101

WPA2-PSK

Offers state-of-the-art security. When enabled, you must

also enter a Pre-Shared Key below that will by used by all

wireless clients to access the wireless network.

WPA/WPA2 Encryption

Select Enable to use WPA/WPA2 encryption. Most users

should use the default setting of TKIP+AES.

WPA Pre-Shared Key

Enter a 8-63 ASCII character string if you have enabled

WPA-PSK or WPA2-PSK.

RADIUS Server

If you’re using a RADIUS server, enter it’s IP address

here. The RADIUS server may be on either public network

(WAN) or private network (LAN).

RADIUS Port

(Relevant only when the

RADIUS server is enabled)

Enter the UDP port number of the RADIUS server. The

default port is 1812.

RADIUS Key

(Relevant only when the

RADIUS server is enabled)

Enter the RADIUS Key.

Group Key Rotation

Interval

(Relevant only when the

RADIUS server is enabled)

When enabled, the Cable Modem/Router generates the

best possible random group key and updates all

key-management capable clients periodically. Set to zero

to disable periodic rekeying.

WPA/WPA2 Re-auth

Interval

Interval (in seconds) at which the Cable Modem/Router (if

using WPA-PSK key management) or RADIUS server (if

using WPA key management) sends a new group key out

to all clients. The re-keying process is the WPA equivalent

of automatically changing the WEP key for an AP and all

stations in a WLAN on a periodic basis.

WEP Encryption

WEP Encryption should be left disabled by most users. To

set WEP Encryption, first you must click on the Radio

submenu button and set 802.11n Mode to Disabled.

Then on the Primary Network page you must disable

WPA-PSK and WPA2-PSK.

WEP Encryption can be set to WEP 128-bit, 64-bit, or

Disable. Both the wireless clients and the Cable

Modem/Router must use the same WEP key.

Network Key 1-4

You can pre-define up to 4 keys for 64-bit or 128-bit WEP.

64-bit keys require 10 hexadecimal digits and 128-bit key

require 26 hexadecimal digits.

Current Network Key

Select one of the four pre-defined keys as the current

network key.

PassPhase

Enter a word or group of printable characters and click

Generate WEP keys to generate WEP encryption key.

These characters are case sensitive.

102

Generate WEP Keys

Click to generate 4 WEP keys automatically.

Automatic Security

Configuration

Disable or enable WPS. WPS does not work with WEP.

Device Name

Enter a name to identify this Cable Modem/Router in WPS

network.

WPS Setup AP PIN

PIN (Personal Identification Number) is the WDS ID

number of your PC or game machine. When a

WPS-supported device tries to connect to this Cable

Modem/Router, you have to enter its PIN into the WPS

Setup AP’s PIN field, then click

Configure

.

WPS Add Client

Select WPS mode to be deployed.

Push-Button

In Push-Button mode, then user only needs to push the

WPS button on the Cable Modem/Router. Then, within 2

minutes, activate WPS on your client device(s).

PIN

For devices that require a PIN, enter the PIN in the WPS

Add Client PIN’s field, and then click

Add

.

Guest Network

The Guest Network page allows you to configure a guest network. A guest network is a

small section of an organization's computer network designed for use by temporary

visitors. This guest network often provides full Internet connectivity, but it also strictly

limits access to any internal (intranet) Web sites or files.

Traditionally, you needed to use different APs to configure different Basic Service Sets

(BSSs). Your Cable Modem/Router supports Multiple SSIDs which allows you to use the

same access point to provide several BSSs simultaneously. You can then assign

various privileges to different SSIDs and associated networks.



Up to eight BSSs are allowed on one Cable Modem/Router simultaneously, one for

Admin access and seven for Guest Networks.



If you are using WEP, you must use different WEP keys for different BSSs.



You should use different PSKs for different BSSs if you are using WPA/WPA2.

To access the

Guest Network

page:

1

Click

Wireless

in the menu bar.

2

Then click the

Guest Network

submenu.

Figure 36 shows an example of the menu and Table 25 describes the items you can

select.

103

Figure 32. Example of Guest Network Page

104

Table 27. Guest Network Menu Option

Option

Description

Guest Network

Select Enable to enable guest network.

Guest Network Name

(SSID)

Enter a name for the guest network.

Closed Network

Select Enable to supress broadcast of the SSID.

Mode Required

Default set to None. Choice to select None, HT and VHT.

Most users will leave this None.

Client Isolate

Prevents wireless clients on your network from

communicating with other wireless clients.

WPA

Wi-Fi Protected Access (WPA) offers stronger encryption

than WEP. Enable WPA alone if you have a RADIUS

server (unlikely for most home users) – otherwise

WPA-PSK.

WPA-PSK

Offers stronger encryption than WEP. When enabled, you

must also enter a Pre-Shared Key that will by used by all

wireless clients to access the wireless network.

WPA2

Offers state-of-the-art security. Enable WPA2 alone only if

you have a RADIUS server (unlikely for most home users);

otherwise use WPA2-PSK.

WPA2-PSK

Offers state-of-the-art security. When enabled, you must

also enter a Pre-Shared Key that will by used by all

wireless clients to access the wireless network.

WPA/WPA2 Encryption

Select Enable to use WPA/WPA2 encryption. Most users

should leave the default settings of TKIP+AES.

WPA Pre-Shared Key

Enter a 8-63 ASCII character string if you have enabled

WPA-PSK or WPA2-PSK.

RADIUS Server

If you’re using a RADIUS server, enter it’s IP address

here. The RADIUS server may be on either public network

(WAN) or private network (LAN).

RADIUS Port

(Relevant only when the

RADIUS server is enabled)

Enter the UDP port number of the RADIUS server. The

default port is 1812.

RADIUS Key

(Relevant only when the

RADIUS server is enabled)

Enter the RADIUS Key.

Group Key Rotation

Interval

(Relevant only when the

RADIUS server is enabled)

When enabled, the Cable Modem/Router generates the

best possible random group key and updates all

key-management capable clients periodically. Set to zero

to disable periodic rekeying.

WPA/WPA2 Re-auth

Interval (in seconds) at which the Cable Modem/Router (if

105

Interval

using WPA-PSK key management) or RADIUS server (if

using WPA key management) sends a new group key out

to all clients. The re-keying process is the WPA equivalent

of automatically changing the WEP key for an AP and all

stations in a WLAN on a periodic basis.

WEP Encryption

WEP Encryption should be left disabled by most users. To

set WEP Encryption, first you must click on the Radio

submenu button and set 802.11n Mode to Disabled.

Then on the Guest Network page you must disable

WPA-PSK and WPA2-PSK.

WEP Encryption can be set to WEP 128-bit, 64-bit, or

Disable. Both the wireless clients and the Cable

Modem/Router must use the same WEP key.

Network Key 1-4

You can pre-define up to 4 keys for 64-bit or 128-bit WEP.

64-bit keys require 10 hexadecimal digits and 128-bit key

require 26 hexadecimal digits.

Current Network Key

Select one of the four pre-defined keys as the current

network key.

PassPhase

Enter a word or group of printable characters and click

Generate WEP keys to generate WEP encryption key.

These characters are case sensitive.

Generate WEP Keys

Click to generate 4 WEP keys automatically.

Guest LAN Settings

Select LAN for existing LAN - same as Primary Network - or

GUEST to create a Virtual LAN

.

IP Address

Enter the IP address to be the default Cable

Modem/Router address for clients connected this guest

network.

Subnet Mask

Enter the subnet mask for this guest network.

Lease Pool Start

Enter the start IP address of this DHCP address pool.

Lease Pool End

Enter the end IP address of this DHCP address pool.

Lease Time

Enter the leased time for DHCP clients. DHCP clients will

resend DHCP request before expiration. Maximum value

is 86400 seconds.

UPnP Enable

Select Enabled to enable UPnP on your guest network

Firewall Enable

Enables or Disables the Firewall on your guest network.

DHCPv6 Server

Selecting Enabled allows the DHCP server to assign IPv6

addresses.