Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

Wireless Configuration

4-3

201-10301-02, May 2005

•

WPA/WPA2 with Radius or WPA/WPA2-PSK.

Wi-Fi Protected Access (WPA and WPA2)

data encryption provides data security. The very strong authentication along with dynamic per

frame rekeying of WPA and WPA2 make it virtually impossible to compromise. Because this

is a new standard, wireless device driver and software availability may be limited.

Understanding Wireless Settings

To configure the wireless settings of your FWG114P v2, click the Wireless link in the Setup

section of the main menu. The wireless settings menu will appear, as shown below.

Figure 4-2:

Wireless Settings menu

Note:

The 802.11b and 802.11g wireless networking protocols are configured in exactly

the same fashion. The FWG114P v2 will automatically adjust to the 802.11g or 802.11b

protocol as the device requires without compromising the speed of the other devices.

Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

4-4

Wireless Configuration

201-10301-02, May 2005

•

Wireless Network.

The station name of the FWG114P v2.

—

Wireless Network Name (SSID).

The SSID is also known as the wireless network name.

Enter a value of up to 32 alphanumeric characters. In a setting where there is more than

one wireless network, different wireless network names provide a means for separating the

traffic. Any device you want to participate in the 802.11b/g wireless network will need to

use this SSID for that network. The FWG114P v2 default SSID is:

NETGEAR

.

—

Region.

This field identifies the region where the FWG114P v2 can be used. It may not be

legal to operate the wireless features of the wireless firewall/print server in a region other

than one of those identified in this field. Unless you select a region, you will only be able

to use Channel 11.

—

Channel.

This field determines which operating frequency will be used. It should not be

necessary to change the wireless channel unless you notice interference problems with

another nearby access point. For more information on the wireless channel frequencies,

please refer to

“Wireless Channels” on page E-7

.

—

Mode

. Select the desired wireless mode. The options are:

•

g & b - Both 802.11g and 802.11b wireless stations can be used.

•

g only - Only 802.11g wireless stations can be used.

•

b only - All 802.11b wireless stations can be used. 802.11g wireless stations can still

be used if they can operate in 802.11b mode.

The default is “g & b” which allows both 802.11g and 802.11b wireless stations to access

this device.

•

Wireless Access Point

—

Enable Wireless Access Point.

Enables the wireless radio. When disabled, there are no

wireless communications through the FWG114P v2.

—

Allow Broadcast of Name (SSID).

The default setting is to enable SSID broadcast. If you

disable broadcast of the SSID, only devices that have the correct SSID can connect.

Disabling SSID broadcast somewhat hampers the wireless network ‘discovery’ feature of

some products.

•

Wireless Card Access List

Lets you restrict wireless connections according to a list of Trusted PCs MAC addresses.

When the Trusted PCs Only radio button is selected, the FWG114P v2 checks the MAC

address of the wireless station and only allows connections to PCs identified on the trusted

PCs list.

Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

Wireless Configuration

4-5

201-10301-02, May 2005

To restrict access based on MAC addresses, click

the

Set up Access List button and update the

MAC access control list

.

•

Security Options

–

Disable

: No data encryption is used.

–

WEP (Wired Equivalent Privacy)

: Use WEP 64 or 128 bit data encryption.

–

WPA with Radius

: This version of WPA requires the use of a Radius server for

authentication. Each user (Wireless Client) must have a "user" login on the Radius Server

- normally done via a digital certificate. Also, this device must have a "client" login on the

Radius server. Data transmissions are encrypted using a key which is automatically

generated.

–

WPA2 with Radius

: WPA2 is a later version of WPA. Only select this if all clients

support WPA2. If selected, you must use AES encryption, and configure the Radius Server

Settings. Each user (Wireless Client) must have a "user" login on the Radius Server -

normally done via a digital certificate. Also, this device must have a "client" login on the

Radius server. Data transmissions are encrypted using a key which is automatically

generated.

–

WPA and WPA2 with Radius

: This selection allows clients to use either WPA (with AES

encryption) or WPA2 (with TKIP encryption). If selected, encryption must be TKIP +

AES. If selected, you must configure the Radius Server Settings.

–

WPA-PSK (Wi-Fi Protected Access Pre-Shared Key)

: Use WPA-PSK standard

encryption

–

WPA2-PSK

: WPA2 is a later version of WPA. Only select this if all clients support

WPA2. If selected, you must use AES encryption, and enter the WPA passphrase

(Network key).

–

WPA-PSK and WPA2-PSK

: This selection allows clients to use either WPA (with AES

encryption) or WPA2 (with TKIP encryption). If selected, encryption must be TKIP +

AES.

Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

4-6

Wireless Configuration

201-10301-02, May 2005

Default Factory Settings

The FWG114P v2 default factory settings shown below. You can restore these defaults with the

Factory Default Restore button on the rear panel as seen in the illustration

“FWG114P v2 Rear

Panel” on page 2-9

. After you install the FWG114P v2 Wireless Firewall/Print Server, use the

procedures below to customize any of the settings to better meet your networking needs.

FEATURE

DEFAULT FACTORY SETTINGS

SSID

NETGEAR

RF Channel

11 until the region is selected

Access Point

Enabled

SSID broadcast

Enabled

Wireless Card Access List for

Access Point Connections

All wireless stations allowed

WEP Security

Disabled

Authentication Type

Open System

Reference Manual for the ProSafe Wireless 802.11g

Firewall/Print Server Model FWG114P v2

Wireless Configuration

4-7

201-10301-02, May 2005

Before You Change the SSID and WEP Settings

Take the following steps:

For a new wireless network, print or copy this form and fill in the configuration parameters. For an

existing wireless network, the person who set up or is responsible for the network will be able to

provide this information. Be sure to set the Regulatory Domain correctly as the first step.

•

SSID

:

The Service Set Identification (SSID) identifies the wireless local area network.

Wireless

is the default FWG114P v2 SSID. However, you may customize it by using up to 32

alphanumeric characters. Write your customized SSID on the line below.

Note:

The SSID in the wireless firewall/print server is the SSID you configure in the wireless

adapter card. All wireless nodes in the same network must be configured with the same SSID:

•

Authentication

Circle one: Open System or Shared Key. Choose “Shared Key” for more security.

Note:

If you select shared key, the other devices in the network will not connect unless they

are set to Shared Key as well and have the same keys in the same positions as those in the

FWG114P v2.

•

WEP Encryption Keys

For all four 802.11b keys, choose the Key Size. Circle one: 64 or 128 bits

Key 1: ___________________________________

Key 2: ___________________________________

Key 3: ___________________________________

Key 4: ___________________________________

•

WPA-PSK or WPA2-PSK (Pre-Shared Key)

Record the WPA-PSK or WPA2-PSK key:

Key: ___________________________________

•

WPA or WPA2 RADIUS Settings

For WPA or WPA2, record the following RADIUS settings:

Server Name/IP Address: Primary _________________

Secondary __________________

Port: ___________________________________

Shared Key: ___________________________________

Use the procedures described in the following sections to configure the FWG114P v2. Store this

information in a safe place.