Archer C9

AC1900 Wireless Dual Band Gigabit Router

Figure 5-17 Wireless Security



Disable Security -

If you do not want to use wireless security, check this radio button. But it’s

strongly recommended to choose one of the following modes to enable security.



WPA/WPA2-Personal -

It’s the WPA/WPA2 authentication type based on pre-shared

passphrase. The router is configured by this security type by default.



Version

-

You can choose the version of the

WPA-PSK

or

WPA2-PSK

security on the

drop-down list. The default setting is

WPA2-PSK

.



Encryption

-

You can select either

TKIP

or

AES

as Encryption. The default setting is

AES

.



Note:

If you check the

WPA/WPA2-Personal

radio button and choose

TKIP

encryption, you will

find a notice in red as shown in

Figure 5-18

.

- 40 -

Archer C9

AC1900 Wireless Dual Band Gigabit Router

Figure 5-18 WPA/WPA2 – Personal



Wireless Password -

You can enter ASCII characters between 8 and 63 characters or 8

to 64 Hexadecimal characters. The default password is the same with the default PIN

code, which is labeled on the router or can be found in Figure 5-15.



Group Key Update Period -

Specify the group key update interval in seconds. The

value should be 30 or above. Enter 0 to disable the update.



WPA/WPA2- Enterprise -

It’s based on Radius Server. If you choose WPA/WPA2 -

Enterprise, WPS function will be disabled.



Version

-

you can choose the version of the WPA security on the drop-down list. The

default setting is

Automatic

, which can select

WPA (

Wi-Fi Protected Access) or

WPA2

(

WPA version 2) automatically based on the wireless station's capability and request.



Encryption -

You can select either

Automatic

, or

TKIP

or

AES.



Note:

If you check the

WPA/WPA2-Enterprise

radio button and choose

TKIP

encryption, you will

find a notice in red as shown in Figure 5-19.

Figure 5-19 WPA/WPA2 - Enterprise



Radius Server IP -

Enter the IP address of the Radius server.



Radius Port -

Enter the port number of the Radius server.



Radius Password -

Enter the password for the Radius server.

- 41 -

Archer C9

AC1900 Wireless Dual Band Gigabit Router



Group Key Update Period -

Specify the group key update interval in seconds. The

value should be 30 or above. Enter 0 to disable the update.



WEP -

It is based on the IEEE 802.11 standard. If you check this radio button, you will find a

notice in red as shown in Figure 5-20.

Figure 5-20 WEP



Type

-

you can choose the type for the WEP security on the drop-down list. The default

setting is

Automatic

, which can select

Shared Key

or

Open System

authentication

type automatically based on the wireless station's capability and request.



WEP Key Format

-

Hexadecimal

and

ASCII

formats are provided here

.

Hexadecimal

format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified

length.

ASCII

format stands for any combination of keyboard characters in the specified

length.



WEP Key

-

Select which of the four keys will be used and enter the matching WEP key

that you create. Make sure these values are identical on all wireless stations in your

network.



Key Type

-

You can select the WEP key length (64-bit or 128-bit) for encryption.

"Disabled" means this WEP key entry is invalid.

64-bit -

You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key

is not promoted) or 5 ASCII characters.

128-bit -

You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key

is not promoted) or 13 ASCII characters.



Note:

If you do not set the key, the wireless security function is still disabled even if you have

selected Shared Key as Authentication Type.

Be sure to click the

Save

button to save your settings on this page.

- 42 -

Archer C9

AC1900 Wireless Dual Band Gigabit Router

5.4.4

Wireless MAC Filtering

Choose menu “

Advanced

→

Wireless 2.4GHz

→

Wireless MAC Filtering

”, you can control the

wireless access by configuring the

Wireless MAC Filtering

function, shown in Figure 5-21.

Figure 5-21 Wireless MAC Filtering

To filter wireless users by MAC Address, click

Enable

. The default setting is

Disabled

.



MAC Address

-

The wireless station's MAC address that you want to filter.



Status

-

The status of this entry, either

Enabled

or

Disabled

.



Description -

A simple description of the wireless station.

To Add a Wireless MAC Address filtering entry, click the

Add New…

button. The "

Add or Modify

Wireless MAC Address Filtering entry

"

page will appear, shown in Figure 5-22.

Figure 5-22 Add or Modify Wireless MAC Address Filtering entry

To add or modify a MAC Address Filtering entry, follow these instructions:

1.

Enter the appropriate MAC Address into the

MAC Address

field. The format of the MAC

Address

is

XX-XX-XX-XX-XX-XX

(X

is

any

hexadecimal

digit).

For

example:

00-0A-EB-B0-00-0B.

2.

Give a simple description for the wireless station in the

Description

field. For example:

Wireless station A.

- 43 -

Archer C9

AC1900 Wireless Dual Band Gigabit Router

3.

Select

Enabled

or

Disabled

for this entry on the

Status

drop-down list.

4.

Click the

Save

button to save this entry.

To modify or delete an existing entry:

1.

Click the

Modify

in the entry you want to modify. If you want to delete the entry, click the

Delete

.

2.

Modify the information.

3.

Click the

Save

button.

Click the

Enable All

button to make all entries enabled

Click the

Disable All

button to make all entries disabled.

Click the

Delete All

button to delete all entries.

Click the

Next

button to go to the next page.

Click the

Previous

button to return to the previous page.

For example:

If you desire that the wireless station A with MAC address 00-0A-EB-B0-00-0B and

the wireless station B with MAC address 00-0A-EB-00-07-5F are able to access the router, but all

the other wireless stations cannot access the router, you can configure the

Wireless MAC Address

Filtering

list by following these steps:

1. Click the

Enable

button to enable this function.

2.

Select the radio button “

Allow the stations specified by any enabled entries in the list to

access

” for

Filtering Rules

.

3.

Delete all or disable all entries if there are any entries already.

4. Click the

Add New...

button.

1)

Enter the MAC address 00-0A-EB-B0-00-0B/00-0A-EB-00-07-5F in the

MAC Address

field.

2)

Enter wireless station A/B in the

Description

field.

3)

Select

Enabled

in the

Status

drop-down list.

4)

Click the

Save

button.

The filtering rules that configured should be similar to the following list:

- 44 -