Page 46 / 210
Scroll up to view Page 41 - 45
030-300554 Rev. A
46
June 2008
Verizon FiOS Router (Model 9100EM)
User Guide
Pre-Shared Key – WPA stations share a pre-shared key (string format) with the Router and do
not authenticate with the RADIUS server.
802.1x – WPA stations authenticate with the RADIUS server using EAP-TLS over 802.1x, a
standard for passing extensible authentication protocol (EAP) for authentication purposes. EAP
is used to communicate authentication information between the supplicant and the authentication
server. With 802.1x, EAP messages are packaged in Ethernet frames, rather than using and PPP.
Pre-Authentication
Factory Default = Disabled
To Enable this feature, click the box (a check mark will appear in the box).
WPA Pre-Shared Key
The WPA key can be either 8 to 63 text (ASCII) characters or 64 hexadecimal (Hex) characters.
The only allowable hexadecimal characters are: A-F and 0-9.
Encryption Algorithm
Factory Default = TKIP
Select the encryption algorithm you want to use (TKIP, AES, or TKIP and AES).
TKIP: Select this option to enable the Temporal Key Integrity Protocol for data encryption.
AES: Select this option to enable the Advanced Encryption Standard for data encryption.
TKIP and AES: Select this option to enable the Router to accept TKIP and AES encryption.
Group Key Update
Interval (in seconds)
The number of seconds between rekeying the WPA group key. A value of zero means that
rekeying is disabled.
After you have selected WPA as the security type, select the desired authentication method from the
Authentication
Method
drop-down list.
Page 47 / 210
030-300554 Rev. A
47
June 2008
Verizon FiOS Router (Model 9100EM)
User Guide
11.3.5.1.1
Authentication Method—Pre-Shared Key
If you select
Pre-Shared key
as the authentication method for WPA, the following screen will appear. Configuring
Pre-Shared Key in the Router allows devices that know the pre-shared key to connect to the Router.
NOTE:
A WPA pre-shared key is treated as either a string of text (ASCII) characters or a set of
hexadecimal (Hex) characters. The key can be either 8 to 63 text (ASCII) characters or 64 hexadecimal
(Hex) characters. The only allowable hexadecimal characters are: 0-9 and A-F.
To configure the WPA Pre-Shared Key, do the following:
1.
Select the string type (ASCII or HEX) in the
Pre-Shared Key
drop-down list.
2.
Enter the desired pre-shared key values in the field provided.
3.
Select the desired option from the
Encryptoin Algorithm
drop-down list.
•
TKIP: Select this option to enable the Temporal Key Integrity Protocol for data encryption.
•
AES: Select this option to enable the Advanced Encryption Standard for data encryption.
•
TKIP and AES: Select this option to enable the Router to accept TKIP and AES encryption.
4.
Enter the desired Group Key Update Interval, and confirm that the adjacent box contains a check mark. (By
factory default, Group Key Interval is enabled for 900 seconds.)
5.
Click
OK
to save the wireless settings in the Router.
Page 48 / 210
030-300554 Rev. A
48
June 2008
Verizon FiOS Router (Model 9100EM)
User Guide
11.3.5.1.2
Authentication Method—802.1x
If you select
802.1x
as the authentication method for WPA, the following screen will appear. Configuring 802.1x
allows devices that support 802.1x to connect to the Router.
To configure WPA authentication for 802.1x, do the following:
1.
Select the desired option from the
Encryptoin Algorithm
drop-down list.
•
TKIP: Select this option to enable the Temporal Key Integrity Protocol for data encryption.
•
AES: Select this option to enable the Advanced Encryption Standard for data encryption.
•
TKIP and AES: Select this option to enable the Router to accept either TKIP or AES encryption.
2.
Enter the desired Group Key Update Interval, and confirm that the box contains a check mark. (By factory
default, Group Key Interval is enabled for 900 seconds.)
3.
Configure the Radius Server:
a. Enter the Radius Server IP address in the fields provided.
b. Enter the desired Server Port value.
c. Enter the Shared Secret.
4.
Click
OK
to save the wireless settings in the Router.
Page 49 / 210
030-300554 Rev. A
49
June 2008
Verizon FiOS Router (Model 9100EM)
User Guide
11.3.5.2
WPA2 (Wi-Fi Protected Access v. 2)
If you select
WPA2
in the
Stations Security Type
drop-down list, the following screen will appear. This option
allows stations that support WPA v.2 to connect to the Router. The configuration settings for WPA2 are similar to
the settings in WPA. Please refer to section 11.3.5.1 for instructions on configuring WPA2.
Page 50 / 210
030-300554 Rev. A
50
June 2008
Verizon FiOS Router (Model 9100EM)
User Guide
11.3.5.3
WPA and WPA2
If you select
WPA2 and WPA2
in the
Stations Security Type
drop-down list, the following screen will appear.
This option allows stations that support both WPA v.1 and WPA v.2 to connect to the Router. The configuration
settings for this feature are similar to the settings in WPA. Please refer to section 11.3.5.1 for instructions on
configuring WPA and WPA2.