20

Chapter 5: Configuring the Dual-Band Wireless A+G Broadband Router

The Wireless Tab - Wireless Security

Dual-Band Wireless A+G Broadband Router

The Wireless Tab - Wireless Security

The Wireless Security settings configure the security of your wireless network. There are three wireless security

mode options supported by the Router: Pre-Shared Key, Pre-Shared Key + RADIUS, and WEP. (WEP stands for

Wired Equivalent Privacy, while RADIUS stands for Remote Authentication Dial-In User Service.) These three are

briefly discussed here. For detailed instructions on configuring wireless security for the Router, turn to

“Appendix B: Wireless Security.”

Wireless Security

The security options are the same for your Wireless-A and Wireless-G networks. You can use different wireless

security methods for your networks; however, within each network (Wireless-A or Wireless-G), all devices must

use the same security method and settings.

Wireless-A Settings

Pre-Shared Key

. This method offers two encryption methods, TKIP and AES, with dynamic encryption keys.

Select the type of encryption method you want to use,

TKIP

or

AES

. Enter the Passphrase, which can have 8 to 63

characters. Then enter the Key Renewal period, which instructs the Router how often it should change the

encryption keys.

Pre-Shared Key + RADIUS

. This option features a Pre-Shared Key used in coordination with a RADIUS server

that uses either EAP-TLS or PEAP as its authentication method. (This should only be used when a RADIUS server

is connected to the Router.) First, select the type of encryption method you want to use,

TKIP

or

AES

. Enter the

RADIUS server’s IP address and port number, along with the authentication key shared by the Router and the

server. Last, enter the Key Renewal period, which instructs the Router how often it should change the encryption

keys.

Figure 5-10: Wireless Tab - Wireless Security

(Pre-Shared Key)

Figure 5-11: Wireless Tab - Wireless Security

(Pre-Shared Key + RADIUS)

radius

: a protocol that uses an authentication

server to control network access.

IMPORTANT:

If you are using the Pre-Shared Key

or Pre-Shared Key + RADIUS method, always

remember that each device in your wireless

network MUST use the same method and settings,

or else the network will not function properly.

21

Chapter 5: Configuring the Dual-Band Wireless A+G Broadband Router

The Wireless Tab - Wireless Security

Dual-Band Wireless A+G Broadband Router

WEP

. WEP is a basic encryption method, which is not as secure as the other two methods, Pre-Shared Key and

Pre-Shared Key + RADIUS. Select a level of WEP encryption,

40/64-bit

,

128-bit

, or

152-bit

. If you want to use a

Passphrase, then enter it in the

Passphrase

field and click the

Generate

button. If you want to enter the WEP key

manually, then enter it in the

WEP Key 1-4

field(s). To indicate which WEP key to use, select the appropriate

TX

Key

number.

Wireless-G Settings

Pre-Shared Key

. This method offers two encryption methods, TKIP and AES, with dynamic encryption keys.

Select the type of encryption method you want to use,

TKIP

or

AES

. Enter the Passphrase, which can have 8 to 63

characters. Then enter the Key Renewal period, which instructs the Router how often it should change the

encryption keys.

Pre-Shared Key + RADIUS

. This option features a Pre-Shared Key used in coordination with a RADIUS server

that uses either EAP-TLS or PEAP as its authentication method. (This should only be used when a RADIUS server

is connected to the Router.) First, select the type of encryption method you want to use,

TKIP

or

AES

. Enter the

RADIUS server’s IP address and port number, along with the authentication key shared by the Router and the

server. Last, enter the Key Renewal period, which instructs the Router how often it should change the encryption

keys.

WEP

. WEP is a basic encryption method, which is not as secure as the other two methods, Pre-Shared Key and

Pre-Shared Key + RADIUS. Select a level of WEP encryption,

40/64-bit

or

128-bit

. If you want to use a

Passphrase, then enter it in the

Passphrase

field and click the

Generate

button. If you want to enter the WEP key

manually, then enter it in the

WEP Key 1-4

field(s). To indicate which WEP key to use, select the appropriate

TX

Key

number.

Change these settings as described here and click the

Save Settings

button to apply your changes or

Cancel

Changes

to cancel your changes. Help information is shown on the right-hand side of the screen. For additional

information, click

More

. For detailed instructions on configuring wireless security for the Router, turn to

“Appendix B: Wireless Security.”

wep

(wired equivalent privacy): a method of

encrypting network data transmitted on a

wireless network for greater security.

IMPORTANT:

If you are using WEP

encryption, always remember that each

device in your wireless network MUST use

the same WEP encryption method and

encryption key, or else your wireless network

will not function properly.

Figure 5-12: Wireless Tab - Wireless Security (WEP)

22

Chapter 5: Configuring the Dual-Band Wireless A+G Broadband Router

The Wireless Tab - Wireless MAC Filter

Dual-Band Wireless A+G Broadband Router

The Wireless Tab - Wireless MAC Filter

Wireless access can be filtered by using the MAC addresses of the wireless devices transmitting within your

network’s radius.

Wireless MAC Filter

Access Restrictions

To filter wireless users by MAC Address, either permitting or blocking access, click

Enabled

. If you do not wish to

filter users by MAC Address, select

Disabled

.

Prevent PCs listed below from accessing the wireless network

. Clicking this radio button will block wireless

access by MAC Address.

Permit PCs listed below to access the wireless network

. Clicking this radio button will allow wireless access

by MAC Address.

Wireless Client List

Wireless Client List

. Click the

Wireless Client MAC List

button to display a list of network users by MAC

Address.From the

To Sort by

drop-down menu, you can sort the table by Client Name, Interface, IP Address, MAC

Address, or Status. If you want to add any of the wireless clients to the Wireless MAC Filter List, then click the

Save to Wireless Client List

checkbox and then click the

Save Settings

button. Click the

Cancel Changes

button to cancel your changes. To view the most up-to-date information, click the

Refresh

button. To exit this

screen, click the

Close

button.

List users, by MAC Address, whose wireless access you want to control.

Change these settings as described here and click the

Save Settings

button to apply your changes or

Cancel

Changes

to cancel your changes. Help information is shown on the right-hand side of the screen. For additional

information, click

More

.

Figure 5-13: Wireless Tab - Wireless MAC Filter

Figure 5-14: Wireless Client List

23

Chapter 5: Configuring the Dual-Band Wireless A+G Broadband Router

The Wireless Tab - Advanced Wireless Settings

Dual-Band Wireless A+G Broadband Router

The Wireless Tab - Advanced Wireless Settings

This tab is used to set up the Router’s advanced wireless functions. These settings should only be adjusted by an

expert administrator as incorrect settings can reduce wireless performance.

Advanced Wireless

Wireless-A Settings

Authentication Type

. The default is set to

Open System (Default)

authentication, when the sender and the

recipient do NOT use a WEP key for authentication. With

Shared Key

authentication, the sender and recipient use

a WEP key for authentication.

Transmission Rate

. The rate of data transmission should be set depending on the speed of your wireless

network. You can select from a range of transmission speeds, or you can select

Auto (Default)

to have the

Router automatically use the fastest possible data rate and enable the Auto-Fallback feature. Auto-Fallback will

negotiate the best possible connection speed between the Router and a wireless client. The default value is

Auto

(Default)

.

Transmission Power

. The greater the transmission power used, the larger the area a wireless network covers.

To minimize the likelihood of eavesdropping by unauthorized wireless users, do not use more transmission power

than necessary to cover the range needed by your wireless network. Try using the Router at different levels of

transmission power, and determine how much power is needed to reach the wireless client, such as a PC or

access point, that is farthest from the Router. Then select the appropriate level,

Full (Default)

,

Half

,

Quarter

,

Eighth

, or

Min

, from the drop-down menu. The default is

Full (Default)

.

Frame Burst Mode

. Enabling this option should provide your network with greater performance, depending on

the manufacturer of your wireless products. If you are not sure how to use this option, keep the default,

Enabled

(Default)

.

Beacon Interval

. The default value is

100

. The Beacon Interval value indicates the frequency interval of the

beacon. A beacon is a packet broadcast by the Router to synchronize the wireless network.

DTIM Interval

. This value indicates the interval of the Delivery Traffic Indication Message (DTIM). A DTIM field is

a countdown field informing clients of the next window for listening to broadcast and multicast messages. When

the Router has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a

DTIM Interval value. Its clients hear the beacons and awaken to receive the broadcast and multicast messages.

The default value is

1

.

Fragmentation Threshold

. This value specifies the maximum size for a packet before data is fragmented into

multiple packets. If you experience a high packet error rate, you may slightly increase the Fragmentation

Figure 5-15: Wireless Tab - Advanced Wireless Settings

beacon interval

: data transmitted on your wireless

network that keeps the network synchronized.

dtim

: a message included in data packets

that can increase wireless efficiency.

fragmentation

: breaking a packet into smaller units

when transmitting over a network medium that

cannot support the original size of the packet.

24

Chapter 5: Configuring the Dual-Band Wireless A+G Broadband Router

The Wireless Tab - Advanced Wireless Settings

Dual-Band Wireless A+G Broadband Router

Threshold. Setting the Fragmentation Threshold too low may result in poor network performance. Only minor

reduction of the default value is recommended. In most cases, it should remain at its default value of

2346

.

RTS Threshold

. Should you encounter inconsistent data flow, only minor reduction of the default value,

2346

, is

recommended. If a network packet is smaller than the preset RTS threshold size, the RTS/CTS mechanism will

not be enabled. The Router sends Request to Send (RTS) frames to a particular receiving station and negotiates

the sending of a data frame. After receiving an RTS, the wireless station responds with a Clear to Send (CTS)

frame to acknowledge the right to begin transmission. The RTS Threshold value should remain at its default value

of

2346

.

Wireless-G Settings

Authentication Type

. The default is set to

Auto (Default)

, allows either Open System or Shared Key

authentication to be used. With

Open System

authentication, the sender and the recipient do NOT use a WEP key

for authentication. With

Shared Key

authentication, the sender and recipient use a WEP key for authentication.

Basic Rate

. The Basic Rate setting is not actually one rate of transmission but a series of rates at which the

Router can transmit. The Router will advertise its Basic Rate to the other wireless devices in your network, so

they know which rates will be used. The Router will also advertise that it will automatically select the best rate

for transmission. The default setting is

Default

, when the Router can transmit at all standard wireless rates

(1-2Mbps, 5.5Mbps, 11Mbps, 18Mbps, and 24Mbps). Other options are

1-2Mbps

, for use with older wireless

technology, and

All

, when the Router can transmit at all wireless rates. The Basic Rate is not the actual rate of

data transmission. If you want to specify the Router’s rate of data transmission, configure the Transmission Rate

setting.

Transmission Rate

. The rate of data transmission should be set depending on the speed of your wireless

network. You can select from a range of transmission speeds, or you can select

Auto (Default)

to have the

Router automatically use the fastest possible data rate and enable the Auto-Fallback feature. Auto-Fallback will

negotiate the best possible connection speed between the Router and a wireless client. The default value is

Auto

(Default)

.

Transmission Power

. The greater the transmission power used, the larger the area a wireless network covers.

To minimize the likelihood of eavesdropping by unauthorized wireless users, do not use more transmission power

than necessary to cover the range needed by your wireless network. Try using the Router at different levels of

transmission power, and determine how much power is needed to reach the wireless client, such as a PC or

access point, that is farthest from the Router. Then select the appropriate level,

Full (Default)

,

Half

,

Quarter

,

Eighth

, or

Min

, from the drop-down menu. The default is

Full (Default)

.

CTS Protection Mode

. CTS (Clear-To-Send) Protection Mode should be set to

Auto

(Default)

. The Router will

automatically use CTS Protection Mode when your Wireless-G products are experiencing severe problems and

are not able to transmit to the Router in an environment with heavy 802.11b traffic. This function boosts the

cts

(clear to send): a signal sent by a wireless

device, signifying that it is ready to receive data.