TD-W8960NB

300Mbps Wireless N ADSL2+ Modem Router User Guide

¾

IP Subnetmask:

Enter the subnetmask of the remote LAN. ( For example: Input

255.255.255.0

in both

Device1

and

Device2

)

¾

Key Exchange Method:

Select Auto (IKE) or Manual.

¾

Authentication Method:

Select Pre-Shared Key (recommended) or Certificate (X.509).

¾

Pre-Shared Key:

Input the Pre-Shared key for Authentication. (For example: Input 12345678)

¾

Perfect Forward Secrecy:

PFS is an additional security protocol.

We recommend you leave the Advanced Settings as default value.

After complete the basic settings and click Save/Apply in both

Device1

and

Device2

, PCs in LAN1

could conmmunicate with PCs in remote LAN2. (For example: You can ping the IP address of PC2

which is 192.168.2.100 in PC1)

)

Note:

The VPN Servers Endpoint from both ends must use the same pre-shared keys and Perfect

Forward Secrecy settings.

Click

Show Advanced Settings

and then you can configure the Advanced Settings.

¾

Main Mode:

Select Main Mode to configure the standard negotiation parameters for IKE

phase1.

¾

Aggressive Mode:

Select Aggressive Mode to configure IKE phase1 of the VPN Tunnel to

carry out negotiation in a shorter amount of time. (Not Recommended-Less Secure)

)

Note:

The difference between the two is that aggressive mode will pass more information in fewer

packets, with the benefit of slightly faster connection establishment, at the cost of transmitting the

59

TD-W8960NB

300Mbps Wireless N ADSL2+ Modem Router User Guide

identities of the security firewall in the clear. When using aggressive mode, some configuration

parameters such as Diffie-Hellman groups, and PFS can not be negotiated, resulting in a greater

importance of having "compatible" configuration on both ends.

¾

Key Life Time:

Enter the number of seconds for the IPSec lifetime. It is the period of time to pass before

establishing a new IPSec security association (SA) with the remote endpoint. The default value is

3600.

)

Note:

If you want to change the default settings of

Advanced Settings

, please make sure that both VPN

server endpoints use the same Encryption Algorithm, Integrity Algorithm, Diffie-Hellman Group

and Key Life time in both

phase1

and

phase2

.

4.5 Wireless

Choose “

Wireless

”, there are six submenus to configure Wireless LAN settings. Click any of them,

and you will be able to configure the corresponding function. The detailed explanations for each

submenu are provided below.

4.5.1 Basic

Choose “

Wireless

”

Æ

”

Basic

”, you will see the screen of

Wireless--Basic

settings shown as below.

The basic settings for wireless networking are set on this screen.

60

TD-W8960NB

300Mbps Wireless N ADSL2+ Modem Router User Guide

Figure 4-63

This page allows you to configure basic features of the wireless LAN interface. You can enable or

disable the wireless LAN interface, hide the network from active scans, set the wireless network

name (also known as SSID) and restrict the channel set based on Region requirements.

¾

Enable Wireless:

If you want to use wireless features, you must select “Enable Wireless”. If

you deselect “Enable Wireless” option, all the Wireless settings below will be disabled.

¾

Hide Access Point:

When wireless clients survey the local area for wireless networks to

associate with, you can select this option to avoided being surveyed.

¾

Clients Isolation:

Select this option to enable AP isolation function so that stations associated

to the AP will not be able to communicate with each other.

¾

SSID:

Wireless network name shared among all points in a wireless network. The SSID must

be identical for all devices in the wireless network. It is case-sensitive and must not exceed 32

characters (use any of the characters on the keyboard). Make sure this setting is the same for

all stations in your wireless network. Type the desired SSID in the space provided.

¾

BSSID:

Show the MAC address of the Router.

¾

Country:

Restrict the channel set and transmit power.

Click

Apply/Save

to save your settings.

4.5.2 Security

Choose “

Wireless

”

Æ

”

Security

”, you will see the screen of

Wireless--Security

settings shown as

below. You can configure security features of the wireless LAN interface by manually setting the

network authentication or through QSS

(Quick Security Setup) method.

61

TD-W8960NB

300Mbps Wireless N ADSL2+ Modem Router User Guide

Figure 4-64

4.5.2.1 QSS (WPS) Setup

This section will guide you to add a new wireless device to an existing network quickly by

QSS

(Quick Security Setup)

method. It’s also called WPS (Wi-Fi Protected Setup) in some cases.

)

Note:

1) This feature is available only when OPEN, WPA-PSK, WPA2-PSK or Mixed WPA2/WPA-PSK

mode is configured.

2)

To build a successful connection by QSS, you should also do the corresponding configuration

of the new device for QSS function meanwhile.

3)

QSS (

Quick Security Setup

) is one kind of WPS (Wi-Fi Protected Setup) method.

I. By PBC

If the wireless adapter supports Wi-Fi Protected Setup and the Push Button Configuration (PBC)

method, you can add it to the network by PBC with the following two methods. Click

Push-Button

,

you will see the screen as shown below.

62

TD-W8960NB

300Mbps Wireless N ADSL2+ Modem Router User Guide

Figure 4-65

Method One:

Hardware push button.

Step 1:

Press the QSS button on the front panel of the Router.

Step 2:

Press and hold the QSS button of the adapter directly for 2 or 3 seconds.

Step 3: Wait for a while until the next screen of adapter appears. Click

Finish

to complete the

QSS configuration.

63