ZyXEL Communications NWA3160 User Manual

Chapter 3 Tutorial

ZyXEL NWA-3160 Series User’s Guide

Each SSID profile already uses a different pre-shared key.
In this example, you will configure access limitations for each SSID profile. To do this, you 
will take the following steps.

1 Configure the SERVER_1 network’s SSID profile to use specific MAC filter and layer-2 

isolation profiles.

2 Configure the SERVER_1 network’s MAC filter profile.
3 Configure the SERVER_1 network’s layer-2 isolation profile.
4 Repeat steps 1 ~ 3 for the SERVER_2 network.
5 Check your settings and test the configuration.

To configure layer-2 isolation, you need to know the MAC addresses of the devices on your 
network, which are as follows.

To configure MAC filtering, you need to know the MAC addresses of the devices Alice and 
Bob use to connect to the network, which are as follows.

First, you will set up the SERVER_1 network which allows Alice to access secure server 1 via 
the network switch. 
You will configure the MAC filter to restrict access to Alice alone, and then configure layer-2 
isolation to allow her to access only the network router, the file server and the Internet security 
gateway.
Take the following steps to configure the SERVER_1 network.

1 Log into the ZyXEL Device’s Web Configurator and click WIRELESS > SSID. The 

following screen displays, showing the SSID profiles you already configured.

Security

Security Profile security03:

WPA2-PSK

Hide SSID

Security Profile security04:

WPA2-PSK

Hide SSID

Intra-BSS traffic 

blocking

Enabled

Enabled

Table 7   Tutorial: Example Network MAC Addresses

ZyXEL Device

Z

BB:AA:99:88:77:66

Secure Server 1

1

AA:99:88:77:66:55

Secure Server 2

2

99:88:77:66:55:44

Workstation

C

88:77:66:55:44:33

Switch

D

77:66:55:44:33:22

Security gateway

E

66:55:44:33:22:11

Table 8   Tutorial: Example User MAC Addresses

Alice

11:22:33:44:55:66

Bob

22:33:44:55:66:77

Table 6   Tutorial: SSID Profile Security Settings