ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

3-8

Configuring Wireless Connectivity

v1.0, September 2007

Setting Up and Testing Basic Wireless Connectivity

Follow the instructions below to set up and test basic wireless connectivity. Once you have

established basic wireless connectivity, you can enable security settings appropriate to your needs.

1.

Log in using the default LAN address of

http://192.168.0.1

with the default user name of

admin

and default password of

password

, or using whatever LAN address and password you

have set up.

2.

Select Network Configuration > Wireless Settings to display the Wireless Settings screen.

3.

Set the Regulatory Domain correctly.

4.

Choose a suitable descriptive name for the wireless network name (SSID). In the SSID box,

enter a value of up to 32 alphanumeric characters. The default SSID is NETGEAR.

5.

Set the Channel.

It should not be necessary to change the wireless channel unless you notice interference

problems with another nearby wireless router or access point. Select a channel that is not being

used by any other wireless networks within several hundred feet of your VPN firewall router.

For more information on the wireless channel frequencies please refer to “Wireless Channels”

in

“Wireless Communications”

in Appendix B

.

6.

Depending on the types of wireless adapters you have in your computers, choose from the

Mode drop-down list.

Figure 3-3

Note:

The characters are case sensitive. An access point always functions in

infrastructure mode. The SSID for any wireless device communicating with

the access point must match the SSID configured in the ProSafe 802.11g

Wireless VPN Firewall. If they do not match, you will not get a wireless

connection to the FVG318.

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

Configuring Wireless Connectivity

3-9

v1.0, September 2007

7.

For initial configuration and test, leave the Wireless Card Access List set to “All Wireless

Stations” and the Encryption Strength set to “Disable.”

8.

Click

Apply

to save your changes.

9.

Configure and test your PCs for wireless connectivity.

Program the wireless adapter of your PCs to have the same SSID that you configured in the

FVG318. Check that they have a wireless link and are able to obtain an IP address by DHCP

from the VPN firewall router.

Once your PCs have basic wireless connectivity to the VPN firewall router, then you can configure

the advanced options and wireless security functions.

Restricting Wireless Access by MAC Address

To restrict access based on MAC addresses, follow these steps:

1.

Log in at the default LAN address of

with the default user name of

admin

and default password of

password

.

2.

Select Network Configuration > Wireless Settings and click the

Setup Access List

link. The

Access Control List screen will display.

Note:

If you are configuring the FVG318 from a wireless computer and you change

the VPN firewall router’s SSID, channel, or security settings, you will lose

your wireless connection when you click on Apply. You must then change the

wireless settings of your computer to match the FVG318’s new settings.

Figure 3-4

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

3-10

Configuring Wireless Connectivity

v1.0, September 2007

3.

Check the

Yes

radio box to enable MAC filtering and turn on the Access Control List. Then

click

Apply.

An “Operation Succeed” message will display. Only Trusted Wireless Stations

will be able to connect to the VPN firewall router.

4.

You can add trusted devices by selecting a device from the list of available wireless cards the

FVG318 has discovered in your area, or you can manually enter the MAC address.

•

Add a wireless station manually be entering the device MAC Address in the

Add New

Trusted Station Manually

field and clicking

Add.

The station will be added to the

Trusted Wireless Stations

list (if

ACL Enable

has been enabled).

•

Click the

Available Wireless Stations

tab to view the list of available wireless stations

within range of this VPN firewall router. To add a wireless station to the ACL, highlight

its MAC address and click

Add to Trusted List.

Now, only devices on this list will be allowed to wirelessly connect to the FVG318.

To remove a MAC address from the table, click to select it, then click

Delete

.

Configuring WEP Security Settings

To configure WEP data encryption, follow these steps:

1.

Log in at the default LAN address of

with the default user name of

admin

and default password of

password

, or using whatever LAN address and password you set up.

2.

Select Network Configuration > Wireless Settings. The Wireless Settings screen will display.

Note:

When configuring the FVG318 from a wireless computer whose MAC

address is not in the access control list, if you select Turn Access Control

On, you will lose your wireless connection when you click Apply. You

must then access the VPN firewall router from a wired computer or from a

wireless computer which is on the access control list to make any further

changes.

Note:

When changing the wireless settings from a wireless computer, you will lose your

wireless connection when you click Apply. You must then either configure your

wireless adapter to match the new wireless settings or access the VPN firewall

router from a wired computer to make any further changes.

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

Configuring Wireless Connectivity

3-11

v1.0, September 2007

3.

In the Wireless Security Type section, select the WEP radio box. The WEP fields section will

be highlighted.

4.

Choose the

Authentication Type

(Automatic, Open System or Shared Key) and

Encryption

Strength

options. You can manually or automatically program the four data encryption keys.

These values must be identical on all PCs and Access Points in your network.

–

Authentication Type

: Normally this can be left at the default value of “Automatic.” If set

to “Open System” or “Shared Key”, wireless stations must use the same method.

–

Encryption

: Select the desired WEP Encryption:

•

64-bit (sometimes called 40-bit) encryption

•

128-bit encryption

–

WEP Keys

: If using WEP, you can manually or automatically program the four data

encryption keys. These values must be identical on all PCs and Access Points in your

network.

•

Automatic Key Generation (Passphrase)

: Enter a word or group of printable

characters (this phrase is case sensitive) in the Passphrase box and click the “Generate

Keys” button to automatically configure the WEP Key(s).

–

If encryption is set to 64 bit, then each of the four key boxes will automatically be

populated with key values.

–

If encryption is set to 128 bit, then only the selected WEP key box will automatically

be populated with a key value.

Figure 3-5

ProSafe 802.11g Wireless VPN Firewall FVG318 Reference Manual

3-12

Configuring Wireless Connectivity

v1.0, September 2007

•

Manual Entry Mode

: Enter ten hexadecimal digits (any combination of 0-9, a-f, or

A-F). These hex values are not case sensitive. Select which of the four keys will be

used and enter the matching WEP key information for your network in the selected

key box.

–

For 64 bit WEP

: Enter ten hexadecimal digits (any combination of 0-9, A-F).

–

For 128 bit WEP

: Enter twenty-six hexadecimal digits (any combination of 0-9, A-

F).

Please refer to

“Wireless Communications

” in

Appendix B, “Related Documents

” for a full

explanation of each of these options, as defined by the IEEE 802.11b wireless communication

standard.

5.

Click

Apply

to save your settings.

Configuring WPA with RADIUS

To configure WPA with RADIUS:

1.

Log in at the default LAN address of

with the default user name of

admin

and default password of

password

, or using whatever LAN address and password you have

set up.

2.

Select Network Administration > Wireless Settings. The Wireless Settings Screen will display.

Note:

Not all wireless adapters support WPA. Furthermore, client software is required on

the client. Windows XP and Windows 2000 with Service Pack 3 do include the

client software that supports WPA. Nevertheless, the wireless adapter hardware

and driver must also support WPA. Consult the product document for your wireless

adapter and WPA client software for instructions on configuring WPA settings.