Chapter 4 Wireless Configuration

Chapter 4 Wireless Configuration
Chapter 4
Wireless Configuration
This chapter describes how to configure the wireless features of your WPN802 Access Point. In
planning your wireless network, you should consider the level of security required. You should
also select the physical placement of your wireless access point in order to maximize the network
speed. For further information on wireless networking, refer to Appendix B, “Wireless
Networking Basics.
Observe Performance, Placement, and Range Guidelines
The operating distance or range of your wireless connection can vary significantly based on the
physical placement of the wireless wireless access point. The latency, data throughput
performance, and notebook power consumption of wireless adapters also vary depending on your
configuration choices.
Note: Failure to follow these guidelines can result in significant performance
degradation or inability to wirelessly connect to the wireless access point. For complete
range/performance specifications, please see Appendix A, “Technical Specifications.”
For best results, place your wireless access point:
•
•
•
•
Near the center of the area in which your computers will operate.
In an elevated location such as a high shelf where the wirelessly connected computers have
line-of-sight access (even if through walls).
Away from sources of interference, such as computers, microwaves, and 2.4 GHz cordless
phones.
Away from large metal surfaces.
The time it takes to establish a wireless connection can vary depending on both your security
settings and placement. WEP connections can take slightly longer to establish. Also, WEP and
WPA-PSK \encryption can consume more battery power on a notebook computer.
When used on a metallic surface, MIMO units must be oriented vertically to ensure proper
operation:
Wireless Configuration
4-1
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
Figure 4-1: Vertical orientation required on metallic surfaces
Understanding Wireless Settings
To configure the Wireless settings of your wireless access point, click the Wireless link in the main
menu of the browser interface. The Wireless Settings menu appears, as shown below.
Figure 4-2: Wireless Settings menu
4-2
Wireless Configuration
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
•
Country/Region: It may not be legal to operate the access point in a country/region other than
the country/region shown here. See online help for more details. To change the Country/
Region, select from the drop-down list. The region selection feature may not be available in all
countries.
•
Wireless Network Name (SSID): The default is NETGEAR. Enter a 32-character
(maximum). The characters are case sensitive.
Note: You will not get a wireless network connection unless the network SSID matches
exactly what is configured in the access point.
•
Broadcast Wireless Network Name (SSID): If enabled, the Wireless Access Point will
broadcast its SSID. If set to disable, the SSID is not broadcast.
•
Operating Mode: Select the desired wireless operating mode. The default is Auto (11g/11b).
You can change this to 11g Only, or 11b Only.
•
Channel/Frequency: Select the channel for your wireless LAN. This feature is disabled if
AutoCell is enabled. It should not be necessary to change the wireless channel unless you
notice interference problems with another nearby access point. For more information on the
wireless channel frequencies please refer to “Wireless Channels” on page B-7.
•
Data Rate: The available transmit data rate of the wireless network. Note that 108 Mbps
option is available when the Channel/Frequency is set to channel 6 and the operating mode
is set to 11g Only.
•
Output Power: Shows the available transmit power of the access point. The possible Tx
power options are: Full, 50%, 25%, 12.5%, and minimum. The transmit power may varies
depends on the local regulatory regulations. Note that this feature will be disabled if
AutoCell is enabled.
Understanding Advanced Wireless Settings
To configure the advanced wireless settings of your wireless access point, click the Wireless Setup
link in the Advanced section of the main menu of the browser interface. The Wireless Settings
menu appears, as shown below.
Wireless Configuration
4-3
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
Figure 4-3: Advanced Wireless Settings menu
•
Enable SuperG Mode: SuperG Mode may increase the overall wireless performance. The
default setting is Yes.
•
RTS Threshold: Request to Send Threshold. The packet size that is used to determine if it
should use the CSMA/CD (Carrier Sense Multiple Access with Collision Detection)
mechanism or the CSMA/CA mechanism for packet transmission. With the CSMA/CD
transmission mechanism, the transmitting station sends out the actual packet as soon as it has
waited for the silence period. With the CSMA/CA transmission mechanism, the transmitting
station sends out an RTS packet to the receiving station, and waits for the receiving station to
send back a CTS (Clear to Send) packet before sending the actual packet data. The default is
2346.
•
Fragmentation Length: The maximum packet size used for fragmentation. Packets larger
than the size programmed in this field will be fragmented. The Fragment Threshold value must
be larger than the RTS Threshold value. The default is 2346
•
Beacon Interval: The interval time between 20ms and 1000ms for each beacon transmission.
The default is 100.
•
DTIM Interval: The Delivery Traffic Indication Message. Specifies the data beacon rate
between 1 and 255. The default is 1.
•
Preamble Type: A long transmit preamble may provide a more reliable connection or slightly
longer range. A short transmit preamble gives better performance. Auto will automatically
handle both long and short preamble. The default is Auto.
4-4
Wireless Configuration
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
Implementing Appropriate Wireless Security
Note: Indoors, computers can connect over 802.11b/g wireless networks at ranges of up
to 300 feet. Such distances can allow for others outside of your immediate area to access
your network.
Unlike wired network data, your wireless data transmissions can be received well beyond your
walls by anyone with a compatible adapter. For this reason, use the security features of your
wireless equipment. The WPN802 Access Point provides highly effective security features which
are covered in detail in this chapter. Deploy the security features appropriate to your needs.
Wireless Data
Security Options
4
Range: Up to 300 Foot Radius
/PEN%ASYBUTNOSECURITY
-!#!CCESS,IST.ODATASECURITY
7%03ECURITYBUTVULNERABLE
70!OR70!03+6ERYSTRONGSECURITY
!UTO#ELL2&hSTEALTHvMODE
Figure 4-4: WPN802 wireless data security options
There are several ways you can enhance the security of your wireless network.
•
•
•
Restrict Access Based on MAC address. You can restrict access to only trusted computers so
that unknown computers cannot wirelessly connect to the WPN802. MAC address filtering
adds an obstacle against unwanted access to your network, but the data broadcast over the
wireless link is fully exposed.
Turn Off the Broadcast of the Wireless Network Name SSID. If you disable broadcast of
the SSID, only devices that have the correct SSID can connect. This nullifies the wireless
network ‘discovery’ feature of some products such as Windows XP, but the data is still fully
exposed to a determined snoop using specialized test equipment like wireless sniffers.
WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP Shared
Key authentication and WEP data encryption will block all but the most determined
eavesdropper.
Wireless Configuration
4-5
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
•
•
WPA-PSK. Wi-Fi Protected Access, Pre-Shared Key (WPA-PSK) data encryption provides
strong data security. WPA-PSK will block eavesdropping. Because this is a new standard,
wireless device driver and software availability may be limited.
AutoCell Enhanced RF Security. In addition to standard encryption and security
mechanisms such as WEP and WPA, the WG302 AutoCell Feature provides self-organizing
micro cells for an additional level of privacy for enterprises. In this mode, AutoCell shrinks
the size of coverage to the minimum to reach clients but also shrinks the size of the beacons
that access points use to announce their presence. This mode makes an enterprise wireless
LAN nearly invisible to users outside an office building. AutoCell clients such as the
NETGEAR WAG511 are highly recommended for Enhanced RF Security.
4-6
Wireless Configuration
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
Information to Gather Before Changing Basic Wireless Settings
Before customizing your wireless settings, print this form and record the following information. If
you are working with an existing wireless network, the person who set up or is responsible for the
network will be able to provide this information. Otherwise, you will choose the settings for your
wireless network. Either way, record the settings for your wireless network in the spaces below.
•
Wireless Network Name (SSID): ______________________________ The SSID, identifies
the wireless network. You can use up to 32 alphanumeric characters. The SSID is case
sensitive. The SSID in the wireless adapter card must match the SSID of the wireless access
point. In some configuration utilities (such as in Windows XP), the term “wireless network
name” is used instead of SSID.
•
If WEP Authentication is Used. Circle one: Open System, Shared Key, or Auto.
Note: If you select Shared Key, the other devices in the network will not connect unless they
are set to Shared Key as well and are configured with the correct key.
–
WEP Encryption key size. Choose one: 64-bit or 128-bit. Again, the encryption key size
must be the same for the wireless adapters and the wireless access point.
–
Data Encryption (WEP) Keys. There are two methods for creating WEP data encryption
keys. Whichever method you use, record the key values in the spaces below.
•
•
Passphrase method. ______________________________ These characters are case
sensitive. Enter a word or group of printable characters and click the Generate Keys
button. Not all wireless devices support the passphrase method.
Manual method. These values are not case sensitive. For 64-bit WEP, enter 10 hex
digits (any combination of 0-9 or a-f). For 128-bit WEP, enter 26 hex digits.
Key 1: ___________________________________
Key 2: ___________________________________
Key 3: ___________________________________
Key 4: ___________________________________
•
If WPA-PSK Authentication is Used.
–
Passphrase: ______________________________ These characters are case sensitive.
Enter a word or group of printable characters. When you use WPA-PSK, the other devices
in the network will not connect unless they are set to WPA-PSK as well and are configured
with the correct Passphrase.
Use the procedures described in the following sections to configure the WPN802. Store this
information in a safe place.
Wireless Configuration
4-7
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
How to Set Up and Test Basic Wireless Connectivity
Note: If you use a wireless computer to configure WPA settings, you will be
disconnected when you click Apply. Reconfigure your wireless adapter to match the
new settings or access the wireless access point from a wired computer to make any
further changes.
Follow the instructions below to set up and test basic wireless connectivity. Once you have
established basic wireless connectivity, you can enable security settings appropriate to your needs.
1. Log in to the WPN802 at its default LAN address of http://192.168.0.231 with its default user
name of admin and default password of password, or using whatever LAN address and
password you have set up.
2. Click Wireless Settings in the main menu of the WPN802.
Figure 4-5: Wireless Settings menu
3. Choose a suitable descriptive name for the wireless network name (SSID). In the SSID box,
enter a value of up to 32 alphanumeric characters. The default SSID is NETGEAR.
Note: The SSID is case sensitive; NETGEAR is not the same as nETgear. Also, the SSID of
any wireless access adapters must match the SSID you configure in the NETGEAR
RangeMax™ Wireless Access Point WPN802. If they do not match, you will not get a
wireless connection to the WPN802.
4. Set the Region. Select the region in which the wireless interface will operate.
4-8
Wireless Configuration
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
5. Set the Channel. The default channel is 11.
This field determines which operating frequency will be used. It should not be necessary to
change the wireless channel unless you notice interference problems with another nearby
wireless router or access point. Select a channel that is not being used by any other wireless
networks within several hundred feet of your wireless access point. For more information on
the wireless channel frequencies please refer to “Wireless Channels” on page B-7.
6. For initial configuration and test, leave the Wireless Card Access List set to “Everyone” and
the Encryption Strength set to “Disabled.”
7. Click Apply to save your changes.
Note: If you are configuring the WPN802 from a wireless computer and you change the
WPN802’s SSID, channel, or security settings, you will lose your wireless connection
when you click on Apply. You must then change the wireless settings of your computer
to match the WPN802’s new settings.
8. Configure and test your computers for wireless connectivity.
Program the wireless adapter of your computers to have the same SSID and channel that you
configured in the WPN802. Check that they have a wireless link and are able to obtain an IP
address by DHCP from the WPN802.
Warning: The Network Name (SSID) is case sensitive. If NETGEAR is the Network Name
(SSID) in your wireless access point, you must enter NETGEAR in your computer's wireless
settings. Typing nETgear will not work.
Once your computers have basic wireless connectivity, you can configure the advanced wireless
security functions.
How to Configure WEP or WPA
Not all wireless adapters support WPA. Furthermore, client software is also required. Windows XP
and Windows 2000 with service pack 3 do include WPA support. Nevertheless, the wireless
adapter hardware and driver must also support WPA. For instructions on configuring wireless
computers or PDAs for WPA-PSK security, consult the documentation for the product you are
using.
To configure WEP or WPA data encryption, follow these steps:
Wireless Configuration
4-9
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
Note: If you use a wireless computer configure WEP settings, you will be disconnected
when you click Apply. You must then either configure your wireless adapter to match
the wireless access point WEP settings or access the wireless access point from a wired
computer to make any further changes.
1. Log in to the WPN802 at its default LAN address of http://192.168.0.231 with its default user
name of admin and default password of password, or using whatever LAN address and
password you have set up.
2. Click Wireless Settings in the main menu of the WPN802.
3. From the Security Options menu, select WEP/WPA. The WEP/WPA Settings page opens.
Figure 4-6: Wireless Settings encryption menu
4. Select the Network Authentication and Data Encryption from the drop-down lists.
Please refer to “Authentication and WEP Data Encryption” on page B-2 for a full explanation
of each of these options, as defined by the IEEE 802.11 wireless communication standard.
5. Either enter a Passphrase and click Generate Keys, or manually enter the keys. The keys must
be identical on all computers and access points in your network.
•
•
Passphrase - The passphrase is case sensitive; NETGEAR is not the same as nETgear. The
four key boxes will be automatically populated with key values.
Manual - Enter ten hexadecimal digits (any combination of 0-9, a-f, or A-F). These entries
are not case sensitive; AA is the same as aa.
4-10
Wireless Configuration
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
Select which of the four keys will be active.
6. Enable Wireless Client Security Separator: The associated wireless clients will not be able to
communicate with each other if this feature is enabled. The default setting is Disable.
7. Click Apply to save your settings.
Configuring Advanced Wireless Settings
Click on Wireless Settings under the Advanced Heading in the Main Menu to go to the Advanced
Wireless Settings page:
Figure 4-7: Advanced Wireless Settings page
Warning: The wireless access point is already configured with the optimum settings. Do not alter
these settings unless directed by NETGEAR support. Incorrect settings may disable the wireless
access point unexpectedly.
The advanced wireless settings are explained below:
•
Enable SuperG Mode: Enable SuperG mode may increase the overall wireless performance.
Default: Disabled.
•
RTS Threshold: Request to Send Threshold. The packet size that is used to determine if it
should use the CSMA/CD (Carrier Sense Multiple Access with Collision Detection)
mechanism or the CSMA/CA mechanism for packet transmission. With the CSMA/CD
transmission mechanism, the transmitting station sends out the actual packet as soon as it has
waited for the silence period. With the CSMA/CA transmission mechanism, the transmitting
station sends out an RTS packet to the receiving station, and waits for the receiving station to
send back a CTS (Clear to Send) packet before sending the actual packet data. Default: 2346.
Wireless Configuration
4-11
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
•
Fragmentation Length: This is the maximum packet size used for fragmentation. Packets
larger than the size programmed in this field will be fragmented. The Fragment Threshold
value must be larger than the RTS Threshold value. Default: 2346
•
Beacon Interval: The interval time between 20ms and 1000ms for each beacon transmission.
Default: 100
•
DTIM Interval: The Delivery Traffic Indication Message. Specifies the data beacon rate
between 1 and 255. Default: 1
•
Preamble Type: A long transmit preamble may provide a more reliable connection or slightly
longer range. A short transmit preamble gives better performance. Auto will automatically
handle both long and short preamble. Default: Auto.
Wireless Card Access (Restricting by MAC Address)
The Wireless Card Access Setup page displays a list of wireless computers that are allowed to
connect to the wireless access point based on their MAC addresses. These wireless computers
must also have the correct SSID and WEP settings configured on the Wireless Settings page to
access the wireless network.
From the Wireless Settings menu, click the Setup Access List button to display the Wireless
Access List screen:
Figure 4-8: Wireless Access Control List screen
By default, any wireless computer that is configured with the correct SSID will be allowed access
to your wireless network. For increased security, you can restrict access to the wireless network to
only allow specific computers based on their MAC addresses.
4-12
Wireless Configuration
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
Turning Access Control On
1. Click the Turn Access Control On check box to restrict wireless computers by their MAC
addresses.
2. Click Apply to save changes and return to the Wireless Settings page.
Note: If Turn Access Control On is enabled and the Access Control List is blank; then no wireless
computers can connect to your wireless network.
Setting up the Access Control List
1. On the Access Control List screen, click the Add button to go to the Access Setup menu.
This menu displays a list of currently active wireless cards and their Ethernet MAC addresses.
2. If the desired computer is in the list, click the radio button of that computer to capture its MAC
address. Or you can manually enter the MAC address of the authorized computer.
Note: The MAC address can usually be found on the bottom of the wireless device. If no
Device Name appears, you can type a descriptive name for the computer that you are adding.
3. Click the Add button.
4. Repeat these steps for each wireless computer.
5. You can use the Edit and Delete buttons as needed.
6. Make sure to click the Apply button to save changes and return to the Wireless Settings page.
Wireless Configuration
4-13
202-10101-01, 4 May 2005
Reference Manual for the NETGEAR RangeMax™ Wireless Access Point WPN802
4-14
Wireless Configuration
202-10101-01, 4 May 2005
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising