Reference Manual for the Model Wireless ADSL Firewall Router DG834G

Wireless Configuration

4-5

Note:

This value is case sensitive. For example,

Wireless

is not the same as

wireless

.

—

Region

. Select your region from the drop-down list. This field displays the region of

operation for which the wireless interface is intended. It may not be legal to operate the

router in a region other than the region shown here.

—

Channel

. This field determines which operating frequency will be used. It should not be

necessary to change the wireless channel unless you notice interference problems with

another nearby access point.

—

Mode

. The default is "g & b", which allows both "g" and "b" wireless stations to access

this device. “g only” allows only 802.11g wireless stations to be used. “b only” allows

802.11b wireless stations; 802.11g wireless stations can still be used if they can operate in

802.11b mode.

•

Wireless Access Point

.

—

Enable Wireless Access Point

. This field lets you turn off or turn on the wireless access

point built in to the router. The wireless icon on the front of the router will also display the

current status of the Wireless Access Point to let you know if it is disabled or enabled. The

wireless access point must be enabled to allow wireless stations to access the Internet.

—

Allow Broadcast of Name (SSID)

. If enabled, the SSID is broadcast to all Wireless

Stations. Stations which have no SSID (or a "null" value) can then adopt the correct SSID

for connections to this Access Point.

—

Wireless Isolation.

If enabled, Wireless Stations will not be able to communicate with

each other or with Stations on the wired network. This feature should normally be

disabled.

•

Wireless Station Access List

.

—

By default, any wireless computer that is configured with the correct wireless network

name or SSID will be allowed access to your wireless network. For increased security, you

can restrict access to the wireless network to only specific computers based on their MAC

addresses. Click Setup Access List to display the Wireless Station Access List menu.

Reference Manual for the Model Wireless ADSL Firewall Router DG834G

4-6

Wireless Configuration

•

Security Options

Table 4-1.

Wireless Security Options

Field

Description

Disable

Wireless security is not used.

WEP

(Wired

Equivalent

Privacy)

You can select the following WEP options:

Authentication Type

•

Open: the DG834G does not perform any authentication.

•

Shared: WEP shared key authentication. For a full explanation of WEP shared key, see

“Authentication and WEP Data Encryption” on page D-2

.

Encryption Strength

•

If Shared or Open Network Authentication is enabled, you can choose 64- or 128-bit

WEP data encryption.

Note

: With Open Network Authentication and 64- or 128-bit WEP Data Encryption, the

DG834G

does

perform 64- or 128-bit data encryption but

does not

perform any

authentication.

Security Encryption (WEP) Key

These key values must be identical on all wireless devices in your network (key 1 must be

the same for all, key 2 must be the same for all, and so on).

The DG834G provides two methods for creating WEP encryption keys:

•

Passphrase. These characters

are

case sensitive. Enter a word or group of printable

characters in the Passphrase box and click the Generate button.

Note

: Not all wireless adapters support passphrase key generation.

•

Manual. These values

are not

case sensitive.

64-bit WEP: enter 10 hexadecimal digits (any combination of 0-9, a-f, or A-F).

128-bit WEP: enter 26 hexadecimal digits (any combination of 0-9, a-f, or A-F).

Reference Manual for the Model Wireless ADSL Firewall Router DG834G

Wireless Configuration

4-7

How to Set Up and Test Basic Wireless Connectivity

Follow the instructions below to set up and test basic wireless connectivity. Once you have

established basic wireless connectivity, you can enable security settings appropriate to your needs.

1.

Log in to the DG834G firewall at its default LAN address of

with its default

user name of

admin

and default password of

password

, or using whatever LAN address and

password you have set up.

2.

Click the Wireless Settings link in the main menu of the DG834G firewall.

3.

Choose a suitable descriptive name for the wireless network name (SSID). In the SSID box,

enter a value of up to 32 alphanumeric characters. The default SSID is

Wireless

.

Note:

The SSID of any wireless access adapters must match the SSID you configure in the

DG834G Wireless ADSL Firewall Router. If they do not match, you will not get a wireless

connection to the DG834G.

4.

Set the Region. Select the region in which the wireless interface will operate.

WPA-PSK

(Wi-Fi Protected

Access

Pre-Shared Key)

WPA Pre-Shared-Key uses a pre-shared key to perform the authentication and generate

the initial data encryption keys. Then, it dynamically varies the encryption key. For a full

explanation of WPA, see

“WPA Wireless Security” on page D-8

.

Note

: Not all wireless adapters support WPA. Furthermore, client software is required on

the client. Windows XP and Windows 2000 with Service Pack 3 do include the client

software that supports WPA. Nevertheless, the wireless adapter hardware and driver

must also support WPA.

WPA-802.1x

User authentication is implemented using 802.1x and RADIUS servers. For a full

explanation of WPA, see

“WPA Wireless Security” on page D-8

.

Fill in the following:

•

Radius Server Name/IP Address

This field is required. Enter the name or IP address of the Radius Server on your LAN.

•

Radius Port

Enter the port number used for connections to the Radius Server.

•

Radius Shared Key

Enter the desired value for the Radius shared key. This key enables the DG834G to log

in to the Radius server and must match the value used on the Radius server.

Table 4-1.

Wireless Security Options

Field

Description

Reference Manual for the Model Wireless ADSL Firewall Router DG834G

4-8

Wireless Configuration

5.

Set the Channel. The default channel is 11.

This field determines which operating frequency will be used. It should not be necessary to

change the wireless channel unless you notice interference problems with another nearby

wireless router or access point. Select a channel that is not being used by any other wireless

networks within several hundred feet of your firewall. For more information on the wireless

channel frequencies please refer to

“Wireless Channels” on page D-7

.

6.

For initial configuration and test, leave the Wireless Card Access List set to allow everyone

access by making sure that “Turn Access Control On” is not selected in the Wireless Station

Access List. In addition, leave the Encryption Strength set to “Disabled.”

7.

Click Apply to save your changes.

8.

Configure and test your computers for wireless connectivity.

Program the wireless adapter of your computers to have the same SSID and channel that you

configured in the router. Check that they have a wireless link and are able to obtain an IP

address by DHCP from the firewall.

Once your computers have basic wireless connectivity to the firewall, you can configure the

advanced wireless security functions of the firewall.

How to Restricting Wireless Access to Your Network

By default, any wireless PC that is configured with the correct SSID will be allowed access to your

wireless network. For increased security, the DG834G Wireless ADSL Firewall Router provides

several ways to restrict wireless access to your network:

•

Turn off wireless connectivity completely

•

Restrict access based on the Wireless Network Name (SSID)

•

Restrict access based on the Wireless Card Access List

These options are discussed below.

Note:

If you are configuring the firewall from a wireless computer and you change the

firewall’s SSID, channel, or security settings, you will lose your wireless connection

when you click Apply. You must then change the wireless settings of your computer to

match the firewall’s new settings.

Reference Manual for the Model Wireless ADSL Firewall Router DG834G

Wireless Configuration

4-9

Figure 4-3:

Wireless Access Point settings

Restricting Access to Your Network by Turning Off Wireless Connectivity

You can completely turn off the wireless portion of the DG834G. For example, if your notebook

computer is used to wirelessly connect to your router and you take a business trip, you can turn off

the wireless portion of the router while you are traveling. Other members of your household who

use computers connected to the router via Ethernet cables will still be able to use the router.

Restricting Wireless Access Based on the Wireless Network Name (SSID)

The DG834G can restrict wireless access to your network by not broadcasting the wireless

network name (SSID). However, by default, this feature is turned off. If you turn this feature on,

wireless devices will not ‘see’ your DG834G. You must configure your wireless devices to match

the wireless network name (SSID) you configure in the DG834G wireless router.

Note:

The SSID of any wireless access adapters must match the SSID you configure in the

DG834G Wireless ADSL Firewall Router. If they do not match, you will not get a wireless

connection to the DG834G.

Restricting Wireless Access Based on the Wireless Station Access List

This list determines which wireless hardware devices will be allowed to connect to the firewall.

To restrict access based on MAC addresses, follow these steps:

1.

Log in to the DG834G firewall at its default LAN address of

with its default

user name of

admin

and default password of

password

, or using whatever LAN address and

password you have set up.

2.

From the Wireless Settings menu, Wireless Station Access List section, click the Setup Access

List button to display the list, shown below: