Chapter 5 Wireless

eircom F1000 Modem User’s Guide

76

5.2.4

WPA(2) Authentication

The WPA2 security mode is currently the most robust form of encryption for wireless networks. It

requires a RADIUS server to authenticate user credentials and is a full implementation the security

protocol. Use this security option for maximum protection of your network. However, it is the least

backwards compatible with older devices.

The WPA security mode is a security subset of WPA2. It requires the presence of a RADIUS server

on your network in order to validate user credentials. This encryption standard is slightly older than

WPA2 and therefore is more compatible with older devices.

Click

Network Setting

>

Wireless

to display the

General

screen. Select

More Secure

as the

security level. Then select

WPA

or

WPA2

from the

Security Mode

list.

Figure 37

Wireless > General: More Secure: WPA(2)

The following table describes the labels in this screen.

Encryption

Select the encryption type (

TKIP

,

AES

or

TKIP+AES

) for data encryption.

Select

TKIP

if your wireless clients can all use TKIP.

Select

AES

if your wireless clients can all use AES.

Select

TKIP+AES

to allow the wireless clients to use either TKIP or AES.

Group Key

Update Timer

The

Group Key Update Timer

is the rate at which the RADIUS

server sends a new group

key out to all clients.

Table 16

Wireless > General: More Secure: WPA(2)-PSK (continued)

LABEL

DESCRIPTION

Table 17

Wireless > General: More Secure: WPA(2)

LABEL

DESCRIPTION

Security Level

Select

More Secure

to enable WPA(2)-PSK data encryption.

Security Mode

Choose

WPA

or

WPA2

from the drop-down list box.

Authentication Server

Chapter 5 Wireless

eircom F1000 Modem User’s Guide

77

5.3

The More AP Screen

This screen allows you to enable and configure multiple Basic Service Sets (BSSs) on the Device.

Click

Network Setting > Wireless

>

More AP

. The following screen displays.

Figure 38

Network Setting > Wireless > More AP

IP Address

Enter the IP address of the external authentication server in dotted decimal notation.

Port

Number

Enter the port number of the external authentication server. The default port number is

1812

.

You need not change this value unless your network administrator instructs you to do so

with additional information.

Shared

Secret

Enter a password (up to 31 alphanumeric characters) as the key to be shared between the

external authentication server and the Device.

The key must be the same on the external authentication server and your Device. The key is

not sent over the network.

Select

password unmask

to show your entered password in plain text.

more.../less

Click

more...

to show more fields in this section. Click

less

to hide them.

WPA

Compatible

This field is only available for WPA2. Select this if you want the Device to support WPA and

WPA2 simultaneously.

Encryption

Select the encryption type (

TKIP

,

AES

or

TKIP+AES

) for data encryption.

Select

TKIP

if your wireless clients can all use TKIP.

Select

AES

if your wireless clients can all use AES.

Select

TKIP+AES

to allow the wireless clients to use either TKIP or AES.

WPA2 Pre-

Authentication

This field is available only when you select

WPA2

.

Pre-authentication enables fast roaming by allowing the wireless client (already connecting

to an AP) to perform IEEE 802.1x authentication with another AP before connecting to it.

Select

Enabled

to turn on preauthentication in WAP2. Otherwise, select

Disabled

.

Network Re-

auth Interval

Specify how often wireless stations have to resend usernames and passwords in order to

stay connected.

If wireless station authentication is done using a RADIUS server, the reauthentication timer

on the RADIUS server has priority.

Group Key

Update Timer

The

Group Key Update Timer

is the rate at which the RADIUS

server sends a new group

key out to all clients.

Table 17

Wireless > General: More Secure: WPA(2) (continued)

LABEL

DESCRIPTION

Chapter 5 Wireless

eircom F1000 Modem User’s Guide

78

The following table describes the labels in this screen.

Table 18

Network Setting > Wireless > More AP

LABEL

DESCRIPTION

#

This is the index number of the entry.

Status

This field indicates whether this SSID is active. A yellow bulb signifies that this SSID is active.

A gray bulb signifies that this SSID is not active.

SSID

An SSID profile is the set of parameters relating to one of the Device’s BSSs. The SSID

(Service Set IDentifier) identifies the Service Set with which a wireless device is associated.

This field displays the name of the wireless profile on the network. When a wireless client

scans for an AP to associate with, this is the name that is broadcast and seen in the wireless

client utility.

Security

This field indicates the security mode of the SSID profile.

Guest WLAN

This displays if the guest WLAN function has been enabled for this WLAN.

If

Home Guest

displays, clients can connect to each other directly.

If

External Guest

displays, clients are blocked from connecting to each other directly.

N/A

displays if guest WLAN is disabled.

Modify

Click the

Edit

icon to configure the SSID profile.

Chapter 5 Wireless

eircom F1000 Modem User’s Guide

79

5.3.1

Edit More AP

Use this screen to edit an SSID profile. Click the

Edit

icon next to an SSID in the

More AP

screen.

The following screen displays.

Figure 39

Network Setting > Wireless > More AP > Edit

The following table describes the fields in this screen.

Table 19

Network Setting > Wireless > More AP > Edit

LABEL

DESCRIPTION

Wireless Network Setup

Wireless

You can

Enable

or

Disable

the wireless LAN in this field.

Passphrase

Type

Passphrase type cannot be changed. The default is

None

.

Wireless Network Settings

Wireless

Network Name

(SSID)

The SSID (Service Set IDentity) identifies the service set with which a wireless device is

associated. Wireless devices associating to the access point (AP) must have the same SSID.

Enter a descriptive name (up to 32 English keyboard characters) for the wireless LAN.

Chapter 5 Wireless

eircom F1000 Modem User’s Guide

80

Max clients

Specify the maximum number of clients that can connect to this network at the same time.

Hide SSID

Select this check box to hide the SSID in the outgoing beacon frame so a station cannot

obtain the SSID through scanning using a site survey tool.

Enhanced

Multicast

Forwarding

Select this check box to allow the Device to convert wireless multicast traffic into wireless

unicast traffic.

Guest WLAN

Select this to create Guest WLANs for home and external clients. Select the WLAN type in

the

Access Scenario

field.

Access

Scenario

If you select

Guest Home

, clients can connect to each other directly. A

Home Guest

screen appears. A graphic shows whether the wireless clients can access other clients in the

same wireless network and in other networks. Click

Apply

to save the change before closing

the screen. Click

Cancel

to close the screen without saving the change.

If you select

External Guest

, clients are blocked from connecting to each other directly. A

External Guest

screen appears. A graphic shows whether the wireless clients can access

other clients in the same wireless network and in other networks. Click

Apply

to save the

change before closing the screen. Click

Cancel

to close the screen without saving the

change.

Max. Upstream

Bandwidth

Specify the maximum rate for upstream wireless traffic to the WAN from this WLAN in

kilobits per second (Kbps).

Max.

Downstream

Bandwidth

Specify the maximum rate for downstream wireless traffic to this WLAN from the WAN in

kilobits per second (Kbps).

Table 19

Network Setting > Wireless > More AP > Edit (continued)

LABEL

DESCRIPTION