Zcom ZAC-1023-2-9, User Manual

Page 1: ...P 1 IEEE 802 11b g n Wireless CPE IEEE 802 11a n Wireless CPE User s Manual Model name ZAC 1023 2 9 ZAC 1023 5 13 ZAC 501 ZAC 502 ZWA 3070 ZWA 3080 ZN 7200 2EI ZN 7200 2AEI L V1 0 May 2014 ...

Page 2: ...to guide professional installer to install the IEEE 802 11n ZAC Access Point series and how to build the infrastructure centered on it It includes procedures to assist you in avoiding unforeseen problems Conventions For your attention on important parts special characters and patterns are used in this manual This indicates an important note that you must pay attention to This indicates a warning o...

Page 3: ... the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help Verify that the ambient temperature remains between 0 to 40 C taking into ac...

Page 4: ...ter must not be co located or operating in conjunction with any other antenna or transmitter The availability of some specific channels and or operational frequency bands are country dependent and are firmware programmed at the factory to match the intended destination The firmware setting is not accessible by the end user 根據低功率電波輻射性電機管理辦法 1 經型式認證合格之低功率射頻電機 非經許可 公司 商號或使用者均不得擅自變更 頻率 加大功率或變更原設計之特性及功...

Page 5: ...YOU OR ANY OTHER PARTY FOR ANY DIRECT INDIRECT GENERAL SPECIAL INCIDENTAL CONSEQUENTIAL EXEMPLARY OR OTHER DAMAGE RISING OUT OF THE USE OR INABILITY TO USE THE PRODUCT INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF BUSINESS PROFITS BUSINESS INTERRUPTION LOSS OF BUSINESS INFORMATION OR ANY OTHER PECUNIARY LOSS OR FROM ANY BREACH OF WARRANTY EVEN IF DISTRIBUTOR HAS BEEN ADVISED OF THE POSSIBILITY ...

Page 6: ...before Installation 14 Professional Installation Required 14 Safety Precautions 14 Installation Precautions 15 Product Package 15 Hardware Installation 17 Connect up 17 Using the Grounding Wire 18 Mount the AP on a Pole 19 Power Up 20 Connect to the Access Point 21 Chapter 2 Quick Setup Tutorial 24 Access the Web Configurator 24 Configure the AC Thin AP mode 26 Chapter 3 Navigate the Web Configura...

Page 7: ...otocols 46 Access Control 48 Traffic Shaping 49 Radius Settings 50 TCP IP Settings 51 Captive Portal 52 Firewall Settings 54 Management 57 AP Management 57 System Settings 59 Time Settings 61 Firmware Upgrade 61 Backup Retrieve Settings 62 Restore Factory Default Settings 62 Reboot 63 Password Settings 64 Syslog Setting 64 System Log 65 System Alert 66 Tools 66 Ping 66 Trace Route 67 ...

Page 8: ...le 72 View Bridge Table 72 View Active DHCP Client Table 72 View Network Activities 73 System 74 Basic System Settings 74 TCP IP Settings 75 Time Settings 77 RADIUS Settings 78 Firewall Settings 79 UDP Pass Through 82 DMZ 82 Wireless 83 VAP Profile Settings 85 VLAN 89 Advanced Settings 89 Access Control 92 Traffic Shaping 93 Captive Portal 94 WDS Settings 96 Management 97 ...

Page 9: ...rade Firmware 97 Backup Retrieve Settings 98 Restore Factory Default Settings 98 Reboot 99 Remote Management 99 SNMP Management 100 Certificate Settings 102 Tools 103 System Log 103 Ping Watch Dog 103 Appendix A ASCII 105 ...

Page 10: ... monitoring of all the managed APs on the network In addition the easy to install ZAC Access Point is also a high performance last mile broadband solution that provides reliable wireless network coverage for broadband application Key Features Centralized configuration control for your network Compliant with IEEE 802 11n standard Support passive PoE supplied with 24V High reliable watertight housin...

Page 11: ...P 11 Hardware Overview Front View Back View ...

Page 12: ...e device has the Ethernet connection Off The device has no Ethernet connection Blinking Transmitting receiving Ethernet packets WLAN Green On The WLAN is active Off The WLAN is inactive Blinking Transmitting receiving wireless packets Signal 3 Green 3 LED On The signal strength is excellent 2 LED On The signal strength is good 1 LED On The signal strength is weak ...

Page 13: ...ing figure illustrates a ZAC wireless network When a thin AP mode joins a wired network it will start to look for a ZAC Access Point in AC mode If the thin AP founds the AP controller on the network it will send the registration request to the AP controller Once the registration is successfully made the AP that acts as the AP controller will add the thin AP to its management list and provides it c...

Page 14: ...If you are installing the ZAC Access Point for the first time for your safety as well as others please seek assistance from a professional installer who has received safety training on the hazards involved 3 Keep safety as well as performance in mind when selecting your installation site especially where there are electric power and phone lines 4 When installing the ZAC Access Point please note th...

Page 15: ...T COVERED UNDER WARRNTY 2 Users MUST use the Power cord PoE Injector shipped in the box with the ZAC Access Point Use of other options will likely cause damage to the unit Product Package The product package you have received should contain the following items If any of them are not included or damaged please contact your local vendor for support IEEE 802 11n ZAC Access Point 1 Pole Mounting Ring ...

Page 16: ...sion Core 24VDC Power Cord PoE Injector Users MUST use the Power cord PoE Injector shipped in the box with the IEEE 802 11n Wireless Access Point Use of other options will likely cause damage to the IEEE 802 11n Wireless Access Point Warning ...

Page 17: ...C Access Point is a movable cover Grab the cover and pull it back harder to take it out as the figure shown below 2 Plug a standard Ethernet cable into the RJ45 port 3 Slide the cover back and press down the lock button to seal the bottom of the ZAC Access Point ...

Page 18: ...int cables and PoE Injector must be properly connected to earth ground during normal use against surges or ESD 1 Remove the screw on the grounding point at the bottom of the ZAC Access Point 2 Put the grounding wire on the grounding point at the bottom of the ZAC Access Point Then screw the grounding wire to tighten up ...

Page 19: ...t over Put the pole mounting ring through the middle hole of it Note that you should unlock the pole mounting ring with a screw driver before putting it through the device as the following right picture shows 2 Mount the ZAC Access Point steadily to the pole by locking the pole mounting ring tightly ...

Page 20: ... 20 Power Up 1 Connect power cord to the PoE injector as the following right picture shows 2 Connect the Ethernet cable that connects the Access Point to the POE port of the PoE injector as figured below ...

Page 21: ...ect to the Access Point To be able to configure and manage the Access Point please do the followings 1 Open the ferrite core by unsnapping the connector latches The core will open revealing a concave surface 2 Lay the Ethernet cable into the core usually within 2 to 3 inches of the connector You may have to experiment with the final location depending on the effectiveness of the high frequency aba...

Page 22: ...cumstances with severe interference 4 Close the core and snap the halves back together The ferrite is professionally installed and a shrink wrap has been put around the ferrite so the users CAN T take the ferrite off 5 Connect the Ethernet cable with suppression core to the Data In port of the PoE injector Note ...

Page 23: ...P 23 6 Connect the other end of Ethernet cable to a PC or a switch hub The hardware installation is complete ...

Page 24: ...nterface to easily manage the access point Configure the computer with a static IP address of 192 168 1 x as the default IP address of the ZAC Access Point is 192 168 1 1 X cannot be 0 1 nor 255 Open Web browser and enter the IP address Default 192 168 1 1 of the ZAC Access Point into the address field You will see the login page as below ...

Page 25: ... Default admin and password Default password respectively and click Login to login the main page of the ZAC Access Point The username and password are case sensitive and the password should be no more than 19 characters Note ...

Page 26: ...e as AC Thin AP go to Basic Settings From Device Mode drop down list select Virtual AC mode If you would like the Access Point to perform as a virtual controller and access point concurrently please select Virtual AC Thin AP mode Then assign an IP address to the ZAC Access Point and specify subnet mask gateway and DNS address respectively Hit Apply and wait for about 50 seconds to take effect AC T...

Page 27: ...fter the configuration is made click Save to save the settings A dialog message will pop up to remind you changes will also apply to other managed Thin APs Click Apply to apply the configuration immediately To make profile setting on the ZAC Access Point itself take effect you need to reboot the AP in controller mode as well To reboot the ZAC Access Point go to Management Configuration File and cl...

Page 28: ... the rest of managed Access Points to your network with Ethernet cables Power them up respectively They will automatically discover the ZAC Access Point in controller mode and register themselves To check whether the thin APs are successfully registered or not enter the web page of the ZAC Access Point master access controller and go to Management AP Management You will see Registered in Status co...

Page 29: ... 5 Management Page 29 Moving the mouse over MAC address of each managed AP will also display relevant RF information such as channel mode current channel antenna being used together with transmit output power ...

Page 30: ...C Access Point in controller mode and go to Management AP Management the following screen shows up The ZAC Access Point AP in Virtual AC Thin AP mode on the list is highlighted in bold font By selecting it and hitting Radio button you may check radio setting such as channel bandwidth channel antenna and output power ...

Page 31: ...re upgrade you may choose to upgrade the selected managed AP by hitting Upgrade Selected or do the group upgrade by hitting Upgrade All Before upgrading the managed AP you need to locate the new firmware in the ZAC Access Point Go to Management Firmware Upload browse the firmware file where it is located click Upload and Click OK Then go back to Management AP Management to do single or group updat...

Page 32: ...s as well as packets statistics Configure the Fat AP mode Fat AP mode operates as standalone AP that cannot be managed by the ZAC Access Point To switch from Virtual AC mode to Fat AP mode go to Management System Settings From the Device Mode drop down list select Fat AP and hit YES to make the change take effect To switch from default mode Thin AP to Fat AP mode for the first time configuration g...

Page 33: ...For details please refer to the next Chapter AP Mode 1 Choose Wireless Basic Settings The default is AP mode already Here you can change wireless SSID for your public end user After the configuration is made click Apply to save the parameters In the example here we only change the Wireless Network Name SSID as Join_me Note ...

Page 34: ...ication in your application After the configuration is made click Apply to save the parameters 4 To decrease the chances of data retransmission at long distance the ZAC Access Point can automatically adjust proper ACK timeout value by specifying distance between the nodes By specifying the distance go to Wireless Advanced Setting and fill in the number in the Distance field If the distance is belo...

Page 35: ...d click Apply to save the configuration Besides specifying the SSID manually you may select the preferable Access Point to connect by clicking the Site Survey button beside Wireless Mode Once the button is pressed the wireless client will scan all the available access points within coverage Select the one you prefer to connect and click Select AP to establish the connection ...

Page 36: ...sponding authentication and encryption options and click Apply to save configuration 4 To check whether the association with the Access Point has been successfully made go to Status Connections If the connection is established it will display association information of the Access Point including MAC address wireless mode signal strength and connection time ...

Page 37: ...e uses the WDS protocol that is not defined as the standard thus compatibility issues between equipment from different vendors may arise Moreover Tree or Star shape network topology should be used in all WDS use cases i e if AP2 and AP3 are specified as the WDS peers of AP1 AP2 should not be specified as the WDS peer of AP3 and AP3 should not be specified as the WDS peer of AP2 in any case Mesh an...

Page 38: ...ick Apply to save configuration 5 Use ping to check whether the link between the two bridges is OK 6 To check the wireless connectivity go to Status Connections If the connection is established it will display association information of the remote bridge including MAC address wireless mode signal strength and connection time AP Repeater Mode 1 Go to Wireless Basic Settings Choose AP Repeater from ...

Page 39: ...ement Page 39 To establish point to point bridge connection please follow the procedures described in Bridge mode To connect the wireless client to the AP please follow the procedures described in Wireless Client mode ...

Page 40: ...hich is read only Information includes system information IP settings and wireless network setting Click Refresh at the bottom to have the real time information View Managed APs Open Managed APs in Status to check information of managed AP such as device name MAC address IP address numbers of associated clients and uploaded downloaded packets All is read only Click Refresh at the bottom to update ...

Page 41: ...SSID of the managed APs that are associated with signal strength connection up time and uploaded downloaded packets All is read only Click Refresh at the bottom to update the list View DHCP Client Table Open DHCP Clients in Status as below to check the assigned IP address MAC address and lease time for each DHCP client Click Refresh to update the table ...

Page 42: ...ply on all the other ZAC managed APs Wireless Networks VAP Profiles Settings The IEEE 802 11n ZAC Access Point allows up to 8 virtual SSIDs on a single BSSID and to configure different profile settings such as security and VLAN ID to each SSID To create a virtual AP you may check the Enable box of the profile and click on the profile eg Profile 2 to configure wireless and security settings Hit App...

Page 43: ... transmission By enabling Wireless Separation can prevent the communication among associated wireless clients WMM Support WMM Wi Fi Multimedia is a subset of 802 11e It allows wireless communication to define a priority limit on the basis of data type under AP mode only thus those time sensitive data like video audio data may own a higher priority than common one To enable WMM the wireless client ...

Page 44: ...st To serve the 802 1x at least one EAP type should be supported by the RADIUS Server AP and wireless client WPA with RADIUS Wi Fi Protected Access WPA is a subset of the IEEE 802 11i standard With warrant username password and etc offered by user this kind of authentication can be realized with specific RADIUS server This is the common way to be adopted in large enterprise network WPA2 with RADIU...

Page 45: ...cted the data encryption can only be TKIP AES and the passphrase is required Data Encryption If data encryption is enabled the key is required and only sharing the same key with other wireless devices can the communication be established None Available only when the authentication type is open system 64 bits WEP It is made up of 10 hexadecimal numbers 128 bits WEP It is made up of 26 hexadecimal n...

Page 46: ...includes Bridge and Router When switch to Router mode the LAN IP address for web page access will become 192 168 0 99 Wireless Protocols Allow the user to change 802 11 mode and other advanced parameters for the ZAC Access Point For the country region FCC domain will support United States only ...

Page 47: ...transmit rate for compromise of a long distance by fixing the data rate Advanced Settings A MPDU A MSDU Aggregation The data rate of your AP except wireless client mode could be enhanced greatly with this option enabled however if your wireless clients don t support A MPDU A MSDU aggregation it is not recommended to enable it Short GI Under 802 11n mode enable it to obtain better data rate if ther...

Page 48: ... before data is fragmented into multiple packets Setting it too low may result in poor network performance Leave it at its default of 2346 is recommended Beacon Interval Specify the frequency interval to broadcast packets Enter a value between 20 and 1024 DTIM Interval DTIM which stands for Delivery Traffic Indication Message is contained in the data packets It is for enhancing the wireless transm...

Page 49: ...s selected those wireless clients on the list will not be able to connect the AP MAC Address Enter the MAC address of the wireless client that you would like to list into the access control list click Apply then it will be added into the table at the bottom Delete Selected All Check the box before one or more MAC addresses of wireless client s that you would like to cancel and click Delete Selecte...

Page 50: ...ault value there and then the connection will be bound to the traffic shaping rule at all times You may decrease it to smaller value if the incoming traffic limit is smaller Radius Settings RADIUS Remote Authentication Dial In User Service is a server for remote user authentication and accounting playing a central role in the network in providing the capabilities of authenticating authorizing acco...

Page 51: ...dius Server Shared Secret This secret which is composed of no more than 31 characters is shared by the IEEE 802 11n ZAC Access Point and RADIUS during authentication Global Key Update Check this option and specify the time interval between two global key updates Default is 3600 seconds TCP IP Settings When the Router mode is activated the TCP IP Settings will show up in Wireless Settings for user ...

Page 52: ... 15 44640 minutes for the ZAC managed Access Point For wireless clients who want to access the unit s web page in Router mode please type the IP address here in the browser s address bar to enter the web page Captive Portal Captive portal is a management which allows WLAN users to easily and securely access the Internet Under Router mode when captive portal is enabled the IEEE 802 11n ZAC Access P...

Page 53: ...t Enter the port number for authentication Radius Acct Port Enter the port number for billing Radius Shared Secret Enter the secret key of the radius server Radius NAS ID Enter the name of the radius server if any Radius Administrative User Radius Admin Username Enter the username of the Radius Administrator Radius Admin Password Enter the password of the Radius Administrator Captive Portal UAM Po...

Page 54: ...well as DMZ This is available only under Router Mode Source IP Filtering You may create and activate a rule that filters a packet based on the source IP address from your local network to Internet Check Enable Source IP Filtering to activate rule Local IP Address Enter the IP address you would like to restrict Comment Make comments to record your filtering rule Click Apply and the IP address will ...

Page 55: ...the IP address will be added in the list To delete the IP address from filtering click Select checkbox of the designated destination IP address and click the Delete Selected button You may delete all the IP addresses in the list by clicking Delete All Source Port Filtering You may create and activate a rule that filters a packet based on the source port from your local network to Internet Check En...

Page 56: ...filters a packet based on the destination port from your local network to Internet Check Enable Destination Port Filtering to activate rule Port Range Enter the port range you would like to restrict Protocol Select port protocol Both TCP UDP Comment Make comments to record your filtering rule Click Apply and the IP address will be added in the list To delete the restricted destination ports click ...

Page 57: ...or mail server on the private local network behind IEEE 802 11n Wireless ZAC Access Point s NAT firewall Management The IEEE 802 11n ZAC Access Points can manage up to 20 ZAC managed APs The ZAC Access Point provides thin AP management for editing the ZAC managed AP settings upgrading the firmware and monitoring etc AP Management AP Management allows you to configure and upgrade the ZAC managed AP...

Page 58: ... obtain the IP address from ZAC Access Point in AC mode Default is DHCP client Radio To display the current radio settings such as channel bandwidth operating channel antenna and output power for the selected ZAC managed Access Point From the AP Management list move the mouse cursor to the MAC address of the selected ZAC managed AP the screen will pop up radio configuration information ...

Page 59: ...Mode Three modes are provided AC Thin AP Thin AP FAT AP Select AC Thin AP to have the device act as virtual access controller to manage other ZAC managed APs on your network Select Thin AP to have the ZAC Access Point managed by the ZAC AP in AC mode Select FAT AP to perform as a standalone AP neither managing nor managed by other ZAC APs Device Name Specify the device name which is composed of no...

Page 60: ...1n ZAC Access Pioint is able to obtain IP settings automatically from the DHCP server Use Fixed IP Address Check this option You have to specify a static IP address subnet mask default gateway and DNS server for the ZAC Access Point manually Make sure the specified IP address is unique on your network in order to prevent IP conflict DHCP Server The ZAC Access Point in AC mode can perform a DHCP se...