Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102

Basic Installation and Configuration

3-19

202-10064-02, June 2005

8.

Configure and test your PCs for wireless connectivity.

Program the wireless adapter of your PCs to have the same SSID and channel that you

configured in the WG102. Check that they have a wireless link and are able to obtain an IP

address by DHCP from the WG102.

Once your PCs have basic wireless connectivity to the WG102, you can configure the advanced

wireless security functions.

How to Restrict Wireless Access by MAC Address

To restrict access based on MAC addresses, follow these steps:

1.

Log in to the WG102 using its default address of

or at whatever IP

address the unit is currently configured. Use the default user name of

admin

and default

password of

password

, or whatever LAN address and password you have set up.

2.

From the Security menu, click the Access Control link to display the Access Control List

menu shown below.

Note:

If you are configuring the WG102 from a wireless computer and you change the

SSID, channel, or security settings, you will lose your wireless connection when you

click Apply. You must then change the wireless settings of your computer to match the

new settings.

Note:

When configuring the WG102 from a wireless computer whose MAC address is

not in the access control list, if you select Turn Access Control On, you will lose your

wireless connection when you click Apply. You must then access the wireless access

point from a wired computer or from a wireless computer which is on the access control

list to make any further changes.

Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102

3-20

Basic Installation and Configuration

202-10064-02, June 2005

Figure 3-10: Access Control List menu

3.

Select the Turn Access Control On check box.

4.

Choose to use the local MAC address database stored on the access point, or use the RADIUS

MAC address database stored on a RADIUS server.

•

If you choose the RADIUS MAC Address Database, you must configure the RADIUS

Server Settings first.

•

If you choose Local MAC Address Database, either select from the list of available

wireless cards the WG102 has found in your area, or enter the MAC address and device

name for a device you plan to use. You can usually find the MAC address printed on the

wireless adapter. Click Add to add the wireless device to the access list. Repeat these steps

for each additional device you want to add to the list.

5.

Be sure to click

Apply

to save your wireless access control list settings.

Now, only devices on this list will be allowed to wirelessly connect to the WG102.

How to Configure WEP

To configure WEP data encryption, follow these steps:

Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102

Basic Installation and Configuration

3-21

202-10064-02, June 2005

1.

Log in to the WG102 using its default address of

or at whatever IP

address the unit is currently configured Use the default user name of

admin

and default

password of

password

, or whatever LAN address and password you have set up.

2.

Click the

WEP/WPA Settings

link in the main menu of the WG102.

Figure 3-11:

WEP/WPA Settings menu

3.

Choose Open System or Shared Key authentication.

4.

Select encryption strength.

5.

You can manually or automatically program the four data encryption keys. These values must

be identical on all PCs and Access Points in your network.

•

Automatic - enter a word or group of printable characters in the Passphrase box and click

the Generate button. The four key boxes will be automatically populated with key values.

•

Manual - enter ten hexadecimal digits (any combination of 0-9, a-f, or A-F)

Select which of the four keys will be the default.

See

“Overview of WEP Parameters” on page B-5

for a full explanation of each of these

options, as defined by the IEEE 802.11 wireless communication standard.

6.

Click

Apply

to save your settings.

Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102

3-22

Basic Installation and Configuration

202-10064-02, June 2005

How to Configure WPA with Radius

Note

: Not all wireless adapters support WPA. Furthermore, client software is required on the

client. Windows XP and Windows 2000 with Service Pack 3 do include the client software that

supports WPA. Nevertheless, the wireless adapter hardware and driver must also support WPA.

Consult the product document for your wireless adapter and WPA client software for instructions

on configuring WPA settings.

To configure WPA, follow these steps:

1.

Log in at the default LAN address of

with the default user name of

admin

and default password of

password

, or using whatever LAN address and password you

have set up.

Note:

If you use a wireless computer to configure WEP settings, you will be

disconnected when you click Apply. Reconfigure your wireless adapter to match the

new settings or access the wireless access point from a wired computer to make any

further changes.

Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102

Basic Installation and Configuration

3-23

202-10064-02, June 2005

2.

Click

Radius Server Settings

in the Security menu.

Figure 3-12:

Radius Server Settings menu

3.

Enter the Radius settings.

•

Authentication/Access Control Radius Server Configuration

: This configuration is

required for authentication using Radius. IP Address, Port No. and Shared Secret is

required for communication with Radius Server. A Secondary Radius Server can be

configured which is used on failure on Primary Radius Server

•

IP Address

: The IP address of the Radius Server. The default is 0.0.0.0.

•

Port Number

: Port number of the Radius Server. The default is 1812.

•

Shared Secret

: This is shared between the Wireless Access Point and the Radius Server

while authenticating the supplicant.

•

Re-authentication Time

: The time interval in seconds after which the supplicant will be

authenticated again with the Radius Server. The default is 3600 seconds.