26

|

Chapter 2.

Wireless Network Configuration

Mobile Broadband 11n Wireless Router MBR1210 User Manual

Wireless Security Options

Indoors, computers can connect over 802.11n wireless networks at a maximum range of up

to 300 feet. Such distances can allow others outside your immediate area to access your

network.

Unlike wired network data, your wireless data transmissions can extend beyond your walls

and can be received by anyone with a compatible adapter. For this reason, use the security

features of your wireless equipment. The Mobile Broadband 11n Wireless Router provides

highly effective security features, which are covered in detail in this chapter. Deploy the

security features appropriate to your needs.

Each router is preconfigured for WPA-PSK/WPA2-PSK mixed-mode, and comes with a

unique SSID and passphrase for each router.

There are several ways you can enhance the security of your wireless network:

Figure 1. Wireless Security

•

Restrict access based on MAC address

. You can allow only trusted PCs to connect so

that unknown PCs cannot wirelessly connect to the router. Restricting access by MAC

address adds an obstacle against unwanted access to your network, but the data

broadcast over the wireless link is fully exposed.

•

Turn off the broadcast of the wireless network name (SSID)

. If you disable broadcast

of the SSID, only devices that have the correct SSID can connect. This nullifies wireless

network “discovery” feature of some products, such as Windows XP, but the data is still

exposed.

•

WEP.

Wired Equivalent Privacy (WEP) data encryption provides data security. WEP

Shared Key authentication and WEP data encryption block all but the most determined

eavesdropper. This data encryption mode has been superseded by WPA-PSK and

WPA2-PSK.

•

WPA-PSK (TKIP), WPA2-PSK (AES)

. Wi-Fi Protected Access (WPA) using a pre-shared

key to perform authentication and generate the initial data encryption keys. The very

strong authentication along with dynamic per frame re-keying of WPA makes it virtually

impossible to compromise.

For more information about wireless technology, click the link to the online document

Wireless Networking Basics

in Appendix

A.

Chapter 2.

Wireless Network Configuration

|

27

Mobile Broadband 11n Wireless Router MBR1210 User Manual

Manually Configure Your Wireless Settings

Note:

If you use a wireless computer to change the wireless network

name (SSID) or wireless security, you will be disconnected when

you click

Apply

. To avoid this occurrence, connect your computer

directly to the router with an Ethernet cable while you are making

changes.

To view or manually configure the wireless settings:

1.

Log in to the router as described in

Log In to Your Router

on page

12.

2.

Select Wireless Settings from the main menu.

The settings for this screen are explained in

Table 6

.

3.

Select the region in which the router will

operate.

4.

For initial configuration and test, leave the other

settings unchanged.

5.

To save your changes, click

Apply

.

6.

Configure and test your computers for wireless

connectivity.

Set up your wireless computers with the

same SSID and wireless security settings as your router. Check that they have a wireless

link and are able to obtain an IP address by DHCP from the router. If there is interference,

adjust the channel.

Table 1.

Settings

Description

Wireless

Network

Name (SSID)

The SSID is also known as the wireless network name. Enter a

32-character (maximum) name in this field. This field is

case-sensitive.

When there is more than one wireless network, SSIDs provide a

means for separating the traffic. To join a network, a wireless

computer or device must use the SSID.

Region

The location where the router is used.

Channel

The wireless channel used by the gateway. The default is

Auto

.

Do not change the channel unless you experience interference

(shown by lost connections or slow data transfers). If this happens,

you might need to try different channels to see which works best.

Mode

The default is Up to 145 Mbps.

28

|

Chapter 2.

Wireless Network Configuration

Mobile Broadband 11n Wireless Router MBR1210 User Manual

Configuring WEP

Note:

If you use a wireless computer to configure wireless security

settings, you will be disconnected when you click

Apply

.

Reconfigure your wireless computer to match the new settings, or

access the router from a wired computer to make further changes.

To configure WEP data encryption:

1.

Log in to the router as described in

Log In to Your Router

on page

12.

2.

From the main menu, select Wireless Settings to display the Wireless Settings screen.

Security Options

None

Use this setting to establish wireless connectivity before

implementing wireless security. NETGEAR strongly recommends that

you implement wireless security.

WEP

Use encryption keys and data encryption for data security. You can

select 64-bit or 128-bit encryption. See

Configuring WEP

on page

29.

WPA-PSK (TKIP)

Allow only computers configured with WPA to connect to the router.

See

Configuring WPA, WPA2, or WPA + WPA2

on page

31.

WPA2-PSK (AES)

Allow only computers configured with WPA2 to connect to the router.

See

Configuring WPA, WPA2, or WPA + WPA2

on page

31.

WPA-PSK (TKIP) +

WPA2-PSK (AES)

Allow computers configured with either WPA-PSK or WPA2-PSK

security to connect to the router. See

Configuring WPA, WPA2, or

WPA + WPA2

on page

31.

Table 1.

Settings

Description

Chapter 2.

Wireless Network Configuration

|

29

Mobile Broadband 11n Wireless Router MBR1210 User Manual

3.

In the Security Options section, select the

WEP

(Wired Equivalent Privacy) radio button:

4.

Select the

Authentication Type setting

:

Automatic

,

Open System

, or

Shared Key

. The

default is

Open System

.

Note:

The authentication is separate from the

data encryption. You can select authentication

that requires a shared key, but still leaves data

transmissions unencrypted. Security is stronger

if you use both the Shared Key and WEP

encryption settings.

5.

Select the

Encryption Strength

setting:

•

64-bit

. Enter 10 hexadecimal digits (any

combination of 0–9, a–f, or A–F).

•

128-bit

. Enter 26 hexadecimal digits (any combination of 0–9, a–f, or A–F).

6.

Enter the encryption keys. You can manually or automatically program the four data

encryption keys. These values must be identical on all computers and access points in your

network:

•

Passphrase

. To use a passphrase to generate the keys, enter a passphrase, and

click

Generate

. This automatically creates the keys. Wireless stations must use the

passphrase or keys to access the router.

Note:

Not all wireless adapters support passphrase key generation.

•

Key 1

–

Key4

. These values are

not

case-sensitive. You can manually enter the four

data encryption keys. These values must be identical on all computers and access

points in your network. Enter 10 hexadecimal digits (any combination of 0

–

9, a

–

f, or

A

–

F).

7.

Select which of the four keys will be the default.

Data transmissions are always encrypted using the default key. The other keys can be

used only to decrypt received data. The four entries are disabled if WPA-PSK or WPA

authentication is selected.

8.

Click

Apply

to save your settings.

30

|

Chapter 2.

Wireless Network Configuration

Mobile Broadband 11n Wireless Router MBR1210 User Manual

Configuring WPA, WPA2, or WPA + WPA2

Both WPA and WPA2 provide strong data security. WPA with TKIP is a software

implementation that can be used on Windows systems with Service Pack 2 or later; WPA2

with AES is a hardware implementation; see your device documentation before implementing

it. Consult the product documentation for your wireless adapter for instructions for configuring

WPA settings.

Note:

If you use a wireless computer to configure wireless security

settings, you will be disconnected when you click

Apply

. If this

happens, reconfigure your wireless computer to match the new

settings, or access the router from a wired computer to make further

changes.

To configure WPA or WPA2 in the router:

1.

Log in to the router as described in

Log In to Your Router

on page

12.

2.

Select Wireless Settings from the main menu.

3.

On the Wireless Setting screen, select the radio button for the WPA or WPA2 option of your

choice.

4.

For WPA-PSK or WPA2-PSK, enter the passphrase.

5.

To save your settings, click

Apply

.