Chapter 11 Wireless LAN

NBG5715 User’s Guide

81

11.3

Wireless Security Modes

11.3.1

No Security

Select

No Security

to allow wireless clients to communicate with the access points without any

data encryption.

Note: If you do not enable any wireless security on your NBG5715, your network is

accessible to any wireless networking device that is within range.

Figure 44

Network > Wireless LAN 2.4G/5G > Security: No Security

The following table describes the labels in this screen.

11.3.2

WEP Encryption

WEP encryption scrambles the data transmitted between the wireless stations and the access points

to keep network communications private. It encrypts unicast and multicast communications in a

network. Both the wireless stations and the access points must use the same WEP key.

Your NBG5715 allows you to configure up to four 64-bit or 128-bit WEP keys but only one key can

be enabled at any one time.

Select

Static WEP

from the

Security Mode

list.

Table 29

Network > Wireless LAN > Security: No Security

LABEL

DESCRIPTION

Security Mode

Choose

No Security

from the drop-down list box.

Apply

Click

Apply

to save your changes back to the NBG5715.

Cancel

Click

Cancel

to reload the previous configuration for this screen.

Chapter 11 Wireless LAN

NBG5715 User’s Guide

82

Figure 45

Network > Wireless LAN 2.4G/5G > Security: Static WEP

The following table describes the wireless LAN security labels in this screen.

Table 30

Network > Wireless LAN 2.4G/5G > Security: Static WEP

LABEL

DESCRIPTION

Security Mode

Select

Static WEP

to enable data encryption.

PassPhrase

Enter a Passphrase (up to 26 printable characters) and click

Generate

.

A passphrase functions like a password. In WEP security mode, it is further

converted by the NBG5715 into a complicated string that is referred to as the

“key”. This key is requested from all devices wishing to connect to a wireless

network.

WEP Encryption

Select

64-bits

or

128-bits

.

This dictates the length of the security key that the network is going to use.

Authentication

Method

Select

Auto

or

Shared Key

from the drop-down list box.

This field specifies whether the wireless clients have to provide the WEP key to

login to the wireless client. Keep this setting at

Auto

unless you want to force a

key verification before communication between the wireless client and the

NBG5715 occurs.

Select

Shared Key

to force the clients to provide the WEP key prior to

communication.

ASCII

Select this option in order to enter ASCII characters as WEP key.

Hex

Select this option in order to enter hexadecimal characters as a WEP key.

The preceding "0x", that identifies a hexadecimal key, is entered automatically.

Chapter 11 Wireless LAN

NBG5715 User’s Guide

83

11.3.3

WPA-PSK/WPA2-PSK

Select

WPA-PSK

or

WPA2-PSK

from the

Security Mode

list.

Figure 46

Network > Wireless LAN > Security: WPA-PSK/WPA2-PSK

The following table describes the labels in this screen.

11.3.4

WPA/WPA2

Select

WPA

or

WPA2

from the

Security Mode

list.

Key 1 to Key 4

The WEP keys are used to encrypt data. Both the NBG5715 and the wireless

stations must use the same WEP key for data transmission.

If you chose

64-bit WEP

, then enter any 5 ASCII characters or 10 hexadecimal

characters ("0-9", "A-F").

If you chose

128-bit WEP

, then enter 13 ASCII characters or 26 hexadecimal

characters ("0-9", "A-F").

You must configure at least one key, only one key can be activated at any one

time. The default key is key 1.

Apply

Click

Apply

to save your changes back to the NBG5715.

Cancel

Click

Cancel

to reload the previous configuration for this screen.

Table 30

Network > Wireless LAN 2.4G/5G > Security: Static WEP (continued)

LABEL

DESCRIPTION

Table 31

Network > Wireless LAN > Security: WPA-PSK/WPA2-PSK

LABEL

DESCRIPTION

Security Mode

Select

WPA-PSK

or

WPA2-PSK

to enable data encryption.

WPA Compatible

This field appears when you choose

WPA2-PSK

as the

Security Mode

.

Check this field to allow wireless devices using

WPA-PSK

security mode to

connect to your NBG5715.

Pre-Shared Key

WPA-PSK/WPA2-PSK

uses a simple common password for authentication.

Type a pre-shared key from 8 to 63 case-sensitive keyboard characters.

Group Key

Update Timer

The

Group Key Update Timer

is the rate at which the AP sends a new group

key out to all clients.

The default is

3600

seconds (60 minutes).

Apply

Click

Apply

to save your changes back to the NBG5715.

Cancel

Click

Cancel

to reload the previous configuration for this screen.

Chapter 11 Wireless LAN

NBG5715 User’s Guide

84

Figure 47

Network > Wireless LAN 2.4G/5G > General: WPA/WPA2

The following table describes the labels in this screen.

Table 32

Network > Wireless LAN > General: WPA/WPA2

LABEL

DESCRIPTION

Security Mode

Select

WPA

or

WPA2

to enable data encryption.

WPA Compatible

This check box is available only when you select

WPA2-PSK

or

WPA2

in the

Security Mode

field.

Select the check box to have both WPA2 and WPA wireless clients be able to

communicate with the NBG5715 even when the NBG5715 is using WPA2-PSK

or WPA2.

Group Key Update

Timer

The

Group Key Update Timer

is the rate at which the AP (if using

WPA-

PSK/WPA2-PSK

key management) or RADIUS

server (if using

WPA/WPA2

key management) sends a new group key out to all clients. The re-keying

process is the WPA/WPA2 equivalent of automatically changing the WEP key for

an AP and all stations in a WLAN on a periodic basis. Setting of the

Group Key

Update Timer

is also supported in

WPA-PSK/WPA2-PSK

mode.

PMK Cache Period

This field is available only when you select

WPA2

.

Specify how often wireless clients have to resend usernames and passwords in

order to stay connected. Enter a time interval between 10 and 999999

minutes.

Note: If wireless client authentication is done using a RADIUS server, the

reauthentication timer on the RADIUS server has priority.

Pre-Authentication

This field is available only when you select

WPA2

.

Pre-authentication enables fast roaming by allowing the wireless client (already

connecting to an AP) to perform IEEE 802.1x authentication with another AP

before connecting to it. Select

Enable

to turn on preauthentication in WAP2.

Otherwise, select

Disable

.

Authentication Server

IP Address

Enter the IP address of the external authentication server in dotted decimal

notation.

Port Number

Enter the port number of the external authentication server.

You need not change this value unless your network administrator instructs you

to do so with additional information.

Chapter 11 Wireless LAN

NBG5715 User’s Guide

85

11.4

The MAC Filter Screen

The MAC filter screen allows you to configure the NBG5715 to give exclusive access to devices

(

Allow

) or exclude devices from accessing the NBG5715 (

Deny

). Every Ethernet device has a

unique MAC (Media Access Control) address. The MAC address is assigned at the factory and

consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know

the MAC address of the devices to configure this screen.

To change your NBG5715’s MAC filter settings, click

Network

>

Wireless LAN 2.4G/5G

>

MAC

Filter

. The screen appears as shown.

Figure 48

Network > Wireless LAN 2.4G/5G > MAC Filter

Shared Secret

Enter a password (up to 127 alphanumeric characters) as the key to be shared

between the external authentication server and the NBG5715.

The key must be the same on the external authentication server and your

NBG5715. The key is not sent over the network.

Session Timeout

The NBG5715 automatically disconnects a wireless client from the wireless and

wired networks after a period of inactivity. The wireless client needs to send the

username and password again before it can use the wireless and wired

networks again. Some wireless clients may prompt users for a username and

password; other clients may use saved login credentials. In either case, there

is usually a short delay while the wireless client logs in to the wireless network

again.

Enter the time in seconds from 0 to 999999.

Apply

Click

Apply

to save your changes back to the NBG5715.

Reset

Click

Reset

to reload the previous configuration for this screen.

Table 32

Network > Wireless LAN > General: WPA/WPA2 (continued)

LABEL

DESCRIPTION