Page 351 / 404 Scroll up to view Page 346 - 350
Appendix D Wireless LANs
P-661HNU-Fx User’s Guide
351
Push Button Configuration
WPS Push Button Configuration (PBC) is initiated by pressing a button on each
WPS-enabled device, and allowing them to connect automatically. You do not need
to enter any information.
Not every WPS-enabled device has a physical WPS button. Some may have a WPS
PBC button in their configuration utilities instead of or in addition to the physical
button.
Take the following steps to set up WPS using the button.
1
Ensure that the two devices you want to set up are within wireless range of one
another.
2
Look for a WPS button on each device. If the device does not have one, log into its
configuration utility and locate the button (see the device’s User’s Guide for how to
do this - for the ZyXEL Device, see
Section 6.4 on page 123
).
3
Press the button on one of the devices (it doesn’t matter which).
4
Within two minutes, press the button on the other device. The registrar sends the
network name (SSID) and security key through an secure connection to the
enrollee.
If you need to make sure that WPS worked, check the list of associated wireless
clients in the AP’s configuration utility. If you see the wireless client in the list,
WPS was successful.
PIN Configuration
Each WPS-enabled device has its own PIN (Personal Identification Number). This
may either be static (it cannot be changed) or dynamic (you can change it to a
new random number by clicking on a button in the configuration interface).
When you use the PIN method, you must enter the enrollee’s PIN into the
registrar. Then, when WPS is activated on the enrollee, it presents its PIN to the
registrar. If the PIN matches, the registrar sends the network and security
information to the enrollee, allowing it to join the network.
The advantage of using the PIN method rather than the PBC method is that you
can ensure that the connection is established between the devices you specify, not
just the first two devices to activate WPS in the area. However, you need to log
into the configuration interfaces of both devices.
Take the following steps to set up WPS using the PIN method.
Page 352 / 404
Appendix D Wireless LANs
P-661HNU-Fx User’s Guide
352
1
Decide which device you want to be the registrar (usually the AP) and which you
want to be the enrollee (usually the client).
2
Look for the enrollee’s WPS PIN; it may be displayed on the device. If you don’t
see it, log into the enrollee’s configuration interface and locate the PIN. Select the
PIN connection mode (not PBC connection mode). See the device’s User’s Guide
for how to do this - for the ZyXEL Device, see
Section 6.4 on page 123.
3
Log into the configuration utility of the registrar. Select the PIN connection mode
(not the PBC connection mode). Locate the place where you can enter the
enrollee’s PIN (if you are using the ZyXEL Device, see
Section 6.4 on page 123
).
Enter the PIN from the enrollee device.
4
Activate WPS on both devices within two minutes.
Note: Use the configuration utility to activate WPS, not the push-button on the device
itself.
5
On a computer connected to the wireless client, try to connect to the Internet. If
you can connect, WPS was successful.
If you cannot connect, check the list of associated wireless clients in the AP’s
configuration utility. If you see the wireless client in the list, WPS was successful.
Page 353 / 404
Appendix D Wireless LANs
P-661HNU-Fx User’s Guide
353
The following figure shows a WPS-enabled wireless client (installed in a notebook
computer) connecting to the WPS-enabled AP via the PIN method.
Figure 195
Example WPS Process: PIN Method
How WPS Works
When two WPS-enabled devices connect, each device must assume a specific role.
One device acts as the registrar (the device that supplies network and security
settings) and the other device acts as the enrollee (the device that receives
network and security settings. The registrar creates a secure EAP (Extensible
Authentication Protocol) tunnel and sends the network name (SSID) and the WPA-
PSK or WPA2-PSK pre-shared key to the enrollee. Whether WPA-PSK or WPA2-PSK
is used depends on the standards supported by the devices. If the registrar is
ENROLLEE
SECURE EAP TUNNEL
SSID
WPA(2)-PSK
WITHIN 2 MINUTES
COMMUNICATION
This device’s
WPS
Enter WPS PIN
WPS
from other device:
WPS PIN:
123456
WPS
START
WPS
START
REGISTRAR
Page 354 / 404
Appendix D Wireless LANs
P-661HNU-Fx User’s Guide
354
already part of a network, it sends the existing information. If not, it generates
the SSID and WPA(2)-PSK randomly.
The following figure shows a WPS-enabled client (installed in a notebook
computer) connecting to a WPS-enabled access point.
Figure 196
How WPS works
The roles of registrar and enrollee last only as long as the WPS setup process is
active (two minutes). The next time you use WPS, a different device can be the
registrar if necessary.
The WPS connection process is like a handshake; only two devices participate in
each WPS transaction. If you want to add more devices you should repeat the
process with one of the existing networked devices and the new device.
Note that the access point (AP) is not always the registrar, and the wireless client
is not always the enrollee. All WPS-certified APs can be a registrar, and so can
some WPS-enabled wireless clients.
By default, a WPS devices is “unconfigured”. This means that it is not part of an
existing network and can act as either enrollee or registrar (if it supports both
functions). If the registrar is unconfigured, the security settings it transmits to the
enrollee are randomly-generated. Once a WPS-enabled device has connected to
another device using WPS, it becomes “configured”. A configured wireless client
can still act as enrollee or registrar in subsequent WPS connections, but a
configured access point can no longer act as enrollee. It will be the registrar in all
SECURE TUNNEL
SECURITY INFO
WITHIN 2 MINUTES
COMMUNICATION
ACTIVATE
WPS
ACTIVATE
WPS
WPS HANDSHAKE
REGISTRAR
ENROLLEE
Page 355 / 404
Appendix D Wireless LANs
P-661HNU-Fx User’s Guide
355
subsequent WPS connections in which it is involved. If you want a configured AP to
act as an enrollee, you must reset it to its factory defaults.
Example WPS Network Setup
This section shows how security settings are distributed in an example WPS setup.
The following figure shows an example network. In step
1
, both
AP1
and
Client 1
are unconfigured. When WPS is activated on both, they perform the handshake. In
this example,
AP1
is the registrar, and
Client 1
is the enrollee. The registrar
randomly generates the security information to set up the network, since it is
unconfigured and has no existing information.
Figure 197
WPS: Example Network Step 1
In step
2
, you add another wireless client to the network. You know that
Client 1
supports registrar mode, but it is better to use
AP1
for the WPS handshake with
the new client since you must connect to the access point anyway in order to use
the network. In this case,
AP1
must be the registrar, since it is configured (it
already has security information for the network).
AP1
supplies the existing
security information to
Client 2
.
Figure 198
WPS: Example Network Step 2
REGISTRAR
ENROLLEE
SECURITY INFO
CLIENT 1
AP1
REGISTRAR
CLIENT 1
AP1
ENROLLEE
CLIENT 2
EXISTING CONNECTION
SECURITY INFO

Rate

4 / 5 based on 1 vote.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top