NXC5500

ZyXEL NXC5500 User guide

  • Hello! I am an AI chatbot trained to assist you with the ZyXEL NXC5500 User guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
NXC Series
Wireless LAN Controller
Copyright © 2017 Zyxel Communications Corporation
LAN IP Address https://192.168.1.1
User Name admin
Password 1234
Version 5.00 Edition 1, 02/2017
NXC Series User’s Guide
2
IMPORTANT!
READ CAREFULLY BEFORE USE.
KEEP THIS GUIDE FOR FUTURE REFERENCE.
This is a User’s Guide for a series of products. Not all products support all firmware features. Screenshots
and graphics in this book may differ slightly from your product due to differences in your product
firmware or your computer operating system. Every effort has been made to ensure that the information
in this manual is accurate.
Related Documentation
•Quick Start Guide
The Quick Start Guide is designed to show you how to make the NXC hardware connections and
access the Web Configurator.
•CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) and CLI commands
to configure the NXC.
Note: It is recommended you use the Web Configurator to configure the NXC.
Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary information.
•More Information
Go to support.zyxel.com to find other information on the NXC
.
Contents Overview
NXC Series User’s Guide
3
Contents Overview
User’s Guide ......................................................................................................................................15
Introduction ........................................................................................................................................... 16
Hardware Installation and Connection ............................................................................................. 22
The Web Configurator ......................................................................................................................... 28
Technical Reference ........................................................................................................................45
Dashboard ............................................................................................................................................ 46
Monitor ................................................................................................................................................... 58
Registration ............................................................................................................................................ 95
Wireless ................................................................................................................................................... 98
Interfaces ............................................................................................................................................. 120
Policy and Static Routes .................................................................................................................... 143
Zones .................................................................................................................................................... 153
NAT ....................................................................................................................................................... 156
ALG ....................................................................................................................................................... 163
IP/MAC Binding ................................................................................................................................... 165
Captive Portal ..................................................................................................................................... 170
RTLS ....................................................................................................................................................... 191
Firewall ................................................................................................................................................. 194
User/Group .......................................................................................................................................... 203
AP Profile .............................................................................................................................................. 222
MON Profile ......................................................................................................................................... 242
ZyMesh Profile ...................................................................................................................................... 247
Addresses ............................................................................................................................................ 251
Services ................................................................................................................................................ 256
Schedules ............................................................................................................................................ 261
AAA Server .......................................................................................................................................... 265
Authentication Method ..................................................................................................................... 277
Certificates .......................................................................................................................................... 280
DHCPv6 ................................................................................................................................................ 297
System .................................................................................................................................................. 299
Log and Report ................................................................................................................................... 337
File Manager ....................................................................................................................................... 352
Diagnostics .......................................................................................................................................... 363
Packet Flow Explore ........................................................................................................................... 376
Reboot ................................................................................................................................................. 382
Shutdown ............................................................................................................................................. 383
Troubleshooting .................................................................................................................................. 384
Table of Contents
NXC Series User’s Guide
4
Table of Contents
Contents Overview .............................................................................................................................3
Table of Contents.................................................................................................................................4
Part I: User’s Guide..........................................................................................15
Chapter 1
Introduction ........................................................................................................................................16
1.1 Overview ......................................................................................................................................... 16
1.2 Zones, Interfaces, and Physical Ports ........................................................................................... 16
1.2.1 Interface Types ...................................................................................................................... 17
1.2.2 Interface and Zone Configuration ...................................................................................... 17
1.3 Applications .................................................................................................................................... 18
1.3.1 AP Management .................................................................................................................. 18
1.3.2 Wireless Security .................................................................................................................... 18
1.3.3 Captive Portal ....................................................................................................................... 18
1.3.4 Load Balancing ..................................................................................................................... 19
1.3.5 Dynamic Channel Selection ................................................................................................19
1.3.6 User-Aware Access Control ................................................................................................. 19
1.4 Management Overview ................................................................................................................ 19
1.5 Object-based Configuration ........................................................................................................ 20
1.6 Starting and Stopping the NXC .................................................................................................... 21
Chapter 2
Hardware Installation and Connection ...........................................................................................22
2.1 Rack-mounted Installation ............................................................................................................ 22
2.1.1 Rack-Mounted Installation Procedure ............................................................................... 22
2.2 Front Panel ...................................................................................................................................... 23
2.2.1 NXC2500 ................................................................................................................................. 23
2.2.2 NXC5500 ................................................................................................................................. 23
2.2.3 Front Panel LEDs .................................................................................................................... 25
2.3 Rear Panel ....................................................................................................................................... 26
Chapter 3
The Web Configurator........................................................................................................................28
3.1 Overview ......................................................................................................................................... 28
3.2 Access .............................................................................................................................................. 28
3.3 The Main Screen ............................................................................................................................. 29
Table of Contents
NXC Series User’s Guide
5
3.3.1 Title Bar ................................................................................................................................... 30
3.3.2 Navigation Panel .................................................................................................................. 36
3.3.3 Warning Messages ................................................................................................................ 41
3.3.4 Tables and Lists ...................................................................................................................... 41
Part II: Technical Reference...........................................................................45
Chapter 4
Dashboard..........................................................................................................................................46
4.1 Overview ......................................................................................................................................... 46
4.1.1 What You Can Do in this Chapter ....................................................................................... 46
4.2 Dashboard ...................................................................................................................................... 47
4.2.1 CPU Usage ............................................................................................................................. 51
4.2.2 Memory Usage ...................................................................................................................... 51
4.2.3 Session Usage ........................................................................................................................ 52
4.2.4 DHCP Table ............................................................................................................................ 53
4.2.5 Number of Login Users .......................................................................................................... 54
4.2.6 AP Status ................................................................................................................................ 55
4.2.7 Station Traffic ......................................................................................................................... 56
Chapter 5
Monitor................................................................................................................................................58
5.1 Overview ......................................................................................................................................... 58
5.1.1 What You Can Do in this Chapter ....................................................................................... 58
5.2 What You Need to Know ............................................................................................................... 59
5.3 Port Statistics ................................................................................................................................... 59
5.3.1 Port Statistics Graph ............................................................................................................. 60
5.4 Interface Status ............................................................................................................................... 61
5.5 Traffic Statistics ................................................................................................................................ 64
5.6 Session Monitor .............................................................................................................................. 67
5.7 IP/MAC Binding Monitor ................................................................................................................ 69
5.8 Login Users ...................................................................................................................................... 70
5.8.1 Dynamic Guest .................................................................................................................... 71
5.8.2 Trusted MAC Address ........................................................................................................... 72
5.9 USB Storage .................................................................................................................................... 73
5.10 Ethernet Neighbor ....................................................................................................................... 74
5.11 AP List ............................................................................................................................................ 75
5.11.1 Station Count of AP ........................................................................................................... 77
5.11.2 Config AP ............................................................................................................................ 79
5.12 Radio List ....................................................................................................................................... 83
5.12.1 AP Mode Radio Information .............................................................................................. 84
Table of Contents
NXC Series User’s Guide
6
5.13 ZyMesh Link Info ............................................................................................................................ 86
5.14 SSID Info ......................................................................................................................................... 87
5.15 Station List ..................................................................................................................................... 88
5.16 Detected Device ......................................................................................................................... 89
5.17 View Log ........................................................................................................................................ 90
5.18 View AP Log ................................................................................................................................. 92
Chapter 6
Registration.........................................................................................................................................95
6.1 Overview ......................................................................................................................................... 95
6.1.1 What You Can Do in this Chapter ....................................................................................... 95
6.1.2 What you Need to Know ...................................................................................................... 95
6.2 Registration ...................................................................................................................................... 96
6.3 Service ............................................................................................................................................. 96
Chapter 7
Wireless...............................................................................................................................................98
7.1 Overview ......................................................................................................................................... 98
7.1.1 What You Can Do in this Chapter ....................................................................................... 98
7.1.2 What You Need to Know ..................................................................................................... 98
7.2 Controller ........................................................................................................................................ 99
7.3 AP Management ............................................................................................................................ 99
7.3.1 Mgnt. AP List ........................................................................................................................ 100
7.3.2 AP Policy .............................................................................................................................. 107
7.3.3 AP Group ............................................................................................................................. 108
7.3.4 Add/Edit AP Group ............................................................................................................ 110
7.4 MON Mode ................................................................................................................................... 114
7.4.1 Add/Edit Rogue/Friendly List .............................................................................................. 115
7.5 Auto Healing ................................................................................................................................. 116
7.6 Technical Reference .................................................................................................................... 117
7.6.1 Dynamic Channel Selection .............................................................................................. 117
7.6.2 Load Balancing ................................................................................................................... 118
7.6.3 Disassociating and Delaying Connections ...................................................................... 119
Chapter 8
Interfaces..........................................................................................................................................120
8.1 Interface Overview ...................................................................................................................... 120
8.1.1 What You Can Do in this Chapter ..................................................................................... 120
8.1.2 What You Need to Know ................................................................................................... 120
8.2 Ethernet Summary ....................................................................................................................... 121
8.2.1 Edit Ethernet ........................................................................................................................ 122
8.2.2 Object References .............................................................................................................. 128
8.2.3 Add DHCPv6 Request Options .......................................................................................... 129
Table of Contents
NXC Series User’s Guide
7
8.2.4 Add/Edit DHCP Extended Options ................................................................................... 130
8.3 VLAN Interfaces ........................................................................................................................... 132
8.3.1 VLAN Summary .................................................................................................................... 133
8.3.2 Add/Edit VLAN ................................................................................................................... 134
8.4 Technical Reference .................................................................................................................... 140
Chapter 9
Policy and Static Routes..................................................................................................................143
9.1 Overview ....................................................................................................................................... 143
9.1.1 What You Can Do in this Chapter ..................................................................................... 143
9.1.2 What You Need to Know .................................................................................................. 143
9.2 Policy Route ................................................................................................................................. 144
9.2.1 Add/Edit Policy Route ........................................................................................................ 146
9.3 Static Route .................................................................................................................................. 149
9.3.1 Static Route Setting ............................................................................................................ 150
9.4 Technical Reference .................................................................................................................... 150
Chapter 10
Zones.................................................................................................................................................153
10.1 Overview ..................................................................................................................................... 153
10.1.1 What You Can Do in this Chapter ................................................................................... 153
10.1.2 What You Need to Know ................................................................................................. 153
10.2 Zone ............................................................................................................................................. 154
10.2.1 Add/Edit Zone .................................................................................................................. 154
Chapter 11
NAT....................................................................................................................................................156
11.1 Overview ..................................................................................................................................... 156
11.1.1 What You Can Do in this Chapter ................................................................................... 156
11.2 NAT Summary .............................................................................................................................. 156
11.2.1 Add/Edit NAT ..................................................................................................................... 157
11.3 Technical Reference .................................................................................................................. 160
Chapter 12
ALG....................................................................................................................................................163
12.1 Overview ..................................................................................................................................... 163
12.1.1 What You Can Do in this Chapter ................................................................................... 163
12.1.2 What You Need to Know ................................................................................................. 163
12.1.3 Before You Begin ............................................................................................................... 163
12.2 ALG .............................................................................................................................................. 163
12.3 Technical Reference .................................................................................................................. 164
Chapter 13
IP/MAC Binding................................................................................................................................165
Table of Contents
NXC Series User’s Guide
8
13.1 Overview ..................................................................................................................................... 165
13.1.1 What You Can Do in this Chapter ................................................................................... 165
13.1.2 What You Need to Know ................................................................................................. 165
13.2 IP/MAC Binding Summary ......................................................................................................... 166
13.2.1 Edit IP/MAC Binding .......................................................................................................... 167
13.2.2 Add/Edit Static DHCP Rule .............................................................................................. 168
13.3 IP/MAC Binding Exempt List ....................................................................................................... 168
Chapter 14
Captive Portal...................................................................................................................................170
14.1 Overview ..................................................................................................................................... 170
14.1.1 Captive Portal Type .......................................................................................................... 170
14.1.2 What You Can Do in this Chapter ................................................................................... 171
14.2 Captive Portal ............................................................................................................................. 171
14.2.1 Add Exceptional Services ................................................................................................174
14.3 Redirect on Controller ................................................................................................................ 175
14.3.1 Auth. Policy Add/Edit ....................................................................................................... 176
14.4 Redirect on AP ............................................................................................................................ 178
14.4.1 Auth. Policy Group Add/Edit ........................................................................................... 179
14.4.2 Auth. Policy Add/Edit ....................................................................................................... 180
14.5 Login Page .................................................................................................................................. 182
14.5.1 Custom Login and Access Pages ................................................................................... 184
14.5.2 External or Uploaded Web Portal Details ....................................................................... 186
Chapter 15
RTLS....................................................................................................................................................191
15.1 Overview ..................................................................................................................................... 191
15.1.1 What You Can Do in this Chapter ................................................................................... 191
15.2 Before You Begin ........................................................................................................................ 192
15.3 Configuring RTLS ......................................................................................................................... 192
Chapter 16
Firewall..............................................................................................................................................194
16.1 Overview ..................................................................................................................................... 194
16.1.1 What You Can Do in this Chapter ................................................................................... 194
16.1.2 What You Need to Know ................................................................................................. 194
16.2 Firewall ......................................................................................................................................... 196
16.2.1 Add/Edit Firewall Screen .................................................................................................. 198
16.3 Session Control ........................................................................................................................... 200
16.3.1 Add/Edit Session Limit ....................................................................................................... 201
Chapter 17
User/Group.......................................................................................................................................203
Table of Contents
NXC Series User’s Guide
9
17.1 Overview ..................................................................................................................................... 203
17.1.1 What You Can Do in this Chapter ................................................................................... 203
17.1.2 What You Need To Know ................................................................................................. 203
17.2 User Summary .............................................................................................................................. 205
17.2.1 Add/Edit User ..................................................................................................................... 206
17.3 Group Summary ......................................................................................................................... 209
17.3.1 Add/Edit Group ................................................................................................................ 210
17.4 Setting ......................................................................................................................................... 211
17.4.1 Edit User Authentication Timeout Settings ...................................................................... 214
17.4.2 Add/Edit Dynamic Guest Group ..................................................................................... 215
17.4.3 User Aware Login Example .............................................................................................. 216
17.4.4 Guest Manager Login Example ...................................................................................... 217
17.5 MAC Address .............................................................................................................................. 220
17.5.1 Add/Edit MAC Address ....................................................................................................221
Chapter 18
AP Profile...........................................................................................................................................222
18.1 Overview ..................................................................................................................................... 222
18.1.1 What You Can Do in this Chapter ................................................................................... 222
18.1.2 What You Need To Know ................................................................................................. 222
18.2 Radio ............................................................................................................................................ 223
18.2.1 Add/Edit Radio Profile ...................................................................................................... 224
18.3 SSID .............................................................................................................................................. 229
18.3.1 SSID List .............................................................................................................................. 229
18.3.2 Security List ......................................................................................................................... 233
18.3.3 MAC Filter List ..................................................................................................................... 238
18.3.4 Layer-2 Isolation List .......................................................................................................... 240
Chapter 19
MON Profile.......................................................................................................................................242
19.1 Overview ..................................................................................................................................... 242
19.1.1 What You Can Do in this Chapter ................................................................................... 242
19.1.2 What You Need To Know ................................................................................................. 242
19.2 MON Profile ................................................................................................................................. 242
19.2.1 Add/Edit MON Profile ....................................................................................................... 243
19.3 Technical Reference .................................................................................................................. 245
Chapter 20
ZyMesh Profile ..................................................................................................................................247
20.1 Overview ..................................................................................................................................... 247
20.1.1 What You Can Do in this Chapter ................................................................................... 248
20.2 ZyMesh Profile .............................................................................................................................. 248
20.2.1 Add/Edit ZyMesh Profile ................................................................................................... 250
Table of Contents
NXC Series User’s Guide
10
Chapter 21
Addresses.........................................................................................................................................251
21.1 Overview ..................................................................................................................................... 251
21.1.1 What You Can Do in this Chapter ................................................................................... 251
21.1.2 What You Need To Know ................................................................................................. 251
21.2 Address Summary ....................................................................................................................... 251
21.2.1 Add/Edit Address ............................................................................................................. 252
21.3 Address Group Summary ........................................................................................................... 253
21.3.1 Add/Edit Address Group Rule ........................................................................................ 254
Chapter 22
Services.............................................................................................................................................256
22.1 Overview ..................................................................................................................................... 256
22.1.1 What You Can Do in this Chapter ................................................................................... 256
22.1.2 What You Need to Know ................................................................................................. 256
22.2 Service Summary ........................................................................................................................ 257
22.2.1 Add/Edit Service Rule ...................................................................................................... 258
22.3 Service Group Summary ........................................................................................................... 259
22.3.1 Add/Edit Service Group Rule .......................................................................................... 259
Chapter 23
Schedules.........................................................................................................................................261
23.1 Overview ..................................................................................................................................... 261
23.1.1 What You Can Do in this Chapter ................................................................................... 261
23.1.2 What You Need to Know ................................................................................................. 261
23.2 Schedule Summary .................................................................................................................... 261
23.2.1 Add/Edit Schedule One-Time Rule ................................................................................ 263
23.2.2 Add/Edit Schedule Recurring Rule ................................................................................ 264
Chapter 24
AAA Server .......................................................................................................................................265
24.1 Overview ..................................................................................................................................... 265
24.1.1 What You Can Do in this Chapter ................................................................................... 265
24.1.2 What You Need To Know ................................................................................................. 265
24.2 Active Directory / LDAP ............................................................................................................. 268
24.2.1 Add/Edit Active Directory / LDAP Server ....................................................................... 269
24.3 RADIUS ......................................................................................................................................... 273
24.3.1 Add/Edit RADIUS .............................................................................................................. 273
Chapter 25
Authentication Method ...................................................................................................................277
25.1 Overview ..................................................................................................................................... 277
25.1.1 What You Can Do in this Chapter ................................................................................... 277
Table of Contents
NXC Series User’s Guide
11
25.1.2 Before You Begin ............................................................................................................... 277
25.2 Authentication Method ............................................................................................................. 277
25.2.1 Add Authentication Method ........................................................................................... 278
Chapter 26
Certificates .......................................................................................................................................280
26.1 Overview ..................................................................................................................................... 280
26.1.1 What You Can Do in this Chapter ................................................................................... 280
26.1.2 What You Need to Know ................................................................................................. 280
26.1.3 Verifying a Certificate ...................................................................................................... 282
26.2 My Certificates ........................................................................................................................... 283
26.2.1 Adding My Certificates .................................................................................................... 285
26.2.2 Editing My Certificates ...................................................................................................... 287
26.2.3 Importing Certificates ...................................................................................................... 290
26.3 Trusted Certificates ..................................................................................................................... 291
26.3.1 Editing Trusted Certificates ............................................................................................... 293
26.3.2 Importing Trusted Certificates ..........................................................................................295
26.4 Technical Reference .................................................................................................................. 296
Chapter 27
DHCPv6 .............................................................................................................................................297
27.1 Overview ..................................................................................................................................... 297
27.1.1 What You Can Do in this Chapter ................................................................................... 297
27.2 DHCPv6 Request ........................................................................................................................ 297
27.2.1 Add/Edit DHCPv6 Request Object ................................................................................ 298
Chapter 28
System...............................................................................................................................................299
28.1 Overview ..................................................................................................................................... 299
28.1.1 What You Can Do in this Chapter ................................................................................... 299
28.2 Host Name ................................................................................................................................... 299
28.3 USB Storage ................................................................................................................................. 300
28.4 Date and Time ........................................................................................................................... 301
28.4.1 Pre-defined NTP Time Servers List ..................................................................................... 303
28.4.2 Time Server Synchronization ............................................................................................ 303
28.5 Console Speed ........................................................................................................................... 304
28.6 DNS Overview ............................................................................................................................ 305
28.6.1 DNS Server Address Assignment ...................................................................................... 305
28.6.2 Configuring the DNS Screen ............................................................................................ 305
28.6.3 Address Record ................................................................................................................ 308
28.6.4 PTR Record ......................................................................................................................... 308
28.6.5 Adding an Address/PTR Record ...................................................................................... 308
28.6.6 Domain Zone Forwarder ................................................................................................. 309
Table of Contents
NXC Series User’s Guide
12
28.6.7 Add Domain Zone Forwarder .......................................................................................... 309
28.6.8 MX Record ........................................................................................................................ 310
28.6.9 Add MX Record ................................................................................................................. 310
28.6.10 Add Service Control ....................................................................................................... 310
28.7 WWW Overview ......................................................................................................................... 311
28.7.1 Service Access Limitations ............................................................................................... 311
28.7.2 System Timeout .................................................................................................................. 312
28.7.3 HTTPS ................................................................................................................................... 312
28.7.4 Configuring WWW Service Control ................................................................................. 313
28.7.5 Service Control Rules ........................................................................................................ 315
28.7.6 HTTPS Example ................................................................................................................... 316
28.8 SSH ............................................................................................................................................. 322
28.8.1 How SSH Works .................................................................................................................. 323
28.8.2 SSH Implementation on the NXC .................................................................................... 324
28.8.3 Requirements for Using SSH ..............................................................................................324
28.8.4 Configuring SSH ................................................................................................................. 324
28.8.5 Examples of Secure Telnet Using SSH .............................................................................. 325
28.9 Telnet ........................................................................................................................................... 326
28.10 FTP .............................................................................................................................................. 328
28.11 SNMP ......................................................................................................................................... 329
28.11.1 Supported MIBs ............................................................................................................... 330
28.11.2 SNMP Traps ....................................................................................................................... 330
28.11.3 Configuring SNMP ........................................................................................................... 331
28.11.4 Adding or Editing an SNMPv3 User Profile .................................................................... 333
28.12 Authentication Server ............................................................................................................. 333
28.12.1 Add/Edit Trusted RADIUS Client .................................................................................... 334
28.13 Language ................................................................................................................................. 335
28.14 IPv6 ............................................................................................................................................. 336
Chapter 29
Log and Report.................................................................................................................................337
29.1 Overview ..................................................................................................................................... 337
29.1.1 What You Can Do In this Chapter .................................................................................. 337
29.2 Email Daily Report ....................................................................................................................... 337
29.3 Log Settings ................................................................................................................................ 339
29.3.1 Log Settings Summary ...................................................................................................... 340
29.3.2 Editing System Log Settings ............................................................................................. 342
29.3.3 Editing USB Storage Log Settings .................................................................................... 345
29.3.4 Editing Remote Server Log Settings ............................................................................... 346
29.3.5 Log Category Settings ..................................................................................................... 348
Chapter 30
File Manager ....................................................................................................................................352
Table of Contents
NXC Series User’s Guide
13
30.1 Overview ..................................................................................................................................... 352
30.1.1 What You Can Do in this Chapter ................................................................................... 352
30.1.2 What you Need to Know .................................................................................................. 352
30.2 Configuration File ....................................................................................................................... 354
30.3 Firmware Package .................................................................................................................... 358
30.4 Shell Script ................................................................................................................................... 360
Chapter 31
Diagnostics.......................................................................................................................................363
31.1 Overview ..................................................................................................................................... 363
31.1.1 What You Can Do in this Chapter ................................................................................... 363
31.2 Diagnostics ................................................................................................................................. 363
31.2.1 Diagnostics - AP Configuration ....................................................................................... 364
31.2.2 Diagnostics Files ................................................................................................................. 366
31.3 Packet Capture ......................................................................................................................... 366
31.3.1 Packet Capture Files ........................................................................................................ 369
31.3.2 Example of Viewing a Packet Capture File ................................................................... 370
31.4 Core Dump .................................................................................................................................. 370
31.4.1 Core Dump Files ................................................................................................................ 371
31.5 System Log ................................................................................................................................. 372
31.6 Wireless Frame Capture ............................................................................................................ 373
31.6.1 Wireless Frame Capture Files .......................................................................................... 374
Chapter 32
Packet Flow Explore ........................................................................................................................376
32.1 Overview ..................................................................................................................................... 376
32.1.1 What You Can Do in this Chapter ................................................................................... 376
32.2 The Routing Status Screen ......................................................................................................... 376
32.3 The SNAT Status Screen .............................................................................................................. 379
Chapter 33
Reboot...............................................................................................................................................382
33.1 Overview ..................................................................................................................................... 382
33.1.1 What You Need To Know ................................................................................................. 382
33.2 Reboot ......................................................................................................................................... 382
Chapter 34
Shutdown..........................................................................................................................................383
34.1 Overview ..................................................................................................................................... 383
34.1.1 What You Need To Know ................................................................................................. 383
34.2 Shutdown ..................................................................................................................................... 383
Chapter 35
Troubleshooting................................................................................................................................384
Table of Contents
NXC Series User’s Guide
14
35.1 Overview ..................................................................................................................................... 384
35.1.1 General .............................................................................................................................. 384
35.1.2 Wireless ............................................................................................................................... 389
35.2 Resetting the NXC ...................................................................................................................... 391
35.3 Getting More Troubleshooting Help .........................................................................................391
Appendix A Log Descriptions......................................................................................................... 392
Appendix B Common Services...................................................................................................... 419
Appendix C Importing Certificates ............................................................................................... 422
Appendix D Wireless LANs .............................................................................................................. 435
Appendix E IPv6............................................................................................................................... 447
Appendix F Customer Support ...................................................................................................... 455
Appendix G Legal Information...................................................................................................... 461
Index.................................................................................................................................................466
15
PART I
User’s Guide
NXC Series User’s Guide
16
CHAPTER 1
Introduction
1.1 Overview
This User’s Guide covers the following models: NXC2500 and NXC5500.
The NXC is a comprehensive wireless LAN controller. Its flexible configuration helps network
administrators set up wireless LAN networks and efficiently enforce security policies over them. In
addition, the NXC provides excellent throughput, making it an ideal solution for reliable, secure service.
The NXC’s security features include firewall and certificates. It also provides captive portal configuration,
NAT, port forwarding, policy routing, DHCP server, extensive wireless AP control options, and many other
powerful features. Flexible configuration helps you set up the network and enforce security policies
efficiently.
The front panel physical Gigabit Ethernet ports (labeled P1, P2, P3, and so on) are mapped to Gigabit
Ethernet (ge) interfaces. By default P1 is mapped to ge1, P2 is mapped to ge2 and so on.
The default LAN IP address is 192.168.1.1.
The default administrator login user name and password are “admin” and “1234” respectively.
1.2 Zones, Interfaces, and Physical Ports
Here is an overview of zones, interfaces, and physical ports in the NXC.
Table 1 NXC Series Comparison Table
FEATURES NXC2500 NXC5500
Two USB Ports
Yes Yes
Console Port (Serial Port) DB-9 Connector RJ-45 Connector
Table 2 Zones, Interfaces, and Physical Ethernet Ports
Zones
(LAN)
A zone is a group of interfaces. Use zones to apply security settings such as firewall.
Interfaces
(Ethernet, VLAN)
Interfaces are logical entities that (layer-3) packets pass through. Use interfaces in
configuring zones, policy routes, static routes, and NAT.
Port combine physical ports into interfaces.
Physical Ethernet Ports
(P1, P2, P3, and so on)
The physical port is where you connect a cable.
Chapter 1 Introduction
NXC Series User’s Guide
17
1.2.1 Interface Types
There are two types of interfaces in the NXC. In addition to being used in various features, interfaces also
describe the network that is directly connected to it.
Ethernet interfaces are the foundation for defining other interfaces and network policies.
VLAN interfaces recognize tagged frames. The NXC automatically adds or removes the tags as
needed. Each VLAN can only be associated with one Ethernet interface.
Note: By default, all Ethernet interfaces are placed into vlan0, allowing the NXC to function as
a bridge device.
1.2.2 Interface and Zone Configuration
This section introduces the NXC’s default zone member physical interfaces and the default
configuration of those interfaces. This section uses the NXC5500 drawings as an example.
Figure 1 Default Network Topology
Table 3 Default Interfaces Configuration
The LAN zone contains the ge1~ ge6 interfaces (physical ports P1~P6). By default, all LAN interfaces
are put in vlan0.
The console port is not in a zone and can be directly accessed by a computer attached to it using a
special console-to-Ethernet adapter.
PORT INTERFACE ZONE
IP ADDRESS AND DHCP
SETTINGS
SUGGESTED USE WITH DEFAULT
SETTINGS
P1~P6 ge1~ge6 LAN
(vlan0)
192.168.1.1, DHCP server disabled Dedicated LAN connections
CONSOLE N/A None None Local management
Chapter 1 Introduction
NXC Series User’s Guide
18
1.3 Applications
These are some example applications for your NXC.
1.3.1 AP Management
Manage multiple separate Access Points (APs) from a single, persistent location. APs can also be
configured to monitor for rogue APs.
Figure 2 AP Management Example
Here, the NXC (A) connects to a number of Power over Ethernet (PoE) devices (B). They connect to the
managed Access Points (C), such as NWA5123-NI, which in turn provide access to the network for the
wireless clients (D) within their broadcast radius.
1.3.2 Wireless Security
Keep the connections between wireless clients and your APs secure with the NXC’s comprehensive
wireless security tools. APs can be configured to require WEP and WPA encryption from all wireless clients
attempting to associate with them. Furthermore, you can protect your network by monitoring for rogue
APs. Rogue APs are wireless access points operating in a network’s coverage area that are not under
the control of the network’s administrators, and can potentially open up critical holes in a network’s
security policy.
1.3.3 Captive Portal
The NXC can be configured with a captive portal, which intercepts all network traffic, regardless of
address or port, until a connecting user authenticates his or her session, through a designated login Web
page.
A
B
C
D
Chapter 1 Introduction
NXC Series User’s Guide
19
Figure 3 Applications: Captive Portal
The captive portal page only appears once per authentication session. Unless a session times out or a
user closes the connection, he or she generally will not see it again during the same session.
1.3.4 Load Balancing
With load balancing you can easily distribute wireless traffic across multiple APs to relieve strain on your
network. When a station becomes overloaded, it can automatically delay a connection until the client
associates with another network, or it can alternatively disassociate idle clients or those clients with
weak connections from the network.
1.3.5 Dynamic Channel Selection
The NXC can automatically select the radio channel upon which its APs broadcast by scanning the
area around those APs and determining what channels are currently being used by other devices not
connected to the network.
1.3.6 User-Aware Access Control
Set up security policies that restrict access to sensitive information and shared resources based on the
user who is trying to access it.
1.4 Management Overview
You can use the following ways to manage the NXC.
Web Configurator
The Web Configurator allows easy NXC setup and management using an Internet browser. This User’s
Guide provides information about the Web Configurator.
Chapter 1 Introduction
NXC Series User’s Guide
20
Command-Line Interface (CLI)
The CLI allows you to use text-based commands to configure the NXC. You can access it using remote
management (for example, SSH or Telnet) or via the physical or Web Configurator console port. See the
Command Reference Guide for CLI details. The default settings for the console port are as follows:
1.5 Object-based Configuration
The NXC stores information or settings as objects. You use these objects to configure many of the NXC’s
features and settings. Once you configure an object, you can reuse it in configuring other features.
When you change an object’s settings, the NXC automatically updates all the settings or rules that use
the object.
You can create address objects based on an interface’s IP address, subnet, or gateway. The NXC
automatically updates every rule or setting that uses these objects whenever the interface’s IP address
settings change. For example, if you change an Ethernet interface’s IP address, the NXC automatically
updates the rules or settings that use the interface-based, LAN subnet address object.
You can use the Configuration > Object screens to create objects before you configure features that
use them. If you are in a screen that uses objects, you can also usually select Create new Object to be
able to configure a new object.
Use the Object Reference screen to see what objects are configured and which configuration settings
reference specific objects.
Table 4 Console Port Default Settings
SETTING VALUE
Speed 115200 bps
Data Bits 8
Parity None
Stop Bit 1
Flow Control Off
/