WNHDE111 5GHz Wireless-N HD Access Point/Bridge User Manual

Securing My Wireless

4-5

v1.1, May 2008

•

Enable Auto Channel Scan

. The unit automatically finds the channel with least interference

and uses that channel. This is enabled by default. If you disable this feature, you can use the

Wireless Channel option to manually pick a channel.

•

Wireless Channel

. When Auto Channel Scan is disabled, use this option to manually pick a

channel.

•

Channel Width

. This field determines which operating frequency is used. It should not be

necessary to change the wireless channel unless you notice interference problems with another

nearby wireless network. The WNHDE111 uses channel bonding technology to extend the

bandwidth for data transmission.

•

Enable SSID Broadcast

. Clear this check box to disable broadcast of the SSID, so that only

devices that know the correct SSID can connect. Disabling SSID broadcast nullifies the

wireless network discovery feature of some products such as Windows XP.

•

Wireless Security Mode: WEP or WPA

. The selection of wireless security options can

significantly affect your network performance. The time it takes to establish a wireless

connection can vary depending on both your security settings and unit placement.

3.

Click

Apply

to save your settings.

Configuring WEP Wireless Security

WEP Shared Key authentication and WEP data encryption can be defeated by a determined

eavesdropper using publicly available tools.

1.

Select

Wireless Settings

under Setup in the main menu.

2.

In the Wireless Security Mode section, select

WEP

. The WEP options display.

3.

Select the encryption strength (64 or 128 bit data encryption).

4.

Enter the data encryption keys. These values must be identical on all computers and access

points in your network.

5.

Click

Apply

to save your settings.

WNHDE111 5GHz Wireless-N HD Access Point/Bridge User Manual

4-6

Securing My Wireless

v1.1, May 2008

Configuring WPA Wireless Security

Wi-Fi Protected Access with Pre-Shared Key (WPA-PSK and WPA2-PSK) provides extremely

strong security, very effectively blocking eavesdropping. Both methods dynamically change the

encryption keys making them nearly impossible to circumvent. WPA2 adds support for hardware

based AES, which adds improved performance and the strongest data encryption.

Mixed mode allows clients using either WPA-PSK (TKIP) or WPA2-PSK (AES). This provides

the most reliable security, and is easiest to implement, but it might not be compatible with older

adapters.

To configure WPA-PSK, WPA2-PSK, or WPA-PSK+WPA2-PSK:

1.

Select

Wireless Settings

under Setup in the main menu.

2.

Select one of the WPA-PSK or WPA2-PSK options for the security type. The WPA + WPA2

options the most flexible, since it allows clients using either one.

3.

In the

Passphrase

field, enter a word or group of 8–63 printable characters. The passphrase

is

case-sensitive.

4.

Click

Apply

to save your settings.

Viewing Advanced Wireless Settings

This section describes the wireless settings that you can view and specify in the Advanced

Wireless Settings screen, which you access under Advanced in the main menu.

1.

Log in to the unit.

2.

Select

Advanced Wireless

under Advanced in the main menu.

The available settings in this screen are:

Note:

Not all wireless adapters support WPA. Furthermore, client software is also

required. Windows XP with Service Pack 2 does include WPA support.

Nevertheless, the wireless adapter hardware and driver must also support WPA.

For instructions on configuring wireless computers or PDAs (personal digital

assistants) for WPA-PSK security, consult the documentation for the product you

are using. Check whether newer drivers are available from the manufacturer.

WNHDE111 5GHz Wireless-N HD Access Point/Bridge User Manual

Securing My Wireless

4-7

v1.1, May 2008

•

Enable Wireless Router Radio

. If you disable the wireless router radio, wireless devices

cannot connect to the Wireless-N AccessPoint/Bridge. If you will not be using your

wireless network for a period of time, you can clear this check box and disable all wireless

connectivity.

•

WPS Settings

. For information about these settings, see the following section,

“Using

Push 'N' Connect (Wi-Fi Protected Setup)” on page 4-7

.

•

Wireless Card Access List

. For information about this list, see

“Restricting Wireless

Access by MAC Address” on page 4-11

.

.

Using Push 'N' Connect (Wi-Fi Protected Setup)

If your wireless clients support Wi-Fi Protected Setup (WPS), you can use this feature to configure

the router’s network name (SSID) and security settings and, at the same time, connect a wireless

client securely and easily to the router. Look for the

symbol on your client device. WPS

automatically configures the network name (SSID) and wireless security settings for the router (if

the router is in its default state) and broadcasts these settings to the wireless client.

When you add wireless clients, whether or not they are WPS enabled, the added devices must

share the same network name (SSID) and security passphrase. For more information, see

“Connecting Additional Wireless Client Devices after WPS Setup” on page 4-10

.

The Wireless-N AccessPoint/Bridge provides two methods for connecting to a wireless client that

supports WPS, described in the following sections:

Note:

The Fragmentation Threshold, CTS/RTS Threshold, and Preamble Mode

options are reserved for wireless testing and advanced configuration only. Do

not change these settings.

Note:

NETGEAR’s Push 'N' Connect feature is based on the Wi-Fi Protected Setup

(WPS) standard (for more information, see

). All other Wi-Fi-

certified and WPS-capable products should be compatible with NETGEAR

products that implement Push 'N' Connect.

Note:

If you choose to use WPS, the only security methods supported are WPA-PSK and

WPA2-PSK. WEP security is not supported by WPS.

WNHDE111 5GHz Wireless-N HD Access Point/Bridge User Manual

4-8

Securing My Wireless

v1.1, May 2008

•

“Push Button Configuration

”

•

“Security PIN Entry” on page 4-9

Push Button Configuration

There are two methods to enable a wireless client to join a network using a push button on the

router: using the physical push button or using the software button in the Add WPS Client screen.

Using the Physical Push Button

1.

Press the button on the Wireless-N AccessPoint/Bridge for over 5 seconds. For information

about the WPS button light, see the

.

The green

button light begins to blink in a regular pattern. While the light is blinking, you

have 2 minutes to enable WPS on the client that you are trying to connect to the router.

2.

On the wireless client, follow its specific networking instructions to enable WPS, to allow it to

connect to the router.

The Wireless-N AccessPoint/Bridge’s green

button light ceases blinking and remains on

when one of these conditions occurs:

•

The router and the client establish a wireless connection.

•

The 2-minute window period expires for establishing a WPS connection. If the connection

is not established, no WPS security settings will be specified in the Wireless-N

AccessPoint/Bridge.

Using the Software Button in the Add WPS Client Screen

1.

Log in to the router as described in

“Viewing or Changing Settings” on page 3-1

.

2.

Select

Add WPS Client

in the main menu, and click

Next.

3.

Select the

Push Button

setup method.

Figure 4-3

WNHDE111 5GHz Wireless-N HD Access Point/Bridge User Manual

Securing My Wireless

4-9

v1.1, May 2008

4.

Click the

button in the Add WPS Client screen. The following screen displays:

The green

button light on the Wireless-N AccessPoint/Bridge begins to blink in a regular

pattern. While the button light is blinking, you have 2 minutes to enable WPS on the device

you are trying to connect to the router.

5.

In the wireless client, follow its specific networking instructions to enable WPS, to allow it to

connect to the router.

The Wireless-N AccessPoint/Bridge’s green

button light ceases blinking and remains on

when one of these conditions occurs:

•

The router and the client establish a wireless connection.

•

The 2-minute window period expires for establishing a WPS connection. If the connection

is not established, no WPS security settings will be specified in the Wireless-N

AccessPoint/Bridge.

Security PIN Entry

There are two ways to enable a wireless client to join a network using a PIN: using the unit’s

security PIN or using the wireless client’s security PIN.

Using the Unit’s Security PIN

1.

Obtain your unit’s security PIN from the rear panel of the router or from the Advanced

Wireless Settings screen.

2.

On the wireless client, follow its specific networking instructions to enter the router’s security

PIN and to establish a wireless connection with the router.

Using the Wireless Client’s Security PIN

1.

Log in to the WNHDE111.

Figure 4-4