ZComax ZAC-1023-2, User Manual

Page 1: ...IEEE 802 11b g n Wireless CPE IEEE 802 11a n Wireless CPE User s Manual Model name ZAC 1023 2 ZAC 1023 5 ZAC 503 ZAC 504 ZWA 3090 ZWA 3100 ZN 7200 2EI O ZN 7200 2AEI O V1 0 May 2014 ...

Page 2: ...o guide professional installer to install the IEEE 802 11n Wireless Access Point and how to build the infrastructure centered on it It includes procedures to assist you in avoiding unforeseen problems Conventions For your attention on important parts special characters and patterns are used in this manual This indicates an important note that you must pay attention to This indicates a warning or c...

Page 3: ...eorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help Verify that the ambient temperature remains between 0 to 40 C taking into account the elevated temperatures when installed in a ...

Page 4: ...r must not be co located or operating in conjunction with any other antenna or transmitter The availability of some specific channels and or operational frequency bands are country dependent and are firmware programmed at the factory to match the intended destination The firmware setting is not accessible by the end user 根據低功率電波輻射性電機管理辦法 1 經型式認證合格之低功率射頻電機 非經許可 公司 商號或使用者均不得擅自變更 頻率 加大功率或變更原設計之特性及功能 ...

Page 5: ...U OR ANY OTHER PARTY FOR ANY DIRECT INDIRECT GENERAL SPECIAL INCIDENTAL CONSEQUENTIAL EXEMPLARY OR OTHER DAMAGE RISING OUT OF THE USE OR INABILITY TO USE THE PRODUCT INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF BUSINESS PROFITS BUSINESS INTERRUPTION LOSS OF BUSINESS INFORMATION OR ANY OTHER PECUNIARY LOSS OR FROM ANY BREACH OF WARRANTY EVEN IF DISTRIBUTOR HAS BEEN ADVISED OF THE POSSIBILITY OF...

Page 6: ...s 15 Installation Precautions 16 Product Package 16 Hardware Installation 18 Connect up 18 Using the Grounding Wire 19 Install External Antennas 19 Mount the AP on a Pole 22 Power Up 23 Connect to the Access Point 24 Chapter 3 Basic Settings 27 Factory Default Settings 27 System Requirements 28 How to Login the Web based Interface 28 Basic System Settings 30 Network Settings 30 Time Settings 33 RA...

Page 7: ...ccess Control 48 WDS Settings 49 Chapter 5 Management 51 Password 51 Upgrade Firmware 51 Backup Retrieve Settings 52 Restore Factory Default Settings 53 Reboot 53 User Certificate 54 Remote Management 55 SNMP Management 55 Chapter 6 Monitoring Tools 58 System Log 58 Ping Watch Dog 58 Chapter 7 Status 60 View Basic Information 60 View Association List 60 View Network Flow Statistics 61 View ARP Tab...

Page 8: ...View Bridge Table 63 View Routing Table 63 View Active DHCP Client Table 63 Chapter 8 Troubleshooting 65 Appendix A ASCII 67 ...

Page 9: ...37 Figure 12 DMZ 37 Figure 13 Basic Wireless Settings 38 Figure 14 Site Survey 41 Figure 15 VAP Profile Settings 41 Figure 16 VAP Profile Settings 42 Figure 17 Advanced Wireless Settings 44 Figure 18 Traffic Shaping 46 Figure 19 Security Settings 46 Figure 20 Access Control 49 Figure 21 WDS Settings 50 Figure 22 Password Settings 51 Figure 23 Firmware Upgrade 52 Figure 24 Backup Retrieve Settings ...

Page 10: ... Watchdog 59 Figure 32 Basic Information 60 Figure 33 Connection 61 Figure 34 Network Flow Statistics 62 Figure 35 ARP Table 62 Figure 36 Bridge Table 63 Figure 37 Routing Table 63 Figure 38 DHCP Client Table 64 Figure 57 MAC Address 65 ...

Page 11: ...TABLE Table 1 IEEE 802 11n Wireless Access Point Factory Default Settings 27 Table 2 ACSII 67 ...

Page 12: ...ess Access Point can be used as the access point the customer premises equipment CPE the WDS and the AP Repeater While being as the access point it can be deployed to provide wireless internet service In the other way to be as the CPE it can receive wireless signal over the last mile helping WISPs deliver internet service to the new residential and the business customer where wired broadband inter...

Page 13: ...EE 802 11n standard Support passive PoE which is supplied with 24V High reliable watertight housing endures almost any harsh environments Support 64 128 152 bit WEP and 802 1X WPA WPA2 WPA WPA2 WPA PSK WPA2 PSK and WPA PSK WPA2 PSK etc User friendly Web and SNMP based management interface ...

Page 14: ...you are installing IEEE 802 11n Wireless Access Point for the first time for your safety as well as others please seek assistance from a professional installer who has received safety training on the hazards involved 3 Keep safety as well as performance in mind when selecting your installation site especially where there are electric power and phone lines 4 When installing IEEE 802 11n Wireless Ac...

Page 15: ... IEEE 802 11n Wireless Access Point 3 Users MUST power off the ZAC Access Point first before connecting the external antenna to it Do not switch from built in antenna to the external antenna from WEB management without physically attaching the external antenna onto the unit otherwise damage might be caused to the ZAC Access Point itself Product Package The product package you have received should ...

Page 16: ...ion Core 24VDC Power Cord PoE Injector Users MUST use the Power cord PoE Injector shipped in the box with the IEEE 802 11n Wireless Access Point Use of other options will likely cause damage to the IEEE 802 11n Wireless Access Point Warning ...

Page 17: ... Access Point is a movable cover Grab the cover and pull it back harder to take it out as the figure shown below 2 Plug a standard Ethernet cable into the RJ45 port 3 Slide the cover back and press down the lock button to seal the bottom of the Access Point ...

Page 18: ... or ESD 1 Remove the screw on the grounding point at the bottom of the Access Point 2 Put the grounding wire on the grounding point at the bottom of the Access Point Then screw the grounding wire to tighten up Install External Antennas The Access Point provides two reverse SMA antenna connectors for connecting external antennas 1 Connect external antennas that came with the package to the SMA type...

Page 19: ...wise damage might be caused to the unit itself 2 Bend the antennas to 90 degree or 45 degree 3 You may turn one antenna 45 degrees to the left and the other 45 degrees to the right The tilted antennas are a reasonable way to operate and the best way if the antennas are fairly close together since they couple together much less than if they are both pointed in the same direction parallel Warning ...

Page 20: ...using identical polarization 4 Tighten up the connector joint clockwise to fix the antennas 5 To adjust antennas loose the connector joint counterclockwise first then adjust antenna to the desired position DO NOT bend or turn the antennas without loosening the connector joint otherwise damage might be caused to the antennas Note ...

Page 21: ...he AP on a Pole 1 Turn the Access Point over Put the pole mounting ring through the middle hole of it Note that you should unlock the pole mounting ring with a screw driver before putting it through the device as the following right picture shows ...

Page 22: ...unt the Access Point steadily to the pole by locking the pole mounting ring tightly Power Up 1 Connect power cord to the PoE injector as the following right picture shows P S This device is for indoor use only ...

Page 23: ...onnect to the Access Point To be able to configure and manage the Access Point please do the followings 1 Open the ferrite core by unsnapping the connector latches The core will open revealing a concave surface 2 Lay the Ethernet cable into the core usually within 2 to 3 inches of the connector You may have to experiment with the final location depending on the effectiveness of the high frequency ...

Page 24: ...the core in place and may be required in circumstances with severe interference 4 Close the core and snap the halves back together The ferrite is professionally installed and a shrink wrap has been put around the ferrite so the users CAN T take the ferrite off Note ...

Page 25: ...ith suppression core to the Data In port of the PoE injector 6 Connect the other end of Ethernet cable to a PC or a switch hub The hardware installation is complete To configure the Access Point please refer to Chapter 3 Basic Settings ...

Page 26: ...Default Settings Username admin Password password Wireless Device Name apXXXXXX X represents the last 6 digits of Ethernet MAC address Operating Mode AP Data Rate Auto LAN IP Address 192 168 1 1 Subnet Mask 255 255 255 0 Gateway 0 0 0 0 Primary DNS Server 0 0 0 0 Secondary DNS Server 0 0 0 0 Spanning Tree Enable Data Rate Auto Output Power Full WMM Enabled RTS Threshold byte 2346 Fragmentation Len...

Page 27: ...int is 192 168 1 1 X cannot be 0 1 nor 255 A Web browser on PC for configuration such as Microsoft Internet Explorer 6 0 or above Netscape Firefox or Google Chrome How to Login the Web based Interface The IEEE 802 11n Wireless Access Point provides you with user friendly Web based management tool Open Web browser and enter the IP address Default 192 168 1 1 of IEEE 802 11n Wireless Access Point in...

Page 28: ...n page of IEEE 802 11n Wireless Access Point As you can see this management interface provides five main options in the black bar above which are Status System Wireless Management and Tools Figure 4 Main Page The username and password are case sensitive and the password should be no more than 19 characters Note ...

Page 29: ...Basic System Settings Device Name Specify the device name which is composed of no more than 15 characters with 0 9 A Z a z or Country Region For FCC domain default country is United States only Network Settings The Network Settings allows you to change network IP address and configure few network parameters like spanning tree and management VLAN ID Make configuration in Network Settings from Syste...

Page 30: ...tive path at a time between the Access Points but establish the redundant link as a backup if the initial link fails STP Forward Delay STP Forward Delay is the time spent in detecting and learning network tree topology state before entering the forward state Default time value is 1 sec 802 1Q VLAN To allow users on the VLAN to access the WEB page of the IEEE 802 11n Wireless Access Point you need ...

Page 31: ... the client computer by running the nbtstat r command before using the device name of the Access Point to access its Web Management page In case the IEEE 802 11n Wireless Access Point is unable to obtain an IP address from a valid DHCP server it will fall back to default static IP address Use Fixed IP Address Check this option You have to specify a static IP address subnet mask default gateway and...

Page 32: ...ith another wireless device before it is set to Router mode To access the unit in Router mode via wired port please type the WAN IP address to enter the web page for WAN is on wired port and LAN is on wireless port Or you can access device through the wireless device connected with the Access Point In wireless client mode users can access the Access Point via its wired port for WAN is on wireless ...

Page 33: ...lable time server Hit Apply to save settings RADIUS Settings RADIUS Remote Authentication Dial In User Service is a server for remote user authentication and accounting playing a central role in the network in providing the capabilities of authenticating authorizing accounting auditing alarming and etc It allows an organization to maintain user profiles in a central database that all remote server...

Page 34: ...he time interval between two global key updates Firewall Filtering The firewall is a system or group of systems that enforce an access control policy between two networks It may also be defined as a mechanism used to protect a trusted network from an un trusted network IEEE 802 11n Wireless Access Point has capabilities of Source IP Filtering Destination IP Filtering Source Port Filtering Destinat...

Page 35: ...N according to specified IP addresses Source Port Filtering The source port filtering enable you to restrict certain ports of data packets from your local network to Internet through IEEE 802 11n Wireless Access Point Use of such filters can be helpful in securing or restricting your local network Destination Port Filtering The destination port filtering enables you to restrict certain ports of da...

Page 36: ... provide Internet services without sacrificing unauthorized access to its local private network Typically the DMZ host contains devices accessible to the Internet traffic such as Web HTTP servers FTP servers SMTP e mail servers and DNS servers To enable it tick the Enable DMZ checkbox Figure 12 DMZ Enable DMZ DMZ Host IP Address Type the IP address of the device you want to place under DMZ ...

Page 37: ...vailable in IEEE 802 11n Wireless Access Point AP The IEEE 802 11n Wireless Access Point establishes a wireless coverage and receives connectivity from other wireless devices Wireless Client The IEEE 802 11n Wireless Access Point is able to connect to the AP and thus join the wireless network around it Bridge The IEEE 802 11n Wireless Access Point establishes wireless connectivity with other APs b...

Page 38: ...11n Channel Mode Four levels are available 5MHz 10MHz 20MHz and 40MHz The last one can enhance data throughput but it takes more bandwidth thus it might cause potential interference Channel Channel varies much as the available band differs from country to country Select a proper operating channel in the drop down list according to your situation Extension Channel Only applicable to AP AP Repeater ...

Page 39: ...eater accordingly Enable MAC Clone Available only under wireless client mode it hides the MAC address of the AP while displays the one of the device connected to the Access Point Default is Auto MAC Clone User may choose to enter the MAC address to be cloned manually Site Survey Under wireless client mode the IEEE 802 11n Wireless Access Point is able to perform site survey through which informati...

Page 40: ...ual SSIDs on a single BSSID and to configure different profile settings such as security and VLAN ID to each SSID To create a virtual AP you may check the Enabled box of the profile and click on the profile eg Profile 2 to configure wireless and security settings Hit Apply to active the profile Figure 15 VAP Profile Settings ...

Page 41: ...ration is an ideal way to enhance the security of network transmission Under the mode except wireless client mode enable Wireless Separation can prevent the communication among associated wireless clients WMM Support WMM Wi Fi Multimedia is a subset of 802 11e It allows wireless communication to define a priority limit on the basis of data type under AP mode only thus those time sensitive data lik...

Page 42: ...g IGMP snooping the AP will listen to IGMP membership reports queries and leave messages to identify the ports that are members of multicast groups Multicast traffic will only be forwarded to ports identified as members of the specific multicast group or groups Security Setting To prevent unauthorized radios from accessing data transmitting over the connectivity the IEEE802 11n Wireless Access Poi...

Page 43: ...A MPDU A MSDU aggregation it is not recommended to enable it Short GI Under 802 11n mode enable it to obtain better data rate if there is no negative compatibility issue RTS Threshold The IEEE 802 11n Wireless Access Point sends RTS Request to Send frames to certain receiving station and negotiates the sending of a data frame After receiving an RTS that STA responds with a CTS Clear to Send frame ...

Page 44: ...ich stands for Delivery Traffic Indication Message is contained in the data packets It is for enhancing the wireless transmission efficiency The default is set to 1 Enter a value between 1 and 255 Preamble Type It defines some details on the 802 11 physical layer Long and Auto are available Distance To decrease the chances of data retransmission at long distance the IEEE 802 11n Wireless Access Po...

Page 45: ...t within a given unit of time The suggested value is 20KBytes You may just leave the default value there and then the connection will be bound to the traffic shaping rule at all times You may decrease it to smaller value if the incoming traffic limit is smaller Wireless Security Settings To prevent unauthorized radios from accessing data transmitting over the connectivity the IEEE 802 11n Wireless...

Page 46: ...his kind of authentication can be realized with specific RADIUS server This is the common way to be adopted in large enterprise network WPA2 with RADIUS Available in AP Wireless Client mode as a new version of WPA only all the clients support WPA2 can it be available If it is selected AES encryption and RADIUS server is required It is only available in AP Wireless Client mode WPA WPA2 with RADIUS ...

Page 47: ...rotocol which is a kind of dynamic encryption is co used with WPA PSK etc AES Advanced Encryption Standard it is usually co used with WPA2 PSK WPA WPA2 etc TKIP AES It allows for backwards compatibility with devices using TKIP We strongly recommend you enable wireless security on your network Only setting the same Authentication Data Encryption and Key in the IEEE 802 11n Wireless Access Point and...

Page 48: ...you would like to list into the access control list click Apply then it will be added into the table at the bottom Delete Clear Check the box before one or more MAC addresses of wireless client s that you would like to cancel and click Delete or Clear to cancel that access control rule WDS Settings Bridge mode extends the range of your network without having to use cables to link the Access Points...

Page 49: ... defined as the standard thus compatibility issues between equipment from different vendors may arise Moreover Tree or Star shape network topology should be used in all WDS use cases i e if AP2 and AP3 are specified as the WDS peers of AP1 AP2 should not be specified as the WDS peer of AP3 and AP3 should not be specified as the WDS peer of AP2 in any case Mesh and Ring network topologies are not s...

Page 50: ...t Password Enter the current password New Password Enter the new password Confirm Password Enter the new password again for confirmation The password is case sensitive and its length cannot exceed 19 characters Upgrade Firmware Open Firmware Upload in Management and follow the steps below to upgrade firmware locally or remotely through IEEE 802 11n VAC Access Point s Web Note ...

Page 51: ...crash Backup Retrieve Settings It is strongly recommended you back up configuration information in case of something unexpected If tragedy hits your device you may have an access to restore the important files by the backup All these can be done by the local or remote computer Open Configuration File in Management as below Figure 24 Backup Retrieve Settings Save Setting to File By clicking Save a ...

Page 52: ...king Reset will eliminate all current settings and reboot your device then default settings are applied Figure 25 Restore to Default Settings Restore factory default settings via Reset Button If software in IEEE 802 11n VAC Access Point is unexpectedly crashed and no longer reset the unit via Web you may do hardware reset via the reset button Press and hold the button for at least 5 seconds and th...

Page 53: ...rust The Server can trust all certificates issued by a given CA To import a user certificate from Import User Certificates click Browse and specify the location where the user certificate is placed Click Import Figure 27 Reboot Delete User Certificate Delete the selected user certificate Import User Certificates Imported the user certificate ...

Page 54: ...nd exclusive WISE tool making configuration more convenient and secure Figure 28 Remote Management SNMP Management The IEEE 802 11n VAC Access Point supports SNMP for convenient remote management Open SNMP Settings in Management shown below Set the SNMP parameters and obtain MIB file before remote management Figure 29 SNMP Management ...

Page 55: ...password sent with each trap to the manager By default it is set to public and allows all requests Configure SNMPv3 User Profile For SNMP protocol version 3 you can click Configure SNMPv3 User Profile in blue to set the details of SNMPv3 user Check Enable SNMPv3 Admin User in advance and make further configuration User Name Specify a user name for the SNMPv3 administrator or user Only the SNMP com...

Page 56: ...Protocol Specify the encryption method for SNMP communication None and DES are available None means no encryption is applied DES is a Data Encryption Standard that applies a 58 bit key to each 64 bit block of data ...

Page 57: ...nd etc Open System Log in Tools as below Figure 30 Syslog Remote Syslog Server Enable System log to alert remote server IP Address Specify the IP address of the remote server Port Specify the port number of the remote server Ping Watch Dog If you mess your connection up and cut off your ability the log in to the unit the ping watchdog has a chance to reboot due to loss of connectivity ...

Page 58: ...he remote unit to ping Ping Interval Specify the interval time to ping the remote unit Startup Delay Specify the startup delay time to prevent reboot before the IEEE 802 11n VAC Access Point is fully initialized Failure Count To Reboot If the ping timeout packets reached the value the IEEE 802 11n VAC Access Point will reboot automatically ...

Page 59: ...tings wireless setting and interface status Click Refresh at the bottom to have the real time information Figure 32 Basic Information View Association List Open Connections in Status to check the information of associated wireless devices such as MAC address signal strength connection time IP address etc All is read only Click Refresh at the bottom to update the current association list ...

Page 60: ...g device name connection time signal strength noise floor ACK timeout link quality IP information current data rate current TX RX packets View Network Flow Statistics Open Statistics in Status to check the data packets received on and transmitted from the wireless and Ethernet ports Click Refresh to view current statistics ...

Page 61: ...e refresh time interval in the box beside Poll Interval and click Set Interval to save settings Stop helps to stop the auto refresh of network flow statistics View ARP Table Open ARP Table in Status as below Click Refresh to view current table Figure 35 ARP Table ...

Page 62: ...Table View Routing Table Available in Router mode the routing table shows the current route information Figure 37 Routing Table View Active DHCP Client Table Available in Router mode the DHCP allows to check the assigned IP address MAC address and time expired for each DHCP leased client Click Refresh to view current table ...

Page 63: ...64 Figure 38 DHCP Client Table ...

Page 64: ...11n Wireless Access Point Web based management interface you can view the MAC Address from View Basic Information Q 2 What if I would like to reset the unit to default settings You may restore factory default settings in Configuration File from Management Q 3 What if I would like to backup and retrieve my configuration settings You may do the backup by generating a configuration file or retrieve t...

Page 65: ...ess Point comes with a built in directional antenna it is recommended make the IEEE 802 11n Wireless Access Point face to the direction where the AP is to get the best connection quality In addition you can start Site Survey in Wireless Basic Settings to check the signal strength If it is weak or unstable The smaller the number is the weaker the signal strength is please join other available AP fo...

Page 66: ...uivalent ASCII Character Hex Equivalent ASCII Character Hex Equivalent ASCII Character Hex Equivalent 21 9 39 Q 51 i 69 22 3A R 52 j 6A 23 3B S 53 k 6B 24 3C T 54 l 6C 25 3D U 55 m 6D 26 3E V 56 n 6E 27 3F W 57 o 6F 28 40 X 58 p 70 29 A 41 Y 59 q 71 2A B 42 Z 5A r 72 2B C 43 5B s 73 2C D 44 5C t 74 2D E 45 5D u 75 2E F 46 5E v 76 2F G 47 _ 5F w 77 0 30 H 48 60 x 78 1 31 I 49 a 61 y 79 2 32 J 4A b ...