Document Outline

• User’s Guide
• Copyright
  • Disclaimer
  • Trademarks
• Federal Communications Commission (FCC) Interference Statement
  • Notice 1
  • Certifications
• ZyXEL Limited Warranty
  • Note
  • Safety Warnings
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
  • About This User's Guide
  • Related Documentation
  • User Guide Feedback
  • Syntax Conventions
  • Graphics Icons Key
• Getting to Know Your ZyAIR
  • 1.1 Introducing the ZyAIR
  • 1.2 ZyAIR Features
    • 1.2.1 Physical Features
      • 1.2.1.1 4-Port Switch
      • 1.2.1.2 10/100M Auto-negotiating Ethernet/Fast Ethernet Interface
      • 1.2.1.3 10/100M Auto-crossover Ethernet/Fast Ethernet Interface
      • 1.2.1.4 10/100 Mbps Ethernet WAN
      • 1.2.1.5 Reset Button
      • 1.2.1.6 ZyAIR LED
    • 1.2.2 Firmware Features
      • 1.2.2.1 Internal RADIUS Server
      • 1.2.2.2 Wi-Fi Protected Access
      • 1.2.2.3 802.11b Wireless LAN Standard
      • 1.2.2.4 802.11g Wireless LAN Standard
      • 1.2.2.5 STP (Spanning Tree Protocol) / RSTP (Rapid STP)
      • 1.2.2.6 Certificates
      • 1.2.2.7 Limit the number of Client Connections
      • 1.2.2.8 SSL Passthrough
      • 1.2.2.9 Firewall
      • 1.2.2.10 Brute-Force Password Guessing Protection
      • 1.2.2.11 Wireless LAN MAC Address Filtering
      • 1.2.2.12 WEP Encryption
      • 1.2.2.13 IEEE 802.1X Network Security
      • 1.2.2.14 Universal Plug and Play (UPnP)
      • 1.2.2.15 Dynamic DNS Support
      • 1.2.2.16 PPPoE Support (RFC2516)
      • 1.2.2.17 PPTP Encapsulation
      • 1.2.2.18 Network Address Translation (NAT)
      • 1.2.2.19 Traffic Redirect
      • 1.2.2.20 NAT for Single-IP-address Internet Access
      • 1.2.2.21 DHCP (Dynamic Host Configuration Protocol)
      • 1.2.2.22 Multicast
      • 1.2.2.23 IP Alias
      • 1.2.2.24 IP Policy Routing
      • 1.2.2.25 SNMP
      • 1.2.2.26 Full Network Management
      • 1.2.2.27 Logging and Tracing
      • 1.2.2.28 Diagnostics Capabilities
      • 1.2.2.29 Embedded FTP and TFTP Servers
      • 1.2.2.30 Wireless Association List
      • 1.2.2.31 Wireless LAN Channel Usage
  • 1.3 Applications for the ZyAIR
    • 1.3.1 Internet Access Application
• Introducing the Web Configurator
  • 2.1 Web Configurator Overview
  • 2.2 Accessing the ZyAIR Web Configurator
  • 2.3 Resetting the ZyAIR
    • 2.3.1 .Procedure To Use The Reset Button
    • 2.3.2 Method of Restoring Factory-Defaults Via Web Configurator
  • 2.4 Navigating the ZyAIR Web Configurator
• Wizard Setup
  • 3.1 Wizard Setup Overview
    • 3.1.1 Channel
    • 3.1.2 ESS ID
    • 3.1.3 WEP Encryption
    • 3.1.4 WPA-PSK
  • 3.2 Wizard Setup: General Setup
  • 3.3 Wizard Setup: Wireless LAN
  • 3.4 Wizard Setup: Screen 3
  • 3.5 Wizard Setup: Screen 4
    • 3.5.1 Ethernet
    • 3.5.2 PPPoE Encapsulation
    • 3.5.3 PPTP Encapsulation
  • 3.6 Wizard Setup: Screen 5
    • 3.6.1 WAN IP Address Assignment
    • 3.6.2 IP Address and Subnet Mask
    • 3.6.3 DNS Server Address Assignment
    • 3.6.4 WAN MAC Address
  • 3.7 Basic Setup Complete
• System Screens
  • 4.1 System Overview
  • 4.2 Configuring General Setup
  • 4.3 Dynamic DNS
    • 4.3.1 DynDNS Wildcard
  • 4.4 Configuring Dynamic DNS
  • 4.5 Configuring Password
  • 4.6 Configuring Time Setting
• LAN Screens
  • 5.1 LAN Overview
  • 5.2 DHCP Setup
    • 5.2.1 IP Pool Setup
    • 5.2.2 System DNS Servers
  • 5.3 LAN TCP/IP
    • 5.3.1 Factory LAN Defaults
    • 5.3.2 IP Address and Subnet Mask
    • 5.3.3 RIP Setup
    • 5.3.4 Multicast
  • 5.4 Configuring IP
  • 5.5 Configuring Static DHCP
  • 5.6 Configuring IP Alias
• Wireless Configuration and Roaming
  • 6.1 Wireless LAN Overview
    • 6.1.1 IBSS
    • 6.1.2 BSS
    • 6.1.3 ESS
  • 6.2 Wireless LAN Basics
    • 6.2.1 RTS/CTS
    • 6.2.2 Fragmentation Threshold
  • 6.3 Configuring Wireless
  • 6.4 Configuring Roaming
    • 6.4.1 Requirements for Roaming
• Wireless Security
  • 7.1 Wireless Security Overview
  • 7.2 Security Parameters Summary
  • 7.3 WEP Overview
    • 7.3.1 Data Encryption
      • 7.3.1.1 Authentication
  • 7.4 Configuring WEP Encryption
  • 7.5 Introduction to WPA
    • 7.5.1 User Authentication
    • 7.5.2 Encryption
    • 7.5.3 WPA-PSK Application Example
  • 7.6 Configuring WPA-PSK Authentication
  • 7.7 Wireless Client WPA Supplicants
    • 7.7.1 WPA with RADIUS Application Example
  • 7.8 Configuring WPA Authentication
  • 7.9 Introduction to RADIUS
    • 7.9.1 Types of RADIUS Messages
      • 7.9.1.1 Access-Challenge
      • 7.9.1.2 Accounting-Request
      • 7.9.1.3 Accounting-Response
      • 7.9.1.4 EAP Authentication Overview
  • 7.10 Configuring RADIUS
  • 7.11 802.1x Overview
  • 7.12 Dynamic WEP Key Exchange
  • 7.13 Configuring 802.1x and Dynamic WEP Key Exchange
  • 7.14 Configuring 802.1x and Static WEP Key Exchange
  • 7.15 Configuring 802.1x
  • 7.16 MAC Filter
• Internal RADIUS Server
  • 8.1 Internal RADIUS Overview
  • 8.2 Internal RADIUS Server Setting
  • 8.3 Trusted AP Overview
  • 8.4 Configuring Trusted AP
  • 8.5 Trusted Users Overview
  • 8.6 Configuring Trusted Users
• WAN
  • 9.1 WAN Overview
  • 9.2 Configuring WAN ISP
    • 9.2.1 Ethernet Encapsulation
      • 9.2.1.1 Service Type
    • 9.2.2 PPPoE Encapsulation
    • 9.2.3 PPTP Encapsulation
  • 9.3 TCP/IP Priority (Metric)
  • 9.4 Configuring WAN IP
  • 9.5 Configuring WAN MAC
• Single User Account (SUA) / Network Address Translation (NAT)
  • 10.1 NAT Overview
    • 10.1.1 NAT Definitions
    • 10.1.2 What NAT Does
    • 10.1.3 How NAT Works
    • 10.1.4 NAT Application
    • 10.1.5 NAT Mapping Types
  • 10.2 Using NAT
    • 10.2.1 SUA (Single User Account) Versus NAT
  • 10.3 SUA Server
    • 10.3.1 Default Server IP Address
    • 10.3.2 Port Forwarding: Services and Port Numbers
    • 10.3.3 Configuring Servers Behind SUA (Example)
  • 10.4 Configuring SUA Server
  • 10.5 Configuring Address Mapping
    • 10.5.1 Configuring Address Mapping
  • 10.6 Trigger Port Forwarding
    • 10.6.1 Trigger Port Forwarding Example
    • 10.6.2 Two Points To Remember About Trigger Ports
  • 10.7 Configuring Trigger Port Forwarding
• Static Route Screens
  • 11.1 Static Route Overview
  • 11.2 Configuring IP Static Route
    • 11.2.1 Configuring Route Entry
• Remote Management Screens
  • 12.1 Remote Management Overview
    • 12.1.1 Remote Management Limitations
    • 12.1.2 Remote Management and NAT
    • 12.1.3 System Timeout
  • 12.2 Configuring WWW
  • 12.3 Configuring Telnet
  • 12.4 Configuring TELNET
  • 12.5 Configuring FTP
  • 12.6 SNMP
    • 12.6.1 Supported MIBs
    • 12.6.2 SNMP Traps
    • 12.6.3 Configuring SNMP
  • 12.7 Configuring DNS
  • 12.8 Configuring Security
• UPnP
  • 13.1 Universal Plug and Play Overview
    • 13.1.1 How Do I Know If I'm Using UPnP?
    • 13.1.2 NAT Traversal
    • 13.1.3 Cautions with UPnP
  • 13.2 UPnP and ZyXEL
  • 13.3 Configuring UPnP
  • 13.4 Installing UPnP in Windows Example
    • 13.4.1 Installing UPnP in Windows Me
    • 13.4.2 Installing UPnP in Windows XP
  • 13.5 Using UPnP in Windows XP Example
    • 13.5.1 Auto-discover Your UPnP-enabled Network Device
    • 13.5.2 Web Configurator Easy Access
    • 13.5.3 Web Configurator Easy Access
• Firewalls
  • 14.1 Firewall Overview
  • 14.2 Types of Firewalls
    • 14.2.1 Packet Filtering Firewalls
    • 14.2.2 Application-level Firewalls
    • 14.2.3 Stateful Inspection Firewalls
  • 14.3 Introduction to ZyXEL’s Firewall
  • 14.4 Denial of Service
    • 14.4.1 Basics
    • 14.4.2 Types of DoS Attacks
      • 14.4.2.1 ICMP Vulnerability
      • 14.4.2.2 Traceroute
  • 14.5 Stateful Inspection
    • 14.5.1 Stateful Inspection Process
    • 14.5.2 Stateful Inspection and the ZyAIR
    • 14.5.3 TCP Security
    • 14.5.4 UDP/ICMP Security
    • 14.5.5 Upper Layer Protocols
  • 14.6 Guidelines For Enhancing Security With Your Firewall
  • 14.7 Packet Filtering Vs Firewall
    • 14.7.1 Packet Filtering:
      • 14.7.1.1 When To Use Filtering
    • 14.7.2 Firewall
      • 14.7.2.1 When To Use The Firewall
• Firewall Screens
  • 15.1 Access Methods
  • 15.2 Firewall Policies Overview
  • 15.3 Rule Logic Overview
    • 15.3.1 Rule Checklist
    • 15.3.2 Security Ramifications
    • 15.3.3 Key Fields For Configuring Rules
      • 15.3.3.1 Action
      • 15.3.3.2 Service
      • 15.3.3.3 Source Address
      • 15.3.3.4 Destination Address
  • 15.4 Connection Direction Examples
    • 15.4.1 LAN to WAN Rules
    • 15.4.2 WAN to LAN Rules
  • 15.5 Alerts
  • 15.6 Configuring Firewall
    • 15.6.1 Rule Summary
    • 15.6.2 Configuring Firewall Rules
    • 15.6.3 Configuring Custom Services
  • 15.7 Example Firewall Rule
  • 15.8 Predefined Services
• Content Filtering
  • 16.1 Introduction to Content Filtering
  • 16.2 Restrict Web Features
  • 16.3 Days and Times
  • 16.4 Configure Content Filtering
• Certificates
  • 17.1 Certificates Overview
    • 17.1.1 Advantages of Certificates
  • 17.2 Self-signed Certificates
  • 17.3 Configuration Summary
  • 17.4 My Certificates
  • 17.5 Certificate File Formats
  • 17.6 Importing a Certificate
  • 17.7 Creating a Certificate
  • 17.8 My Certificate Details
  • 17.9 Trusted CAs
  • 17.10 Importing a Trusted CA’s Certificate
  • 17.11 Trusted CA Certificate Details
• Log Screens
  • 18.1 Configuring View Log
  • 18.2 Configuring Log Settings
  • 18.3 Configuring Reports
• Maintenance
  • 19.1 Maintenance Overview
  • 19.2 System Status Screen
    • 19.2.1 System Statistics
  • 19.3 DHCP Table Screen
  • 19.4 Association List
  • 19.5 F/W Upload Screen
  • 19.6 Configuration Screen
    • 19.6.1 Backup Configuration
    • 19.6.2 Restore Configuration
    • 19.6.3 Back to Factory Defaults
  • 19.7 Restart Screen
• Introducing the SMT
  • 20.1 SMT Introduction
  • 20.2 Connect to your ZyAIR Using Telnet
    • 20.2.1 Entering Password
  • 20.3 Changing the System Password
  • 20.4 ZyAIR SMT Menu Overview Example
  • 20.5 Navigating the SMT Interface
    • 20.5.1 System Management Terminal Interface Summary
  • 20.6 Changing the System Password
• General Setup
  • 21.1 General Setup
    • 21.1.1 Procedure To Configure Menu 1
    • 21.1.2 Procedure to Configure Dynamic DNS
• Menu 2 WAN Setup
  • 22.1 Introduction to WAN
  • 22.2 WAN Setup
• LAN Setup
  • 23.1 LAN Setup
    • 23.1.1 General Ethernet Setup
  • 23.2 Protocol Dependent Ethernet Setup
  • 23.3 TCP/IP Ethernet Setup and DHCP
    • 23.3.1 IP Alias Setup
  • 23.4 Wireless LAN Setup
    • 23.4.1 Configuring MAC Address Filter
• Internet Access
  • 24.1 Introduction to Internet Access Setup
  • 24.2 Ethernet Encapsulation
  • 24.3 Configuring the PPTP Client
  • 24.4 Configuring the PPPoE Client
  • 24.5 Basic Setup Complete
• Remote Node Configuration
  • 25.1 Introduction to Remote Node Setup
  • 25.2 Remote Node Profile Setup
    • 25.2.1 Ethernet Encapsulation
    • 25.2.2 PPPoE Encapsulation
      • 25.2.2.1 Outgoing Authentication Protocol
      • 25.2.2.2 Nailed-Up Connection
    • 25.2.3 PPTP Encapsulation
  • 25.3 Edit IP
  • 25.4 Remote Node Filter
• Static Route Setup
  • 26.1 IP Static Route Setup
• Dial-in User Setup
  • 27.1 Dial-in User Setup
• Network Address Translation (NAT)
  • 28.1 Using NAT
    • 28.1.1 SUA (Single User Account) Versus NAT
  • 28.2 Applying NAT
  • 28.3 NAT Setup
    • 28.3.1 Address Mapping Sets
      • 28.3.1.1 User-Defined Address Mapping Sets
      • 28.3.1.2 Ordering Your Rules
  • 28.4 Configuring a Server behind NAT
  • 28.5 General NAT Examples
    • 28.5.1 Example 1: Internet Access Only
    • 28.5.2 Example 2: Internet Access with an Inside Server
    • 28.5.3 Example 3: Multiple Public IP Addresses With Inside Servers
    • 28.5.4 Example 4: NAT Unfriendly Application Programs
  • 28.6 Configuring Trigger Port Forwarding
• Filter Configuration
  • 29.1 Introduction to Filters
    • 29.1.1 The Filter Structure of the ZyAIR
  • 29.2 Configuring a Filter Set
    • 29.2.1 Configuring a Filter Rule
    • 29.2.2 Configuring a TCP/IP Filter Rule
    • 29.2.3 Configuring a Generic Filter Rule
  • 29.3 Example Filter
  • 29.4 Filter Types and NAT
  • 29.5 Firewall Versus Filters
  • 29.6 Applying a Filter
    • 29.6.1 Applying LAN Filters
    • 29.6.2 Applying Remote Node Filters
• Enabling the Firewall
  • 30.1 Remote Management and the Firewall
  • 30.2 Access Methods
  • 30.3 Enabling the Firewall
• SNMP Configuration
  • 31.1 About SNMP
  • 31.2 Supported MIBs
  • 31.3 SNMP Configuration
  • 31.4 SNMP Traps
• System Security
  • 32.1 System Security
    • 32.1.1 System Password
    • 32.1.2 Configuring External RADIUS Server
    • 32.1.3 802.1x
• System Information and Diagnosis
  • 33.1 System Status
  • 33.2 System Information
    • 33.2.1 System Information
    • 33.2.2 Console Port Speed
  • 33.3 Log and Trace
    • 33.3.1 Viewing Error Log
    • 33.3.2 UNIX Syslog
      • 33.3.2.1 CDR
      • 33.3.2.2 Packet triggered
      • 33.3.2.3 Filter log
      • 33.3.2.4 PPP log
      • 33.3.2.5 Firewall log
    • 33.3.3 Call-Triggering Packet
  • 33.4 Diagnostic
    • 33.4.1 WAN DHCP
• Firmware and Configuration File Maintenance
  • 34.1 Filename Conventions
  • 34.2 Backup Configuration
    • 34.2.1 Backup Configuration Using FTP
    • 34.2.2 Using the FTP command from the DOS Prompt
    • 34.2.3 GUI-based FTP Clients
    • 34.2.4 TFTP and FTP over WAN Management Limitations
    • 34.2.5 Backup Configuration Using TFTP
    • 34.2.6 Example: TFTP Command
    • 34.2.7 GUI-based TFTP Clients
  • 34.3 Restore Configuration
    • 34.3.1 Restore Using FTP
    • 34.3.2 Restore Using FTP Session Example
  • 34.4 Uploading Firmware and Configuration Files
    • 34.4.1 Firmware Upload
    • 34.4.2 Configuration File Upload
    • 34.4.3 Using the FTP command from the DOS Prompt Example
    • 34.4.4 TFTP File Upload
    • 34.4.5 Example: TFTP Command
• System Maintenance and Information
  • 35.1 Command Interpreter Mode
  • 35.2 Call Control Support
    • 35.2.1 Budget Management
    • 35.2.2 Call History
  • 35.3 Time and Date Setting
    • 35.3.1 Resetting the Time
• Remote Management
  • 36.1 Remote Management
    • 36.1.1 Telnet
    • 36.1.2 FTP
    • 36.1.3 Web
    • 36.1.4 Remote Management Limitations
  • 36.2 Remote Management and NAT
  • 36.3 System Timeout
• Call Scheduling
  • 37.1 Introduction to Call Scheduling
• Appendix A
  • Troubleshooting
    • Problems Starting Up the ZyAIR
    • Problems with the Ethernet Interface
    • Problems with the Password
    • Problems with Telnet
    • Problems with the WLAN Interface
• Appendix B
  • Brute-Force Password Guessing Protection
    • Example
• Appendix C
  • Setting up Your Computer’s IP Address
    • Windows 95/98/Me
      • Installing Components
      • Configuring
      • Verifying Settings
    • Windows 2000/NT/XP
      • Verifying Settings
    • Macintosh OS 8/9
      • Verifying Settings
    • Macintosh OS X
      • Verifying Settings
• Appendix D
  • IP Address Assignment Conflicts
    • Case A: The ZyAIR is using the same LAN and WAN IP addresses
    • Case B: The ZyAIR LAN IP address conflicts with the DHCP client IP address
    • Case C: The Subscriber IP address is the same as the IP address of a network device
    • Case D: Two or more subscribers have the same IP address.
• Appendix E
  • IP Subnetting
    • IP Addressing
    • IP Classes
    • Subnet Masks
    • Subnetting
    • Example: Two Subnets
    • Example: Four Subnets
    • Example Eight Subnets
    • Subnetting With Class A and Class B Networks.
• Appendix F
  • Command Interpreter
    • Command Syntax
    • Command Usage
• Appendix G
  • Log Descriptions
    • Log Commands
      • Configuring What You Want the ZyAIR to Log
      • Displaying Logs
    • Log Command Example
• Appendix H
  • Wireless LAN and IEEE 802.11
    • Benefits of a Wireless LAN
    • IEEE 802.11
    • Ad-hoc Wireless LAN Configuration
    • Infrastructure Wireless LAN Configuration
• Appendix I
  • Wireless LAN With IEEE 802.1x
    • Security Flaws with IEEE 802.11
    • Deployment Issues with IEEE 802.11
    • IEEE 802.1x
    • Advantages of the IEEE 802.1x
      • RADIUS Server Authentication Sequence
      • Mutual Authentication with Internal RADIUS server.
• Appendix J
  • Types of EAP Authentication
    • EAP-MD5 (Message-Digest Algorithm 5)
    • EAP-TLS (Transport Layer Security)
    • EAP-TTLS (Tunneled Transport Layer Service)
    • PEAP (Protected EAP)
    • LEAP
• Appendix K
  • Antenna Selection and Positioning Recommendation
    • Antenna Characteristics
      • Frequency
      • Radiation Pattern
      • Antenna Gain
    • Types of Antennas For WLAN
      • Positioning Antennas
    • Connector Type
• Appendix L
  • Power Adaptor Specifications
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • J
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • Z