SSID Summary

 

Quick Setup

Click this to go to the Quick Setup Wireless Wizard to configure a wireless network.

Add

Click this to configure a new wireless network.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Activate/Inactivate

To turn on an entry, select it and click Activate. To turn off an entry, select it and click Inactivate.

#

This is the wireless network’s index number in this list.

Status

This displays whether or not the wireless network is activated.

SSID

This shows the name of the wireless network.

Security Mode

This shows the security used for this wireless network. No security allows any wireless client to associate with this network without authentication.

Band Mode

This shows the wireless band which this wireless network uses. 2.4 GHz is the frequency used by IEEE 802.11b/g/n/ax wireless clients. 5 GHz is the frequency used by IEEE 802.11ax/ac/a/n wireless clients.

Outgoing Interface

This is the outgoing interface that the wireless network uses to transmit packets.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

Activate

To turn on an entry, select Activate. To turn off an entry, select it and click Inactivate.

SSID

Enter the SSID name for this profile. This is the name visible on the network to wireless clients. Enter up to 32 characters, spaces and underscores are allowed.

Band Mode

This shows the wireless band which this wireless network uses. 2.4 GHz is the frequency used by IEEE 802.11b/g/n/ax wireless clients. 5 GHz is the frequency used by IEEE 802.11ax/ac/a/n wireless clients.

QoS

Select a Quality of Service (QoS) access category to associate with this SSID. Access categories minimize the delay of data packets across a wireless network. Certain categories, such as video or voice, are given a higher priority due to the time sensitive nature of their data packets.

QoS access categories are as follows:

disable: Turns off QoS for this SSID. All data packets are treated equally and not tagged with access categories.

WMM: Enables automatic tagging of data packets. The Zyxel Device assigns access categories to the SSID by examining data as it passes through it and making a best guess effort. If something looks like video traffic, for instance, it is tagged as such.

WMM_VOICE: All wireless traffic to the SSID is tagged as voice data. This is recommended if an SSID is used for activities like placing and receiving VoIP phone calls.

WMM_VIDEO: All wireless traffic to the SSID is tagged as video data. This is recommended for activities like video conferencing.

WMM_BEST_EFFORT: All wireless traffic to the SSID is tagged as “best effort,” meaning the data travels the best route it can without displacing higher priority traffic. This is good for activities that do not require the best bandwidth throughput, such as surfing the Internet.

WMM_BACKGROUND: All wireless traffic to the SSID is tagged as low priority or “background traffic”, meaning all other access categories take precedence over this one. If traffic from an SSID does not have strict throughput requirements, then this access category is recommended. For example, an SSID that only has network printers connected to it.

Outgoing Interface

Select the outgoing interface that the wireless network uses to transmit packets.

Authentication Settings

 

Security Mode

Select a security mode from the list: open, wep, wpa2, or wpa2-mix.

802.1x

Select this to enable 802.1x secure authentication with a RADIUS server.

This field is available only when you select the RADIUS Server Type to Internal.

Select an authentication method if you have created any on the Configuration > Object > Auth. Method screen.

Enter the interval (in seconds) between authentication requests. Enter a 0 for unlimited requests.

PSK

Select this option to use a Pre-Shared Key with WPA encryption.

Enter a pre-shared key of between 8 and 63 case-sensitive ASCII characters (including spaces and symbols) or 64 hexadecimal characters.

Cipher Type

Select an encryption cipher type from the list.

Idle Timeout

Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued.

Group Key Update Timer

Enter the interval (in seconds) at which the AP updates the group WPA encryption key.

Pre-Authentication

This field is available only when you set Security Mode to wpa2 or wpa2-mix and enable 802.1x authentication.

Enable or Disable pre-authentication to allow the AP to send authentication information to other APs on the network, allowing connected wireless clients to switch APs without having to re-authenticate their network connection.

Management Frame Protection

This field is available only when you select wpa2 in the Security Mode field and set Cipher Type to aes.

Data frames in 802.11 WLANs can be encrypted and authenticated with WEP, WPA or WPA2. But 802.11 management frames, such as beacon/probe response, association request, association response, de-authentication and disassociation are always unauthenticated and unencrypted. IEEE 802.11w Protected Management Frames allows APs to use the existing security mechanisms (encryption and authentication methods defined in IEEE 802.11i WPA/WPA2) to protect management frames. This helps prevent wireless DoS attacks.

Select the check box to enable management frame protection (MFP) to add security to 802.11 management frames.

Select Optional if you do not require the wireless clients to support MFP. Management frames will be encrypted if the clients support MFP.

Select Required and wireless clients must support MFP in order to join the Zyxel Device’s wireless network.

Hidden SSID

Select this if you want to “hide” your SSID from wireless clients. This tells any wireless clients in the vicinity of the AP using this SSID profile not to display its SSID name as a potential connection. Not all wireless clients respect this flag and display it anyway.

When a SSID is “hidden” and a wireless client cannot see it, the only way you can connect to the SSID is by manually entering the SSID name in your wireless connection setup screen(s) (these vary by client, client connectivity software, and operating system).

Enable Intra-BSS Traffic Blocking

Select this option to prevent crossover traffic from within the same SSID on the Zyxel Device.

Enable U-APSD

Select this option to enable Unscheduled Automatic Power Save Delivery (U-APSD), which is also known as WMM-Power Save. This helps increase battery life for battery-powered wireless clients connected to the Zyxel Device using this SSID profile.

Enable ARP Proxy

The Address Resolution Protocol (ARP) is a protocol for mapping an IP address to a MAC address. An ARP broadcast is sent to all devices on the same Ethernet network to request the MAC address of a target IP address.

Select this option to allow the Zyxel Device to answer ARP requests for an IP address on behalf of a client associated with this SSID. This can reduce broadcast traffic and improve network performance.

802.11k/v Assisted Roaming

Select this option to enable IEEE 802.11k/v assisted roaming on the Zyxel Device. When the connected clients request 802.11k neighbor lists, the Zyxel Device will response with a list of neighbor APs that can be candidates for roaming.

Schedule SSID

Select this option and set whether the SSID is enabled or disabled on each day of the week. You also need to select the hour and minute (in 24-hour format) to specify the time period of each day during which the SSID is enabled/enabled.

Radius Settings

 

Radius Server Type

Select Internal to use the Zyxel Device’s internal authentication database, or External to use an external RADIUS server for authentication.

Proxy by controller directly

Select this to allow the Zyxel Device to answer authentication requests on behalf of an external RADIUS server.

MAC Filter

 

Filter Action

Select allow to permit the wireless client with the MAC addresses in this profile to connect to the network through the associated SSID; select deny to block the wireless clients with the specified MAC addresses.

Add

Click this to add a MAC address to the profile’s list.

Edit

Click this to edit the selected MAC address in the profile’s list.

Remove

Click this to remove the selected MAC address from the profile’s list.

#

This field is a sequential value, and it is not associated with a specific user.

MAC

This field specifies a MAC address associated with this profile. You can click the MAC address to make it editable.

Description

This field displays a description for the MAC address associated with this profile. You can click the description to make it editable. Enter up to 60 characters, spaces and underscores allowed.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving your changes.

Hide / Show Advanced Settings

Click this to hide or show the Advanced Settings in this window.

2.4GHz General Settings

 

Select how to let wireless clients connect to the AP.

Select the wireless channel bandwidth you want the AP to use.

A standard 20 MHz channel offers transfer speeds of up to 144Mbps (2.4GHz) or 217Mbps (5GHZ) whereas a 40MHz channel uses two standard channels and offers speeds of up to 300Mbps (2.4GHz) or 450Mbps (5GHZ).

40 MHz (channel bonding or dual channel) bonds two adjacent radio channels to increase throughput. Because not all devices support all channels, select 20/40MHz to allow the AP to adjust the channel bandwidth automatically.

Select 20MHz if you want to lessen radio interference with other wireless devices in your neighborhood or the wireless clients do not support channel bonding.

Select the wireless channel which this radio profile should use.

It is recommended that you choose the channel least in use by other APs in the region where this profile will be implemented. This will reduce the amount of interference between wireless clients and the AP to which this profile is assigned.

Select DCS to have the AP automatically select the radio channel upon which it broadcasts by scanning the area around it and determining what channels are currently being used by other devices.

Select Manual and specify the channels the AP uses.

Enter the maximum output power of the Zyxel Device. If there is a high density of APs in an area, decrease the output power of the Zyxel Device to reduce interference with other APs. Reducing the output power also reduces the Zyxel Device’s effective broadcast radius.

 

This field is available when you set Channel Selection to DCS.

Select this to have the AP wait until all connected clients have disconnected before switching channels.

If you disable this then the AP switches channels immediately regardless of any client connections. In this instance, clients that are connected to the AP when it switches channels are dropped.

This field is available when you set Channel Selection to DCS.

Select auto to have the AP search for available channels automatically in the 2.4 GHz band. The available channels vary depending on what you select in the 2.4 GHz Channel Deployment field.

Select manual and specify the channels the AP uses in the 2.4 GHz band.

This field is available only when you set Channel Selection to DCS and set 2.4 GHz Channel Selection Method to manual.

Select the check boxes of the channels that you want the AP to use.

This field is available only when you set Channel Selection to DCS and set 2.4 GHz Channel Selection Method to auto.

Select Three-Channel Deployment to limit channel switching to channels 1,6, and 11, the three channels that are sufficiently attenuated to have almost no impact on one another. In other words, this allows you to minimize channel interference by limiting channel-hopping to these three “safe” channels.

Select Four-Channel Deployment to limit channel switching to four channels. Depending on the country domain, if the only allowable channels are 1-11 then the Zyxel Device uses channels 1, 4, 7, 11 in this configuration; otherwise, the Zyxel Device uses channels 1, 5, 9, 13 in this configuration. Four channel deployment expands your pool of possible channels while keeping the channel interference to a minimum.

Select this option to have the Zyxel Device survey the other APs within its broadcast radius at the end of the specified time interval.

This field is available when you set Channel Selection to DCS.

Enter a number of minutes. This regulates how often the AP surveys the other APs within its broadcast radius. If the channel on which it is currently broadcasting suddenly comes into use by another AP, the AP will then dynamically select the next available clean channel or a channel with lower interference.

Select this option to have the Zyxel Device survey the other APs within its broadcast radius at a specific time on selected days of the week.

Specify the time of the day (in 24-hour format) to have the Zyxel Device use DCS to automatically scan and find a less-used channel.

Select each day of the week to have the Zyxel Device use DCS to automatically scan and find a less-used channel.

Advanced Settings

 

This field is available only when the channel width is 20/40MHz or 20/40/80MHz.

Set the guard interval for this radio profile to either Short or Long.

The guard interval is the gap introduced between data transmission from users in order to reduce interference. Reducing the interval increases data transfer rates but also increases interference. Increasing the interval reduces data transfer rates but also reduces interference.

Select this to enable A-MPDU aggregation.

Message Protocol Data Unit (MPDU) aggregation collects Ethernet frames along with their 802.11n headers and wraps them in a 802.11n MAC header. This method is useful for increasing bandwidth throughput in environments that are prone to high error rates.

Enter the maximum frame size to be aggregated.

Enter the maximum number of frames to be aggregated each time.

Select this to enable A-MSDU aggregation.

Mac Service Data Unit (MSDU) aggregation collects Ethernet frames without any of their 802.11n headers and wraps the header-less payload in a single 802.11n MAC header. This method is useful for increasing bandwidth throughput. It is also more efficient than A-MPDU except in environments that are prone to high error rates.

Enter the maximum frame size to be aggregated.

Use RTS/CTS to reduce data collisions on the wireless network if you have wireless clients that are associated with the same AP but out of range of one another. When enabled, a wireless client sends an RTS (Request To Send) and then waits for a CTS (Clear To Send) before it transmits. This stops wireless clients from transmitting packets at the same time (and causing data collisions).

A wireless client sends an RTS for all packets larger than the number (of bytes) that you enter here. Set the RTS/CTS equal to or higher than the fragmentation threshold to turn RTS/CTS off.

When a wirelessly networked device sends a beacon, it includes with it a beacon interval. This specifies the time period before the device sends the beacon again. The interval tells receiving devices on the network how long they can wait in low-power mode before waking up to handle the beacon. A high value helps save current consumption of the access point.

Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Active Power Management mode. A high DTIM value can cause clients to lose connectivity with the network. This value can be set from 1 to 255.

Select the check box to use the signal threshold to ensure wireless clients receive good throughput. This allows only wireless clients with a strong signal to connect to the AP.

Clear the check box to not require wireless clients to have a minimum signal strength to connect to the AP.

Set a minimum client signal strength. A wireless client is allowed to connect to the AP only when its signal strength is stronger than the specified threshold.

-20 dBm is the strongest signal you can require and -76 is the weakest.

Set a minimum kick-off signal strength. When a wireless client’s signal strength is lower than the specified threshold, the Zyxel Device disconnects the wireless client from the AP.

-20 dBm is the strongest signal you can require and -90 is the weakest.

Select this option to allow a wireless client to try to associate with the AP again after it is disconnected due to weak signal strength.

Set the maximum number of times a wireless client can attempt to re-connect to the AP.

Only select this if you want to deny 802.11b/g/n clients access to the radio.

Multicast Settings

Use this section to set a transmission mode and maximum rate for multicast traffic.

Set how the AP handles multicast traffic.

Select Multicast to Unicast to broadcast wireless multicast traffic to all of the wireless clients as unicast traffic. Unicast traffic dynamically changes the data rate based on the application’s bandwidth requirements. The retransmit mechanism of unicast traffic provides more reliable transmission of the multicast traffic, although it also produces duplicate packets.

Select Fixed Multicast Rate to send wireless multicast traffic at a single data rate. You must know the multicast application’s bandwidth requirements and set it in the following field.

If you set the multicast transmission mode to fixed multicast rate, set the data rate for multicast traffic here. For example, to deploy 4 Mbps video, select a fixed multicast rate higher than 4 Mbps.

5GHz General Settings

 

802.11 Band

Select how to let wireless clients connect to the AP.

Select the channel bandwidth you want to use for your wireless network.

Select 20 MHz if you want to lessen radio interference with other wireless devices in your neighborhood.

Select 20/40 MHz to allow the Zyxel Device to choose the channel bandwidth (20 or 40 MHz) that has least interference.

Select 20/40/80 MHz to allow the Zyxel Device to choose the channel bandwidth (20 or 40 or 80 MHz) that has least interference. This option is available only when you select 11ac or 11ax in the 802.11 Mode field.

Select the wireless channel which this radio profile should use.

It is recommended that you choose the channel least in use by other APs in the region where this profile will be implemented. This will reduce the amount of interference between wireless clients and the AP to which this profile is assigned.

Select DCS to have the AP automatically select the radio channel upon which it broadcasts by scanning the area around it and determining what channels are currently being used by other devices.

Select Manual and specify the channels the AP uses.

Enter the maximum output power of the Zyxel Device. If there is a high density of APs in an area, decrease the output power of the Zyxel Device to reduce interference with other APs. Reducing the output power also reduces the Zyxel Device’s effective broadcast radius.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to exit this screen without saving your changes.

Country Code

Select the country code of where the Zyxel Device is located/installed. The available channels vary depending on the country you selected.

Registration Type

Select Manual to add each AP to the Zyxel Device for management, or Always Accept to automatically add APs to the Zyxel Device for management.

If you select Manual, then go to Monitor > Wireless > AP Information > AP List, select an AP to be managed and then click Add to Mgnt AP List. That AP will then appear in Configuration > Wireless > Controller > Mgnt. AP List.

APs must be connected to the Zyxel Device by a wired connection or network.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

Filter

Click Show Advanced Settings to reveal Filter fields where you can display managed APs by status, keyword or those managed by the Nebula portal.

AP List

Select the type of APs you want to display.

Select All to show all kinds of APs that are currently or used to be connected to the Zyxel Device.

Select NebulaFlexPRO to show the APs that can work in Nebula cloud management mode.

Status

Select the status of APs you want to display.

Keyword

Enter a keyword to display the APs that include it in their AP information, such as model number, firmware version, MAC address and so on. This field is case-sensitive.

Search

Click this to update the list of APs based on the search criteria.

Your search criteria is retained when navigating between screens.

Reset

Click this to return the search criteria to the factory defaults and display all currently or previously connected APs without a filter.

Enable Column Freeze

Select this to lock the index columns in place while scrolling to the right.

Edit the selected rule

Select an AP and click this to change the selected AP’s properties, such as its group, radio, VLAN and port settings.

Add to Mgmt AP List

Select an AP and click this to add the selected AP to the managed AP list.

Reboot device

Select one or multiple APs and click this button to force the AP(s) to restart.

Remove the selected rule

Select one or multiple APs and click this button to remove the AP(s) from the manged AP list.

DCS Now

Select one or multiple APs and click this button to use DCS (Dynamic Channel Selection) to allow the AP to automatically find a less-used channel in an environment where there are many APs and there may be interference.

More Information

Select an AP and click this to view a daily station count about the selected AP. The count records station activity on the AP over a consecutive 24 hour period.

Radio Information

Select an online AP and click this button to go to the Monitor > Wireless > AP Information > Radio List screen to view detailed information about the AP’s radios.

Query Controller Log

Select one or multiple APs and click this button to go to the Monitor > Log > View Log screen to view the selected AP’s current log messages.

Nebula

Select an AP and click this to open a screen where you can set whether the AP’s IP address and VLAN settings will be changed when it goes into Nebula cloud management mode.

Upgrade Firmware Now

Select one or more APs and click this button to update the APs’ firmware version.

Suppression On

Select an AP and click this button to enable the AP’s LED suppression mode. All the LEDs of the AP will turn off after the AP is ready. This button is not available if the selected AP doesn’t support suppression mode.

Suppression Off

Select an AP and click this button to disable the AP’s LED suppression mode. The AP LEDs stay lit after the AP is ready. This button is not available if the selected AP doesn’t support suppression mode.

Locator On

Select an AP and click this button to run the locator feature. The AP’s Locator LED will start to blink for 10 minutes by default. It will show the actual location of the AP between several devices on the network.

#

This field is a sequential value, and it is not associated with any entry.

Status

This field displays the status of AP.

Description

This field displays the AP’s description, which you can configure by selecting the AP’s entry and clicking the Edit button.

CPU Usage

This field displays the CPU Usage of the AP.

IP Address

This field displays the IP address of the AP.

MAC Address

This field displays the MAC address of the AP.

Station 2.4G

This field displays the number of 2.4G wireless clients connected to the AP.

Station 5G

This field displays the number of 5G wireless clients connected to the AP.

Recent Online Time

This displays the most recent time the AP came on-line. N/A displays if the AP has not come on-line since the Zyxel Device last started up.

LED Status

This displays the AP LED status.

N/A displays if the AP does not support LED suppression mode and/or have a locator LED to show the actual location of the AP.

A gray LED icon signifies that the AP LED suppression mode is enabled. All the LEDs of the AP will turn off after the AP is ready.

A green LED icon signifies that the AP LED suppression mode is disabled and the AP LEDs stay lit after the AP is ready.

A sun icon signifies that the AP’s locator LED is blinking.

A circle signifies that the AP’s locator LED is extinguished.

Model

This field displays the AP’s hardware model information. It displays N/A (not applicable) only when the AP disconnects from the Zyxel Device and the information is unavailable as a result.

Apply

Click Apply to save your changes back to the Zyxel Device.

Refresh

Click Refresh to update the AP list.

Create new Object

Use this menu to create a new Radio Profile object to associate with this AP.

MAC

This displays the MAC address of the selected AP.

Model

This field displays the AP’s hardware model information. It displays N/A (not applicable) only when the AP disconnects from the Zyxel Device and the information is unavailable as a result.

S/N

This displays the serial number of the selected AP.

Description

Enter a description for this AP. You can use up to 31 characters, spaces and underscores allowed.

Group Setting

Select an AP group to which you want this AP to belong.

System Name

Enter a name to identify the AP on a network. This is usually the AP’s fully qualified domain name.

Location

Specify the name of the place where the AP is located.

Roaming Group

Specify the name of the roaming group to which the AP belongs. You can use up to 31 alphanumeric and @# characters. Dashes and underscores are also allowed. The name should start with a letter or digit.

The 802.11k neighbor list a client requests from the AP is generated according to the roaming group and RCPI (Received Channel Power Indicator) value of its neighbor APs.

When a client wants to roam from the current AP to another, other APs in the same roaming group or not in a roaming group will be candidates for roaming. Neighbor APs in a different roaming group will be excluded from the 802.11k neighbor lists even when the neighbor AP has the best signal strength.

If the AP’s roaming group is not configured, any neighbor APs can be candidates for roaming.

Load Balancing Group 1/2

Load balancing is only applied to APs within the same group. If a load balancing group is not assigned to an AP, it will belong to a default group.

Each AP can belong to up to two groups.

Radio 1/2 Setting

 

Override Group Radio Setting

Select this option to overwrite the AP radio settings with the settings you configure here.

OP Mode

Select the operating mode for radio 1 or radio 2.

AP Mode means the AP can receive connections from wireless clients and pass their data traffic through to the Zyxel Device to be managed (or subsequently passed on to an upstream gateway for managing).

MON Mode means the AP monitors the broadcast area for other APs, then passes their information on to the Zyxel Device where it can be determined if those APs are friendly or rogue. If an AP is set to this mode it cannot receive connections from wireless clients.

Root AP means the radio acts as an AP and also supports the wireless connections with other APs (in repeater mode) to form a ZyMesh to extend its wireless network.

Repeater AP means the radio can establish a wireless connection with other APs (in either root AP or repeater mode).

Radio 1/2 AP Profile

Select an AP profile from the list. If no profile exists, you can create a new one through the Create new Object menu.

Radio 1/2 Profile

Select a monitor profile from the list. If no profile exists, you can create a new one through the Create new Object menu.

Radio 1/2 ZyMesh Profile

This field is available only when the radio is in Root AP or Repeater AP mode.

Select the ZyMesh profile the radio uses to connect to a root AP or repeater.

Enable Wireless Bridging

This field is available only when the radio is in Repeater AP mode.

Select this option to enable wireless bridging on the radio.

The managed AP must support LAN provision and the radio should be in repeater mode. VLAN and bridge interfaces are created automatically according to the LAN port’s VLAN settings. When wireless bridging is enabled, the managed repeater AP can still transmit data through its Ethernet port(s) after the ZyMesh link is up. Be careful to avoid bridge loops.

The managed APs in the same ZyMesh must use the same static VLAN ID.

Override Group Output Power Setting

Select this option to overwrite the AP output power setting with the setting you configure here.

Output Power

Set the output power of the AP.

Override Group SSID Setting

Select this option to overwrite the AP SSID profile setting with the setting you configure here.

This section allows you to associate an SSID profile with the radio.

Select an SSID and click this button to reassign it. The selected SSID becomes editable immediately upon clicking.

This is the index number of the SSID profile. You can associate up to eight SSID profiles with an AP radio.

Indicates which SSID profile is associated with this radio profile.

IP Setting

 

Force Overwrite IP Setting

Select this to have the Zyxel Device change the AP’s IP address setting to match the configuration in this screen.

Get Automatically

Select this to have the AP act as a DHCP client and automatically get the IP address, subnet mask, and gateway address from a DHCP server.

Use Fixed IP Address

Select this if you want to specify the IP address, subnet mask, gateway and DNS server address manually.

IP Address

Enter the IP address for the AP.

Subnet Mask

Enter the subnet mask of the AP in dot decimal notation. The subnet mask indicates what part of the IP address is the same for all devices in the network.

Gateway

Enter the IP address of the gateway. The AP sends packets to the gateway when it does not know how to route the packet to its destination. The gateway should be on the same network as the AP.

DNS Server IP Address

Enter the IP address of the DNS server.

VLAN Settings

 

Override Group VLAN Setting

Select this option to overwrite the AP VLAN setting with the setting you configure here.

Force Overwrite VLAN Config

Select this to have the Zyxel Device change the AP’s management VLAN to match the configuration in this screen.

Management VLAN ID

Enter a VLAN ID for this AP.

As Native VLAN

Select this option to treat this VLAN ID as a VLAN created on the Zyxel Device and not one assigned to it from outside the network.

Storm Control Setting

 

Broadcast Storm Control

Enabling this will drop ingress broadcast traffic in the physical Ethernet port if it exceeds the maximum traffic rate. The maximum traffic rate can be changed using the CLI (see CLI Reference Guide).

Multicast Storm Control

Enabling this will drop ingress multicast traffic in the physical Ethernet port if it exceeds the maximum traffic rate. The maximum traffic rate can be changed using the CLI (see CLI Reference Guide)

Rogue AP Detection Setting

 

Override Group Rogue AP Detection Setting

Select this option to overwrite the AP Rogue Detection Settings with the settings you configure here

Enable Rogue AP Detection

Select this option to detect Rogue APs in the network.

Antenna Setting

This section is available only when the AP has an antenna switch. The screen varies depending on whether the AP has a physical antenna switch or allows you to change antenna orientation settings on a per-radio basis or on a per-AP basis.

Wall/ Ceiling

This allows you to adjust coverage depending on the antenna orientation of the AP’s radios for better coverage.

Select Wall if you mount the AP to a wall. Select Ceiling if the AP is mounted on a ceiling. You can switch from Wall to Ceiling if there are still wireless dead zones, and vice versa.

LED Suppression Mode Configuration

This section is available only when the AP supports LED suppression mode.

Suppression On

Select this option to enable the AP’s LED suppression mode. All the LEDs of the AP will turn off after the AP is ready.

If the check box is unchecked, it means the LEDs will stay lit after the AP is ready.

Power Setting

Enable Force override the power mode to full power if you are using a PoE injector that does not support PoE negotiation. Otherwise, the AP cannot draw full power from the power sourcing equipment. Enable this power mode to improve the AP’s performance in this situation.

Locator LED Configuration

This section is available only when the AP has a locator LED.

Turn On/ Turn Off

When the locator LED is off, click the Turn On button to activate the locator function. It will show the actual location of the AP between several devices in the network.

If the locator LED is blinking, click the Turn Off button to stop the locator LED from blinking immediately.

Automatically Extinguish After

Enter a time interval between 1 and 60 minutes to stop the locator LED from blinking. The locator LED will start to blink for the number of minutes set here.

If you make changes to the time default setting, it will be stored as the default when the AP restarts.

Reset AP Configuration

This section is available only when the AP is online.

Apply Factory Default

Click the button to reset all of the AP settings to the factory defaults.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to close the window with changes unsaved.

Force Override AC IP Config on AP

Select this to have the Zyxel Device change the AP controller’s IP address on the managed AP(s) to match the configuration in this screen.

Override Type

Select Auto to have the managed AP(s) automatically send broadcast packets to find any other available AP controllers.

Select Manual to replace the AP controller’s IP address configured on the managed AP(s) with the one(s) you specified below.

Primary Controller

Specify the IP address of the primary AP controller if you set Override Type to Manual.

Secondary Controller

Specify the IP address of the secondary AP controller if you set Override Type to Manual.

Fall back to Primary Controller when possible

Select this option to have the managed AP(s) change back to associate with the primary AP controller as soon as the primary AP controller is available.

Fall Back Check Interval

Set how often the managed AP(s) check whether the primary AP controller is available.

Firmware Updating

 

Updating Type

Specify how you want the Zyxel Device to upgrade AP firmware.

Select CAPWAP to have the Zyxel Device use CAPWAP (Control and Provisioning of Wireless Access Points protocol) to automatically update firmware on the managed APs.

Select FTP to allow the managed APs to download the latest firmware from the Zyxel Device using FTP.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

Group Setting

 

Default Group

Select a group that is used as the default group.

Any AP that is not configured to associate with a specific AP group belongs to the default group automatically.

Group Summary

 

Add

Click this button to create a new AP group.

Edit

Select an entry and click this button to edit its properties.

Remove

Select an entry and click this button to remove it from the list.

DCS Now

Select one or multiple groups and click this button to use DCS (Dynamic Channel Selection) to allow the APs in the group(s) to automatically find a less-used channel in an environment where there are many APs and there may be interference.

#

This is the index number of the group in the list.

Group Name

This is the name of the group.

Member Count

This is the total number of APs which belong to this group.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

General Settings

 

Group Name

Enter a name for this group. You can use up to 31 alphanumeric characters. Dashes and underscores are also allowed. The name should start with a letter.

Description

Enter a description for this group. You can use up to 31 characters, spaces and underscores allowed.

Location

Specify the name of the place where the AP group is located.

Radio 1/2 Setting

 

OP Mode

Select the operating mode for radio 1 or radio 2.

AP Mode means the AP can receive connections from wireless clients and pass their data traffic through to the Zyxel Device to be managed (or subsequently passed on to an upstream gateway for managing).

MON Mode means the AP monitors the broadcast area for other APs, then passes their information on to the Zyxel Device where it can be determined if those APs are friendly or rogue. If an AP is set to this mode it cannot receive connections from wireless clients.

Root AP means the radio acts as an AP and also supports the wireless connections with other APs (in repeater mode) to form a ZyMesh to extend its wireless network.

Repeater AP means the radio can establish a wireless connection with other APs (in either root AP or repeater mode).

Radio 1/2 AP Profile

Select an AP profile from the list. If no profile exists, you can create a new one through the Create new Object menu.

Radio 1/2 Profile

Select a monitor profile from the list. If no profile exists, you can create a new one through the Create new Object menu.

Radio 1/2 ZyMesh Profile

This field is available only when the radio is in Root AP or Repeater AP mode.

Select the ZyMesh profile the radio uses to connect to a root AP or repeater.

Enable Wireless Bridging

This field is available only when the radio is in Repeater AP mode.

Select this option to enable wireless bridging on the radio.

The managed AP must support LAN provision and the radio should be in repeater mode. VLAN and bridge interfaces are created automatically according to the LAN port’s VLAN settings. When wireless bridging is enabled, the managed repeater AP can still transmit data through its Ethernet port(s) after the ZyMesh link is up. Be careful to avoid bridge loops.

The managed APs in the same ZyMesh must use the same static VLAN ID.

Output Power

Set the maximum output power of the AP.

If there is a high density of APs in an area, decrease the output power of the managed AP to reduce interference with other APs.

Edit

Select an SSID and click this button to reassign it. The selected SSID becomes editable immediately upon clicking.

#

This is the index number of the SSID profile. You can associate up to eight SSID profiles with an AP radio.

SSID Profile

Indicates which SSID profile is associated with this radio profile.

VLAN Settings

 

Force Overwrite VLAN Config

Select this to have the Zyxel Device change the AP’s management VLAN to match the configuration in this screen.

Management VLAN ID

Enter a VLAN ID for this AP.

As Native VLAN

Select this option to treat this VLAN ID as a VLAN created on the Zyxel Device and not one assigned to it from outside the network.

Port Settings

 

Model Specific Setting

Select the model of the managed AP to display the model-specific port and VLAN settings in the tables below.

Port Setting

You can activate or deactivate a non-uplink port.

Edit

Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings.

Activate/Inactivate

To turn on an entry, select it and click Activate. To turn off an entry, select it and click Inactivate.

#

This is the port’s index number in this list.

Status

This displays whether or not the port is activated.

Port

This shows the name of the physical Ethernet port on the managed AP.

PVID

This shows the port’s PVID.

A PVID (Port VLAN ID) is a tag that adds to incoming untagged frames received on a port so that the frames are forwarded to the VLAN group that the tag defines.

VLAN Configuration

Use Add to create a new VLAN Configuration. Select a VLAN Configuration first to use the Edit, Remove, Activate and Inactivate buttons.

#

This is the VLAN’s index number in this list.

Status

This displays whether or not the VLAN is activated.

Name

This shows the name of the VLAN.

VID

This shows the VLAN ID number.

Member

This field displays the Ethernet port(s) that is a member of this VLAN.

Load Balancing Setting

 

Enable Load Balancing

Select this to enable load balancing on the Zyxel Device.

Use this section to configure wireless network traffic load balancing between the managed APs in this group.

Select a mode by which load balancing is carried out.

Select By Station Number to balance network traffic based on the number of specified stations connected to an AP.

Select By Traffic Level to balance network traffic based on the volume generated by the stations connected to an AP.

Select By Smart Classroom to balance network traffic based on the number of specified stations connected to an AP. The AP ignores association request and authentication request packets from any new station when the maximum number of stations is reached.

If you select By Station Number or By Traffic Level, once the threshold is crossed (either the maximum station numbers or with network traffic), the AP delays association request and authentication request packets from any new station that attempts to make a connection. This allows the station to automatically attempt to connect to another, less burdened AP if one is available.

Enter the threshold number of stations at which an AP begins load balancing its connections.

This function is enabled by default and the disassociation priority is always Signal Strength when you set Mode to By Station Number.

Select this option to disassociate wireless clients connected to the AP when it becomes overloaded. If you do not enable this option, then the AP simply delays the connection until it can afford the bandwidth it requires, or it transfers the connection to another AP within its broadcast radius.

The disassociation priority is determined automatically by the Zyxel Device and is as follows:

Select the threshold traffic level at which the AP begins load balancing its connections (Low, Medium, High).

The maximum bandwidth allowed for each level is:

Rogue AP Detection Setting

 

Enable Rogue AP Detection

Select this option to detect Rogue APs in the network.

AP List

 

Available

This lists the APs that do not belong to this group. Select the APs that you want to add to the group you are editing, and click the right arrow button to add them.

Member

This lists the APs that belong to this group. Select any APs that you want to remove from the group, and click the left arrow button to remove them.

AP List

 

Available

This lists the APs that do not belong to this group. Select the APs that you want to add to the group you are editing, and click the right arrow button to add them.

Member

This lists the APs that belong to this group. Select any APs that you want to remove from the group, and click the left arrow button to remove them.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to close the window with changes unsaved.

Override Member AP Setting

Click this button to overwrite the settings of all managed APs in this group with the settings you configure here. All Override Group check boxes on the AP Management > Mgnt. AP List > Edit AP List screen for the APs in this group will be deselected.

AP Firmware

 

Runtime Firmware

This displays the current AP firmware version on the Zyxel Device. The Zyxel Device must have the latest AP firmware to manage all supported APs.

Available Firmware

This field displays if there is a later AP firmware version available on the firmware server. It displays N/A if the Zyxel Device cannot connect with the firmware server. Check that the Zyxel Device has Internet access if N/A displays and then click the Check button below.

If a newer Zyxel Device AP firmware is available, its version number and a More Details icon displays here.

Last Check Success

This displays the date and time the last check for new firmware was made and whether the check is in progress (checking), was successful (success), or has failed (fail).

Check

Click this button to have the Zyxel Device display the latest AP firmware version available on the firmware server.

Apply AP Firmware

Due to space limitations, the Zyxel Device only downloads and keeps AP firmware for APs it is currently managing. If you connect a new AP to the Zyxel Device, the Zyxel Device may need to download a new AP firmware. Please wait while downloading new firmware as the speed depends on your Internet connection speed. Make sure to maintain the Internet connection while downloading new firmware.

Apply

Click this to download newer Available Firmware from the firmware server and update the Runtime Firmware version.

#

This is an index number of a managed AP.

Model

This displays the name of all manageable AP models.

Runtime Firmware

This displays the firmware version that the managed AP must have in order to be managed by the Zyxel Device. Firmware for APs that the Zyxel Device already has displays in bold; firmware that the Zyxel Device doesn’t have or is still downloading is grayed out. Firmware that is in the download queue will show To be downloaded.

Refresh

Click this to update the model firmware table.

Suspected Rogue AP Classification Rule

Click the check boxes (Weak Security (Open, WEP, WPA-PSK), Un-managed AP, Hidden SSID, SSID Keyword) of the characteristics an AP should have for the Zyxel Device to rule it as a rogue AP.

Click this to add an SSID Keyword.

Select an SSID Keyword and click this button to modify it.

Select an existing SSID keyword and click this button to delete it.

This is the SSID Keyword’s index number in this list.

This field displays the SSID Keyword.

Rogue/Friendly AP List

Click this button to add an AP to the list and assign it either friendly or rogue status.

Select an AP in the list to edit and reassign its status.

Select an AP in the list to remove.

Click this button to quarantine the selected AP.

A quarantined AP cannot grant access to any network services. Any stations that attempt to connect to a quarantined AP are disconnected automatically.

Click this button to take the selected AP out of quarantine.

An unquarantined AP has normal access to the network.

This field is a sequential value, and it is not associated with any interface.

This field indicates the selected AP’s containment status.

This field indicates whether the selected AP is a rogue-ap or a friendly-ap. To change the AP’s role, click the Edit button.

This field indicates the AP’s radio MAC address.

This field displays the AP’s description. You can modify this by clicking the Edit button.

Rogue/Friendly AP List Importing/Exporting

These controls allow you to export the current list of rogue and friendly APs or import existing lists.

Enter the file name and path of the list you want to import or click the Browse button to locate it. Once the File Path field has been populated, click Importing to bring the list into the Zyxel Device.

Click this button to export the current list of either rogue APs or friendly APS.

Monitor Mode Settings

Enable Rogue AP Containment

Select this to enable rogue AP containment.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

MAC

Enter the MAC address of the AP you want to add to the list. A MAC address is a unique hardware identifier in the following hexadecimal format: xx:xx:xx:xx:xx:xx where xx is a hexadecimal number separated by colons.

Description

Enter up to 60 characters for the AP’s description. Spaces and underscores are allowed.

Role

Select either Rogue AP or Friendly AP for the AP’s role.

OK

Click OK to save your changes back to the Zyxel Device.

Cancel

Click Cancel to close the window with changes unsaved.

Enable Auto Healing

Select this option to turn on the auto healing feature.

Save Current State

Click this button to have all manged APs immediately scan their neighborhoods three times in a row and update their neighbor lists to the AP controller (Zyxel Device).

Auto Healing Interval

Set the time interval (in minutes) at which the managed APs scan their neighborhoods and report the status of neighbor APs to the AP controller (Zyxel Device).

An AP is considered “failed” if the AP controller obtains the same scan result that the AP is missing from the neighbor list of other APs three times.

Power Threshold

Set the power level (in dBm) to which the neighbor APs of the failed AP increase their output power in order to extend their wireless service coverage areas.

When the failed AP is working again, its neighbor APs return their output power to the original level.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.

8548

TCP

Ekahau T201 location update.

8549

UDP

Ekahau T201 location update.

8550

TCP

Ekahau T201 tag maintenance protocol and Ekahau RTLS Controller user interface.

8552

UDP

Ekahau Location Protocol

8553

UDP

Ekahau Maintenance Protocol

8554

UDP

Ekahau T301 firmware update.

8560

TCP

Ekahau Vision web interface

8562

UDP

Ekahau T301W firmware update.

8569

UDP

Ekahau TZSP Listener Port

Enable

Select this to use Wi-Fi to track the location of Ekahau Wi-Fi tags.

IP Address

Specify the IP address of the Ekahau RTLS Controller.

Server Port

Specify the server port number of the Ekahau RTLS Controller.

Apply

Click Apply to save your changes back to the Zyxel Device.

Reset

Click Reset to return the screen to its last-saved settings.