DISCUS™ Multiplay Wireless VoIP AG

(C) (2006) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.

55

OGU 930500105-A1

Network Connections Section

all points in your wireless network. For added security, you should change the

default SSID (openrg) to a unique name.

FIGURE 16.

LAN Wireless 802.11g Access Point >> Wireless Panel

SSID Broadcast.

Select this check-box to enable the SSID's broadcast. SSID

broadcast is used in order to hide the name of the AP (SSID) from clients that

should not be aware to its existence.

802.11 Mode.

Select the Wireless communication standard that is compatible

with you PC's wireless card. You can work in either 802.11g, 802.11b or in

mixed mode.

Channel.

Select the appropriate channel from the list provided to correspond

with your network settings. All devices in your wireless network must broadcast

on different channels in order to function correctly. The channels available

depend on the Regulatory Authority (stated in brackets) to which your gateway

conforms.

Network Authentication.

The WPA network authentication method is 'Open Sys-

tem Authentication', meaning that a network key is not used for authentication.

When using the 802.1X WEP or Non-802.1X WEP security protocols, this field

DISCUS™ Multiplay Wireless VoIP AG

(C) (2006) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.

56

OGU 930500105-A1

Network Connections Section

changes to a combo-box, offering the 'Shared Key Authentication' method

(which uses a network key for authentication), or both methods combined.

MAC Filtering Mode.

You can filter wireless users according to their MAC

address, either allowing or denying access. Choose the action to be performed

by selecting it from the drop down menu.

MAC Filtering Settings

Use this section to define advanced wireless access point settings.

New MAC Address.

Click this link to define filtering of MAC addresses. Enter the

MAC address to be filtered and press the “OK” button. A MAC address list will

appear, upon which the selected filtering action (allow/deny) will be performed.

Wireless Security

To configure your wireless security, enable this feature by checking its 'Enabled'

check-box. The screen will refresh, displaying the wireless security options. Use

the 'Stations Security Type' combo-box to select the type of security protocol for

securing your wireless network. You may choose between WPA, WPA2, 802.1x

WEP, and Non-802.1x WEP. The screen will refresh, presenting each protocol's

configuration respectively.

WPA

: WPA is a data encryption method for 802.11 wireless LANs.

Authentication Method.

Select the authentication method you would like to use.

You can choose between Pre-Shared Key and 802.1x.

Pre-Shared Key.

This entry appears only if you had selected this authentication

method. Enter your encryption key in the 'Pre-Shared Key' field. You can use

either an ASCII or a Hex value by selecting the value type in the combo-box pro-

vided.

Encryption Algorithm.

Select between Temporal Key Integrity Protocol (TKIP)

and Advanced Encryption Standard (AES) for the encryption algorithm.

Group Key Update Interval.

It defines the time interval in seconds for updating a

group key.

WPA2

: WPA2 is an enhanced version of WPA, and defines the 802.11i protocol.

Authentication Method.

Select the authentication method you would like to use.

You can choose between Pre-Shared Key and 802.1x.

Pre-Shared Key.

This entry appears only if you had selected this authentication

method. Enter your encryption key in the 'Pre-Shared Key' field. You can use

DISCUS™ Multiplay Wireless VoIP AG

(C) (2006) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.

57

OGU 930500105-A1

Network Connections Section

either an ASCII or a Hex value by selecting the value type in the combo-box pro-

vided.

Encryption Algorithm.

The encryption algorithm used for WPA2 is the Advanced

Encryption Standard (AES).

Group Key Update Interval.

It defines the time interval in seconds for updating a

group key.

WPA and WPA2 Mixed Mode

: WPA and WPA2 is a mixed data encryption

method.

Authentication Method.

Select the authentication method you would like to use.

You can choose between Pre-Shared Key and 802.1x.

Pre-Shared Key.

This entry appears only if you had selected this authentication

method. Enter your encryption key in the 'Pre-Shared Key' field. You can use

either an ASCII or a Hex value by selecting the value type in the combo-box pro-

vided.

Encryption Algorithm.

The encryption algorithm used for WPA and WPA2 is a

either the Temporal Key Integrity Protocol (TKIP) or the Advanced Encryption

Standard (AES).

Group Key Update Interval.

It defines the time interval in seconds for updating a

group key.

802.1x WEP

: 802.1x WEP is a data encryption method utilizing a statically or

automatically defined key for wireless clients that use 802.1x for authentication

and WEP for encryption. You may define up to four keys but use only one at a

time.

Generate Keys Automatically.

Select this option to generate the encryption keys

automatically rather than entering them manually. The screen will refresh, hiding

the table of keys described below.

Group Key Update Interval.

Defines the time interval in seconds for updating a

group key. Active Select the encryption key to be activated.

Encryption Key.

Type the encryption key until the entire field is filled. The key

cannot be shorter than the field's length.

Entry Method.

Select the character type for the key: Hex or ASCII. Key Length

Select the key length in bits: 40 or 104 bits.

Key Length.

Select the key length in bits: 40 or 104 bits.

Non-802.1x WEP

: Non-802.1xWEP is a data encryption method utilizing a stat-

ically-defined key for wireless clients that do not use 802.1x for authentication

DISCUS™ Multiplay Wireless VoIP AG

(C) (2006) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.

58

OGU 930500105-A1

Network Connections Section

and WEP for encryption. This method's configuration is virtually identical to the

802.1x WEP method described above, excluding the automatic key generation

and the group key update interval specification. Please refer to the 802.1x WEP

section above when configuring this method. Remember that the static key must

be defined in the wireless Windows client as well.

Virtual AP

You can set up multiple wireless LANs on

DISCUS™ Multiplay Wireless VoIP

AG

, limited only to the number supported by your wireless card. Each wireless

LAN is defined as an access point.

The 'Virtual APs' section displays the Router's physical wireless access point,

on top of which virtual connections may be created. To create a virtual connec-

tion, click the 'New Virtual AP' link.

The new connection will also be added to the network connections list, and will

be configurable like any other connection. You can change the connection's

default name by clicking its Edit action icon and changing the SSID value in the

'Configure LAN Wireless 802.11g Access Point - Virtual AP' screen.

Wireless QoS (WMM)

Wi-Fi Multimedia (WMM) is a Wi-Fi Alliance certification, based on the IEEE

802.11e draft standard. It provides basic Quality of Service (QoS) features to

IEEE 802.11 networks. If your wireless card supports WMM, enable this feature

by checking its 'Enabled' check-box.

Upon enabling WMM, the highest priority is given to Voice packets, decreasing

towards Background packets which receive the lowest priority.

In addition, you can control the reliability of traffic flow. By default, the 'Ack Pol-

icy' for each access category is set to "Normal", meaning that an acknowledge

packet is returned for every packet received. This provides a more reliable trans-

mission but increases traffic load, which decreases performance. You may

choose to cancel the acknowledgement by selecting "No Ack" in the combo-box

of each access category, thus changing the Ack policy. This can be useful for

Voice, for example, where speed of transmission is important and packet loss is

tolerable to a certain degree.

RADIUS Server

For authentication to work, the client's transmission must go through the Router,

and reach the back-end server that performs the actual authentication. The

wireless client contacts the access point, which in turn communicates with the

Remote Authentication Dial-in User Service (RADIUS) server. The RADIUS

server verifies the client's credentials to determine whether the device is autho-

rized to connect to the LAN. If the RADIUS server accepts the client, the server

DISCUS™ Multiplay Wireless VoIP AG

(C) (2006) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.

59

OGU 930500105-A1

Network Connections Section

responds by exchanging data with the Router, including security keys for subse-

quent encrypted sessions.

LAN WIRELESS 802.11G

ACCESS POINT >>

ADVANCED

Internet Connection Firewall.

Your gateway's firewall helps protect your com-

puter by preventing unauthorized users from gaining access to it through a net-

work such as the Internet. The firewall can be activated per network connection.

To enable the firewall on this network connection, select the 'Enabled' check

box.

FIGURE 17.

LAN Wireless 802.11g Access Point >> Advanced Panel

Additional IP Addresses.

You can add alias names (additional IP addresses) to

the gateway by clicking the 'New IP Address' link. This enables you to access

the gateway using these aliases in addition to the 192.168.1.1

WAN DSL

The WAN DSL panels allows you to check and configure the WAN DSL line

interface.

WAN DSL >> GENERAL

From the WAN DSL General panel, it is possible to enable/disable the WAN

DSL interface and to set the WAN DSL friendly name.