless Security Overview IEEE RADIUS Types of EAP Authentication EAP-TLS(Transport Layer Security) EAP-TTLS(Tunneled Transport Layer Service) PEAP (Protected EAP) LEAP Dynamic WEP Key Exchange WPA and WPA2 Page Wireless Client WPA Supplicants WPA(2) with RADIUS Application Example WPA(2)-PSKApplication Example Security Parameters Summary Antenna Overview Antenna Characteristics Types of Antennas for WLAN Positioning Antennas Pop-upWindows, JavaScripts and Java Permissions Internet Explorer Pop-upBlockers Enable pop-upBlockers with Exceptions Page JavaScripts Page Java Permissions JAVA (Sun) Page Internet Explorer Page Page Page Page Page Installing a Stand-AloneCertificate File in Internet Explorer Removing a Certificate in Internet Explorer Page Page Firefox Installing a Stand-AloneCertificate File in Firefox Page Page Removing a Certificate in Firefox Opera Page Installing a Stand-AloneCertificate File in Opera Page Page Removing a Certificate in Opera Page Konqueror Page Installing a Stand-AloneCertificate File in Konqueror Removing a Certificate in Konqueror Page Introduction to IP Addresses Structure Subnet Masks Network Size Notation Subnetting Example: Four Subnets Page Example: Eight Subnets Subnet Planning Configuring IP Addresses Private IP Addresses Text File Based Auto Configuration Overview Auto Configuration by DHCP Manual Configuration Configuration Via SNMP Configuration File Format Configuration File Rules Wcfg Command Configuration File Examples Wlan Command Configuration File Example Page Page Copyright Certifications FCC Radiation Exposure Statement ZyXEL Limited Warranty Note Registration Index

Related pages Troubleshooting for Eiki LC-WB40N „Specifications for JVC RV-NB20W How to Assemble Your Ceiling Fan for Emerson KF240PRZ00 Frequently asked questions for Miele KM 406 2. INSTALLATION for Cabletron Systems ELS100-8TXUF2 Table A. Mechanical Parts List for Pelco hs2500 ∫Language code list for Panasonic SC-BTT190 4.2.1Error message for Konica Minolta 362 ADJUSTMENT INSTRUCTION for LG Electronics 47LE7300 Safeguards for Toshiba 24AF43 14 Authentication and Auditron Administration for Xerox 604P18057