ZyXEL Communications ZyAIR G-405, User Manual

Page 1: ...ZyAIR G 405 802 11g Wireless Ethernet Adapter User s Guide Version 1 00 April 2004...

Page 2: ...ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products...

Page 3: ...conditions NOTE Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied...

Page 4: ...pliance with the above conditions may not prevent degradation of service in some situations Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by t...

Page 5: ...ipment does cause harmful interference to radio television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or mor...

Page 6: ...ZyAIR G 405 User s Guide vi Information for Canadian Users...

Page 7: ...A sales zyxel com 1 714 632 0858 ftp us zyxel com ZyXEL Communications Inc 1130 N Miller St Anaheim CA 92806 2001 U S A support zyxel de 49 2405 6909 0 www zyxel de GERMANY sales zyxel de 49 2405 6909...

Page 8: ...OCATION SALES E MAIL FAX1 FTP SITE REGULAR MAIL support zyxel se 46 31 744 7700 www zyxel se SWEDEN sales zyxel se 46 31 744 7701 ZyXEL Communications A S Sj porten 4 41764 G teborg Sweden FINLAND sup...

Page 9: ...1 3 Transmission Rate 2 1 2 1 4 Wireless Network Application 2 1 2 1 5 Roaming 2 3 2 1 6 Threshold Controls 2 4 Chapter 3 The ZyAIR Wireless Navigator 3 1 3 1 About the ZyAIR Wireless Navigator 3 1 3...

Page 10: ...1 About Wireless LAN Security 6 1 6 1 1 Data Encryption with WEP 6 2 6 1 2 IEEE 802 1x 6 2 6 1 3 WPA 6 3 6 1 4 WPA PSK Application Example 6 4 6 1 5 WPA with RADIUS Application Example 6 4 6 2 Activa...

Page 11: ...Starting the ZyAIR Navigator 8 1 8 2 Problems Communicating With Other Computers APs 8 1 8 3 Problem with the Link Status 8 2 Appendix A Setting up Your Computer s IP Address A Appendix B IP Subnettin...

Page 12: ......

Page 13: ...4 Figure 6 1 Wireless LAN Security Levels 6 1 Figure 6 2 WPA PSK Authentication 6 4 Figure 6 3 WPA with RADIUS Application Example 6 5 Figure 6 4 Web Configurator Security 6 6 Figure 6 5 Security Set...

Page 14: ...ZyAIR G 405 User s Guide xiv Preface Figure 7 7 Web Configurator Administration Firmware Upgrade 7 6 Figure 7 8 Web Configurator Firmware Upgrade 7 6 Figure 7 9 Firmware Upgrade Progress 7 7...

Page 15: ...6 3 Security Set Security Settings IEEE802 1x MD5 6 9 Table 6 4 Security Set Security Settings IEEE802 1x TLS 6 11 Table 6 5 Security Set Security Settings IEEE802 1x TTLS 6 13 Table 6 6 Security Set...

Page 16: ...con then point your mouse pointer to Control Panels and then click Modem Window and command choices are in Bold Times New Roman font Predefined field choices are in Bold Arial font The ZyXEL ZyAIR G 4...

Page 17: ...er LAN and WLAN status Driver free installation Wireless LAN Your ZyAIR can communicate with other IEEE 802 11b g compliant wireless devices Automatic rate selection Roaming Ethernet A built in RJ 45...

Page 18: ...yAIR G 405 User s Guide 1 2 Getting Started 1 2 ZyAIR Hardware and Navigator Installation Follow the instructions in the Quick Installation Guide to make hardware connections and install the Navigator...

Page 19: ...etween 6 or 11 2 1 2 SSID The SSID Service Set Identity is a unique name shared among all wireless devices in a wireless network Wireless devices must have the same SSID to communicate with each other...

Page 20: ...s clients in ad hoc network type and use the same SSID and channel Infrastructure When a number of wireless clients are connected using a single AP you have a Basic Service Set BSS Figure 2 2 BSS Exam...

Page 21: ...nterrupted connection to the network This is roaming As the wireless station moves from place to place it is responsible for choosing the most appropriate AP depending on the signal strength network u...

Page 22: ...AP or wireless gateway but out of range of each other so they cannot hear each other that is they do not know if the channel is currently being used Therefore they are considered hidden from each othe...

Page 23: ...Threshold if the possibility of hidden nodes exists on your network and the cost of resending large frames is more than the extra network overhead involved in the RTS Request To Send CTS Clear to Sen...

Page 24: ......

Page 25: ...he ZyAIR Wireless Navigator Installing the Navigator on any computer on the network allows you to access and configure the ZyAIR without connecting the computer directly to the ZyAIR 3 2 The Navigator...

Page 26: ...displays the IP address of the wireless device ESS ID This field displays the Channel No This field displays the channel number the wireless device is using WEP This field displays whether WEP encryp...

Page 27: ...a block of registered IP addresses follow their instructions in selecting the IP addresses and the subnet mask If the ISP did not explicitly give you an IP network number then most likely you have a...

Page 28: ...rk If you belong to a small organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a m...

Page 29: ...save the settings Exit Click Exit to discard all changes and close this screen If you change the ZyAIR s IP address you must use the new IP address if you want to access the web configurator again 3 7...

Page 30: ...AIR G 405 User s Guide 3 6 The ZyAIR Wireless Navigator Step 3 When prompted click OK to remove the Navigator Figure 3 6 Confirm Uninstallation Step 4 Click Finish and restart the computer when prompt...

Page 31: ...mmended that you set your screen resolution to 1024 by 768 pixels You can access the web configurator using the Navigator see Section 3 4 or directly in a web browser 4 2 Accessing the ZyAIR Web Confi...

Page 32: ...he current configuration and restore factory defaults in three ways Use the RESET button on the ZyAIR to reset to the factory defaults Use this method for cases when the password or IP address of the...

Page 33: ...4 5 Change Your Password After you log in for the first time it is recommended you change the default administrator password Click Admin in the navigation panel and scroll down to the Password and Re...

Page 34: ...3 Web Configurator Change Administrator Login Password 4 6 The Information Screen The Information screen displays every time you access the web configurator This screen shows the current configuratio...

Page 35: ...this screen Table 4 1 Web Configurator Information LABEL DESCRIPTION Link Information Current SSID This field displays the name of the wireless device to which the ZyAIR is associated Transmission Rat...

Page 36: ...eless LAN adapter in your computer IP Address This field displays the IP address of the ZyAIR Subnet Mask This field displays the subnet mask Gateway This field displays IP address of the gateway devi...

Page 37: ...ice BSSID This field displays the MAC address of the wireless device Channel This field displays the channel number used by each wireless device Strength This field displays the signal strength of eac...

Page 38: ......

Page 39: ...p screen 5 1 Overview The Setup screen allows you to configure basic wireless LAN and MAC address cloning settings Click the Setup tab in the navigation panel to display the screen as shown 5 1 1 Basi...

Page 40: ...ZyAIR G 405 User s Guide 5 2 Basic Wireless LAN Setup Figure 5 1 Web Configurator Setup Basic Wireless...

Page 41: ...peer computer Transmission Rate Mbps Select a transmission speed from the drop down list box Choose from Auto default 1Mbps 2Mbps 5 5Mbps 6Mbps 9Mbps 11Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps and 54M...

Page 42: ...ZyAIR G 405 User s Guide 5 4 Basic Wireless LAN Setup Figure 5 2 Web Configurator Setup MAC Clone...

Page 43: ...therwise select Disable Auto Select this option to set the ZyAIR to automatically clone or copy the MAC address of the Ethernet device connected to the LAN port Manual Select this option to manually e...

Page 44: ......

Page 45: ...l is used for authentication and utilizes dynamic WEP key exchange It requires interaction with a RADIUS Remote Authentication Dial In User Service server either on the WAN or your LAN to provide auth...

Page 46: ...an be done using an external RADIUS server EAP Authentication EAP Extensible Authentication Protocol is an authentication protocol that runs on top of the IEEE802 1x transport mechanism in order to su...

Page 47: ...an extended initialization vector IV with sequencing rules and a re keying mechanism TKIP regularly changes and rotates the encryption keys so that the same encryption key is never used twice The RAD...

Page 48: ...o encrypt data exchanged between them Figure 6 2 WPA PSK Authentication 6 1 5 WPA with RADIUS Application Example You need the IP address of the RADIUS server its port number default is 1812 and the R...

Page 49: ...unicated between the AP and the wireless clients Figure 6 3 WPA with RADIUS Application Example 6 2 Activate Deactivate Wireless LAN Security Refer to Section 6 1 for more information on WEP data encr...

Page 50: ...figuration screen displays as shown A configuration screen displays OK Click OK to save the changes Cancel Click Cancel to discard all the changes 6 3 Configuring WEP Encryption Keys The WEP keys are...

Page 51: ...as the access point wireless station s WEP Encryption Select either 64bit WEP or 128bit WEP from the drop down list box and set the related fields Passphrase To automatically generate the WEP keys bas...

Page 52: ...ys must be set up exactly the same on all wireless devices in the same wireless LAN ASCII WEP key is case sensitive Apply Click Apply to save the changes 6 4 Configuring IEEE802 1x The following secti...

Page 53: ...MD5 LABEL DESCRIPTION Security Mode Select 802 1x from the drop down list box EAP Type Select MD5 as the EAP type Cipher Type This read only field shows whether dynamic WEP key exchange is activated...

Page 54: ...Re Authenticate to gain access to the wireless wired network View Log Click View Log to see the log screen 6 4 2 IEEE802 1x with TLS You must first have a wired connection to a network and obtain the...

Page 55: ...P Type Select TLS as the EAP type Cipher Type This read only field shows whether dynamic WEP key exchange is activated When you select MD5 in the EAP Type field this field displays None When you selec...

Page 56: ...enticate to gain access to the wireless wired network View Log Click View Log to see the log screen 6 4 3 IEEE802 1x with TTLS You must first have a wired connection to a network and obtain the certif...

Page 57: ...pe Cipher Type This read only field shows whether dynamic WEP key exchange is activated When you select MD5 in the EAP Type field this field displays None When you select TLS or TTLS in the EAP Type f...

Page 58: ...ecurity with various authentication methods To set the IEEE802 1x WLAN security select WPA in the Security Mode field in the Security configuration screen 6 5 1 WPA with TLS You must first have a wire...

Page 59: ...drop down list box EAP Type Select TTLS as the EAP type WPA Algorithm WPA and WPA PSK use the same Temporal Key Integrity Protocol TKIP authentication algorithm Refer to the User Authentication secti...

Page 60: ...icate to gain access to the wireless wired network View Log Click View Log to see the log screen 6 5 2 WPA with TTLS You must first connect to the wired network using an Ethernet cable and obtain the...

Page 61: ...AP type WPA Algorithm WPA and WPA PSK use the same Temporal Key Integrity Protocol TKIP authentication algorithm Refer to the User Authentication section for more information User ID Enter a user name...

Page 62: ...PSK Follow the steps below to configure WPA PSK security on the ZyAIR Select WPA PSK in the Security Mode field in the Security configuration screen A screen displays as shown Figure 6 11 Security Set...

Page 63: ...e wireless wired network View Log Click View Log to see the log screen 6 6 The Log Table Screen The Log Table screen displays the system logs This log screen is only available when you select 802 1x W...

Page 64: ......

Page 65: ...tem settings and firmware upgrade using the Administration screen 7 1 Introduction The Administration screen allows you to configure general system settings such as the device name and the login passw...

Page 66: ...ZyAIR G 405 User s Guide 7 2 System Management and Maintenance Figure 7 1 Web Configurator Administration Refer to the following sections to configure this screen...

Page 67: ...n click Save Figure 7 2 Web Configurator Administration Adapter Name 7 3 IP Settings Refer to Section 3 6 for background information and LAN port default settings To configure the LAN port on the ZyAI...

Page 68: ...k in dotted decimal notation Gateway Enter the IP address of the gateway device in dotted decimal notation OK Click OK to save the settings Cancel Click Cancel to discard all changes If you change the...

Page 69: ...tion All your custom configuration will be erased Follow the steps below to reset your ZyAIR Step 1 In the Administration screen and scroll down to Password and Reset Figure 7 5 Web Configurator Admin...

Page 70: ...cess is complete the ZyAIR will automatically restart Follow the steps below to upgrade the firmware on the ZyAIR Step 1 In the Administration screen click Upgrade Figure 7 7 Web Configurator Administ...

Page 71: ...ZyAIR G 405 User s Guide System Management and Maintenance 7 7 Figure 7 9 Firmware Upgrade Progress Wait for the ZyAIR to finish rebooting before accessing the web configurator again...

Page 72: ......

Page 73: ...are problem In this case you should contact your local vendor 8 2 Problems Communicating With Other Computers APs Table 8 2 Troubleshooting Communication Problem PROBLEM CORRECTIVE ACTION Make sure yo...

Page 74: ...t the IP address of the ZyAIR in the Admin screen 8 3 Problem with the Link Status Table 8 3 Troubleshooting Link Quality PROBLEM CORRECTIVE ACTION Search and connect to another AP with a better link...

Page 75: ...s using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configure the TCP IP settings in order to communicate with your network If y...

Page 76: ...t for Microsoft Networks a Click Add b Select Client and then click Add c Select Microsoft from the list of manufacturers d Select Client for Microsoft Networks from the list of network clients and th...

Page 77: ...select Disable DNS If you know your DNS information select Enable DNS and type the information in the fields below you may not need to fill them all in 3 Click the Gateway tab If you do not know your...

Page 78: ...Click Start and then Run 2 In the Run window type winipcfg and then click OK to open the IP Configuration window 3 Select your network adapter You should see your computer s IP address subnet mask and...

Page 79: ...ZyAIR G 405 User s Guide Setting Up Your Computer s IP Address E 4 Select Internet Protocol TCP IP under the General tab in Win XP and click Properties...

Page 80: ...more of the following if you want to configure additional IP addresses In the IP Settings tab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet...

Page 81: ...DNS server fields If you have previously configured DNS servers click Advanced and then the DNS tab to order them 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Click OK to close...

Page 82: ...er s Guide H Setting Up Your Computer s IP Address Macintosh OS 8 9 1 Click the Apple menu Control Panel and double click TCP IP to open the TCP IP Control Panel 2 Select Ethernet built in from the Co...

Page 83: ...dress of your ZyAIR in the Router address box 5 Close the TCP IP Control Panel 6 Click Save if prompted to save changes to your configuration 7 Turn on your ZyAIR and restart your computer if prompted...

Page 84: ...following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your ZyAIR in the Router address box 5...

Page 85: ...ning octets make up the host ID Class C addresses begin starting from the left with 1 1 0 In a class C address the first three octets make up the network number and the last octet is the host ID Class...

Page 86: ...onding bit in the IP address is part of the network number If a bit in the subnet mask is 0 then the corresponding bit in the IP address is part of the host ID Subnet masks are expressed in dotted dec...

Page 87: ...252 30 1111 1100 The first mask shown is the class C natural mask Normally if no mask is specified it is understood that the natural mask is being used Example Two Subnets As an example you have a cl...

Page 88: ...1111111 11111111 11111111 10000000 Subnet Address 192 168 1 128 Lowest Host ID 192 168 1 129 Broadcast Address 192 168 1 255 Highest Host ID 192 168 1 254 The remaining 7 bits determine the number of...

Page 89: ...ddress 192 168 1 0 Lowest Host ID 192 168 1 1 Broadcast Address 192 168 1 63 Highest Host ID 192 168 1 62 Chart 8 8 Subnet 2 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 64 IP Address Bina...

Page 90: ...rly use a 27 bit mask to create 8 subnets 001 010 011 100 101 110 The following table shows class C IP address last octet values for each subnet Chart 8 11 Eight Subnets SUBNET SUBNET ADDRESS FIRST AD...

Page 91: ...er and which are part of the host ID A class B address has two host ID octets available for subnetting and a class A address has three host ID octets see Chart 8 1 available for subnetting The followi...

Page 92: ...t 8 13 Class B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 11 255 255 255 224 27 2048 30 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 8192 6 14 255 255 255...

Page 93: ...r mutual authentication The server presents a certificate to the client After validating the identity of the server the client sends a different certificate to the server The exchange of certificates...

Page 94: ...ctical The following table is a comparison of the features of five authentication types Chart 14 Comparison of EAP Authentication Types EAP MD5 EAP TLS EAP TTLS PEAP LEAP Mutual Authentication No Yes...

Page 95: ...s North America IEEE 802 11b 13 Channels Europe IEEE 802 11g 13 Channels Europe Data Rate IEEE 802 11b 11 5 5 2 1 Mbps IEEE 802 11g 54 48 36 24 18 12 9 6 Mbps Modulation IEEE 802 11g Orthogonal Freque...

Page 96: ...Specifications Storage Temperature 20 70 degrees Centigrade Operating Humidity 10 80 non condensing Storage Humidity 5 90 non condensing Power Supply Switching DC 5V 2A Weight 80g Dimension 104 x 127...

Page 97: ...ight ii Disclaimer ii Trademarks ii Create WEP key with passphrase 6 7 Crosstalk 2 1 CTS Clear to Send 2 4 2 5 Customer Support vii D Data encryption 6 2 Default Ethernet settings 3 3 Default IP addre...

Page 98: ...essage Integrity Check 6 3 MIC See Message Integrity Check N Navigator About 3 5 Connecting to the ZyAIR 3 2 Device Search 3 2 Ethernet Configuration 3 4 Main Screen 3 1 Removing Devices 3 3 Search fo...

Page 99: ...User Authentication 6 3 Using the ZyAIR Navigator 2 1 W Warranty iii Note iii Web Configurator Accesing 4 1 Default login password 4 1 Ethernet Settings 7 3 Firmware Upgrade 7 6 Navigating 4 2 Overvi...