Wireless
Use the Wireless screens to configure how the Zyxel Device manages supported Access Points (APs). Supported APs should be in managed mode. See the product page Licenses tab for a list of supported APs.
Note: See Overview to see which models have built-in Wi-Fi functionality and which models do not support the AP controller function.
Controller Screen
Use this screen to set how the Zyxel Device allows new APs to connect to the network.
Configuration > Wireless > Controller 
Label
Description
Registration Type
Select Manual to add each AP to the Zyxel Device for management, or Always Accept to automatically add APs to the Zyxel Device for management.
If you select Manual, then go to Monitor > Wireless > AP Information > AP List, select an AP to be managed and then click Add to Mgnt AP List. That AP will then appear in Configuration > Wireless > Controller > Mgnt. AP List.
*Select the Manual option for managing a specific set of APs. This is recommended as the registration mechanism cannot automatically differentiate between friendly and rogue APs.
APs must be connected to the Zyxel Device by a wired connection or network.
Apply
Click Apply to save your changes back to the Zyxel Device.
Reset
Click Reset to return the screen to its last-saved settings.
AP Management Screens
Use these screens to manage all of the APs connected to the Zyxel Device. Click on the icon to go to the OneSecurity website where there is guidance on configuration walkthroughs and other information.
Mgnt. AP List
Configuration > Wireless > AP Management > Mgnt. AP List 
Label
Description
Hide/ Show Advanced Settings
Click this button to display a greater or lesser number of configuration fields.
AP List
Select the type of APs you want to display.
Select All to show all kinds of APs that are currently or used to be connected to the ZyWALL.
Select NebulaFlexPRO to show the APs that can work in Nebula cloud management mode.
Status
Select the status of APs you want to display.
Keyword
Enter a keyword to display the APs that include it in their AP information, such as model number, firmware version, MAC address and so on. This field is case-sensitive.
Search
Click this to update the list of APs based on the search criteria.
Your search criteria is retained when navigating between screens.
Reset
Click this to return the search criteria to the factory defaults and display all currently or previously connected APs without a filter.
Enable Column Freeze
Select the check box to freeze the first column (#) so it will be always visible when you scroll through the list. Clear the check box to unfreeze the column.
Edit Selected Rule
Select an AP and click this button to edit its properties.
Add to Mgnt
Select an AP and click this to add the selected AP to the managed AP list.
Reboot device
Select an AP and click this button to force it to restart.
Remove Rule
Select an AP and click this button to remove it from the list.
*If in the Configuration > Wireless > Controller screen you set the Registration Type to Always Accept, then as soon as you remove an AP from this list it reconnects.
DCS Now
Select one or multiple APs and click this button to use DCS (Dynamic Channel Selection) to allow the AP to automatically find a less-used channel in an environment where there are many APs and there may be interference.
*You should have enabled DCS in the applied AP radio profile before the APs can use DCS.
*DCS is not supported on the radio which is working in repeater AP mode.
More Information
Select an AP and click this to view a daily station count about the selected AP. The count records station activity on the AP over a consecutive 24 hour period.
Radio Info
Select an online AP and click this button to go to the Monitor > Wireless > AP Information > Radio List screen to view detailed information about the AP’s radios.
Query Controller Log
Select an AP and click this button to go to the Monitor > Log > View AP Log screen to view the selected AP’s current log messages.
Nebula
Select an AP and click this to open a screen where you can set whether the AP’s IP address and VLAN settings will be changed when it goes into Nebula cloud management mode.
*The AP will be set to Nebula cloud management mode and removed from the managed AP list right after you click OK.
Upgrade FW
Select one or more APs and click this button to update the APs’ firmware version.
Suppression On
Select an AP and click this button to enable the AP’s LED suppression mode. All the LEDs of the AP will turn off after the AP is ready. This button is not available if the selected AP doesn’t support suppression mode.
Suppression Off
Select an AP and click this button to disable the AP’s LED suppression mode. The AP LEDs stay lit after the AP is ready. This button is not available if the selected AP doesn’t support suppression mode.
Locator On
Select an AP and click this button to run the locator feature. The AP’s Locator LED will start to blink for 10 minutes by default. It will show the actual location of the AP between several devices in the network.
#
This field is a sequential value, and it is not associated with any entry.
Status
This visually displays the AP’s connection status with icons.
Description
This field displays the AP’s description, which you can configure by selecting the AP’s entry and clicking the Edit button.
CPU Usage
This displays what percentage of the AP’s processing capability is currently being used.
IP Address
This field displays the IP address of the AP.
MAC Address
This field displays the MAC address of the AP.
Station 2.4G
This displays the number of stations (aka wireless clients) associated with the AP’s 2.4 GHz WiFi network.
Station 5G
This displays the number of stations (aka wireless clients) associated with the AP’s 5 GHz WiFi network.
Recent On-line Time
 
Power
This displays the AP’s power status.
Full power - the AP receives optimal power from the power sourcing equipment.
Force Full Power- the power sourcing equipment provides full power to the AP even in cases where a PoE injector that does not support PoE negotiation is used.
Limited power - the AP receives less than optimal power from the power sourcing equipment. This may be due to the PoE switch/injector using an earlier PoE standard. This may impact wireless transmission throughput or disable a radio transmitter, depending on the AP’s power requirements.
Off-Line - the AP is not receiving power.
Type
This indicates whether the AP is on the managed AP list (Mgmt) or not (Un-Mgmt).
This displays Limited when the AP is configured by conflicted or unsupported setting(s).
Model
This field displays the AP’s hardware model information. It displays N/A (not applicable) only when the AP disconnects from the NXC and the information is unavailable as a result.
R1 Mode/ Profile/ ZyMesh Profile
This field displays the operating mode (AP, MON, root, or repeater), AP radio profile name and ZyMesh profile name for Radio 1. It displays n/a for the AP profile for a radio not using an AP profile or - for the ZyMesh profile for a radio not using a ZyMesh profile.
R2 Mode/ Profile/ ZyMesh Profile
This field displays the operating mode (AP, MON, root, or repeater), AP radio profile name and ZyMesh profile name for Radio 2. It displays n/a for the AP profile for a radio not using an AP profile or - for the ZyMesh profile for a radio not using a ZyMesh profile.
Version
This displays the AP’s current firmware version.
Group
This field displays the name of the AP group to which the AP belongs.
The group becomes editable immediately upon clicking.
Mgnt. VLAN ID(AC/AP)
This displays the Access Controller (the NXC) management VLAN ID setting for the AP and the runtime management VLAN ID setting on the AP.
VLAN Conflict displays if the AP’s management VLAN ID does not match the NXC’s management VLAN ID setting for the AP. This field displays n/a if the NXC cannot get VLAN information from the AP.
Last Off-line Time
This displays the most recent time the AP went off-line. N/A displays if the AP has either not come on-line or gone off-line since the NXC last started up.
LED status
This displays the AP LED status.
N/A displays if the AP does not support LED suppression mode and/or have a locator LED to show the actual location of the AP.
A gray LED icon signifies that the AP LED suppression mode is enabled. All the LEDs of the AP will turn off after the AP is ready.
A green LED icon signifies that the AP LED suppression mode is disabled and the AP LEDs stay lit after the AP is ready.
A sun icon signifies that the AP’s locator LED is blinking.
A circle signifies that the AP’s locator LED is extinguished.
Ethernet Uplink
This field displays the AP’s uplink port speed and duplex mode (Full or Half).
Bluetooth
This field displays the AP’s Bluetooth Low Energy (BLE) capability. Bluetooth Low Energy, which is also known as Bluetooth Smart, transmits less data over a shorter distance and consumes less power than classic Bluetooth. APs communicate with other BLE enabled devices using advertisements.
N/A displays if the AP does not support BLE.
Unavailable displays if the AP supports Bluetooth, but there is no BLE USB dongle connected to the USB port of the AP.
Available displays if the AP supports Bluetooth, detects a BLE device and advertising is inactive. Some APs, such as the WAC5302D-S. need to have a supported BLE USB dongle attached to act as a beacon to broadcast packets.
Advertising displays if the AP supports Bluetooth, detects a BLE device and advertising is activated, which means the BLE device can broadcasts packets to every device around it.
Location
This field displays the AP’s location you configured.
Roaming Group
This field displays the name of roaming group to which the AP belongs.
Load Balancing Group
This field displays the load balancing group(s) to which the AP belongs.
S/N
This field displays the serial number of the AP.
System Name
This field displays the system name to identify the AP on a network.
Apply
Click Apply to save your changes back to the Zyxel Device.
Refresh
Click Refresh to update the information in this screen.
Edit AP List
Select an AP and click the Edit button in the Configuration > Wireless > AP Management table to display this screen.
Configuration > Wireless > AP Management > Mgnt. AP List > Edit AP List 
Label
Description
Create new Object
Use this menu to create a new Radio Profile object to associate with this AP.
MAC
This displays the MAC address of the selected AP.
Model
This field displays the AP’s hardware model information. It displays N/A (not applicable) only when the AP disconnects from the Zyxel Device and the information is unavailable as a result.
S/N
This displays the serial number of the selected AP.
Description
Enter a description for this AP. You can use up to 31 characters, spaces and underscores allowed.
Group Setting
Select an AP group to which you want this AP to belong.
System Name
Enter a name to identify the AP on a network. This is usually the AP’s fully qualified domain name.
Location
Specify the name of the place where the AP is located.
Roaming Group
Specify the name of the roaming group to which the AP belongs. You can use up to 31 alphanumeric and @# characters. Dashes and underscores are also allowed. The name should start with a letter or digit.
The 802.11k neighbor list a client requests from the AP is generated according to the roaming group and RCPI (Received Channel Power Indicator) value of its neighbor APs.
When a client wants to roam from the current AP to another, other APs in the same roaming group or not in a roaming group will be candidates for roaming. Neighbor APs in a different roaming group will be excluded from the 802.11k neighbor lists even when the neighbor AP has the best signal strength.
If the AP’s roaming group is not configured, any neighbor APs can be candidates for roaming.
Load Balancing Group 1/2
Load balancing is only applied to APs within the same group. If a load balancing group is not assigned to an AP, it will belong to a default group.
Each AP can belong to up to two groups.
Radio 1/2 Setting
 
Override Group Radio Setting
Select this option to overwrite the AP radio settings with the settings you configure here.
OP Mode
Select the operating mode for radio 1 or radio 2.
AP Mode means the AP can receive connections from wireless clients and pass their data traffic through to the Zyxel Device to be managed (or subsequently passed on to an upstream gateway for managing).
MON Mode means the AP monitors the broadcast area for other APs, then passes their information on to the Zyxel Device where it can be determined if those APs are friendly or rogue. If an AP is set to this mode it cannot receive connections from wireless clients.
Root AP means the radio acts as an AP and also supports the wireless connections with other APs (in repeater mode) to form a ZyMesh to extend its wireless network.
Repeater AP means the radio can establish a wireless connection with other APs (in either root AP or repeater mode).
*To prevent bridge loops, do NOT set both radios on a managed AP to Repeater AP mode.
*The root AP and repeater AP(s) in a ZyMesh must use the same country code and AP radio profile settings in order to communicate with each other.
*Ensure you restart the managed AP after you change its operating mode.
Radio 1/2 AP Profile
Select an AP profile from the list. If no profile exists, you can create a new one through the Create new Object menu.
Radio 1/2 Profile
Select a monitor profile from the list. If no profile exists, you can create a new one through the Create new Object menu.
Radio 1/2 ZyMesh Profile
This field is available only when the radio is in Root AP or Repeater AP mode. Select the ZyMesh profile the radio uses to connect to a root AP or repeater.
Enable Wireless Bridging
This field is available only when the radio is in Repeater AP mode.
Select this option to enable wireless bridging on the radio.
The managed AP must support LAN provision and the radio should be in repeater mode. VLAN and bridge interfaces are created automatically according to the LAN port’s VLAN settings. When wireless bridging is enabled, the managed repeater AP can still transmit data through its Ethernet port(s) after the ZyMesh link is up. Be careful to avoid bridge loops. The managed APs in the same ZyMesh must use the same static VLAN ID.
Override Group Output Power Setting
Select this option to overwrite the AP output power setting with the setting you configure here.
Output Power
Set the output power of the AP.
Override Group SSID Setting
Select this option to overwrite the AP SSID profile setting with the setting you configure here.
This section allows you to associate an SSID profile with the radio.
IP Setting
 
Force Overwrite IP Setting
Select this to have the Zyxel Device change the AP’s IP address setting to match the configuration in this screen.
Get Automatically
Select this to have the AP act as a DHCP client and automatically get the IP address, subnet mask, and gateway address from a DHCP server.
Use Fixed IP Address
Select this if you want to specify the IP address, subnet mask, gateway and DNS server address manually.
IP Address
Enter the IP address for the AP.
Subnet Mask
Enter the subnet mask of the AP in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all devices in the network.
Gateway
Enter the IP address of the gateway. The AP sends packets to the gateway when it does not know how to route the packet to its destination. The gateway should be on the same network as the AP.
DNS Server IP Address
Enter the IP address of the DNS server.
VLAN Settings
 
Override Group VLAN Setting
Select this option to overwrite the AP VLAN setting with the setting you configure here.
Force Overwrite VLAN Config
Select this to have the Zyxel Device change the AP’s management VLAN to match the configuration in this screen.
Management VLAN ID
Enter a VLAN ID for this AP.
As Native VLAN
Select this option to treat this VLAN ID as a VLAN created on the NXC and not one assigned to it from outside the network.
Storm Control Setting
 
Broadcast Storm Control
Enabling this will drop ingress broadcast traffic in the physical Ethernet port if it exceeds the maximum traffic rate. The maximum traffic rate can be changed using the CLI (see CLI Reference Guide).
Multicast Storm Control
Enabling this will drop ingress multicast traffic in the physical Ethernet port if it exceeds the maximum traffic rate. The maximum traffic rate can be changed using the CLI (see CLI Reference Guide)
Rogue AP Detection Setting
 
Override Group Rogue AP Detection Setting
Select this option to overwrite the AP Rogue Detection Settings with the settings you configure here
Enable Rogue AP Detection
Select this option to detect Rogue APs in the network.
Antenna Setting
This section is available only when the AP has an antenna switch. The screen varies depending on whether the AP has a physical antenna switch or allows you to change antenna orientation settings on a per-radio basis or on a per-AP basis.
Wall/ Ceiling
This allows you to adjust coverage depending on the antenna orientation of the AP’s radios for better coverage.
Select Wall if you mount the AP to a wall. Select Ceiling if the AP is mounted on a ceiling. You can switch from Wall to Ceiling if there are still wireless dead zones, and vice versa.
LED Suppression Mode Configuration
This section is available only when the AP supports LED suppression mode.
Suppression On
Select this option to enable the AP’s LED suppression mode. All the LEDs of the AP will turn off after the AP is ready.
If the check box is unchecked, it means the LEDs will stay lit after the AP is ready.
Power Setting
Enable Force override the power mode to full power if you are using a PoE injector that does not support PoE negotiation. Otherwise, the AP cannot draw full power from the power sourcing equipment. Enable this power mode to improve the AP’s performance in this situation.
*Ensure that the power sourcing equipment can supply enough power to the AP to avoid abnormal system reboots.
*Only enable this if you are using a passive PoE injector that is not IEEE 802.3at/bt compliant but can still provide full power.
Locator LED Configuration
This section is available only when the AP has a locator LED.
Turn On/ Turn Off
When the locator LED is off, click the Turn On button to activate the locator function. It will show the actual location of the AP between several devices in the network.
If the locator LED is blinking, click the Turn Off button to stop the locator LED from blinking immediately.
Automatically Extinguish After
Enter a time interval between 1 and 60 minutes to stop the locator LED from blinking. The locator LED will start to blink for the number of minutes set here.
If you make changes to the time default setting, it will be stored as the default when the AP restarts.
Reset AP Configuration
This section is available only when the AP is online.
Apply Factory Default
Click the button to reset all of the AP settings to the factory defaults.
OK
Click OK to save your changes back to the Zyxel Device.
Cancel
Click Cancel to close the window with changes unsaved.
AP Policy
Use this screen to configure the AP controller’s IP address on the managed APs and determine the action the managed APs take if the current AP controller fails.
Configuration > Wireless > AP Management > AP Policy 
Label
Description
Force Override AC IP Config on AP
Select this to have the Zyxel Device change the AP controller’s IP address on the managed AP(s) to match the configuration in this screen.
Override Type
Select Auto to have the managed AP(s) automatically send broadcast packets to find any other available AP controllers.
Select Manual to replace the AP controller’s IP address configured on the managed AP(s) with the one(s) you specified below.
Primary Controller
Specify the IP address of the primary AP controller if you set Override Type to Manual.
Secondary Controller
Specify the IP address of the secondary AP controller if you set Override Type to Manual.
Fall back to Primary Controller when possible
Select this option to have the managed AP(s) change back to associate with the primary AP controller as soon as the primary AP controller is available.
Fall Back Check Interval
Set how often the managed AP(s) check whether the primary AP controller is available.
Firmware Updating
 
Updating Type
Specify how you want the Zyxel Device to upgrade AP firmware.
Select CAPWAP to have the Zyxel Device use CAPWAP (Control and Provisioning of Wireless Access Points protocol) to automatically update firmware on the managed APs.
Select FTP to allow the managed APs to download the latest firmware from the Zyxel Device using FTP.
Updating Mode
Select Auto so the Zyxel Device checks the AP’s firmware version and updates it automatically to the Zyxel Device’s latest supported version.
Select Manual so you update the AP firmware manually.
Apply
Click Apply to save your changes back to the Zyxel Device.
Reset
Click Reset to return the screen to its last-saved settings.
AP Group
Use this screen to configure AP groups, which define the radio, port, VLAN and load balancing settings and apply the settings to all APs in the group. An AP can belong to one AP group at a time.
Configuration > Wireless > AP Management > AP Group 
Label
Description
Group Setting
 
Default Group
Select a group that is used as the default group.
Any AP that is not configured to associate with a specific AP group belongs to the default group automatically.
Group Summary
 
Add
Click this button to create a new AP group.
Edit
Select an entry and click this button to edit its properties.
Remove
Select an entry and click this button to remove it from the list.
*You cannot remove a group with which an AP is associated.
Reboot
Select an AP group and click this button to force the AP(s) in this group to restart.
DCS Now
Select one or multiple groups and click this button to use DCS (Dynamic Channel Selection) to allow the APs in the group(s) to automatically find a less-used channel in an environment where there are many APs and there may be interference.
*You should have enabled DCS in the applied AP radio profile before the APs can use DCS.
*DCS is not supported on the radio which is working in repeater AP mode.
Upgrade Now
Select an AP group and click this button to upgrade the firmware of the APs to the Zyxel Device’s latest supported version.
#
This is the index number of the group in the list.
Group Name
This is the name of the group.
Member Count
This is the total number of APs which belong to this group.
Apply
Click Apply to save your changes back to the Zyxel Device.
Reset
Click Reset to return the screen to its last-saved settings.
Add/Edit AP Group
Click Add or select an AP group and click the Edit button in the Configuration > Wireless > AP Management > AP Group table to display this screen.
Configuration > Wireless > AP Management > AP Group > Add/Edit 
Label
Description
General Settings
 
Group Name
Enter a name for this group. You can use up to 31 alphanumeric characters. Dashes and underscores are also allowed. The name should start with a letter.
Description
Enter a description for this group. You can use up to 31 characters, spaces and underscores allowed.
Location
Specify the name of the place where the AP group is located.
Radio 1/2 Setting
 
OP Mode
Select the operating mode for radio 1 or radio 2.
AP Mode means the AP can receive connections from wireless clients and pass their data traffic through to the Zyxel Device to be managed (or subsequently passed on to an upstream gateway for managing).
MON Mode means the AP monitors the broadcast area for other APs, then passes their information on to the Zyxel Device where it can be determined if those APs are friendly or rogue. If an AP is set to this mode it cannot receive connections from wireless clients.
Root AP means the radio acts as an AP and also supports the wireless connections with other APs (in repeater mode) to form a ZyMesh to extend its wireless network.
Repeater AP means the radio can establish a wireless connection with other APs (in either root AP or repeater mode).
*To prevent bridge loops, do NOT set both radios on a managed AP to Repeater AP mode.
*The root AP and repeater AP(s) in a ZyMesh must use the same country code and AP radio profile settings in order to communicate with each other.
*Ensure you restart the managed AP after you change its operating mode.
Radio 1/2 AP Profile
Select an AP profile from the list. If no profile exists, you can create a new one through the Create new Object menu.
Radio 1/2 Profile
Select a monitor profile from the list. If no profile exists, you can create a new one through the Create new Object menu.
Radio 1/2 ZyMesh Profile
This field is available only when the radio is in Root AP or Repeater AP mode.
Enable Wireless Bridging
Select the ZyMesh profile the radio uses to connect to a root AP or repeater.
This field is available only when the radio is in Repeater AP mode.
Select this option to enable wireless bridging on the radio.
The managed AP must support LAN provision and the radio should be in repeater mode.
VLAN and bridge interfaces are created automatically according to the LAN port’s VLAN settings. When wireless bridging is enabled, the managed repeater AP can still transmit data through its Ethernet port(s) after the ZyMesh link is up. Be careful to avoid bridge loops.
The managed APs in the same ZyMesh must use the same static VLAN ID.
Output Power
Set the maximum output power of the AP.
If there is a high density of APs in an area, decrease the output power of the managed AP to reduce interference with other APs.
*Reducing the output power also reduces the Zyxel Device’s effective broadcast radius.
Edit
Select an SSID and click this button to reassign it. The selected SSID becomes editable immediately upon clicking.
#
This is the index number of the SSID profile. You can associate up to eight SSID profiles with an AP radio.
SSID Profile
Indicates which SSID profile is associated with this radio profile.
VLAN Settings
 
Force Overwrite VLAN Config
Select this to have the Zyxel Device change the AP’s management VLAN to match the configuration in this screen.
Management VLAN ID
Enter a VLAN ID for this AP.
As Native VLAN
Select this option to treat this VLAN ID as a VLAN created on the Zyxel Device and not one assigned to it from outside the network.
Port Settings
 
Model Specific Setting
Select the model of the managed AP to display the model-specific port and VLAN settings in the tables below.
Port Setting
You can activate or deactivate a non-uplink port.
Edit
Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.
Activate/Inactivate
To turn on an entry, select it and click Activate. To turn off an entry, select it and click
Inactivate.
#
This is the port’s index number in this list.
Status
This displays whether or not the port is activated.
Port
This shows the name of the physical Ethernet port on the managed AP.
PVID
This shows the port’s PVID.
A PVID (Port VLAN ID) is a tag that adds to incoming untagged frames received on a port so that the frames are forwarded to the VLAN group that the tag defines.
VLAN Configuration
 
Add
Click this to create a new entry.
Edit
Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.
Remove
To remove an entry, select it and click Remove. The NXC confirms you want to remove it before doing so.
Activate/ Inactivate
To turn on an entry, select it and click Activate. To turn off an entry, select it and click Inactivate.
#
This is the VLAN’s index number in this list.
Status
This displays whether or not the VLAN is activated.
Name
This shows the name of the VLAN.
VID
This shows the VLAN ID number.
Member
This field displays the Ethernet port(s) that is a member of this VLAN.
Load Balancing Setting
 
Enable Load Balancing
Select this to enable load balancing on the Zyxel Device.
Use this section to configure wireless network traffic load balancing between the managed APs in this group.
*Load balancing is not supported on the radio which is working in root AP or repeater AP mode.
Mode
Select a mode by which load balancing is carried out.
Select By Station Number to balance network traffic based on the number of specified stations connected to an AP.
Select By Traffic Level to balance network traffic based on the volume generated by the stations connected to an AP.
Select By Smart Classroom to balance network traffic based on the number of specified stations connected to an AP. The AP ignores association request and authentication request packets from any new station when the maximum number of stations is reached.
If you select By Station Number or By Traffic Level, once the threshold is crossed (either the maximum station numbers or with network traffic), the AP delays association request and authentication request packets from any new station that attempts to make a connection. This allows the station to automatically attempt to connect to another, less burdened AP if one is available.
Radio 1/2 Max Station Number
Enter the threshold number of stations at which an AP begins load balancing its connections.
Disassociate station when overloaded
This function is enabled by default and the disassociation priority is always Signal Strength when you set Mode to By Station Number.
Select this option to disassociate wireless clients connected to the AP when it becomes overloaded. If you do not enable this option, then the AP simply delays the connection until it can afford the bandwidth it requires, or it transfers the connection to another AP within its broadcast radius.
The disassociation priority is determined automatically by the Zyxel Device and is as follows:
Idle Timeout - Devices that have been idle the longest will be disassociated first. If none of the connected devices are idle, then the priority shifts to Signal Strength.
Signal Strength - Devices with the weakest signal strength will be disassociated first.
*If you enable this function, you should ensure that there are multiple APs within the broadcast radius that can accept any rejected or kicked wireless clients; otherwise, a wireless client attempting to connect to an overloaded AP will be kicked continuously and never be allowed to connect.
Radio 1/2 Traffic Level
Select the threshold traffic level of the radio slot at which the AP begins load balancing its connections (Low, Medium, High).
The maximum bandwidth allowed for each level is:
Low - 11 Mbps
Medium - 23 Mbps
High - 35 Mbps
Rogue AP Detection Setting
 
Enable Rogue AP Detection
Select this option to detect Rogue APs in the network.
AP List
 
Available
This lists the APs that do not belong to this group. Select the APs that you want to add to the group you are editing, and click the right arrow button to add them.
Member
This lists the APs that belong to this group. Select any APs that you want to remove from the group, and click the left arrow button to remove them.
OK
Click OK to save your changes back to the Zyxel Device.
Cancel
Click Cancel to close the window with changes unsaved.
Override Member AP Setting
Click this button to overwrite the settings of all managed APs in this group with the settings you configure here. All Override Group check boxes on the AP Management > Mgnt. AP List > Edit AP List screen for the APs in this group will be deselected.
Firmware
The Zyxel Device stores an AP firmware in order to manage supported APs. This screen allows the Zyxel Device to check for and download new AP firmware when it becomes available on the firmware server. All APs managed by the Zyxel Device must have the same firmware version as the AP firmware on the Zyxel Device.
When an AP connects to the Zyxel Device wireless controller, the Zyxel Device will check if the AP has the same firmware version as the AP firmware on the Zyxel Device. If yes, then the Zyxel Device can manage it. If no, then the AP must upgrade (or downgrade) its firmware to be the same version as the AP firmware on the Zyxel Device (and reboot).
The Zyxel Device should always have the latest AP firmware so that:
APs don’t have to downgrade firmware in order to be managed
All new APs are supported.
Use Check to see if the Zyxel Device has the latest AP firmware. Use Apply to have the Zyxel Device download the latest AP firmware (see More Details for more information on the firmware) from the firmware server. If the Zyxel Device does not have enough space for the latest AP firmware, then the Zyxel Device will delete an existing firmware that no AP is using before downloading the new AP firmware.
Configuration > Wireless > AP Management > Firmware 
Label
Description
AP Firmware
 
Runtime Firmware
This displays the current AP firmware version on the Zyxel Device. The Zyxel Device must have the latest AP firmware to manage all supported APs.
Available Firmware
This field displays if there is a later AP firmware version available on the firmware server. It displays N/A if the Zyxel Device cannot connect with the firmware server. Check that the Zyxel Device has Internet access if N/A displays and then click the Check button below.
Check
Click this button to have the Zyxel Device display the latest AP firmware version available on the firmware server.
Last Check Success
This displays the date and time the last check for new firmware was made and whether the check is in progress (checking), was successful (success), or has failed (fail).
Apply AP Firmware
Due to space limitations, the Zyxel Device only downloads and keeps AP firmware for APs it is currently managing. If you connect a new AP to the Zyxel Device, the Zyxel Device may need to download a new AP firmware. Please wait while downloading new firmware as the speed depends on your Internet connection speed. Make sure to maintain the Internet connection while downloading new firmware.
Apply
Click this to download newer Available Firmware from the firmware server and update the Runtime Firmware version.
#
This is an index number of a managed AP.
Model
This displays the name of all manageable AP models.
Runtime Firmware
This displays the firmware version that the managed AP must have in order to be managed by the Zyxel Device. Firmware for APs that the Zyxel Device already has displays in bold; firmware that the Zyxel Device doesn’t have or is still downloading is grayed out. Firmware that is in the download queue will show To be downloaded.
Refresh
Click this to update the model firmware table.
Use this screen to assign APs either to the rogue AP list or the friendly AP list. A rogue AP is a wireless access point operating in a network’s coverage area that is not under the control of the network administrator, and which can potentially open up holes in a network’s security.
Each field is described in the following table.
Configuration > Wireless > Rogue AP 
Label
Description
Suspected Rogue AP Classification Rule
Click the check boxes (Weak Security (Open, WEP, WPA-PSK), Un-managed AP, Hidden SSID, SSID Keyword) of the characteristics an AP should have for the Zyxel Device to rule it as a rogue AP.
Add
Click this to add an SSID Keyword.
Edit
Select an SSID Keyword and click this button to modify it.
Remove
Select an existing SSID keyword and click this button to delete it.
#
This is the SSID Keyword’s index number in this list.
SSID Keyword
This field displays the SSID Keyword.
Rogue/Friendly AP List
Add
Click this button to add an AP to the list and assign it either friendly or rogue status.
Edit
Select an AP in the list to edit and reassign its status.
Remove
Select an AP in the list to remove.
Containment
Click this button to quarantine the selected AP.
A quarantined AP cannot grant access to any network services. Any stations that attempt to connect to a quarantined AP are disconnected automatically.
Dis-Containment
Click this button to take the selected AP out of quarantine.
An unquarantined AP has normal access to the network.
#
This field is a sequential value, and it is not associated with any interface.
Containment
This field indicates the selected AP’s containment status.
Role
This field indicates whether the selected AP is a rogue-ap or a friendly-ap. To change the AP’s role, click the Edit button.
MAC Address
This field indicates the AP’s radio MAC address.
Description
This field displays the AP’s description. You can modify this by clicking the Edit button.
Rogue/Friendly AP List Importing/Exporting
These controls allow you to export the current list of rogue and friendly APs or import existing lists.
File Path / Browse / Importing
Enter the file name and path of the list you want to import or click the Browse button to locate it. Once the File Path field has been populated, click Importing to bring the list into the Zyxel Device.
Exporting
Click this button to export the current list of either rogue APs or friendly APS.
Monitor Mode Settings
Enable Rogue AP Containment
Select this to enable rogue AP containment.
Apply
Click Apply to save your changes back to the Zyxel Device.
Reset
Click Reset to return the screen to its last-saved settings.
Add/Edit Rogue/Friendly List
Select an AP and click the Edit button in the Configuration > Wireless > Rogue AP table to display this screen.
Each field is described in the following table.
Configuration > Wireless > Rogue AP > Add/Edit Rogue/Friendly 
Label
Description
MAC
Enter the MAC address of the AP you want to add to the list. A MAC address is a unique hardware identifier in the following hexadecimal format: xx:xx:xx:xx:xx:xx where xx is a hexadecimal number separated by colons.
Description
Enter up to 60 characters for the AP’s description. Spaces and underscores are allowed.
Role
Select either Rogue AP or Friendly AP for the AP’s role.
OK
Click OK to save your changes back to the Zyxel Device.
Cancel
Click Cancel to close the window with changes unsaved.
Auto Healing
Use this screen to enable auto healing, which allows you to extend the wireless service coverage area of the managed APs when one of the APs fails.
Configuration > Wireless > Auto Healing 
Label
Description
Enable Auto Healing
Select this option to turn on the auto healing feature.
Save Current State
Click this button to have all manged APs immediately scan their neighborhoods three times in a row and update their neighbor lists to the AP controller (Zyxel Device).
Auto Healing Interval
Set the time interval (in minutes) at which the managed APs scan their neighborhoods and report the status of neighbor APs to the AP controller (Zyxel Device).
An AP is considered “failed” if the AP controller obtains the same scan result that the AP is missing from the neighbor list of other APs three times.
Power Threshold
Set the power level (in dBm) to which the neighbor APs of the failed AP increase their output power in order to extend their wireless service coverage areas.
When the failed AP is working again, its neighbor APs return their output power to the original level.
Apply
Click Apply to save your changes back to the Zyxel Device.
Reset
Click Reset to return the screen to its last-saved settings.
RTLS Overview
Ekahau RTLS (Real Time Location Service) tracks battery-powered Wi-Fi tags attached to APs managed by the Zyxel Device to create maps, alerts, and reports.
The Ekahau RTLS Controller is the centerpiece of the RTLS system. This server software runs on a Windows computer to track and locate Ekahau tags from Wi-Fi signal strength measurements. Use the Zyxel Device with the Ekahau RTLS system to take signal strength measurements at the APs (Integrated Approach / Blink Mode).
Before You Begin
You need:
At least three APs managed by the Zyxel Device (the more APs the better since it increases the amount of information the Ekahau RTLS Controller has for calculating the location of the tags)
IP addresses for the Ekahau Wi-Fi tags
A dedicated RTLS SSID is recommended
Ekahau RTLS Controller in blink mode with TZSP Updater enabled
Security policies to allow RTLS traffic if the Zyxel Device security policy control is enabled or the Ekahau RTLS Controller is behind a firewall.
For example, if the Ekahau RTLS Controller is behind a firewall, open ports 8550, 8553, and 8569 to allow traffic the APs send to reach the Ekahau RTLS Controller.
The following table lists default port numbers and types of packets RTLS uses.
RTLS Traffic Port Numbers 
Port Number
Type
Description
8548
TCP
Ekahau T201 location update.
8549
UDP
Ekahau T201 location update.
8550
TCP
Ekahau T201 tag maintenance protocol and Ekahau RTLS Controller user interface.
8552
UDP
Ekahau Location Protocol
8553
UDP
Ekahau Maintenance Protocol
8554
UDP
Ekahau T301 firmware update.
8560
TCP
Ekahau Vision web interface
8562
UDP
Ekahau T301W firmware update.
8569
UDP
Ekahau TZSP Listener Port
Configuring RTLS
Use this screen to turn RTLS (Real Time Location System) on or off and specify the IP address and server port of the Ekahau RTLS Controller.
Configuration > Wireless > RTLS 
Label
Description
Enable
Select this to use Wi-Fi to track the location of Ekahau Wi-Fi tags.
IP Address
Specify the IP address of the Ekahau RTLS Controller.
Server Port
Specify the server port number of the Ekahau RTLS Controller.
Apply
Click Apply to save your changes back to the Zyxel Device.
Reset
Click Reset to return the screen to its last-saved settings.