3G Broadband Wireless Router MBR624GU User Manual

2-8

Wireless Network Configuration

v1.1, March 2009

•

Hiding your wireless network name (SSID)

.

By default, the router is set to broadcast its wireless network name (SSID). You can restrict

wireless access to your network by not broadcasting the wireless network name (SSID). To do

this, clear the

Allow Broadcast of Name (SSID)

check box on the Wireless Settings screen,

and then click

Apply

. Wireless devices will not “see” your router. You must configure your

wireless devices to match the wireless network name (SSID) of the router.

•

Restricting access by MAC address

.

See

“Restricting Access by MAC Address”

.

Restricting Access by MAC Address

For increased security, you can restrict access to the wireless network to allow only specific PCs

based on their MAC addresses. You can restrict access to only trusted PCs so that unknown PCs

cannot wirelessly connect to the Wireless Router. MAC address filtering adds an obstacle against

unwanted access to your network, but the data broadcast over the wireless link is fully exposed.

To restrict access based on MAC addresses:

1.

Log in to the router at its default LAN address of

with its default user name

of

admin

, and default password of

password

, or using whatever user name, password, and

LAN address you have chosen for the router.

Note:

The SSID of any wireless access adapters must match the SSID you configure

in the router. If they do not match, you will not get a wireless connection to the

router.

Note:

If you configure the Product Family from a wireless computer, add your

computer’s MAC address to the access list. Otherwise you will lose your

wireless connection when you click Apply. You must then access the router

from a wired computer, or from a wireless computer that is on the access

control list, to make any further changes.

3G Broadband Wireless Router MBR624GU User Manual

Wireless Network Configuration

2-9

v1.1, March 2009

2.

From the main menu, select Wireless Settings, and then click

Setup Access List

to display the

Wireless Station Access List screen.

The trusted wireless stations listed on this screen are the wireless clients that will have access

to the wireless network when the list is enabled.

3.

Adjust the list as needed for your network. You can add devices to the Trusted Wireless

Stations list using either of the following methods:

•

If the computer is in the Available Wireless Stations table, select the radio button of that

computer to capture its MAC address.

•

Use the Add New Station Manually fields to enter the MAC address of the device to be

added. The MAC address can usually be found on the bottom of the wireless device.

4.

Click

Add

, and then click

Apply

to save these settings. Now, only devices on this list will be

allowed to wirelessly connect to the Product Family.

Figure 2-4

Note:

If no device name appears when you enter the MAC address, you can type a

descriptive name for the computer that you are adding.

3G Broadband Wireless Router MBR624GU User Manual

2-10

Wireless Network Configuration

v1.1, March 2009

Configuring WEP

To configure WEP data encryption:

1.

Log in to the router at its default LAN address of

with its default user name

of

admin

, and default password of

password

, or using whatever user name, password, and

LAN address you have chosen for the router.

2.

From the main menu, select Wireless Settings to display the Wireless Settings screen.

3.

In the Security Options section, select the

WEP (Wired Equivalent Privacy)

radio button:

4.

Select the

Authentication Type

:

Automatic

,

Open System

, or

Shared Key

. The default is

Open System.

5.

Select the

Encryption Strength

setting:

•

WEP (Wired Equivalent Privacy) 64-bit encryption

. Enter 10 hexadecimal digits (any

combination of 0–9, a–f, or A–F).

Note:

If you use a wireless computer to configure wireless security settings, you will be

disconnected when you click Apply. Reconfigure your wireless computer to match

the new settings, or access the router from a wired computer to make further

changes.

Figure 2-5

Note:

The authentication scheme is separate from the data encryption. You can select

an authentication scheme that requires a shared key but still leaves the data

transmissions unencrypted. If you require strong security, use both the Shared

Key and WEP encryption settings.

3G Broadband Wireless Router MBR624GU User Manual

Wireless Network Configuration

2-11

v1.1, March 2009

•

WEP (Wired Equivalent Privacy) 128-bit encryption

. Enter 26 hexadecimal digits (any

combination of 0–9, a–f, or A–F).

6.

Enter the encryption keys. You can manually or automatically program the four data

encryption keys. These values must be identical on all computers and Access Points in your

network:

•

Passphrase

. To use a passphrase to generate the keys, enter a passphrase, and click

Generate

. This automatically creates the keys. Wireless stations must use the passphrase

or keys to access the router.

•

Key 1-Key4

. These values are

not

case-sensitive. You can manually enter the four data

encryption keys. These values must be identical on all computers and access points in your

network. Enter 10 hexadecimal digits (any combination of 0

–

9, a

–

f, or A

–

F).

7.

Select which of the four keys will be the default.

Data transmissions are always encrypted using the default key. The other keys can be used

only to decrypt received data. The four entries are disabled if WPA-PSK or WPA

authentication is selected.

8.

Click

Apply

to save your settings.

Configuring WPA, WPA2, or WPA/WPA2

Both WPA and WPA2 provide strong data security. WPA with TKIP is a software implementation

that can be used on Windows systems with Service Pack 2 or later; WPA2 with AES is a hardware

implementation; see your device documentation before implementing it. Consult the product

documentation for your wireless adapter for instructions for configuring WPA settings.

Note:

Not all wireless adapters support passphrase key generation.

Note:

If you use a wireless computer to configure wireless security settings, you will be

disconnected when you click Apply. If this happens, reconfigure your wireless

computer to match the new settings, or access the router from a wired computer to

make further changes.

3G Broadband Wireless Router MBR624GU User Manual

2-12

Wireless Network Configuration

v1.1, March 2009

To configure WPA or WPA2 in the router:

1.

Log in to the router at its default LAN address of

with its default user name

of

admin

and default password of

password

, or using whatever user name, password, and

LAN address you have chosen for the router.

2.

Select Wireless Settings from the main menu.

3.

On the Wireless Setting screen, select the radio button for the WPA or WPA2 option of your

choice.

4.

The settings displayed on the screen depend on which security option you select.

5.

For WPA-PSK or WPA2-PSK, enter the passphrase.

6.

If prompted, enter the settings for the Radius server. For WPA-802.1x or WPA2-802.1x, these

settings are required for communication with the primary Radius server.

•

Primary Radius Server IP Address

. The IP address of the Radius server. The default is

0.0.0.0

•

Radius Port

. Port number of the Radius server. The default is 1812.

•

Shared Key

. This is shared between the wireless access point and the Radius server

during authentication.

7.

To save your settings, click

Apply

.

Advanced Wireless Settings

The Advanced Wireless Settings screen includes settings for Push 'N' Connect (WPS) and for

wireless distribution system (WDS) setup. From the main menu, select Advanced Wireless

Settings to display the following screen:

Figure 2-6