NETGEAR Wireless-N Router WNR2000 User Manual

Safeguarding Your Network

2-11

v1.0, June 2008

WPA–Pre-Shared Key

does

perform authentication. WPA-PSK uses TKIP (Temporal Key

Integrity Protocol) data encryption, and WPA2-PSK uses AES (Advanced Encryption Standard)

data encryption. Both methods dynamically change the encryption keys making them nearly

impossible to circumvent.

Mixed mode allows clients using either WPA-PSK (TKIP) or WPA2-PSK (AES). This provides

the most reliable security, and is easiest to implement, but it might not be compatible with older

adapters.

To configure WPA-PSK, WPA2-PSK, or WPA-PSK+WPA2-PSK:

1.

Select

Wireless Settings

under Setup in the main menu. The Wireless Settings screen

displays.

2.

Select one of the WPA-PSK or WPA2-PSK options for the security type. The third option

(WPA-PSK [TKIP] + WP2-PSK [AES]) is the most flexible, since it allows clients using

either WPA-PSK or WPA2-PSK.

3.

In the

Passphrase

field, enter a word or group of 8–63 printable characters. The passphrase is

case-sensitive.

Note:

Not all wireless adapters support WPA. Furthermore, client software is also

required. Windows XP with Service Pack 2 does include WPA support.

Nevertheless, the wireless adapter hardware and driver must also support WPA.

For instructions on configuring wireless computers or PDAs (personal digital

assistants) for WPA-PSK security, consult the documentation for the product you

are using.

Figure 2-4

NETGEAR Wireless-N Router WNR2000 User Manual

2-12

Safeguarding Your Network

v1.0, June 2008

4.

Click

Apply

to save your settings.

Viewing Advanced Wireless Settings

This section describes the wireless settings that you can view and specify in the Advanced

Wireless Settings screen, which you access under Advanced in the main menu.

To configure the advanced wireless security settings of your router:

1.

Log in to the router as described in

“Logging In To Your Wireless Router” on page 1-2

.

2.

Select

Wireless Settings

under Advanced in the main menu. The advanced Wireless Settings

screen displays

The available settings in this screen are:

•

Enable Wireless Router Radio

. If you disable the wireless router radio, wireless devices

cannot connect to the WNR2000 router. If you will not be using your wireless network for

a period of time, you can clear this check box and disable all wireless connectivity.

•

Enable SSID Broadcast

. Clear this check box to disable broadcast of the SSID, so that

only devices that know the correct SSID can connect. Disabling SSID broadcast nullifies

the wireless network discovery feature of some products such as Windows XP.

Figure 2-5

NETGEAR Wireless-N Router WNR2000 User Manual

Safeguarding Your Network

2-13

v1.0, June 2008

•

Enable WMM

. Clear this check box to disable WMM. WMM (Wireless Multimedia), a

subset of the 802.11e standard, allows wireless traffic to have a range of priorities,

depending on the kind of data. Time-dependent information, like video or audio, will have

a higher priority than normal traffic. For WMM to function correctly, Wireless clients

must also support WMM.

•

Fragmentation Threshold

,

CTS/RTS Threshold

, and

Preamble Mode

. The

Fragmentation Threshold, CTS/RTS Threshold, and Preamble Mode options are reserved

for wireless testing and advanced configuration only. Do not change these settings.

•

WPS Settings

. For information about these settings, see the section,

“Using Push 'N'

Connect (Wi-Fi Protected Setup)” on page 2-13

.

•

Wireless Card Access List

. For information about this list, see

“Restricting Wireless

Access by MAC Address” on page 2-19

.

.

Using Push 'N' Connect (Wi-Fi Protected Setup)

If your wireless clients support Wi-Fi Protected Setup (WPS), you can use this feature to configure

the router’s network name (SSID) and security settings and, at the same time, connect a wireless

client securely and easily to the router. Look for the

symbol on your client device. WPS

automatically configures the network name (SSID) and wireless security settings for the router (if

the router is in its default state) and broadcasts these settings to the wireless client.

When you add wireless clients, whether or not they are WPS enabled, the added devices must

share the same network name (SSID) and security passphrase. For more information, see

“Connecting Additional Wireless Client Devices after WPS Setup” on page 2-18

.

The WNR2000 router provides two methods for connecting to a wireless client that supports WPS,

described in the following sections:

Note:

NETGEAR’s Push 'N' Connect feature is based on the Wi-Fi Protected Setup

(WPS) standard (for more information, see

). All other Wi-Fi-

certified and WPS-capable products should be compatible with NETGEAR

products that implement Push 'N' Connect.

Note:

If you choose to use WPS, the only security methods supported are WPA-PSK and

WPA2-PSK. WEP security is not supported by WPS.

NETGEAR Wireless-N Router WNR2000 User Manual

2-14

Safeguarding Your Network

v1.0, June 2008

•

“Push Button Configuration

”

•

“Security PIN Entry” on page 2-15

Push Button Configuration

There are two methods to enable a wireless client to join a network using a push button on the

router: using the physical push button or using the software button in the Add WPS Client screen.

Using the Physical Push Button

1.

Press the button on the WNR2000 router for over 5 seconds. For information about the WPS

button light, see the

NETGEAR Wireless-N Router Setup Manual

.

The green

button light begins to blink in a regular pattern. While the light is blinking, you

have 2 minutes to enable WPS on the client that you are trying to connect to the router.

2.

On the wireless client, follow its specific networking instructions to enable WPS, to allow it to

connect to the router.

The WNR2000 router’s green

button light ceases blinking and remains on when one of

these conditions occurs:

•

The router and the client establish a wireless connection.

•

The 2-minute window period expires for establishing a WPS connection. If the connection

is not established, no WPS security settings will be specified in the WNR2000 router.

Using the Software Button in the Add WPS Client Screen

1.

Log in to the router as described in

“Logging In To Your Wireless Router” on page 1-2

.

2.

Select

Add WPS Client

in the main menu, and click

Next.

3.

Select the

Push Button

setup method.

Figure 2-6

NETGEAR Wireless-N Router WNR2000 User Manual

Safeguarding Your Network

2-15

v1.0, June 2008

4.

Click the

button in the Add WPS Client screen. The Connecting to New Wireless Client

screen displays.

The green

button light on the WNR2000 router begins to blink in a regular pattern. While

the button light is blinking, you have 2 minutes to enable WPS on the device you are trying to

connect to the router.

5.

In the wireless client, follow its specific networking instructions to enable WPS, to allow it to

connect to the router.

The WNR2000 router’s green

button light ceases blinking and remains on when one of

these conditions occurs:

•

The router and the client establish a wireless connection.

•

The 2-minute window period expires for establishing a WPS connection. If the connection

is not established, no WPS security settings will be specified in the WNR2000 router.

Security PIN Entry

There are two ways to enable a wireless client to join a network using a PIN: using the router’s

security PIN or using the wireless client’s security PIN.

Using the Router’s Security PIN

1.

Obtain your router’s security PIN from the rear panel of the router or from the Advanced

Wireless Settings screen.

2.

On the wireless client, follow its specific networking instructions to enter the router’s security

PIN and to establish a wireless connection with the router.

Using the Wireless Client’s Security PIN

1.

Log in to the router as described in

“Logging In To Your Wireless Router” on page 1-2

.

Figure 2-7