ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

Configuring Wireless Connectivity

3-3

v1.0, September 2007

•

Wi-Fi Protected Access (WPA and WPA2)

. The very strong authentication along with

dynamic per frame rekeying of WPA and WPA2 make it virtually impossible to compromise.

Because this is a new standard, wireless device driver and software availability may be

limited.

–

WPA with PSK

(Wi-Fi Protected Access Pre-Shared Key). WPA-PSK uses TKIP

standard encryption.

–

WPA2 with PSK

. WPA2 is a later version of WPA. Only select this if all clients support

WPA2. If selected, you must use AES encryption, and enter the WPA passphrase

(Network key).

–

WPA-PSK and WPA2-PSK

. This selection allows clients to use either WPA (with TKIP

encryption) or WPA2 (with AES encryption). If selected, encryption must be TKIP +

AES.

–

WPA with Radius

. This version of WPA requires the use of a Radius server for

authentication. Each user (Wireless Client) must have a “user” login on the Radius

Server—normally done via a digital certificate. Also, this device must have a “client”

login on the Radius server. Data transmissions are encrypted using a key which is

automatically generated.

–

WPA2 with RADIUS

. WPA2 is a later version of WPA. Only select this if all clients

support WPA2. If selected, you must use AES encryption, and configure the RADIUS

Server Settings. Each user (Wireless Client) must have a “user” login on the Radius

Server—normally done via a digital certificate. Also, this device must have a “client”

login on the RADIUS server. Data transmissions are encrypted using a key which is

automatically generated.

–

WPA and WPA2 with RADIUS

. This selection allows clients to use either WPA (with

AES encryption) or WPA2 (with TKIP encryption). If selected, encryption must be

TKIP+AES. You must also configure the RADIUS Server Settings

Understanding Wireless Settings

To configure the wireless settings of your FVG318:

1.

Select Network Configuration > Wireless Settings from the main menu. The Wireless Settings

screen will display.

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

3-4

Configuring Wireless Connectivity

v1.0, September 2007

•

Wireless Network.

The station name of the FVG318.

–

Wireless Network Name (SSID).

The SSID is also known as the wireless network name.

Enter a value of up to 32 alphanumeric characters. In a setting where there is more than

one wireless network, different wireless network names provide a means for separating the

traffic. Any device you want to participate in the 802.11b/g wireless network will need to

use this SSID for that network. The FVG318 default SSID is:

NETGEAR

.

Figure 3-2

Note:

The 802.11b and 802.11g wireless networking protocols are configured in

exactly the same fashion. The FVG318 will automatically adjust to the 802.11g

or 802.11b protocol as the device requires without compromising the speed of

the other devices.

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

Configuring Wireless Connectivity

3-5

v1.0, September 2007

–

Region.

This field identifies the region where the FVG318 can be used. It may not be legal

to operate the wireless features of the VPN firewall router in a region other than one of

those identified in this field. Unless you select a region, you will only be able to use

Channel 11.

–

Channel.

This field determines which operating frequency will be used. It should not be

necessary to change the wireless channel unless you notice interference problems with

another nearby access point. For more information on the wireless channel frequencies,

please refer to

“Wireless Communications”

in Appendix B

.

–

Mode

. Select the desired wireless mode. The options are:

•

g & b - Both 802.11g and 802.11b wireless stations can be used.

•

g only - Only 802.11g wireless stations can be used.

•

b only - All 802.11b wireless stations can be used. 802.11g wireless stations can still

be used if they can operate in 802.11b mode.

The default is “g & b” which allows both 802.11g and 802.11b wireless stations to access

this device.

•

Wireless Access Point

–

Enable Wireless Access Point

. Enables the wireless radio. When disabled, there are no

wireless communications through the FVG318.

–

Allow Broadcast of Name (SSID).

The default setting is to enable SSID broadcast. If you

disable broadcast of the SSID, only devices that have the correct SSID can connect.

Disabling SSID broadcast somewhat hampers the wireless network “discovery” feature of

some products.

•

Wireless Card Access List

Lets you restrict wireless connections according to a list of Trusted PCs MAC addresses.

When the Trusted PCs Only radio button is selected, the FVG318 checks the MAC address of

the wireless station and only allows connections to PCs identified on the trusted PCs list.

To restrict access based on MAC addresses, click

the

Set up Access List button and update the

MAC access control list

.

•

Security Options

–

Disable

: No data encryption is used.

–

WEP (Wired Equivalent Privacy)

: Use WEP 64 or 128 bit data encryption.

–

WPA-PSK (Wi-Fi Protected Access Pre-Shared Key)

: Use TKIP standard encryption

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

3-6

Configuring Wireless Connectivity

v1.0, September 2007

–

WPA2-PSK

: WPA2 is a later version of WPA. Only select this if all clients support

WPA2. If selected, you must use AES encryption

–

WPA-PSK and WPA2-PSK

: This selection allows clients to use either WPA (with TKIP

encryption) or WPA2 (with AES encryption). If selected, encryption must be TKIP +

AES.

–

WPA with Radius

: This version of WPA requires the use of a Radius server for

authentication. Each user (Wireless Client) must have a “user” login on the Radius

Server—normally done via a digital certificate. Also, this device must have a “client”

login on the Radius server. Data transmissions are encrypted using a key which is

automatically generated.

–

WPA2 with Radius

: WPA2 is a later version of WPA. Only select this if all clients

support WPA2. If selected, you must use AES encryption, and configure the Radius Server

Settings.

–

WPA and WPA2 with Radius

: This selection allows clients to use either WPA (with AES

encryption) or WPA2 (with TKIP encryption). If selected, encryption must be TKIP +

AES. If selected, you must configure the Radius Server Settings.

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

Configuring Wireless Connectivity

3-7

v1.0, September 2007

Security Check List for

SSID and WEP Settings

For a new wireless network, print or copy this form and fill in the configuration parameters. For an

existing wireless network, the person who set up or is responsible for the network will be able to

provide this information. Be sure to set the Regulatory Domain correctly as the first step.

•

SSID

:

The Service Set Identification (SSID) identifies the wireless local area network.

Wireless

is the default FVG318 SSID. However, you may customize it by using up to 32

alphanumeric characters. Write your customized SSID on the line below.

Note:

The SSID in the VPN firewall router is the SSID you configure in the wireless adapter

card. All wireless nodes in the same network must be configured with the same SSID:

•

Authentication

Circle one: Open System or Shared Key. Choose “Shared Key” for more security.

Note:

If you select shared key, the other devices in the network will not connect unless they

are set to Shared Key as well and have the same keys in the same positions as those in the

FVG318.

•

WEP Encryption Keys

For all four 802.11b keys, choose the Key Size. Circle one: 64 or 128 bits

Key 1: ___________________________________

Key 2: ___________________________________

Key 3: ___________________________________

Key 4: ___________________________________

•

WPA-PSK or WPA2-PSK (Pre-Shared Key)

Record the WPA-PSK or WPA2-PSK key:

Key: ___________________________________

•

WPA or WPA2 RADIUS Settings

For WPA or WPA2, record the following RADIUS settings:

Server Name/IP Address: Primary _________________

Secondary __________________

Port: ___________________________________

Shared Key: ___________________________________

Use the procedures described in the following sections to configure the FVG318. Store this

information in a safe place.