Figure 31. SES Configuration Window - Success!

Open SES Window

This button opens a window that allows a SES client to connect. The window remains open for 2

minutes. Only 1 SES client may connect during an Open Window period. If you have more than 1

client to connect to your SES, you must open the window multiple times.

When the SES window is open, the pop-up window below indicates the cable modem/router is

waiting for a SES client.

Figure 32. SES Configuration Window - Waiting!

Once a SES client successfully connects, the pop-up window indicates success as shown below.

Figure 33. SES Configuration Window - Success!

If a SES client does not connect during the 2-minute open window period, the pop-up window

indicates a timeout error as shown below.

76

Figure 34. SES Configuration Window - Timeout!

Finally, if the current security configuration does not meet the SES requirements of WPA-PSK

authentication with TKIP, the window will not open and the error message shown below will be

displayed.

Figure 35. Authentication Error Message

Guest Network

The Guest Network page allows you to configure a guest network. A guest network is a small

section of an organization's computer network designed for use by temporary visitors. This guest

network often provides full Internet connectivity, but it also strictly limits access to any internal

(intranet) Web sites or files.

Traditionally, you needed to use different APs to configure different Basic Service Sets (BSSs). Your

cable modem/router supports Multiple SSID which allows you to use the same access point to

provide several BSSs simultaneously. You can then assign various privileges to different SSIDs and

associated networks.

y

Up to four BSSs are allowed on one cable modem/router simultaneously, one for Admin

access and three for Guest Networks.

y

If you are using WEP, you must use different WEP keys for different BSSs.

y

You should use different PSKs for different BSSs if you are using WPA/WPA2.

To access the

Guest Network

page:

1

Click

Wireless

in the menu bar.

2

Then click the

Guest Network

submenu.

77

Figure 36 shows an example of the menu and Table 26 describes the items you can select.

Figure 36. Example of Guest Network Page

78

Table 26. Guest Network Menu Option

Option

Description

Guest Network

Select Enable to enable guest network.

Guest Network Name

(SSID)

Enter a name for the guest network.

Closed Network

Select Enable to supress broadcast of the SSID.

WPA

WiFi Protected Access (WPA) offers stronger encryption than

WEP. Enable WPA alone if you have a RADIUS server –

otherwise WPA-PSK.

WPA-PSK

Offers stronger encryption than WEP. When enabled, you must

also enter a Pre-Shared Key.

WPA2

Offers state-of-the-art security. Enable WPA2 alone only if you

have a RADIUS server; otherwise use WPA2-PSK.

WPA2-PSK

Offers state-of-the-art security. When enabled, you must also

enter a Pre-Shared Key below.

WPA/WPA2 Encryption

Select Enable to use WPA/WPA2 encryption.

WPA Pre-Shared Key

Enter a 8-63 ASCII character string if you have enabled

WPA-PSK or WPA2-PSK.

RADIUS Server

If you’re using a RADIUS server, enter it’s IP address here. The

RADIUS server may be on either public network (WAN) or

private network (LAN).

RADIUS Port

(Relevant only when the

RADIUS server is enabled)

Enter the UDP port number of the RADIUS server. The default

port is 1812.

RADIUS Key

(Relevant only when the

RADIUS server is enabled)

Enter the RADIUS Key.

Group Key Rotation Interval

(Relevant only when the

RADIUS server is enabled)

When enabled, the cable modem/router generates the best

possible random group key and updates all key-management

capable clients periodically. Set to zero to disable periodic

rekeying.

WPA/WPA2 Re-auth

Interval

Interval (in seconds) at which the cable modem/router (if using

WPA-PSK key management) or RADIUS server (if using WPA

key management) sends a new group key out to all clients. The

re-keying process is the WPA equivalent of automatically

changing the WEP key for an AP and all stations in a WLAN on a

periodic basis.

WEP Encryption

WEP Encryption can be set to WEP 128-bit, 64-bit, or Disable.

Both the wireless clients and the cable modem/router must use

the same WEP key.

Shared Key Authentication

Select Enable to enable. Shared Key authentication is only

available when WEP is enabled.

79

802.1x Authentication

(only available when WEP is

enabled)

Select Enable to enable 802.1x authentication.

Network Key 1-4

You can pre-define up to 4 keys for 64-bit or 128-bit WEP. 64-bit

keys require 10 hexadecimal digits and 128-bit key require 26

hexadecimal digits.

Current Network Key

Select one of the four pre-defined keys as the current network

key.

PassPhase

Enter a word or group of printable characters and click Generate

WEP keys to generate WEP encryption key. These characters are

case sensitive.

Generate WEP Keys

Click to generate 4 WEP keys automatically.

DHCP Server

Select Enable to deploy DHCP server for this guest SSID.

IP Address

Enter the IP address to be the default cable modem/router

address for clients connected this guest network.

Subnet Mask

Enter the subnet mask for this guest network.

Lease Pool Start

Enter the start IP address of this DHCP address pool.

Lease Pool End

Enter the end IP address of this DHCP address pool.

Lease Time

Enter the leased time for DHCP clients. DHCP clients will resend

DHCP request before expiration. Maximum value is 86400

seconds.

Advanced

The Advanced page allows you to configure advanced wireless settings. Most users will have no

need to change these settings.

To access the

Advanced

page:

1

Click

Wireless

in the menu bar.

2

Then click the

Advanced

submenu.

Figure 37 shows an example of the menu and Table 27 describes the items you can select.

80