ZyXEL NXC5500 User guide

NXC Series

Wireless LAN Controller

LAN IP Address https://192.168.1.1

User Name admin

Password 1234

Version 5.00 Edition 1, 02/2017

NXC Series User’s Guide

2

IMPORTANT!

READ CAREFULLY BEFORE USE.

KEEP THIS GUIDE FOR FUTURE REFERENCE.

This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots

and graphics in this book may differ slightly from your product due to differences in your product

firmware or your computer operating system. Every effort has been made to ensure that the information

in this manual is accurate.

Related Documentation

•Quick Start Guide

The Quick Start Guide is designed to show you how to make the NXC hardware connections and

access the Web Configurator.

•CLI Reference Guide

The CLI Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands

to configure the NXC.

Note: It is recommended you use the Web Configurator to configure the NXC.

• Web Configurator Online Help

Click the help icon in any screen for help in configuring that screen and supplementary information.

•More Information

Go to support.zyxel.com to find other information on the NXC

.

Contents Overview

NXC Series User’s Guide

3

Contents Overview

User’s Guide ......................................................................................................................................15

Introduction ........................................................................................................................................... 16

Hardware Installation and Connection ............................................................................................. 22

The Web Configurator ......................................................................................................................... 28

Technical Reference ........................................................................................................................45

Dashboard ............................................................................................................................................ 46

Monitor ................................................................................................................................................... 58

Registration ............................................................................................................................................ 95

Wireless ................................................................................................................................................... 98

Interfaces ............................................................................................................................................. 120

Policy and Static Routes .................................................................................................................... 143

Zones .................................................................................................................................................... 153

NAT ....................................................................................................................................................... 156

ALG ....................................................................................................................................................... 163

IP/MAC Binding ................................................................................................................................... 165

Captive Portal ..................................................................................................................................... 170

RTLS ....................................................................................................................................................... 191

Firewall ................................................................................................................................................. 194

User/Group .......................................................................................................................................... 203

AP Profile .............................................................................................................................................. 222

MON Profile ......................................................................................................................................... 242

ZyMesh Profile ...................................................................................................................................... 247

Addresses ............................................................................................................................................ 251

Services ................................................................................................................................................ 256

Schedules ............................................................................................................................................ 261

AAA Server .......................................................................................................................................... 265

Authentication Method ..................................................................................................................... 277

Certificates .......................................................................................................................................... 280

DHCPv6 ................................................................................................................................................ 297

System .................................................................................................................................................. 299

Log and Report ................................................................................................................................... 337

File Manager ....................................................................................................................................... 352

Diagnostics .......................................................................................................................................... 363

Packet Flow Explore ........................................................................................................................... 376

Reboot ................................................................................................................................................. 382

Shutdown ............................................................................................................................................. 383

Troubleshooting .................................................................................................................................. 384

Table of Contents

NXC Series User’s Guide

4

Table of Contents

Contents Overview .............................................................................................................................3

Table of Contents.................................................................................................................................4

Part I: User’s Guide..........................................................................................15

Chapter 1

Introduction ........................................................................................................................................16

1.1 Overview ......................................................................................................................................... 16

1.2 Zones, Interfaces, and Physical Ports ........................................................................................... 16

1.2.1 Interface Types ...................................................................................................................... 17

1.2.2 Interface and Zone Configuration ...................................................................................... 17

1.3 Applications .................................................................................................................................... 18

1.3.1 AP Management .................................................................................................................. 18

1.3.2 Wireless Security .................................................................................................................... 18

1.3.3 Captive Portal ....................................................................................................................... 18

1.3.4 Load Balancing ..................................................................................................................... 19

1.3.5 Dynamic Channel Selection ................................................................................................19

1.3.6 User-Aware Access Control ................................................................................................. 19

1.4 Management Overview ................................................................................................................ 19

1.5 Object-based Configuration ........................................................................................................ 20

1.6 Starting and Stopping the NXC .................................................................................................... 21

Chapter 2

Hardware Installation and Connection ...........................................................................................22

2.1 Rack-mounted Installation ............................................................................................................ 22

2.1.1 Rack-Mounted Installation Procedure ............................................................................... 22

2.2 Front Panel ...................................................................................................................................... 23

2.2.1 NXC2500 ................................................................................................................................. 23

2.2.2 NXC5500 ................................................................................................................................. 23

2.2.3 Front Panel LEDs .................................................................................................................... 25

2.3 Rear Panel ....................................................................................................................................... 26

Chapter 3

The Web Configurator........................................................................................................................28

3.1 Overview ......................................................................................................................................... 28

3.2 Access .............................................................................................................................................. 28

3.3 The Main Screen ............................................................................................................................. 29

Table of Contents

NXC Series User’s Guide

5

3.3.1 Title Bar ................................................................................................................................... 30

3.3.2 Navigation Panel .................................................................................................................. 36

3.3.3 Warning Messages ................................................................................................................ 41

3.3.4 Tables and Lists ...................................................................................................................... 41

Part II: Technical Reference...........................................................................45

Chapter 4

Dashboard..........................................................................................................................................46

4.1 Overview ......................................................................................................................................... 46

4.1.1 What You Can Do in this Chapter ....................................................................................... 46

4.2 Dashboard ...................................................................................................................................... 47

4.2.1 CPU Usage ............................................................................................................................. 51

4.2.2 Memory Usage ...................................................................................................................... 51

4.2.3 Session Usage ........................................................................................................................ 52

4.2.4 DHCP Table ............................................................................................................................ 53

4.2.5 Number of Login Users .......................................................................................................... 54

4.2.6 AP Status ................................................................................................................................ 55

4.2.7 Station Traffic ......................................................................................................................... 56

Chapter 5

Monitor................................................................................................................................................58

5.1 Overview ......................................................................................................................................... 58

5.1.1 What You Can Do in this Chapter ....................................................................................... 58

5.2 What You Need to Know ............................................................................................................... 59

5.3 Port Statistics ................................................................................................................................... 59

5.3.1 Port Statistics Graph ............................................................................................................. 60

5.4 Interface Status ............................................................................................................................... 61

5.5 Traffic Statistics ................................................................................................................................ 64

5.6 Session Monitor .............................................................................................................................. 67

5.7 IP/MAC Binding Monitor ................................................................................................................ 69

5.8 Login Users ...................................................................................................................................... 70

5.8.1 Dynamic Guest .................................................................................................................... 71

5.8.2 Trusted MAC Address ........................................................................................................... 72

5.9 USB Storage .................................................................................................................................... 73

5.10 Ethernet Neighbor ....................................................................................................................... 74

5.11 AP List ............................................................................................................................................ 75

5.11.1 Station Count of AP ........................................................................................................... 77

5.11.2 Config AP ............................................................................................................................ 79

5.12 Radio List ....................................................................................................................................... 83

5.12.1 AP Mode Radio Information .............................................................................................. 84

Table of Contents

NXC Series User’s Guide

6

5.13 ZyMesh Link Info ............................................................................................................................ 86

5.14 SSID Info ......................................................................................................................................... 87

5.15 Station List ..................................................................................................................................... 88

5.16 Detected Device ......................................................................................................................... 89

5.17 View Log ........................................................................................................................................ 90

5.18 View AP Log ................................................................................................................................. 92

Chapter 6

Registration.........................................................................................................................................95

6.1 Overview ......................................................................................................................................... 95

6.1.1 What You Can Do in this Chapter ....................................................................................... 95

6.1.2 What you Need to Know ...................................................................................................... 95

6.2 Registration ...................................................................................................................................... 96

6.3 Service ............................................................................................................................................. 96

Chapter 7

Wireless...............................................................................................................................................98

7.1 Overview ......................................................................................................................................... 98

7.1.1 What You Can Do in this Chapter ....................................................................................... 98

7.1.2 What You Need to Know ..................................................................................................... 98

7.2 Controller ........................................................................................................................................ 99

7.3 AP Management ............................................................................................................................ 99

7.3.1 Mgnt. AP List ........................................................................................................................ 100

7.3.2 AP Policy .............................................................................................................................. 107

7.3.3 AP Group ............................................................................................................................. 108

7.3.4 Add/Edit AP Group ............................................................................................................ 110

7.4 MON Mode ................................................................................................................................... 114

7.4.1 Add/Edit Rogue/Friendly List .............................................................................................. 115

7.5 Auto Healing ................................................................................................................................. 116

7.6 Technical Reference .................................................................................................................... 117

7.6.1 Dynamic Channel Selection .............................................................................................. 117

7.6.2 Load Balancing ................................................................................................................... 118

7.6.3 Disassociating and Delaying Connections ...................................................................... 119

Chapter 8

Interfaces..........................................................................................................................................120

8.1 Interface Overview ...................................................................................................................... 120

8.1.1 What You Can Do in this Chapter ..................................................................................... 120

8.1.2 What You Need to Know ................................................................................................... 120

8.2 Ethernet Summary ....................................................................................................................... 121

8.2.1 Edit Ethernet ........................................................................................................................ 122

8.2.2 Object References .............................................................................................................. 128

8.2.3 Add DHCPv6 Request Options .......................................................................................... 129

Table of Contents

NXC Series User’s Guide

7

8.2.4 Add/Edit DHCP Extended Options ................................................................................... 130

8.3 VLAN Interfaces ........................................................................................................................... 132

8.3.1 VLAN Summary .................................................................................................................... 133

8.3.2 Add/Edit VLAN ................................................................................................................... 134

8.4 Technical Reference .................................................................................................................... 140

Chapter 9

Policy and Static Routes..................................................................................................................143

9.1 Overview ....................................................................................................................................... 143

9.1.1 What You Can Do in this Chapter ..................................................................................... 143

9.1.2 What You Need to Know .................................................................................................. 143

9.2 Policy Route ................................................................................................................................. 144

9.2.1 Add/Edit Policy Route ........................................................................................................ 146

9.3 Static Route .................................................................................................................................. 149

9.3.1 Static Route Setting ............................................................................................................ 150

9.4 Technical Reference .................................................................................................................... 150

Chapter 10

Zones.................................................................................................................................................153

10.1 Overview ..................................................................................................................................... 153

10.1.1 What You Can Do in this Chapter ................................................................................... 153

10.1.2 What You Need to Know ................................................................................................. 153

10.2 Zone ............................................................................................................................................. 154

10.2.1 Add/Edit Zone .................................................................................................................. 154

Chapter 11

NAT....................................................................................................................................................156

11.1 Overview ..................................................................................................................................... 156

11.1.1 What You Can Do in this Chapter ................................................................................... 156

11.2 NAT Summary .............................................................................................................................. 156

11.2.1 Add/Edit NAT ..................................................................................................................... 157

11.3 Technical Reference .................................................................................................................. 160

Chapter 12

ALG....................................................................................................................................................163

12.1 Overview ..................................................................................................................................... 163

12.1.1 What You Can Do in this Chapter ................................................................................... 163

12.1.2 What You Need to Know ................................................................................................. 163

12.1.3 Before You Begin ............................................................................................................... 163

12.2 ALG .............................................................................................................................................. 163

12.3 Technical Reference .................................................................................................................. 164

Chapter 13

IP/MAC Binding................................................................................................................................165

Table of Contents

NXC Series User’s Guide

8

13.1 Overview ..................................................................................................................................... 165

13.1.1 What You Can Do in this Chapter ................................................................................... 165

13.1.2 What You Need to Know ................................................................................................. 165

13.2 IP/MAC Binding Summary ......................................................................................................... 166

13.2.1 Edit IP/MAC Binding .......................................................................................................... 167

13.2.2 Add/Edit Static DHCP Rule .............................................................................................. 168

13.3 IP/MAC Binding Exempt List ....................................................................................................... 168

Chapter 14

Captive Portal...................................................................................................................................170

14.1 Overview ..................................................................................................................................... 170

14.1.1 Captive Portal Type .......................................................................................................... 170

14.1.2 What You Can Do in this Chapter ................................................................................... 171

14.2 Captive Portal ............................................................................................................................. 171

14.2.1 Add Exceptional Services ................................................................................................174

14.3 Redirect on Controller ................................................................................................................ 175

14.3.1 Auth. Policy Add/Edit ....................................................................................................... 176

14.4 Redirect on AP ............................................................................................................................ 178

14.4.1 Auth. Policy Group Add/Edit ........................................................................................... 179

14.4.2 Auth. Policy Add/Edit ....................................................................................................... 180

14.5 Login Page .................................................................................................................................. 182

14.5.1 Custom Login and Access Pages ................................................................................... 184

14.5.2 External or Uploaded Web Portal Details ....................................................................... 186

Chapter 15

RTLS....................................................................................................................................................191

15.1 Overview ..................................................................................................................................... 191

15.1.1 What You Can Do in this Chapter ................................................................................... 191

15.2 Before You Begin ........................................................................................................................ 192

15.3 Configuring RTLS ......................................................................................................................... 192

Chapter 16

Firewall..............................................................................................................................................194

16.1 Overview ..................................................................................................................................... 194

16.1.1 What You Can Do in this Chapter ................................................................................... 194

16.1.2 What You Need to Know ................................................................................................. 194

16.2 Firewall ......................................................................................................................................... 196

16.2.1 Add/Edit Firewall Screen .................................................................................................. 198

16.3 Session Control ........................................................................................................................... 200

16.3.1 Add/Edit Session Limit ....................................................................................................... 201

Chapter 17

User/Group.......................................................................................................................................203

Table of Contents

NXC Series User’s Guide

9

17.1 Overview ..................................................................................................................................... 203

17.1.1 What You Can Do in this Chapter ................................................................................... 203

17.1.2 What You Need To Know ................................................................................................. 203

17.2 User Summary .............................................................................................................................. 205

17.2.1 Add/Edit User ..................................................................................................................... 206

17.3 Group Summary ......................................................................................................................... 209

17.3.1 Add/Edit Group ................................................................................................................ 210

17.4 Setting ......................................................................................................................................... 211

17.4.1 Edit User Authentication Timeout Settings ...................................................................... 214

17.4.2 Add/Edit Dynamic Guest Group ..................................................................................... 215

17.4.3 User Aware Login Example .............................................................................................. 216

17.4.4 Guest Manager Login Example ...................................................................................... 217

17.5 MAC Address .............................................................................................................................. 220

17.5.1 Add/Edit MAC Address ....................................................................................................221

Chapter 18

AP Profile...........................................................................................................................................222

18.1 Overview ..................................................................................................................................... 222

18.1.1 What You Can Do in this Chapter ................................................................................... 222

18.1.2 What You Need To Know ................................................................................................. 222

18.2 Radio ............................................................................................................................................ 223

18.2.1 Add/Edit Radio Profile ...................................................................................................... 224

18.3 SSID .............................................................................................................................................. 229

18.3.1 SSID List .............................................................................................................................. 229

18.3.2 Security List ......................................................................................................................... 233

18.3.3 MAC Filter List ..................................................................................................................... 238

18.3.4 Layer-2 Isolation List .......................................................................................................... 240

Chapter 19

MON Profile.......................................................................................................................................242

19.1 Overview ..................................................................................................................................... 242

19.1.1 What You Can Do in this Chapter ................................................................................... 242

19.1.2 What You Need To Know ................................................................................................. 242

19.2 MON Profile ................................................................................................................................. 242

19.2.1 Add/Edit MON Profile ....................................................................................................... 243

19.3 Technical Reference .................................................................................................................. 245

Chapter 20

ZyMesh Profile ..................................................................................................................................247

20.1 Overview ..................................................................................................................................... 247

20.1.1 What You Can Do in this Chapter ................................................................................... 248

20.2 ZyMesh Profile .............................................................................................................................. 248

20.2.1 Add/Edit ZyMesh Profile ................................................................................................... 250

Table of Contents

NXC Series User’s Guide

10

Chapter 21

Addresses.........................................................................................................................................251

21.1 Overview ..................................................................................................................................... 251

21.1.1 What You Can Do in this Chapter ................................................................................... 251

21.1.2 What You Need To Know ................................................................................................. 251

21.2 Address Summary ....................................................................................................................... 251

21.2.1 Add/Edit Address ............................................................................................................. 252

21.3 Address Group Summary ........................................................................................................... 253

21.3.1 Add/Edit Address Group Rule ........................................................................................ 254

Chapter 22

Services.............................................................................................................................................256

22.1 Overview ..................................................................................................................................... 256

22.1.1 What You Can Do in this Chapter ................................................................................... 256

22.1.2 What You Need to Know ................................................................................................. 256

22.2 Service Summary ........................................................................................................................ 257

22.2.1 Add/Edit Service Rule ...................................................................................................... 258

22.3 Service Group Summary ........................................................................................................... 259

22.3.1 Add/Edit Service Group Rule .......................................................................................... 259

Chapter 23

Schedules.........................................................................................................................................261

23.1 Overview ..................................................................................................................................... 261

23.1.1 What You Can Do in this Chapter ................................................................................... 261

23.1.2 What You Need to Know ................................................................................................. 261

23.2 Schedule Summary .................................................................................................................... 261

23.2.1 Add/Edit Schedule One-Time Rule ................................................................................ 263

23.2.2 Add/Edit Schedule Recurring Rule ................................................................................ 264

Chapter 24

AAA Server .......................................................................................................................................265

24.1 Overview ..................................................................................................................................... 265

24.1.1 What You Can Do in this Chapter ................................................................................... 265

24.1.2 What You Need To Know ................................................................................................. 265

24.2 Active Directory / LDAP ............................................................................................................. 268

24.2.1 Add/Edit Active Directory / LDAP Server ....................................................................... 269

24.3 RADIUS ......................................................................................................................................... 273

24.3.1 Add/Edit RADIUS .............................................................................................................. 273

Chapter 25

Authentication Method ...................................................................................................................277

25.1 Overview ..................................................................................................................................... 277

25.1.1 What You Can Do in this Chapter ................................................................................... 277

Table of Contents

NXC Series User’s Guide

11

25.1.2 Before You Begin ............................................................................................................... 277

25.2 Authentication Method ............................................................................................................. 277

25.2.1 Add Authentication Method ........................................................................................... 278

Chapter 26

Certificates .......................................................................................................................................280

26.1 Overview ..................................................................................................................................... 280

26.1.1 What You Can Do in this Chapter ................................................................................... 280

26.1.2 What You Need to Know ................................................................................................. 280

26.1.3 Verifying a Certificate ...................................................................................................... 282

26.2 My Certificates ........................................................................................................................... 283

26.2.1 Adding My Certificates .................................................................................................... 285

26.2.2 Editing My Certificates ...................................................................................................... 287

26.2.3 Importing Certificates ...................................................................................................... 290

26.3 Trusted Certificates ..................................................................................................................... 291

26.3.1 Editing Trusted Certificates ............................................................................................... 293

26.3.2 Importing Trusted Certificates ..........................................................................................295

26.4 Technical Reference .................................................................................................................. 296

Chapter 27

DHCPv6 .............................................................................................................................................297

27.1 Overview ..................................................................................................................................... 297

27.1.1 What You Can Do in this Chapter ................................................................................... 297

27.2 DHCPv6 Request ........................................................................................................................ 297

27.2.1 Add/Edit DHCPv6 Request Object ................................................................................ 298

Chapter 28

System...............................................................................................................................................299

28.1 Overview ..................................................................................................................................... 299

28.1.1 What You Can Do in this Chapter ................................................................................... 299

28.2 Host Name ................................................................................................................................... 299

28.3 USB Storage ................................................................................................................................. 300

28.4 Date and Time ........................................................................................................................... 301

28.4.1 Pre-defined NTP Time Servers List ..................................................................................... 303

28.4.2 Time Server Synchronization ............................................................................................ 303

28.5 Console Speed ........................................................................................................................... 304

28.6 DNS Overview ............................................................................................................................ 305

28.6.1 DNS Server Address Assignment ...................................................................................... 305

28.6.2 Configuring the DNS Screen ............................................................................................ 305

28.6.3 Address Record ................................................................................................................ 308

28.6.4 PTR Record ......................................................................................................................... 308

28.6.5 Adding an Address/PTR Record ...................................................................................... 308

28.6.6 Domain Zone Forwarder ................................................................................................. 309

Table of Contents

NXC Series User’s Guide

12

28.6.7 Add Domain Zone Forwarder .......................................................................................... 309

28.6.8 MX Record ........................................................................................................................ 310

28.6.9 Add MX Record ................................................................................................................. 310

28.6.10 Add Service Control ....................................................................................................... 310

28.7 WWW Overview ......................................................................................................................... 311

28.7.1 Service Access Limitations ............................................................................................... 311

28.7.2 System Timeout .................................................................................................................. 312

28.7.3 HTTPS ................................................................................................................................... 312

28.7.4 Configuring WWW Service Control ................................................................................. 313

28.7.5 Service Control Rules ........................................................................................................ 315

28.7.6 HTTPS Example ................................................................................................................... 316

28.8 SSH ............................................................................................................................................. 322

28.8.1 How SSH Works .................................................................................................................. 323

28.8.2 SSH Implementation on the NXC .................................................................................... 324

28.8.3 Requirements for Using SSH ..............................................................................................324

28.8.4 Configuring SSH ................................................................................................................. 324

28.8.5 Examples of Secure Telnet Using SSH .............................................................................. 325

28.9 Telnet ........................................................................................................................................... 326

28.10 FTP .............................................................................................................................................. 328

28.11 SNMP ......................................................................................................................................... 329

28.11.1 Supported MIBs ............................................................................................................... 330

28.11.2 SNMP Traps ....................................................................................................................... 330

28.11.3 Configuring SNMP ........................................................................................................... 331

28.11.4 Adding or Editing an SNMPv3 User Profile .................................................................... 333

28.12 Authentication Server ............................................................................................................. 333

28.12.1 Add/Edit Trusted RADIUS Client .................................................................................... 334

28.13 Language ................................................................................................................................. 335

28.14 IPv6 ............................................................................................................................................. 336

Chapter 29

Log and Report.................................................................................................................................337

29.1 Overview ..................................................................................................................................... 337

29.1.1 What You Can Do In this Chapter .................................................................................. 337

29.2 Email Daily Report ....................................................................................................................... 337

29.3 Log Settings ................................................................................................................................ 339

29.3.1 Log Settings Summary ...................................................................................................... 340

29.3.2 Editing System Log Settings ............................................................................................. 342

29.3.3 Editing USB Storage Log Settings .................................................................................... 345

29.3.4 Editing Remote Server Log Settings ............................................................................... 346

29.3.5 Log Category Settings ..................................................................................................... 348

Chapter 30

File Manager ....................................................................................................................................352

Table of Contents

NXC Series User’s Guide

13

30.1 Overview ..................................................................................................................................... 352

30.1.1 What You Can Do in this Chapter ................................................................................... 352

30.1.2 What you Need to Know .................................................................................................. 352

30.2 Configuration File ....................................................................................................................... 354

30.3 Firmware Package .................................................................................................................... 358

30.4 Shell Script ................................................................................................................................... 360

Chapter 31

Diagnostics.......................................................................................................................................363

31.1 Overview ..................................................................................................................................... 363

31.1.1 What You Can Do in this Chapter ................................................................................... 363

31.2 Diagnostics ................................................................................................................................. 363

31.2.1 Diagnostics - AP Configuration ....................................................................................... 364

31.2.2 Diagnostics Files ................................................................................................................. 366

31.3 Packet Capture ......................................................................................................................... 366

31.3.1 Packet Capture Files ........................................................................................................ 369

31.3.2 Example of Viewing a Packet Capture File ................................................................... 370

31.4 Core Dump .................................................................................................................................. 370

31.4.1 Core Dump Files ................................................................................................................ 371

31.5 System Log ................................................................................................................................. 372

31.6 Wireless Frame Capture ............................................................................................................ 373

31.6.1 Wireless Frame Capture Files .......................................................................................... 374

Chapter 32

Packet Flow Explore ........................................................................................................................376

32.1 Overview ..................................................................................................................................... 376

32.1.1 What You Can Do in this Chapter ................................................................................... 376

32.2 The Routing Status Screen ......................................................................................................... 376

32.3 The SNAT Status Screen .............................................................................................................. 379

Chapter 33

Reboot...............................................................................................................................................382

33.1 Overview ..................................................................................................................................... 382

33.1.1 What You Need To Know ................................................................................................. 382

33.2 Reboot ......................................................................................................................................... 382

Chapter 34

Shutdown..........................................................................................................................................383

34.1 Overview ..................................................................................................................................... 383

34.1.1 What You Need To Know ................................................................................................. 383

34.2 Shutdown ..................................................................................................................................... 383

Chapter 35

Troubleshooting................................................................................................................................384

Table of Contents

NXC Series User’s Guide

14

35.1 Overview ..................................................................................................................................... 384

35.1.1 General .............................................................................................................................. 384

35.1.2 Wireless ............................................................................................................................... 389

35.2 Resetting the NXC ...................................................................................................................... 391

35.3 Getting More Troubleshooting Help .........................................................................................391

Appendix A Log Descriptions......................................................................................................... 392

Appendix B Common Services...................................................................................................... 419

Appendix C Importing Certificates ............................................................................................... 422

Appendix D Wireless LANs .............................................................................................................. 435

Appendix E IPv6............................................................................................................................... 447

Appendix F Customer Support ...................................................................................................... 455

Appendix G Legal Information...................................................................................................... 461

Index.................................................................................................................................................466

15

PART I

User’s Guide

NXC Series User’s Guide

16

CHAPTER 1

Introduction

1.1 Overview

This User’s Guide covers the following models: NXC2500 and NXC5500.

The NXC is a comprehensive wireless LAN controller. Its flexible configuration helps network

administrators set up wireless LAN networks and efficiently enforce security policies over them. In

addition, the NXC provides excellent throughput, making it an ideal solution for reliable, secure service.

The NXC’s security features include firewall and certificates. It also provides captive portal configuration,

NAT, port forwarding, policy routing, DHCP server, extensive wireless AP control options, and many other

powerful features. Flexible configuration helps you set up the network and enforce security policies

efficiently.

The front panel physical Gigabit Ethernet ports (labeled P1, P2, P3, and so on) are mapped to Gigabit

Ethernet (ge) interfaces. By default P1 is mapped to ge1, P2 is mapped to ge2 and so on.

• The default LAN IP address is 192.168.1.1.

• The default administrator login user name and password are “admin” and “1234” respectively.

1.2 Zones, Interfaces, and Physical Ports

Here is an overview of zones, interfaces, and physical ports in the NXC.

Table 1 NXC Series Comparison Table

FEATURES NXC2500 NXC5500

Two USB Ports

Yes Yes

Console Port (Serial Port) DB-9 Connector RJ-45 Connector

Table 2 Zones, Interfaces, and Physical Ethernet Ports

Zones

(LAN)

A zone is a group of interfaces. Use zones to apply security settings such as firewall.

Interfaces

(Ethernet, VLAN)

Interfaces are logical entities that (layer-3) packets pass through. Use interfaces in

configuring zones, policy routes, static routes, and NAT.

Port combine physical ports into interfaces.

Physical Ethernet Ports

(P1, P2, P3, and so on)

The physical port is where you connect a cable.

Chapter 1 Introduction

NXC Series User’s Guide

17

1.2.1 Interface Types

There are two types of interfaces in the NXC. In addition to being used in various features, interfaces also

describe the network that is directly connected to it.

• Ethernet interfaces are the foundation for defining other interfaces and network policies.

• VLAN interfaces recognize tagged frames. The NXC automatically adds or removes the tags as

needed. Each VLAN can only be associated with one Ethernet interface.

Note: By default, all Ethernet interfaces are placed into vlan0, allowing the NXC to function as

a bridge device.

1.2.2 Interface and Zone Configuration

This section introduces the NXC’s default zone member physical interfaces and the default

configuration of those interfaces. This section uses the NXC5500 drawings as an example.

Figure 1 Default Network Topology

Table 3 Default Interfaces Configuration

• The LAN zone contains the ge1~ ge6 interfaces (physical ports P1~P6). By default, all LAN interfaces

are put in vlan0.

• The console port is not in a zone and can be directly accessed by a computer attached to it using a

special console-to-Ethernet adapter.

PORT INTERFACE ZONE

IP ADDRESS AND DHCP

SETTINGS

SUGGESTED USE WITH DEFAULT

SETTINGS

P1~P6 ge1~ge6 LAN

(vlan0)

192.168.1.1, DHCP server disabled Dedicated LAN connections

CONSOLE N/A None None Local management

Chapter 1 Introduction

NXC Series User’s Guide

18

1.3 Applications

These are some example applications for your NXC.

1.3.1 AP Management

Manage multiple separate Access Points (APs) from a single, persistent location. APs can also be

configured to monitor for rogue APs.

Figure 2 AP Management Example

Here, the NXC (A) connects to a number of Power over Ethernet (PoE) devices (B). They connect to the

managed Access Points (C), such as NWA5123-NI, which in turn provide access to the network for the

wireless clients (D) within their broadcast radius.

1.3.2 Wireless Security

Keep the connections between wireless clients and your APs secure with the NXC’s comprehensive

wireless security tools. APs can be configured to require WEP and WPA encryption from all wireless clients

attempting to associate with them. Furthermore, you can protect your network by monitoring for rogue

APs. Rogue APs are wireless access points operating in a network’s coverage area that are not under

the control of the network’s administrators, and can potentially open up critical holes in a network’s

security policy.

1.3.3 Captive Portal

The NXC can be configured with a captive portal, which intercepts all network traffic, regardless of

address or port, until a connecting user authenticates his or her session, through a designated login Web

page.

A

B

C

D

Chapter 1 Introduction

NXC Series User’s Guide

19

Figure 3 Applications: Captive Portal

The captive portal page only appears once per authentication session. Unless a session times out or a

user closes the connection, he or she generally will not see it again during the same session.

1.3.4 Load Balancing

With load balancing you can easily distribute wireless traffic across multiple APs to relieve strain on your

network. When a station becomes overloaded, it can automatically delay a connection until the client

associates with another network, or it can alternatively disassociate idle clients or those clients with

weak connections from the network.

1.3.5 Dynamic Channel Selection

The NXC can automatically select the radio channel upon which its APs broadcast by scanning the

area around those APs and determining what channels are currently being used by other devices not

connected to the network.

1.3.6 User-Aware Access Control

Set up security policies that restrict access to sensitive information and shared resources based on the

user who is trying to access it.

1.4 Management Overview

You can use the following ways to manage the NXC.

Web Configurator

The Web Configurator allows easy NXC setup and management using an Internet browser. This User’s

Guide provides information about the Web Configurator.

Chapter 1 Introduction

NXC Series User’s Guide

20

Command-Line Interface (CLI)

The CLI allows you to use text-based commands to configure the NXC. You can access it using remote

management (for example, SSH or Telnet) or via the physical or Web Configurator console port. See the

Command Reference Guide for CLI details. The default settings for the console port are as follows:

1.5 Object-based Configuration

The NXC stores information or settings as objects. You use these objects to configure many of the NXC’s

features and settings. Once you configure an object, you can reuse it in configuring other features.

When you change an object’s settings, the NXC automatically updates all the settings or rules that use

the object.

You can create address objects based on an interface’s IP address, subnet, or gateway. The NXC

automatically updates every rule or setting that uses these objects whenever the interface’s IP address

settings change. For example, if you change an Ethernet interface’s IP address, the NXC automatically

updates the rules or settings that use the interface-based, LAN subnet address object.

You can use the Configuration > Object screens to create objects before you configure features that

use them. If you are in a screen that uses objects, you can also usually select Create new Object to be

able to configure a new object.

Use the Object Reference screen to see what objects are configured and which configuration settings

reference specific objects.

Table 4 Console Port Default Settings

SETTING VALUE

Speed 115200 bps

Data Bits 8

Parity None

Stop Bit 1

Flow Control Off

Page is loading ...

ZyXEL NXC5500 User guide

ZyXEL NXC5500 User guide

Related papers

Other documents