Caution

Users should not attempt to make such connections themselves, but should contact the appropriate electrical inspection authority, or electrician, as appropriate.
This digital apparatus does not exceed the Class B limits for radio noise emissions from digital apparatus set out in the radio interference regulations of Industry.
Federal Communications Commission (FCC) Interference Statement
The device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: This device may not cause harmful interference. This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. If this equipment does cause harmful interference to radio/television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: 1. Reorient or relocate the receiving antenna. 2. Increase the separation between the equipment and the receiver. 3. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. 4. Consult the dealer or an experienced radio/TV technician for help.

Notice 1

Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.
1. The equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment, under 47 CFR 2.1093 paragraph (d) (2). 2. This Transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.

Certifications

Refer to the product page at www.zyxel.com.

FCC Statement

Customer Support
When contacting your Customer Support Representative, please have the following information ready: Product model and serial number. Warranty Information. Date you received your product. Brief description of the problem and the steps you took to solve it.

Type or Enter means for you to type one or more characters. "Select" or "Choose" means for you to use one of the predefined choices. Mouse action sequences are denoted using a comma. For example, click the Apple icon, Control Panels and then Modem means first click the Apple icon, then point your mouse pointer to Control Panels and then click Modem. Window and command choices are in Bold Times New Roman font. Predefined field choices are in Bold Arial font. The ZyXEL ZyAIR G-200 802.11g Wireless USB Adapter is referred to as the ZyAIR in this guide. The ZyAIR G-200 802.11g Wireless USB Utility may be referred to as the ZyAIR Utility in this guide.
Support Disk Refer to the included CD for support documents and device drivers.

Related Documentation

Quick Installation Guide
Our Quick Installation Guide is designed to help you get your ZyAIR up and running right away. It contains a detailed easy-to-follow connection diagram and information on installing your ZyAIR.
ZyXEL Glossary and Web Site
Please refer to www.zyxel.com for an online glossary of networking terms and additional support documentation.

User Guide Feedback

Help us help you! E-mail all Users Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you!
Chapter 1 Getting Started
This chapter prepares you to using the ZyAIR Utility.
ZyAIR Hardware and Utility Installation
Follow the instructions in the Quick Installation Guide to install the ZyAIR Utility and driver and make hardware connections.
Disable Windows XP Wireless LAN Configuration Tool
Windows XP includes a configuration tool for wireless LAN devices. DO NOT use the Windows XP configuration tool and the ZyAIR Utility at the same time. It is recommended you use the ZyAIR Utility to configure the ZyAIR. There are two methods to disable the configuration tool in Windows XP after you install the ZyAIR Utility. From ZyAIR Utility Right-click on the ZyAIR Utility system tray icon and click Turn off zero configuration.
Figure 1-1 Windows XP: System Tray Icon
From the Wireless Network Connection Status Screen
1. Double-click on the network icon for the wireless connection in the system tray. If the icon is not present, proceed to Step 2. Otherwise skip to Step 5.

2.1.2 Channel

A range of radio frequencies used by IEEE 802.11b wireless devices is called a channel.

2.1.3 Transmission Rate

Your ZyAIR automatically adjusts the transmission rate to operate at the maximum transmission (data) rate. When the communication quality drops below a certain level, the ZyAIR automatically switches to a lower transmission (data) rate. Transmission at lower data speeds is usually more reliable. However, when the communication quality improves again, the ZyAIR gradually increases the transmission (data) rate again until it reaches the highest available transmission rate.
2.1.4 Wireless Network Application
Wireless LAN works in either of the two modes: ad-hoc and infrastructure.
To connect to a wired network within a coverage area using Access Points (APs), set the ZyAIR operation mode to Infrastructure(BSS). An AP acts as a bridge between the wireless stations and the wired network. In case you do not wish to connect to a wired network, but prefer to set up a small independent wireless workgroup without an AP, use the Ad-hoc (IBSS) (Independent Basic Service Set) mode.
Ad-Hoc (IBSS) Ad-hoc mode does not require an AP or a wired network. Two or more wireless clients communicate directly to each other. An ad-hoc network may sometimes be referred to as an Independent Basic Service Set (IBSS).
Figure 2-1 Ad-hoc Network Example

Using the ZyAIR Utility

To set up an ad-hoc network, configure all wireless clients in ad-hoc network type and use the same SSID and channel. Infrastructure When a number of wireless clients are connected using a single AP, you have a Basic Service Set (BSS).

Figure 2-2 BSS Example

A series of overlapping BSS and a network medium, such as an Ethernet forms an Extended Service Set (ESS) or infrastructure network. All communication is done through the AP, which relays data packets to other wireless clients or devices connected to the wired network. Wireless clients can then access resource, such as the printer, on the wired network.

Figure 2-7 Configuration

The following table describes the labels in this screen.

Table 2-3 Configuration

FIELD Profile DESCRIPTION The Profile function allows you to: Create a new profile. Enter a descriptive name in the drop-down list box and click OK in the Configuration screen to save the new profile settings. Use one of the pre-configured network profiles. To delete an existing wireless network configuration, select a profile from the drop-down list box and click Remove. To use a previously saved network profile, select the profile file name from the dropdown list box and click Activate.

Remove Activate

FIELD Configuration Service Set Identifier Enter the SSID (Service Set Identifier) of the AP or the peer ad-hoc computer to which you want to associate in this field. To associate to an ad-hoc network or a particular AP in an infrastructure network, you must enter the same SSID as the peer ad-hoc computer. Enter any to associate to or roam between any infrastructure wireless networks. This is the default setting. Select Infrastructure or Ad-Hoc from the drop-down list box. Select Infrastructure to associate to an AP. Select Ad-Hoc to associate to a peer ad-hoc computer. Refer to Section 2.1.4 for more information. This field is activated if you select Ad-Hoc in the Operation Mode field. Select the channel number from the drop-down list box. To associate to a peer ad-hoc computer, you must use the same channel as the peer ad-hoc computer. Click Set Security to display the Security Configuration screen. Configure your ZyAIR with wireless LAN security in this screen. Click Undo Changes to start configuring the fields again. Click Apply Changes to save the changes back to ZyAIR. Click OK to apply the changes and close the screen. Click Cancel to discard all changes and close the screen. Click Help to display on-line help screen. DESCRIPTION

Operating Mode

Channel
Set Security Undo Changes Apply Changes Ok Cancel Help

Wireless LAN Security

Wireless LAN security is vital to your network to protect wireless communication between wireless clients and the wired network. The figure below shows the possible wireless security levels on your ZyAIR. EAP (Extensible Authentication Protocol) is used for authentication and utilizes dynamic WEP key exchange. It requires interaction with a RADIUS (Remote Authentication Dial-In User Service) server either on the WAN or your LAN to provide authentication service for wireless stations
Figure 2-8 ZyAIR Wireless Security Levels
If you do not enable any wireless security on your ZyAIR, communication between the ZyAIR and the wired network is accessible to any wireless networking device that is in the coverage area.

The Security Configuration Screen
Configure the wireless LAN security by clicking the Set Security button in the Configuration screen. There are five data authentication options available from the Authentication drop-down list box, when you select Infrastucture as the Operating Mode in the previous screen: None WEP WPA-PSK WPA 802.1x There are three data authentication options available from the Authentication drop-down list box, when you select Ad-Hoc as the Operating Mode in the previous screen: None WEP WPA-PSK
2.6.1 Data Encryption with WEP
Select WEP from the Authentication drop-down list box to view the security configuration options. WEP (Wired Equivalent Privacy) encryption scrambles all communication transmitted between the ZyAIR and the AP or other wireless stations to keep network communications private. Both the wireless clients and the access points must use the same WEP key for data encryption and decryption. There are two ways to create WEP keys in your ZyAIR. Automatic WEP key generation based on a password phrase called a passphrase. The passphrase is case sensitive. You must use the same passphrase for all WLAN adapters with this feature in the same WLAN. Enter the WEP keys manually. Your ZyAIR allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can be enabled at any one time. Authentication Type Two different methods can be used to authenticate wireless stations to the network: Open System and Shared Key. The following figure illustrates the steps involved.
Figure 2-9 WEP Authentication Steps
Open System authentication involves an unencrypted two-message procedure. A wireless station sends an open system authentication request to the AP, which will then automatically accept and connect the wireless station to the network. In effect, open system is not authentication at all as any station can gain access to the network. Shared Key authentication involves a four-message procedure. A wireless station sends a shared key authentication request to the AP, which will then reply with a challenge text message. The wireless station must then use the APs default WEP key to encrypt the challenge text and return it to the AP, which attempts to decrypt the message using the APs default WEP key. If the decrypted message matches the challenge text, the wireless station is authenticated. When your ZyAIR's authentication method is set to open system, it will only accept open system authentication requests. The same is true for shared key authentication. However, when it is set to auto authentication, the ZyAIR will accept either type of authentication request and the ZyAIR will fall back to use open authentication if the shared key does not match.

Figure 2-10 WEP Authentication
Follow the instructions in the table to configure the WEP encryptions.
Table 2-4 WEP Authentication
FIELD Authentication Encryption DESCRIPTION Select WEP from the drop-down list box to activate WEP Authentication. Select either 64 Bits or 128 Bits from the drop-down list box to activate WEP encryption and then fill in the related fields. Select Disabled to deactivate the WEP encryption.
WEP Key Entry: The WEP keys are used to encrypt communication before transmitting. The values for the keys must be set up exactly the same on the APs or other peer adhoc wireless computers as they are on the ZyAIR.
Authentication Type Select Open System or Shared Key from the drop-down list box. See the section on Authentication Type for further descriptions of these. Select Open System to allow any station to gain access to the network. Select Shared Key if you want the ZyAIR to automatically generate four different WEP keys based on the passphrase specified in the Passphrase field. Type a Passphrase. As you enter the Passphrase, the ZyAIR automatically generates four different WEP keys and displays them in the key fields below. Write down the automatically generated WEP keys and use them to manually set the WEP keys in other WLAN adapters. Passphrase is case-sensitive. If you select ASCII characters as the Key Type, the Passphrase screen will be grayed out. For more information on Passphrase, see section 2.6.1.

Passphrase

FIELD Transmit Key DESCRIPTION Enter the key number (1 to 4) in this field. Only one key can be enabled at any one time. This key must be the same on the ZyAIR and the wireless stations to communicate. Select ASCII to enter the WEP keys as ASCII characters. Select this option if you want to manually enter the WEP keys. Select HEX to have the WEP keys as hexadecimal characters. Select this option if you want the ZyAIR to automatically generate four different WEP keys based on the passphrase specified in the Passphrase field. Key Enter the WEP keys in the fields provided. If you select 64 Bits in the Encryption (WEP) field. Enter either 10 hexadecimal digits in the range of A-F, a-f and 0-9 (e.g. 11AA22BB33) for hexadecimal key type or Enter 5 ASCII characters (case sensitive) ranging from a-z, A-Z and 09 (e.g. MyKey) for ASCII key type. If you select 128 Bits in the Encryption (WEP) field, Enter either 26 hexadecimal digits in the range of A-F, a-f and 0-9 (for example, 00112233445566778899AABBCC) for hexadecimal key type or Enter 13 ASCII characters (case sensitive) ranging from a-z, A-Z and 09 (for example, MyKey12345678) for ASCII key type.

Key Type

You must configure all four WEP keys the first time you use the ZyAIR. ASCII WEP keys are case sensitive.
OK Click OK to apply the changes and close the screen.
2.6.2 Data Encryption with WPA
Select WPA from the Authentication drop-down list box to view the security configuration options. Introduction to WPA Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i security specification draft. Key differences between WPA and WEP are user authentication and improved data encryption. User Authentication WPA applies IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. See later in this Users Guide for more information on IEEE 802.1x and EAP. WPA-PSK (WPA -Pre-Shared Key), only requires a single (identical) password entered into each access point, wireless gateway and wireless client. As long as the passwords match, a client will be granted access to a WLAN.

Encryption WPA improves data encryption by using Temporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IEEE 802.1x. Temporal Key Integrity Protocol (TKIP) uses 128-bit keys that are dynamically generated and distributed by the authentication server. It includes a per-packet key mixing function, a Message Integrity Check (MIC) named Michael, an extended initialization vector (IV) with sequencing rules, and a re-keying mechanism. TKIP regularly changes and rotates the encryption keys so that the same encryption key is never used twice. The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the pair-wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. This all happens in the background automatically. The Message Integrity Check (MIC) is designed to prevent an attacker from capturing data packets, altering them and resending them. The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC. If they do not match, it is assumed that the data has been tampered with and the packet is dropped. By generating unique data encryption keys for every data packet and by creating an integrity checking mechanism (MIC), TKIP makes it much more difficult to decode data on a Wi-Fi network than WEP, making it difficult for an intruder to break into the network. The encryption mechanisms used for WPA and WPA-PSK are the same. The only difference between the two is that WPA-PSK uses a simple common password, instead of user-specific credentials. The common-password approach makes WPA-PSK susceptible to brute-force password-guessing attacks but its still an improvement over WEP as it employs an easier-to-use, consistent, single, alphanumeric password.
Figure 2-11 WPA Authentication
Follow the instructions in the table to configure WPA security.
Table 2-5 WPA Authentication
FIELD Authentication Encryption Status DESCRIPTION Select WPA from the drop-down list box. All unicast traffic is automatically encrypted by TKIP when WPA or WPA-PSK Authentication is selected. See the section on Encryption for details about Temporal Key Integrity Protocol (TKIP). Select an EAP Type from the drop-down list box. See Types of EAP Authentication in the Appendix of this Users Guide for information on the fields listed below. The choices are: EAP-TLS EAP-TTLS EAP-MD5 EAP-PEAP LEAP If you want all wireless stations to have to enter user names before access to the wired network is allowed, type a Login Name. If you want all wireless stations to have to enter passwords before access to the wired network is allowed, type a Password. This field is only available when you select EAP-TLS in the EAP Type field.

After you exit from the ZyAIR Utility program, you may disconnect the ZyAIR from your computer. You do not have to turn off the computer before removing the ZyAIR - you can insert or remove the ZyAIR while the computer is turned on. However, it is recommended that you stop the operation of the ZyAIR first. Follow the steps below to disable the ZyAIR in Windows. Screen shots may vary depending on the version of Windows. 1. Close and exit the ZyAIR Utility.

Maintenance

Figure 3-2 ZyAIR Utility: Exit 2. Double-click the removable device icon in the system tray.
Figure 3-3 Removable Device System Tray Icon: Windows XP 3. When a Safely Remove Hardware window displays, select the ZyAIR device in the
Hardware devices list and click Stop.
Figure 3-4 Safely Remove Hardware: Windows XP 4. If you do not close and exit the ZyAIR Utility, a warning window displays as shown.
Click OK and then close and exit the ZyAIR Utility.
Figure 3-5 Problem Ejecting Message: Windows XP 5. Click OK in the Stop a Hardware device window to stop the ZyAIR.
Figure 3-6 Stop a Hardware device: Windows XP 6. After the following notice window displays in the system tray, you can safely disconnect
the ZyAIR from your computer.
Figure 3-7 Safe To Remove Hardware Message: Windows XP
Chapter 4 Troubleshooting
This chapter covers potential problems and the possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem.
Problems Starting the ZyAIR Utility Program
Table 4-1 Troubleshooting Starting ZyAIR Utility Program
PROBLEM CORRECTIVE ACTION Make sure the ZyAIR is properly inserted and the PWR LED is on. Refer to the Quick Installation Guide for the LED descriptions. Use the Device Manager to check for possible hardware conflicts. Click Start, Settings, Control Panel, System, Hardware and Device Manager. Verify the status of the ZyAIR under Network Adapter. (Steps may vary depending on the version of Windows). Install the ZyAIR in another computer. If the error persists, you may have a hardware problem. In this case, you should contact your local vendor.

Cannot start the ZyAIR Utility
The ZyAIR Utility displays only three tabs.
When the ZyAIR Utility displays only three tabs, you are using the Windows XP wireless configuration tool at the same time. Refer to Section 1.2 to disable the Windows XP wireless configuration tool.
Problems Communicating With Other Computers
Table 4-2 Troubleshooting Communication Problems
PROBLEM CORRECTIVE ACTION You are using the Windows XP wireless configuration tool and the ZyAIR Utility at the same time. Refer to Section 1.2 to disable the Windows XP wireless configuration tool.
The Connect button is disabled in the Site Survey screen The computer connected to the ZyAIR cannot communicate with the other computer. A. Infrastructure
Make sure that the AP and the associated computers are turned on and working properly. Make sure the ZyAIR and the associated AP use the same SSID. Change the AP and the associated wireless clients to use another radio channel if interference is high. Make sure that the computer and the AP share the same security option and key. Verify the settings in the Security Configuration screen.

Troubleshooting

PROBLEM B. Ad-Hoc (IBSS) CORRECTIVE ACTION Verify that the peer computer(s) is turned on. Make sure the ZyAIR and the peer computer(s) are using the same SS ID and channel. Make sure that the ZyAIR and the peer computer(s) share the same security option and key. Change the wireless clients to use another radio channel if interference is high. Make sure that the ZyAIR and the peer computer(s) share the same security option and key. Verify the settings in the Security Configuration screen.
Problem with the Link Status
Table 4-3 Troubleshooting Link Quality
PROBLEM CORRECTIVE ACTION Search and connect to another AP with a better link quality using the Site Survey screen. Move your computer closer to the AP or the peer computer(s) within the transmission range. There is too much radio interference (for example microwave or another AP using the same channel) around your wireless network. Relocate or reduce the radio interference.
The link quality and/or signal strength is poor all the time.
The ZyAIR Does Not Respond
Table 4-4 Troubleshooting the ZyAIR
PROBLEM CORRECTIVE ACTION When you resume your computer from sleep/standby/suspend mode, the ZyAIR may not work or immediately respond. If this happens, disconnect and connect the ZyAIR.

The ZyAIR connected to a computer does not respond after resuming the computer from sleep mode.
Appendix A Wireless LAN and IEEE 802.11
A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without the use of a cabled connection. In effect a wireless LAN environment provides you the freedom to stay connected to the network while roaming around in the coverage area. WLAN is not available on all models.
Benefits of a Wireless LAN
Wireless LAN offers the following benefits: 1. It provides you with access to network services in areas otherwise hard or expensive to wire, such as historical buildings, buildings with asbestos materials and classrooms. 2. It provides healthcare workers like doctors and nurses access to a complete patients profile on a handheld or notebook computer upon entering a patients room. 3. It allows flexible workgroups a lower total cost of ownership for workspaces that are frequently reconfigured. 4. It allows conference room users access to the network as they move from meeting to meeting, getting up-to-date access to information and the ability to communicate decisions while on the go. 5. It provides campus-wide networking mobility, allowing enterprises the roaming capability to set up easy-to-use wireless networks that cover the entire campus transparently.

IEEE 802.11

The 1997 completion of the IEEE 802.11 standard for wireless LANs (WLANs) was a first important step in the evolutionary development of wireless networking technologies. The standard was developed to maximize interoperability between differing brands of wireless LANs as well as to introduce a variety of performance improvements and benefits. The IEEE 802.11 specifies three different transmission methods for the PHY, the layer responsible for transferring data between nodes. Two of the methods use spread spectrum RF signals, Direct Sequence Spread Spectrum (DSSS) and Frequency-Hopping Spread Spectrum (FHSS), in the 2.4 to 2.4825 GHz unlicensed ISM (Industrial, Scientific and Medical) band. The third method is infrared technology, using very high frequencies, just below visible light in the electromagnetic spectrum to carry data.

EAP-TLS (Transport Layer Security)
With EAP-TLS, digital certifications are needed by both the server and the wireless stations for mutual authentication. The server presents a certificate to the client. After validating the identity of the server, the client sends a different certificate to the server. The exchange of certificates is done in the open before a secured tunnel is created. This makes user identity vulnerable to passive attacks. A digital certificate is an electronic ID card that authenticates the senders identity. However, to implement EAP-TLS, you need a Certificate Authority (CA) to handle certificates, which imposes a management overhead.
EAP-TTLS (Tunneled Transport Layer Service)
EAP-TTLS is an extension of the EAP-TLS authentication that uses certificates for only the server-side authentications to establish a secure connection. Client authentication is then done by sending username and password through the secure connection, thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP v2.

PEAP (Protected EAP)

Like EAP-TTLS, server-side certificate authentication is used to establish a secure connection, then use simple username and password methods through the secured connection to authenticate the clients, thus hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5, EAP-MSCHAPv2 and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by Cisco.
LEAP (Light Extensible Authentication Protocol) is a Cisco implementation of IEEE802.1x. For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption. They are often deployed in corporate environments, but for public deployment, a simple user name and password pair is more practical. The following table is a comparison of the features of five authentication types.
Types of EAP Authentication
Comparison of EAP Authentication Types
EAP-MD5 Mutual Authentication Certificate Client Certificate Server Dynamic Key Exchange Credential Security Deployment Difficulty Wireless Security Client Identity Protection No No No No None Easy Poor No EAP-TLS Yes Yes Yes Yes Strong Hard Best No EAP-TTLS Yes Optional Yes Yes Strong Moderate Good Yes PEAP Yes Optional Yes Yes Strong Moderate Good Yes LEAP Yes No No Yes Moderate Moderate Good No
Appendix D Product Specifications
PHYSICAL SPECIFICATIONS Product Name Type Standards Antenna Power Dimensions Weight ZyAIR G-200 Wireless LAN USB Adapter USB 2.0 IEEE 802.11b IEEE 802.11g Internal PCB antenna 5V DC 110.3 mm(H) x 73.1 mm(W) x 53.8 mm(D) 107g

Protected EAP.. See PEAP R Related Documentation.. xiii Remove the ZyAIR Utility.. 3-1 RF signals...A Roaming.. 2-2 Example.. 2-2 S Safely disconnect the ZyAIR. 3-1 Service Set Identity..See SSID Shared Key... 2-9 Site Survey.. 2-4, 2-5 SSID... 2-7 SSID... 2-1 Syntax Conventions.. xiii T TLS... E Transmission rate. 2-1 Transport Layer Security..See TLS Troubleshooting.. 4-1 Checking Hardware Conflict.. 4-1 Communication problems. 4-1 Radio interference. 4-2 Starting ZyAIR Utility.. 4-1 Using the ZyAIR.. 4-2 TTLS... E Tunneled Transport Layer Service See TTLS U Uninstall the ZyAIR Utility. 3-1 Upgrade the ZyAIR Utility.. 3-1 User Authentication. 2-11 Using the ZyAIR Utility. 2-1
W Warranty.. iii Note.. iii WEP.. 2-8 WEP Data Encryption Configuring.. 2-8 WEP Data Encryption with.2-8, 2-11, 2-13, 2-16 WEP Key.. 2-8 Wired Equivalent Privacy..See WEP Wireless LAN Benefits...A Wireless LAN Parameters Channel.. 2-1 Configuring.. 2-6 Network Type.. 2-1 SSID... 2-1 Transmission Rate. 2-1 Wireless LAN Security Data Encryption with WEP.2-8, 2-11, 213, 2-16 WLAN. A. See Wireless LAN WPA.. 2-11 WPA with RADIUS Application. 2-14 WPA-PSK Application. 2-14 Z ZyAIR Utility.. 3-1 Encryption..2-10, 2-13 Link Info... 2-3 Remove.. 3-1 Site Survey.. 2-5 Uninstall.. 3-1 Upgrade.. 3-1 ZyAIR Utility system tray icon.. 1-3

ZyAIR G-4100

802.11g Wireless Hotspot Gateway

User's Guide

Version 1.00 11/2005

ZyAIR G-4100 Users Guide

Copyright
Copyright 2005 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.

Disclaimer

ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice.

Trademarks

ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
Interference Statements and Warnings
Federal Communications Commission (FCC) Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:
This device may not cause harmful interference. This device must accept any interference received, including interference that may cause undesired operations.

FCC Warning

This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. If this equipment does cause harmful interference to radio/television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: 1. Reorient or relocate the receiving antenna. 2. Increase the separation between the equipment and the receiver. 3. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. 4. Consult the dealer or an experienced radio/TV technician for help.

Notice 1

Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. Antenna Warning! This device meets ETSI and FCC certification requirements when using the included antenna(s). Only use the included antenna(s). This Class B digital apparatus complies with Canadian ICES-003. Cet appareil numrique de la classe B est conforme la norme NMB-003 du Canada.

Certifications

1. Go to www.zyxel.com.
2. 3. Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. Select the certification you wish to view from this page.
This product has been designed for the WLAN 2.4 GHz network throughout the EC region and Switzerland, with restrictions in France.

Safety Warnings

For your safety, be sure to read and follow all warning notices and instructions. Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or other risks. ONLY qualified service personnel can service the device. Please contact your vendor for further information. Connect the power cord to the right supply voltage (110V AC in North America or 230V AC in Europe). Place connecting cables carefully so that no one will step on them or stumble over them. Do NOT allow anything to rest on the power cord and do NOT locate the product where anyone can walk on the power cord. The PoE (Power over Ethernet) devices that supply or receive power and their connected Ethernet cables must all be completely indoors. If you wall mount your device, make sure that no electrical, gas or water pipes will be damaged. Do NOT install nor use your device during a thunderstorm. There may be a remote risk of electric shock from lightning. Do NOT expose your device to dampness, dust or corrosive liquids. Do NOT use this product near water, for example, in a wet basement or near a swimming pool. Make sure to connect the cables to the correct ports. Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. Do NOT store things on the device. Connect ONLY suitable accessories to the device.

support@zyxel.dk DENMARK sales@zyxel.dk support@zyxel.fi FINLAND sales@zyxel.fi info@zyxel.fr FRANCE
+00 +07 +358-9-4780-8411 +358-9-+33 (0)97 +33 (0)20

www.zyxel.dk

www.zyxel.fi

www.zyxel.fr

support@zyxel.de GERMANY sales@zyxel.de mailto:support@zyxel.hu HUNGARY mailto:info@zyxel.hu http://zyxel.kz/support KAZAKHSTAN sales@zyxel.kz
+49-2405-6909-0 +49-2405-6909-99 +36-1-3361649 +36-1-3259100 +7-3272-590-698 +7-3272-590-689

www.zyxel.de/

www.zyxel.hu/

www.zyxel.kz/

support@zyxel.com NORTH AMERICA sales@zyxel.com support@zyxel.no NORWAY sales@zyxel.no info@pl.zyxel.com
+1-800-255-4101 +1-714-632-0882 +1-714-632-0858 +80 +81 +48-22-5286603

www.us.zyxel.com

ftp.us.zyxel.com www.zyxel.no

POLAND

www.pl.zyxel.com/
+ is the (prefix) number you enter to make an international telephone call. vii
TELEPHONE1 FAX +48-22-5206701

METHOD LOCATION

SUPPORT E-MAIL SALES E-MAIL

WEB SITE FTP SITE

REGULAR MAIL
ul.Emilli Plater 53 00-113 Warszawa Poland www.zyxel.ru/ ZyXEL Russia Ostrovityanova 37a Str. Moscow, 117279 Russia ZyXEL Communications Alejandro Villegas 33 1, 28043 Madrid Spain ZyXEL Communications A/S Sjporten 4, 41764 Gteborg Sweden ZyXEL Ukraine 13, Pimonenko Str. Kiev, 04050 Ukraine ZyXEL Communications UK Ltd., 11, The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK)
http://zyxel.ru/support RUSSIA sales@zyxel.ru support@zyxel.es SPAIN sales@zyxel.es support@zyxel.se sales@zyxel.se support@ua.zyxel.com UKRAINE sales@ua.zyxel.com support@zyxel.co.uk UNITED KINGDOM sales@zyxel.co.uk
+7-095-542-89-29 +7-095-542-89-25 +++++380-44-247-69-78 +380-44-494-49-32 +44 (0) (UK only) +44 (0) 1344 303034

www.zyxel.es

SWEDEN

www.zyxel.se

www.ua.zyxel.com/

www.zyxel.co.uk

ftp.zyxel.co.uk

Table of Contents

Copyright...... ii Interference Statements and Warnings.... iii Safety Warnings......v ZyXEL Limited Warranty.....vi Customer Support..... vii List of Figures.....xv List of Tables.....xix Preface......xxi Getting Started..... I Chapter 1 Getting to Know Your ZyAIR.... 1-1 1.1 Introducing the ZyAIR.... 1-1 1.2 Features..... 1-1 1.3 Applications..... 1-4

This part introduces the ZyAIR, the web configurator and general system setup.
Chapter 1 Getting to Know Your ZyAIR
This chapter introduces the features and applications of the ZyAIR.

Introducing the ZyAIR

The ZyAIR Hot Spot Gateway combines an IEEE 802.11g wireless access point, router, 4-port switch and service gateway in one box. If you have an exclusive printer, you can connect it directly to the ZyAIR, allowing you to easily print subscriber statements. The ZyAIR is ideal for offices, coffee shops, libraries, hotels and airport terminals catering to subscribers that seek Internet access. You should have an Internet account already set up and have been given usernames, passwords etc. required for Internet access.

Features

Your ZyAIR provides the following features to accommodate subscribers with a variety of network configurations with little or no technical support. iPnP The IP Plug and Play feature allows a computer to access the Internet or the ZyAIR without changing the network settings (such as IP address and subnet mask) of the computer, even when the IP addresses of the computer and the ZyAIR are not in the same subnet. WEP Data Encryption WEP (Wired Equivalent Privacy) encrypts data frames before transmitting over the wireless network to help keep network communications private. The ZyAIR uses 64-bit or 128-bit WEP encryption. WPA Data Encryption Wi-Fi Protected Access (WPA) encrypts data frames before transmitting over the wireless network to help keep network communications private. WPA provides user authentication and better data encryption than WEP. VPN (Virtual Private Network) Pass Through The ZyAIR allows subscribers to create VPN networks (which use data encryption and the Internet to provide secure communications) that go through the ZyAIR. VLAN The ZyAIR uses port-based VLAN (Virtual Local Area Network) on the LAN Ethernet ports to block direct communications between subscribers. This is called layer 2 isolation. SSL Secure Login With Secure Socket Layer (SSL) activated upon login, data exchanged between the ZyAIR and client computers are encrypted and protected.

Getting to Know Your ZyAIR
PPTP Support Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data from a remote client to a private server, creating a Virtual Private Network (VPN) using a TCP/IPbased network. PPTP supports on-demand, multi-protocol and virtual private networking over public networks, such as the Internet. Use PPTP to connect to a broadband modem to achieve access to highspeed data networks via a familiar "dial-up networking" user interface. PPPoE Support (RFC2516) PPPoE (Point-to-Point Protocol over Ethernet) emulates a dial-up connection. It allows your ISP to use their existing network configuration with newer broadband technologies such as ADSL. The PPPoE driver on the ZyAIR is transparent to the computers on the LAN, which see only Ethernet and are not aware of PPPoE thus saving you from having to manage PPPoE clients on individual computers. Network Address Translation (NAT) NAT (Network Address Translation - NAT, RFC 1631) allows the translations of multiple IP addresses used within one network to different IP addresses known within another network. DHCP Support DHCP (Dynamic Host Configuration Protocol) allows the individual computers (DHCP clients) to obtain TCP/IP configuration at start-up from a centralized DHCP server. The ZyAIR has built-in DHCP server capability. It can assign IP addresses, an IP default gateway and DNS servers to DHCP clients. The ZyAIR can also act as a surrogate DHCP server (DHCP Relay) where it relays IP address assignment from the actual real DHCP server to the DHCP clients. E-mail Forwarding The ZyAIR is able to forward and retrieve e-mail messages when the subscribers default email server is down or behind a firewall. DNS Proxy With DNS proxy, the ZyAIR provides DNS redirection when a subscribers configured DNS server is behind a firewall or located in a private Intranet. Local Subscriber Database The ZyAIR allows you to maintain a subscriber database on the ZyAIR without setting up an external RADIUS server. Subscriber accounting and authentication are done using the local subscriber database. RADIUS The ZyAIR can use an external RADIUS (Remote Authentication Dial In User Service defined in RFC2138 and 2139) server for subscriber authentication and accounting. Accounting The ZyAIR has a built-in accounting feature for keeping track of subscriber Internet usage time.

iPass The iPass company provides connectivity services for mobile Internet users. The ZyAIR can authenticate iPass clients through an external RADIUS server that is Wi-Fi based Wireless Internet Service Provider roaming (WISPr) compliant. Local Content and Advertising Links Once connected to the network, the ZyAIR directs the subscriber to a specified web site and display advertisement links. This can be a source of extra online advertising revenues and increased business exposure. Access Control (Walled Garden) With the walled garden feature, subscribers are able to access predetermined web sites without logging in. The ZyAIR blocks full Internet access until the subscribers log in. Subscriber Login Page Customization You can customize the subscriber login page according to your business needs. The advanced settings allow you to include welcome messages, company logo and basic formatting. Web Configurator Management The ZyAIR comes with an embedded web-based configurator. It offers advanced management features and allows you to manage the ZyAIR remotely using Internet Explorer. SNMP SNMP (Simple Network Management Protocol) is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your ZyAIR supports SNMP agent functionality, which allows a manager station to manage and monitor the ZyAIR through the network. The ZyAIR supports SNMP version 2c (SNMPv2c). Watchdog The ZyAIR can continue working by resetting itself after a system crash. Upgrade Firmware The firmware of the ZyAIR can be upgraded via the web configurator. Syslog The ZyAIRs syslog function allows network administrators to monitor the usage status of subscribers from a remote site. You can set up a syslog server to receive the log of information on current loggedin subscribers that the ZyAIR sends periodically. IEEE 802.11g Wireless LAN Standard The ZyAIR complies with the IEEE 802.11g wireless standard, which supports data speeds of up to 54 Mbps. IEEE 802.11b Wireless LAN Standard The ZyAIR is also fully compatible with the 802.11b standard. This means an IEEE 802.11b radio card can interface directly with the ZyAIR (and vice versa) at 11 Mbps or lower depending on range.
Antennas The ZyAIR is equipped with two reverse SMA connectors and two detachable omni-directional 2dBi antennas to provide a clear radio signal between the wireless stations and the access points. Refer to the Antennas appendix for more information. 4-Port Switch A combination of switch and Internet gateway makes your ZyAIR a cost-effective and viable network solution. You can connect up to four computers to the LAN ports on the ZyAIR without the cost of a hub. To connect more than four Ethernet devices, attach a hub or switch. 10/100M Auto-negotiating Ethernet/Fast Ethernet Interface This auto-negotiating feature allows the ZyAIR to detect the speed of incoming transmissions and adjust appropriately without manual intervention. It allows data transfer of either 10 Mbps or 100 Mbps in either half-duplex or full-duplex mode depending on your Ethernet network. Reset Button Use the reset button to restore the ZyAIR back to its factory defaults. Statement Printer A statement printer allows you to generate subscriber accounts on the ZyAIR and print out the account information on-site without using a computer. The statement printer is also known as an account generator, three-button printer or exclusive printer. Ease of Installation Your ZyAIR is designed for quick, intuitive and easy installation. It can be mounted on a desktop or a wall.

Customer ID

First/Last Name Company Address City State/Province ZIP/ Postal Code Country Phone Fax
LABEL Preview of Service Selection Page DESCRIPTION Click this link to display a preview of the credit card service selection page that will display on the subscribers screen.
The following figure shows an example preview of the credit card service selection page.
Figure 11-20 Credit Card Service Selection Page Preview
11.7.3 Credit Card Successful Page
Use this section to customize the page that displays on the subscribers screen if an attempt to use a credit card is successful.
Figure 11-21 Credit Card Successful Page The following table describes the labels in this section. Table 11-10 Credit Card Successful Page
LABEL Successful Message Notification Message (1-2) Account Information Username Password Usage Time Expiration Time DESCRIPTION Enter a message to tell the subscriber that the online credit card transaction was successful. Enter an additional message(s) regarding the subscribers use of the purchased Internet access. Enter a message to tell the subscriber about the account information in the following fields. Enter a label name for the field that displays the subscribers user name. Enter a label name for the field that displays the subscribers password. Enter a label name for the field that displays the subscribers purchased period of Internet access. Enter the label name for the field displaying when the account expires. Select date and time formats from the drop-down list boxes. Email Button Submit Button Preview of Successful Page Enter a label name for the button the subscriber can click to send a copy of the account information to the subscribers e-mail account. Enter a label name for the button the subscriber clicks to log into the account. Click this link to display a preview of the credit card transaction successful page that will display on the subscribers screen.
The following figure shows an example preview of the credit card transaction successful page.
Figure 11-22 Credit Card Successful Page Preview
11.7.4 Credit Card Fail Page
Use this section to customize the page that displays on the subscribers screen if an attempt to use a credit card fails.
Figure 11-23 Credit Card Service Fail Page The following table describes the labels in this section. Table 11-11 Credit Card Service Fail Page
LABEL Notification Message (1-3) Try Again Button Close Button Preview of Fail Page DESCRIPTION Enter a message(s) to tell the subscriber that the online credit card transaction failed and how to try again. Enter a label name for the button that takes the subscriber back to the credit card service selection page. Enter a label name for the button that the subscriber can use to stop attempting to make a credit card transaction and close the credit card interface. Click this link to display a preview of the credit card transaction failed page that will display on the subscribers screen.

16.2 Configuring DDNS

Click ADVANCED and DDNS to display the screen as shown next.
Figure 16-1 DDNS The following table describes the labels in this screen. Table 16-1 DDNS
LABEL Force to update every ~day(s) when WAN IP address keeps no change No Active DESCRIPTION Enter a number in the field to set the force update interval (in days). This sets how often the ZyAIR updates the DDNS server with the ZyAIRs WAN IP address when the ZyAIRs WAN IP address stays the same. This is the index number of a DDNS account. Select or clear the check box to enable or disable the DDNS record.

Table 16-1 DDNS

LABEL Update Status Now Settings Status DESCRIPTION Click the Update Status Now button to have the ZyAIR update the DDNS server with the ZyAIRs WAN IP address. Enter the DDNS server account information in the fields below. This field displays N/A when the DDNS client service is not installed. This field displays the time of the latest update (in YY/MM/DD HH:MM:SS format) and the current state of the DDNS Client. This field displays Updated Successfully when the DDNS client service is installed and running. This field displays Update Fail when the DDNS client service is installed, but the service is not running. Service Provider Registered Host Name Login Name Password Email Address Wildcards (optional) Apply Select the name of your Dynamic DNS service provider. Enter the host name in the field provided. Enter the user name for the above Registered Host Name. The Dynamic DNS service provider assigns you this user name. Enter the password for the above Login Name. The Dynamic DNS service provider assigns you this password. Enter your e-mail address. The DDNS server e-mails you important information once your Internet Name has been successfully registered. Select the check box to enable DYNDNS Wildcard. Click Apply to save the changes.

Chapter 17 LAN Devices

This chapter describes how you can remotely access devices on the LAN through the ZyAIR.
17.1 LAN Devices and NAT Overview
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For example, the source address of an outgoing packet, used within one network is changed to a different IP address known within another network. Traditionally, when you have a device (for example, a switch) on a LAN using NAT, you cannot access the device from the WAN since the LAN device is assigned a private IP address. Your ZyAIR is a NAT-enabled device that makes your whole inside network appear as a single computer to the outside world.

17.1.1 Port Mapping

To make LAN devices behind the ZyAIR visible to the outside world, you configure a mapping between a virtual port on the ZyAIR and a server port on a LAN device. A virtual port is a port on the ZyAIR that appears as a physical port to the attached devices. A server port defines a server to which all specified requests are forwarded. In addition, centralized LAN device management is possible through the ZyAIR using port mapping. You can access the management interface on the LAN device remotely provided that the LAN device has allowed remote management.

Figure 23-5 Configuration Backup: Using TFTP Successful
23.2.3 Restore Configuration Using HTTP
This section shows you how to upload a new or previously saved configuration file from your computer to your ZyAIR. This function erases the current configuration before restoring a previous back up configuration; please do not attempt to restore unless you have a backup configuration file stored on disk.
Figure 23-6 CONFIGURATION: Restore Using HTTP
2. Specify the location and filename of a configuration file in the Local PC File Path field or click

Browse.

3. Click Apply to start the configuration restore process. The ZyAIR automatically restarts after the
restoration process is complete.
23.2.4 Restore Configuration Using TFTP
This section shows you how to upload a new or previously saved configuration file from a TFTP server to your ZyAIR. This function erases the current configuration before restoring a previous back up configuration; please do not attempt to restore unless you have a backup configuration file stored on disk.
1. Click System Tools and Configuration. A screen displays as shown next.
Figure 23-7 CONFIGURATION: Restore Using TFTP
3. Specify the file name of the configuration file in the File Name field. 4. Click Apply to start the configuration restore process. The ZyAIR automatically restarts after the

23.3 Firmware Upgrade

There are two ways to upgrade firmware to the ZyAIR: manually or scheduled. To manually upgrade the firmware, you have to download the latest firmware first from www.zyxel.com and then upload it to the ZyAIR. You can upload it to the ZyAIR using the Web Configurator or using a TFTP server. With scheduled firmware upgraded, you need to set up a TFTP server where the ZyAIR can automatically download the latest firmware at the specified time.
Configuration, Firmware and Accounting Log Maintenance 23-5
If you are upgrading to firmware version v1.00(ZB.3)c0 or higher from a lower version, you might upgrade the boot code to v1.03 as well. In this case, you must upgrade the firmware BEFORE you upgrade the boot code.
23.3.1 Manual Firmware Upgrade Using the Web Configurator
Follow the steps below to upload the firmware using the web configurator.
5. Click SYSTEM TOOLS, FIRMWARE and then Manual Firmware Upgrade to display the

screen as shown.

Figure 23-8 Manual Firmware Upgrade Using the Web Configurator
6. Specify the name of the firmware file in the Local PC File Path field or click Browse to locate the
file and click Apply to start the file transfer process. The firmware must be a binary file and should have a.bin extension.

ZyAIR G-4100 Users Guide 8. When the certificate is saved successfully, a Certificate Import Wizard window displays. Click
Figure 24-9 Certificate Import Wizard
9. A Certificate window displays the detail information.
Figure 24-10 Certificate: Details
10.Click OK in the Certificate window to return to the Security Alert window as shown. Notice that
the first item in the list changed to inform you that the certificate is from a trusted host. Click OK to proceed to the login screen in secure mode.
Figure 24-11 Security Alert: Trusted
24.4 Activating SSL Security for Subscriber Logins
Follow the steps below to activate the SSL security for subscriber login connections to the ZyAIR.
1. Click ADVANCED, AUTHENTICATION and select the Enable in the SSL Login Page field
Figure 24-12 AUTHENTICATION: Activate SSL Login
2. Click Apply to save the changes and restart the ZyAIR when prompted.
24.5 SSL Certificate Download
You can register for a certificate from a CA (Certificate Authority). A CA issues digital certificates and guarantees the identity of the certificate owner. Click SYSTEM TOOLS, SSL CERTIFICATE to open the SSL CERTIFICATE screen. Use this screen to download a CA registered certificate from a computer connected to the ZyAIR.
You must save the certificate and private key files from the CA on a computer that is connected to the ZyAIR.
Figure 24-13 SSL CERTIFICATE The following table describes the labels in this screen. Table 24-1 SSL CERTIFICATE
LABEL Password Certificate File Private Key File Apply DESCRIPTION Enter the private key password from the CA. Make sure you enter it exactly as the CA provides. Specify the name and/or location of the file containing the certificate. Or click Browse to locate the file. Specify the name and/or location of the file containing the private key, Or click Browse to locate the file. Click Apply to transfer the certificate and private key files from the computer to the ZyAIR.
After you download the certificate files, click Apply to restart the ZyAIR. See the chapter on general system setup for how to set the ZyAIR to use the certificate that you download.

Chapter 25 Ping Command

This chapter covers how to use the PING COMMAND screen.

25.1 About Ping Command

Use the ping function to check the ZyAIRs network connection.

25.2 Using Ping Command

Click SYSTEM TOOLS and then PING COMMAND to open the following screen.
The following table describes the labels in this screen. Table 25-1 PING COMMAND
LABEL DESCRIPTION Type the IP address of a device on the WAN that you want to ping in order to test the Internet connection. Destination IP Address
This feature tests your Internet connection, so the destination IP address must be on the WAN. Do not use a LAN IP address.

Click this button to have the device ping the IP address.

Ping Command

Table 25-1 PING COMMAND
LABEL Clear Ping Result DESCRIPTION Click this button to clear the ping results in the multi-line text box. This multi-line text box displays the results of the ping.

Chapter 26 Restart

This chapter covers how to use the RESTART screen.

26.1 Restart

Click SYSTEM TOOLS and then RESTART to open the following screen. Click Apply to have the ZyAIR reboot. This does not affect the ZyAIR's configuration.

Restart

Chapter 27 Troubleshooting
This chapter covers potential problems and possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem.
27.1 Using LEDs to Diagnose Problems
The LEDs are useful aides for finding possible problem causes.

27.1.1 The Power LED

The PWR LED on the front panel does not light up. Table 27-1 Troubleshooting Power LED
STEPS 3 CORRECTIVE ACTION Check the connection from the ZyAIR to the power source. Make sure you are using the supplied power supply. Refer to the product specifications. Make sure the power source is turned on and that the ZyAIR is receiving sufficient power. If these steps fail to correct the problem, contact your local distributor for assistance.

27.1.2 The LAN Port LEDs

None of the LEDs for the LAN port(s) light up when connected to an Ethernet device. Table 27-2 Troubleshooting LAN LEDs
STEPS Make sure the ZyAIR is turned on. Verify that the attached device(s) is turned on and properly connected to the ZyAIR. Verify that the Ethernet cable length does not exceed 100 meters. Make sure the network adapters are working on the attached device(s). CORRECTIVE ACTION

27.1.3 The WAN Port LED

The LED for the WAN port does not light up when connected to an Ethernet device. Table 27-3 Troubleshooting WAN LEDs
STEPS 3 CORRECTIVE ACTION Make sure you connect your cable or DSL modem or router to this port using the Ethernet cable that came with your cable or DSL modem or router. Verify that the attached device is turned on and properly connected to the ZyAIR. Verify that the Ethernet cable length does not exceed 100 meters.

IEEE 802.11

The 1997 completion of the IEEE 802.11 standard for wireless LANs (WLANs) was a first important step in the evolutionary development of wireless networking technologies. The standard was developed to maximize interoperability between differing brands of wireless LANs as well as to introduce a variety of performance improvements and benefits. On September 16, 1999, the 802.11g provided much higher data rates of up to 11Mbps, while maintaining the 802.11 protocol. The IEEE 802.11 specifies three different transmission methods for the PHY, the layer responsible for transferring data between nodes. Two of the methods use spread spectrum RF signals, Direct Sequence Spread Spectrum (DSSS) and Frequency-Hopping Spread Spectrum (FHSS), in the 2.4 to 2.4825 GHz unlicensed ISM (Industrial, Scientific and Medical) band. The third method is infrared technology, using very high frequencies, just below visible light in the electromagnetic spectrum to carry data.
Ad-hoc Wireless LAN Configuration
The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless nodes or stations (STA), which is called a Basic Service Set (BSS). In the
Wireless LAN and IEEE 802.11
most basic form, a wireless LAN connects a set of computers with wireless adapters. Any time two or more wireless adapters are within range of each other, they can set up an independent network, which is commonly referred to as an Ad-hoc network or Independent Basic Service Set (IBSS). See the following diagram of an example of an Ad-hoc wireless LAN.
Diagram 5 Peer-to-Peer Communication in an Ad-hoc Network
Infrastructure Wireless LAN Configuration
For infrastructure WLANs, multiple access points (APs) link the WLAN to the wired network and allow users to efficiently share network resources. The access points not only provide communication with the wired network but also mediate wireless network traffic in the immediate neighborhood. Multiple access points can provide wireless coverage for an entire building or campus. All communications between stations or between a station and a wired network client go through the access point. The Extended Service Set (ESS) shown in the next figure consists of a series of overlapping BSSs (each containing an Access Point) connected together by means of a Distribution System (DS). Although the DS could be any type of network, it is almost invariably an Ethernet LAN. Mobile nodes can roam between access points and seamless campus-wide coverage is possible.

Accessing.. 22-9 Detecting Time.. 17-2 Management.. 17-1, 17-3 Port Mapping.. 17-1
LAN Devices..22-9 LAN Devices Alarm..18-6 LAN Devices Information..18-6 LAN Subnet Mask..22-3 Layer 2 Isolation Security..3-5 Lease Time...4-8 Level..8-4 Limiting User Sessions..3-5 Local Content..1-3 Local Subscriber Database..1-2
Notice Message.. 11-10 Notification Message.. 11-19, 11-21
OFDM.See Orthogonal Frequency Division Multiplexing Open System.. 21-9 Orthogonal Frequency Division Multiplexing... 21-3
ZyAIR G-4100 Users Guide P R
Page Background.. 11-6 Pass Through.. 12-1 Pass Through List.. 12-3 Password.. 11-3 Payment Information. 11-19 Ping Command.. 25-1 Point-to-Point Tunneling Protocol.. 4-3 Port Mapping.. 17-1 Portal Page.. 15-1 Post-Paid.. 7-3 Post-Paid Billing.10-2, 10-4 PPP MTU... 4-3 PPP MTU Setting.. 4-5 PPPoE. 1-2, 4-2, 4-3, 4-5 PPPoE Password.. 4-5 PPPoE Username... 4-5 PPTP.. U, 1-2, 4-3, 4-5 PPTP Password.. 4-5 PPTP Server IP Address.. 4-5 PPTP Username.. 4-5 Preamble Type.. 21-8 Pre-Paid.. 7-2 Pre-Paid Billing... 10-2 Previewing Printouts.. 11-13 Price.. 11-13 Print out Time.. 11-13 Printout... 8-3 Printout Previews.. 11-13 Private IP Addresses. 4-2 Purchase Unit.. 11-13 Purchase Unit Message.. 11-19
Radiation Pattern.. Q RADIUS..6-1 Redirect Login Page URL. 5-2, 11-4 Redirect Subscriber Login Screen.11-4 Related Documentation..xxi Replenish..8-3 Request To Send..21-4 Reset Button... 1-4, 2-9 Restart...26-1 Restarting the ZyAIR..2-11 Restoring Factory-Defaults.2-9 Restricted Destination List..13-2 Reverse SMA connectors..1-4 RF signals.. M RTS /CTS Threshold..21-4 RTS Threshold..21-8
Scheduled Firmware Upgrade..23-9 Secure Administrator IP Addresses.3-5 Secure Socket Layer..24-1 Server Configuration.4-6 Server Port..17-1 Service..vi Service Name..4-5 Service Selection Message..11-19 Service Set..21-7 Session Limits...3-5 Session List..22-7 Session Trace..19-1 Share LAN Resource..14-1 Shared Key..21-9 SMTP Port... 4-9, 18-2 Specifying an Inside Server..17-3

Quick Start Guide.. xxi

SSL...24-1 SSL Certificate.. 3-5, 22-4 SSL Certificate Download..24-6 SSL Login Page Security..5-2 SSL Secure Login..1-1 SSL Security..4-8 SSL Security Certificate..24-2 SSL Security for Subscriber Logins.24-6 Standard Subscriber Login Screen.11-2 Statement Printer..1-4 Static IP...4-5 Submit Button..11-21 Subnet Mask..4-1
System Name... 3-1 System Time.. 2-5 System Up Time.. 2-5 System/Host Name.. 2-5
Tax... 11-13 Tax Percentage.. 7-3 TCP MSS.. 4-3 TCP MSS Setting.. 4-5 Three-Buttons Printer.. 8-3 Time to Finish.. 6-3, 7-3 Time-to-finish Accounting. 7-1 Title.. 11-3, 11-13 Total... 11-13 Troubleshooting.. 27-1
Account Generator...27-3 Internet Access...27-2 Internet Browser Display.27-2 LAN LEDs..27-1 Power LED..27-1 WAN LEDs...27-1 Web Configurator..27-2 U
Subnet Masks.. X Subnetting.. X Subscriber Accounts.8-1 Subscriber Information Window.11-9 Subscriber Login..CC Subscriber Login Screen

Advanced.. 11-5 Framed... 11-7 Redirect.. 11-4 Standard... 11-2
Unit Price.. 8-4 Usage Time.. 11-13, 11-21 User Agreement.. 5-2, 18-5 User Session Limited.. 3-5 Username... 11-3 Using LEDs To Diagnose Problems. 27-1
Subtitle.. 11-3, 11-13 Super Subscriber Account..2-7 Supervisor Account..2-6 Supporting Disk.. xxi Syslog.. 1-3, 18-1 Syslog Log Settings..18-2 Syslog Server..18-1 System Boot Notice..18-4 System Information. 18-4, 22-1 System Login Accounts
Account manager.. 2-6 Administrator.. 2-6
Virtual Port.. 17-1, 17-2 VPN Pass Through.. 1-1
Walled Garden.. 1-3, 15-2 Walled Garden Login.. 15-3
System Manager Activity Information.18-4
IP Address..2-6, 4-5, 22-3 MAC Address..2-6, 4-5, 22-3 Subnet Mask..2-6, 4-5, 22-3
Wireless Association Information.18-4 Wireless Channel...2-6 Wireless Firmware Version..22-3 Wireless LAN.. M, 21-1
Benefits... M Coverage.. 21-3
WAN Port Mode..4-5, 22-3 WAN Status.. 2-6 WAN Type... 2-6 Warning/Alarm Message.. 11-10 Watchdog... 1-3 Web Configurator.. 2-1
Accessing... 2-1 Screens Overview.. 2-3 Supported Browsers.. 2-1
Wireless Service..2-6 Wireless Standards..21-2 WISPr...6-4 Wizard Setup.. 2-2, 3-1 WLAN. 21-1. See Wireless LAN WorldPay...9-2
Currency Code.. 9-2 Installation ID.. 9-2 Payment Gateway.. 9-2 Test Mode.. 9-2
Web Server.. 4-7 Web Server Port.. 4-7 Web-based Account Generator Panel.. 8-3 Welcome Slogan.. 11-6 WEP.. 1-1, 21-3, 21-7, 22-4 WEP Encryption.. 11-13 Wi-Fi based Wireless Internet Service Provider Roaming... 6-4 Wireless... 22-3
WPA..1-1, 21-3, 21-7, 22-4 WPA Encryption..11-13

Note..vi