TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 51 -

Figure 4-35 Wireless Security



Disable Security -

If you do not want to use wireless security, check this radio button. But it’s

strongly recommended to choose one of the following modes to enable security.



WPA/WPA2-Personal -

It’s the WPA/WPA2 authentication type based on pre-shared

passphrase. The Router is configured by this security type by default.

•

Version

-

you can choose the version of the WPA-PSK security on the drop-down list.

The default setting is

Automatic

, which can select

WPA-PSK

(Pre-shared key of WPA)

or

WPA2-PSK

(Pre-shared key of WPA) automatically based on the wireless station's

capability and request.

•

Encryption

-

When

WPA-PSK

or

WPA

is set as the Authentication Type, you can select

either

Automatic

, or

TKIP

or

AES

as Encryption.



Note:

If you check the

WPA/WPA2-Personal

radio button and choose TKIP encryption, you will find

a notice in red as shown in

Figure 4-36

.

TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 52 -

Figure 4-36 WPA/WPA2 – Personal

•

PSK Password -

You can enter ASCII characters between 8 and 63 characters or 8 to

64 Hexadecimal characters. The default password is the same with the default PIN code,

which is labeled on the bottom of the Router or can be found in Figure 4-31.

•

Group Key Update Period -

Specify the group key update interval in seconds. The

value should be 30 or above. Enter 0 to disable the update.



WPA /WPA2- Enterprise -

It’s based on Radius Server.

•

Version

-

you can choose the version of the WPA security on the drop-down list. The

default setting is

Automatic

, which can select

WPA (

Wi-Fi Protected Access) or

WPA2

(

WPA version 2) automatically based on the wireless station's capability and request.

•

Encryption -

You can select either

Automatic

, or

TKIP

or

AES.



Note:

If you check the

WPA/WPA2-Enterprise

r

adio button and choose TKIP encryption, you will

find a notice in red as shown in Figure 4-37

.

Figure 4-37 WPA/WPA2 - Enterprise

•

Radius Server IP -

Enter the IP address of the Radius server.

•

Radius Port -

Enter the port number of the Radius server.

•

Radius Password -

Enter the password for the Radius server.

•

Group Key Update Period -

Specify the group key update interval in seconds. The

value should be 30 or above. Enter 0 to disable the update.



WEP -

It is based on the IEEE 802.11 standard. If you check this radio button, you will find a

notice in red as show in Figure 4-38.

TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 53 -

Figure 4-38 WEP

•

Type

-

you can choose the type for the WEP security on the drop-down list. The default

setting is

Automatic

, which can select

Shared Key

or

Open System

authentication

type automatically based on the wireless station's capability and request.

•

WEP Key Format

-

Hexadecimal

and

ASCII

formats are provided here

.

Hexadecimal

format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified

length.

ASCII

format stands for any combination of keyboard characters in the specified

length.

•

WEP Key

-

Select which of the four keys will be used and enter the matching WEP key

that you create. Make sure these values are identical on all wireless stations in your

network.

•

Key Type

-

You can select the WEP key length (64-bit, or 128-bit, or 152-bit.) for

encryption. "Disabled" means this WEP key entry is invalid.

64-bit -

You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key

is not promoted) or 5 ASCII characters.

128-bit -

You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key

is not promoted) or 13 ASCII characters.

152-bit -

You can enter 32 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key

is not promoted) or 16 ASCII characters.



Note:

If you do not set the key, the wireless security function is still disabled even if you have

selected Shared Key as Authentication Type.

Be sure to click the

Save

button to save your settings on this page.

4.7.4

Wireless MAC Filtering

Choose menu “

Wireless

→

MAC Filtering

”, you can control the wireless access by configuring

the

Wireless MAC Filtering

function, shown in Figure 4-24.

TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 54 -

Figure 4-39 Wireless MAC Filtering

To filter wireless users by MAC Address, click

Enable

. The default setting is

Disabled

.



MAC Address

-

The wireless station's MAC address that you want to filter.



Status

-

The status of this entry, either

Enabled

or

Disabled

.



Description -

A simple description of the wireless station.

To Add a Wireless MAC Address filtering entry, click the

Add New…

button. The "

Add or Modify

Wireless MAC Address Filtering entry

"

page will appear, shown in Figure 4-25:

Figure 4-40 Add or Modify Wireless MAC Address Filtering entry

To add or modify a MAC Address Filtering entry, follow these instructions:

1.

Enter the appropriate MAC Address into the

MAC Address

field. The format of the MAC

Address

is

XX-XX-XX-XX-XX-XX

(X

is

any

hexadecimal

digit).

For

example:

00-0A-EB-B0-00-0B.

2.

Give a simple description for the wireless station in the

Description

field. For example:

Wireless station A.

3.

Select

Enabled

or

Disabled

for this entry on the

Status

drop-down list.

4.

Click the

Save

button to save this entry.

To modify or delete an existing entry:

1.

Click the

Modify

in the entry you want to modify. If you want to delete the entry, click the

Delete

.

TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 55 -

2.

Modify the information.

3.

Click the

Save

button.

Click the

Enable All

button to make all entries enabled

Click the

Disabled All

button to make all entries disabled.

Click the

Delete All

button to delete all entries.

Click the

Next

button to go to the next page.

Click the

Previous

button to return to the previous page.

For example:

If you desire that the wireless station A with MAC address 00-0A-EB-B0-00-0B and

the wireless station B with MAC address 00-0A-EB-00-07-5F are able to access the Router, but all

the other wireless stations cannot access the Router, you can configure the

Wireless MAC

Address Filtering

list by following these steps:

1. Click the

Enable

button to enable this function.

2. Select the radio button “

Allow the entries specified by any enabled entries in the list to

access

” for

Filtering Rules

.

3.

Delete all or disable all entries if there are any entries already.

4. Click the

button.

5. Enter the MAC address

in the

MAC Address

field.

6.

Enter wireless station A/B in the

Description

field.

7. Select

Enabled

in the

Status

drop-down list.

8. Click the

Save

button.

9. Click the

Back

button.

The filtering rules that configured should be similar to the following list:

4.7.5

Wireless Advanced

Choose menu “

Wireless

→

Wireless Advanced

”, you can configure the advanced settings of

your wireless network.