User Manual for the
NETGEAR 54 Mbps
Wireless PC Card WG511v2
NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
202-10049-01
Version v2.0
September 2004
Page 2
Technical Support
Please refer to the support information card that shipped with your product. By registering your
product at www.netgear.com/register
, we can provide you with faster expert technical support and
timely notices of product and software upgrades.
NETGEAR, INC. Support Information
Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support
information card.
E-mail: support@netgear.com
Web site: www.netgear.com
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
It is hereby certified that the Model WG511v2 Wireless PC Card has been suppressed in accordan ce with the conditions
set out in the BMPT- AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test
transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes
ii
Page 3
in the operating instructions.
Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and
has been granted the right to test the series for compliance with the regulations.
Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice
NETGEAR 54 Mbps Wireless PC Card WG511v2
Tested to Comply
with FCC Standards
FOR HOME OR OFFICE USE
This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:
1. This device may not cause harmful interference.
2. This device must accept any interference received, including interference that may cause undesired operation.
Note: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a
residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and
used in accordance with the instruct ions, may cause harmf ul interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to
radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try
to correct the interference by one of more of the following measures: (1) Reorie nt or reloc at e the rece ivi ng ante nna, (2)
Increase the separation between the equipment and receiver, (3) Connect the equipment into an outlet on a circuit
different from that to which the receiver is connected, (4) Consult the dealer or an experienced radio/TV technician for
help.
Warning!
To comply with the FCC’s of exposure requirements
you must maintain a distance of at least 1 cm from
the antenna of this device while it is in use. This
device should not be co-located with other
transmitters.
Federal Communications Commission (FCC) Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. In order to avoid
the possibility of exceeding the FCC radio frequency exposure limits, human proximity to the antenna shall not be less
than 20 cm (8 inches) during normal operation.
Canadian Department of Communications Radio Interference
Regulations
This digital apparatus (NETGEAR 54 Mbps Wireless PC Card WG511v2) does not exceed the Class B limits for
radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian
Department of Communications.
Configuring Windows 2000 or XP for TCP/IP Networking ............................................. C-6
Install or V erify Windows Networking Components ................................................. C-6
DHCP Configuration of TCP/IP in Windows XP or 2000 ......................................... C-7
DHCP Configuration of TCP/IP in Windows XP ..................................................... C-7
DHCP Configuration of TCP/IP in Windows 2000 .................................................. C-9
Verifying TCP/IP Properties for Windows XP or 2000 ........................................... C-11
Glossary
List of Glossary Terms ...................................................................................................D-1
Index
Contentsvii
Page 8
viiiContents
Page 9
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Chapter 1
Introduction
This chapter introduces the features, package contents, and appearance of the NETGEAR 54 Mbps
Wireless PC Card WG511v2.
About the NETGEAR 54 Mbps Wireless PC Card WG511v2
The NETGEAR 54 Mbps Wireless PC Card WG511v2 gives you ultimate mobility in your office
or while you are traveling. It frees you from traditional Ethernet wiring and helps you create a
wireless network for sharing your broadband cable or DSL Internet access among multiple PCs in
and around your home. It is designed for notebook computers running Microsoft
both 16-bit PCMCIA and 32-bit CardBus compatible and works in any available PCMCIA or
CardBus slot.
®
Windows®. It is
Its auto-sensing capability allows high packet transfer at up to 54 Mbps for maximum throughput
or dynamic range shifting to lower speeds due to distance or operating limitations in an
environment with a lot of electromagnetic interference.
The WG511v2 Wireless PC Card provides reliable, standards-based 802.11b 11 Mbps WLAN
connectivity that is protected with industry-standard security . In addition, it offers the faster speeds
of the 802.11g standard. It works with Windows 98SE, Me, 2000 Professional, and XP operating
systems.
Key Features and Related NETGEAR Products
The WG511v2 Wireless PC Card provides the following features:
•Reliable IEEE 802.11g and b standards-based wireless technology.
•Supports roaming between access points when configured in Infrastructure mode.
•54 Mbps high speed data transfer. Wireless nodes negotiate to operate in the optimal data
transfer rate. In a noisy environment or when the distance between the wireless nodes is far,
the wireless nodes automatically fall back to operate at lower transfer rates.
Introduction1-1
Page 10
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
•High level of data encryption using128-bit Shared Key WEP data encryption method. A lower
level of data encryption or no data encryption is available to simplify your network setup o r to
improve data transfer rate.
The following NETGEAR products can be configured to communicate with the WG511v2
Wireless PC Card:
•WGT614 54 Mbps Wireless Firewall Router
•WGT624 108 Mbps Wireless Firewall Router
•WG602 54 Mbps Wireless Access Point
•WAB102 Dual Band Access Point
•WAB501 Dual Band PC Card
•MA101 802.11b Wireless USB Adapter
•ME102 802.11b Wireless Access Point
•MA311 802.11b Wireless PCI Adapter
•MR314 and MR814 802.11b Wireless Cable/DSL Routers
•MA701 802.11b Wireless Compact Flash Card
What’s in the Box?
The product package should contain the following items:
•NETGEAR 54 Mbps Wireless PC Card WG511v2
•Installation Guide for the NETGEAR 54 Mbps Wireless PC Card WG511v2
•NETGEAR 54 Mbps Wireless PC Card WG511v2 Resource CD, including:
— Driver and Configuration Utility Software
— User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
•Warranty card
•Support information card
If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the
carton, including the original packing materials, in case you need to return the product for repair.
1-2Introduction
Page 11
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
The NETGEAR 54 Mbps Wireless PC Card WG511v2 has two interfaces:
•The PCMCIA Type II connector connects to any notebook PC with an available PCMCIA or
CardBus slot.
•The wireless interface of the NETGEAR 54 Mbps Wireless PC Card WG511v2 remains
outside of the notebook PC chassis when the wireless PC card is inserted into a notebook. The
LED indicates the wireless link condition and signal quality of the NETGEAR 54 Mbps
Wireless PC Card WG511v2 with another wireless node or the associated access point.
A Road Map for ‘How to Get There From Here’
The introduction and adoption of any new technology can be a difficult process. Wireless
technology has removed one of the barriers to networking—running wires. It allows more people
to try networking while at the same time exposes them to the inherent complexity of networking.
General networking concepts, setup, and maintenance can be difficult to understand. In addition,
wireless technology adds issues, such as range, interference, signal quality, and security to the
picture.
To help overcome potential barriers to successfully using wireless networks, the table below
identifies how to accomplish such things as connecting to a wireless network, assuring appropriate
security measures are taken, browsing the Internet through your wireless connection, exchanging
files with other computers and using printers in the combined wireless and wired network.
Introduction1-3
Page 12
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Table 1-1.A Road Map for How to Get There From Here ...
If I Want To ... ? What Do I Do?What’s Needed?How Do I?
Connect to a
wireless
network
Protect my
wireless
connection from
snooping,
hacking, or
information
theft.
Note: Secure Internet sites such as banks and online merchants use encryption security built into browsers
like Internet Explorer and Netscape. Any wireless networking security features you might impleme n t are in
addition to those already in place on secure Internet sites.
1. Identify the
wireless
network name
(SSID) and, if
used, the
wireless
security
settings.
2. Set up the
NETGEAR 54
Mbps Wireless
PC Card
WG511v2 with
the settings
from step 1.
1. Assure that the
wireless
network has
security
features
enabled.
2. Configure my
WG511v2 with
the security
settings of the
wireless
network.
3. Use Windows
security
features.
1. A wireless network
2. A notebook PC within the
operating range of the wireless
network. For guidelines about
the range of wireless networks,
see “Observing Location and
Range Guidelines” on
page 2- 2.
1. A wireless network with
authentication and WEP or
WPA encryption enabled.
2. Wireless networking
equipment that supports WEP
encryption, such as the
WG511v2 and all NETGEAR
wireless networking products.
To set up the WG511v2, see
Chapter 2, “Basic Setup” and
follow the instructions provided.
To learn abou t wireless
networking technology, see
Appendix B, “Wireless
Networking Basics” for a
general introduction.
To learn abou t wireless
networking security, see
“Authentication and WEP” on
page B-2.
To use WEP security features,
see “Enabling Wireless Security
Features” on page 3-8 and
configure your WG511v2
accordingly.
To use WPA security features,
see “WPA Wireless Security” on
page B-8.
1-4Introduction
Page 13
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Table 1-1.A Road Map for How to Get There From Here ...
If I Want To ... ? What Do I Do?What’s Needed?How Do I?
Connect to the
Internet over my
wireless
network.
1. Activate my
wireless link
and verify my
network
connection.
2. Open an
Internet
browser such
as Internet
Explorer or
Netscape
Navigator.
1. An active Internet connection
like those from cable or DSL
service providers.
2. A wireless network connected
to the cable or DSL Internet
service through a cable/DSL
router as illustrated in
“Connecting to an Access
Point in Infrastructure Mode”
on page 3-2.
3. TCP/IP Internet networking
software installed and
configured on my notebook PC
according to the requirements
of the Internet service provider.
4. A browser like Internet
Explorer or Netscape
Navigator.
To configure yo ur WG511v2 in
Infrastructure Mode, see “Basic
Installation Instructions” on
page 2- 4, and locate the section
for your version of Windows.
For assistance with configuring
the TCP/IP Internet software on
a PC, see “Preparing Your
Computers for TCP/IP
Networking” on page C-1 or refer
to the PC Networking Tutorial on
the NETGEAR 54 Mbps
Wireless PC Card WG511v2
Resource CD and the Help
information provided in the
Windows system you are using.
.
Introduction1-5
Page 14
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Table 1-1.A Road Map for How to Get There From Here ...
If I Want To ... ? What Do I Do?What’s Needed?How Do I?
Exchange files
between a
wirelessly
connected
notebook
computer and
other
computers in a
my combined
wireless and
wired
network.
1. Use the
Windows
Network
Neighborhood
feature to
browse for
computers in
the combined
wireless and
wired network.
2. Browse the
hard drive of
the target
computer in
the network in
order to locate
the directory or
files you want
to work with.
3. Use the
Windows
Explorer copy
and paste
functions to
exchange files
between the
computers.
1. The notebook computer I am
using to connect to the
wireless network needs to be
configured with the Windows
Client and File and Print
Sharing.
2. The notebook computer I am
using to connect to the
wireless network needs to be
configured with the same
Windows Workgroup or
Domain settings as the other
Windows computers in the
combined wireless and wired
network.
3. Any Windows networking
security access rights such as
login user name/ password
that have been assigned in the
Windows network or for
sharing particular files must be
provided when Windows
prompts for such information.
4. If so-called Windows ‘peer’
Workgroup networking is being
used, the drive, file system
directory, or file need to be
enabled for sharing.
For assistance with Windows
networking software, see
Appendix C, “Preparing Your
PCs for Network Access” for
configuration scenarios or refer
to the Help system included with
your version of Windows.
Windows Domain settings are
usually managed by corporate
computer support groups.
Windows Workgroup settings
are commonly managed by
individuals who want to set up
small networks in their homes, or
small offices.
For assistance with setting up
Windows networking, refer to the
PC Networking Tutorial on the
NETGEAR 54 Mbps Wireless
PC Card WG511v2 Resource
CD and the Help information
provided in the Windows system
you are using.
1-6Introduction
Page 15
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Table 1-1.A Road Map for How to Get There From Here ...
If I Want To ... ? What Do I Do?What’s Needed?How Do I?
Use printers in
a combined
wireless and
wired
network.
1. Use the
Windows
Printers and
Fax features to
locate
available
printers in the
combined
wireless and
wired network.
2. Use the
Windows Add
a Printer
wizard to add
access to a
network printer
from the
notebook PC
you are using
to wirelessly
connect to the
network.
3. From the File
menu of an
application
such as
Microsoft
Word, use the
Print Setup
feature to
direct your
print output to
the printer in
the network.
1. The notebook computer I am
using to connect to the
wireless network needs to be
configured with the Windows
Client and File and Print
Sharing.
2. The notebook computer I am
using to connect to the
wireless network needs to be
configured with the same
Windows Workgroup or
Domain settings as the other
Windows computers in the
combined wireless and wired
network.
3. Any Windows networking
security access rights such as
login user name/ password
that have been assigned in the
Windows network must be
provided when Windows
prompts for such information.
4. If so-called Windows ‘peer’
networking is being used, the
printer needs to be enabled for
sharing.
Windows Domain settings are
usually managed by corporate
computer support groups.
Windows Workgroup settings
are commonly managed by
individuals who want to set up
small networks in their homes, or
small offices.
For assistance with setting up
Windows networking, refer to the
PC Networking Tutorial on the
NETGEAR 54 Mbps Wireless
PC Card WG511v2 Resource
CD and the Help information
provided in the Windows system
you are using.
For assistance with setting up
printers in Windows, refer to the
Help and Support information
that comes with the version of
the Windows operating systems
you are using.
Introduction1-7
Page 16
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
1-8Introduction
Page 17
Chapter 2
Basic Setup
This chapter describes how to install your NETGEAR 54 Mbps Wireless PC Card WG511v2 and
set up basic wireless connectivity on your Wireless Local Area Network (WLAN). Advanced
wireless network configuration is covered in Chapter 3, “Configuration” in this manual.
Note: Indoors, computers can easily connect to 802.11 wireless networks at distances of
several hundred feet. Because walls do not always block wireless signals, others outside
your immediate area could access your network. It is important to take appropriate steps
to secure your network from unauthorized access. The NETGEAR 54 Mbps Wireless
PC Card WG511v2 provides highly effective security features which are covered in
“Enabling Wireless Security Features” on page 3-8 in this manual. Deploy the security
features appropriate to your needs.
What You Need Before You Begin
You need to verify your computer meets the minimum system requirements and identify the
wireless network configuration settings of the WLAN where you will connect before you can
configure your wireless PC card and connect.
Verifying System Requirements
Before installing the NETGEAR 54 Mbps Wireless PC Card WG511v2, please make sure that
these minimum requirements have been met:
•You must have a Pentium
•A CD-ROM drive.
•5 MB of free hard disk space.
•Windows XP Home, Windows XP Professional, 2000 Professional, Me, or 98SE.
•Some versions of Windows may ask for the original Windows operating system installation
files to complete the installation of the WG511v2 driver software.
Basic Setup2-1
®
Class notebook computer with an available Cardbus slot.
Page 18
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Observing Location and Range Guidelines
Computers can connect over wireless networks indoors at a range which vary significantly based
on the physical location of the computer with the NETGEAR 54 Mbps Wireless PC Card
WG511v2. For best results, avoid potential sources of interference, such as:
•Large metal surfaces
•Microwaves
•2.4 GHz Cordless phones
In general, wireless devices can communicate through walls. However, if the walls are constructed
with concrete, or have metal, or metal mesh, the effective range will decrease if such materials are
between the devices.
Two Basic Operating Modes
The WG511v2 Wireless PC Card can operate in the following two basic modes:
Infrastructure Mode: An 802.11 networking framework in which devices and computers
•
communicate with each other by first going through an access point (AP). For example, this
mode is used when computers in a house connect to an Access Point that is attached to a router
which lets multiple computers share a single Cable or DSL broadband Internet connection.
•
Ad Hoc Mode: An 802.11 networking framework in which devices or computers
communicate directly with each other, without the use of an AP. For example, Ad Hoc Mode is
used when two Windows computers are configured with file and print sharin g enabled and you
want to exchange files directly between them.
Both of these configuration options are available with the WG511v2 Wireless PC Card.
Infrastructure configuration procedures for basic network connectivity are covered below.
Advanced infrastructure configuration procedures and Ad Hoc configuration are covered in
Chapter 3, “Configuration” of this manual.
2-2Basic Setup
Page 19
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
WG511v2 Default Wireless Configuration Settings
If this is a new wireless network installation, use the factory default settings to set up the network
and verify wireless connectivity. If this is an addition to an existing wireless network, you will
need to identify the wireless configuration and security parameters already defined.
Your NETGEAR 54 Mbps Wireless PC Card WG511v2 factory default basic settings are:
•Network Name Service Set Identification (SSID): Any (First available network)
Note: In order for the WG511v2 Wireless PC Card to communicate with a wireless access
point or wireless adapter, all devices must be configured with the same wireless network name
(SSID).
•Network Mode (Infrastructure or Ad Hoc): Infrastructure
•Data security WEP encryption: Disabled
The section below provides instructions for setting up the NETGEAR 54 Mbps Wireless PC Card
WG511v2 for basic wireless connectivity to an access point. The procedures below provide
step-by-step installation instructions for Windows PCs. Use the procedure that corresponds to the
version of Windows you are using.
Basic Setup2-3
Page 20
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Basic Installation Instructions
Use the procedure below that corresponds to the version of Windows you are using.
For Windows XP Users Installing a WG511v2
Install the WG511v2 driver and
configuration utility software.
a.Power on your notebook, let the
operating system boot up completely,
and log in as needed.
b.Insert the Resource CD for the
WG511v2 into your CD-ROM drive.
The CD main page shown at the right
will load.
WG511v2 Resource CD
c.Click the “Install Driver & Utility” link.
d.Follow the InstallShield Wizard steps,
and click Finish when done to restart
your computer.
InstallShield Wizard
Note: If a Windows XP Certification warning
appears, click Continue Anyway to proceed.
2-4Basic Setup
Page 21
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Install the NETGEAR 54 Mbps Wireless PC
Card WG511v 2.
a.Locate an available CardBus slot on the
side of your notebook. Hold the PC Card
with the NETGEAR logo facing up and
insert it into the CardBus slot.
The Found New Hardware Wizard
displays.
Note: Click Continue Anyway if you
are prompted with a Windows XP Logo
testing message.
If you choose No, you must read the
Windows XP documentation for an
explanation of how to use the Windows
XP wireless network configuration
utility.
Enable NETGEAR Utility Configuration
You will also be prompted to choose the
country you are located in. Select your
location from the list.
c.Click Finish to complete the installation.
You will see the WG511v2 system tray
icon on the lower right portion of the
Windows task bar.
WG511v2 System Tray Icon
Basic Setup2-5
Page 22
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Configure your WG511v2.
a.Click the icon in the Windows
system tray to open the WG511v2 Smart
Wireless Settings Utility.
The utility opens to the Settings tab
page.
b.Change the Network Name SSID to
match your network.
Smart Wireless Utility Settings page
Tip: As an alternative to typing in the
SSID, you can use the drop-down list or
the Networks tab to view the available
wireless networks, and choose the one
you want.
c.Click Apply to activate the connection.
You can also enter a profile name and
click Save Profile to store the current
settings.
Tip: Create profiles called work and
home. Then, activate whichever one you
need for your current location.
Tip: Click Help to view the context-sensitive
help information.
2-6Basic Setup
Page 23
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Verify wireless connectivity to your network.
a.Verify that your Connection and Status Monitor information matches your wireless
network.
b.Check the two LEDs on the WG511v2:
Activity LED
Link LED
Table 2-1:LED Descriptions
LED ActivityDescription
Link - GreenOn
Blinking
Activity Amber
On/Blinking
Off
The card is plugged in to the notebook PC.
Blinking indicates the WG511 is trying to establish a
connection but is unable to do so.
If blinking, the WG511 has a connection and is
transmitting or receiving data.
There is no data transmission on the wireless network.
c.Verify connectivity to the Internet or network resources.
Note: If you are unable to connect, see troubleshooting tips in the Basic Installation section of
the Reference Manual on the NETGEAR 54 Mbps Wireless PC Card WG511v2 Resource CD.
Basic Setup2-7
Page 24
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
For Windows 2000 & 98SE/Me Users Installing a WG511v2
Install the WG511v2 driver and
configuration utility software.
Note: Windows 2000 may require you to be
logged on with administrator rights.
a.Power on your notebook, let the
operating system boot up completely,
and log in as needed.
b.Insert the Resource CD for the
WG511v2 into your CD-ROM drive.
The CD main page shown at the right
will load.
c.Click the “Install Driver & Utility” link.
WG511v2 Resource CD
d.Follow the InstallShield Wizard steps,
click Finish when done, and if prompted,
restart your computer.
InstallShield Wizard
2-8Basic Setup
Page 25
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Install the NETGEAR 54 Mbps Wireless PC
Card WG511v 2.
a.Locate an available CardBus slot on the
side of your notebook. Hold the PC Card
with the NETFGEAR logo facing up and
insert it into the CardBus slot.
After a short delay, the Found New
Hardware Wizard displays.
b.Follow the Found New Hardware
Wizard steps, click Finish when done,
and if prompted, restart your computer.
c.Next, you will be prompted to choose the
country where you are located. Select
your location from the list.
You should see the WG511v2 system
tray icon on the right in the lower right
portion of the Windows task bar.
Add New Hardware Wizard
Note: If Windows warns about a Digital
Signature Not Found, click Yes to continue.
WG511v2 System Tray Icon
Basic Setup2-9
Page 26
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Configure your WG511v2 and save the
Profile.
a.Click on the WG511v2 systray icon to
open the WG511v2 configuration utility.
The utility opens to the Settings tab
page.
b.For the Network Name (SSID), use the
default of
or type an SSID for
Any (First available network)
your network.
Tip: As an alternative to typing in the
SSID, you can use the drop-down list or
the Networks tab to view the available
wireless networks, and choose the one
you want.
c.Click Apply to activate the connection.
d.You can also enter a profile name and
click Save Profile to store the current
settings.
Tip: If you use your desktop PC to
connect to a wireless network at work
and at home, create profiles called work
and home. Then, activate whichever one
you need for wherever you are located.
Click here to open the configuration utility.
WG511v2 system tray icon
WG511v2 Configuration Utility
Note: The NETGEAR default settings are
Infrastructure mode, with Any (case sensitive)
for the wireless network name SSID, and WEP
disabled. If your WLAN settings are different from
the NETGEAR default settings, you will not
connect. Set up your WG511v2 accordingly.
Note: This procedure assumes you are
connecting to a wireless network which is not
using WEP security. If your network includes WEP
settings, click the Security tab page and configure
the WG511v2 accordingly. For help with these
steps, click the Help button in the WG511v2
Configuration Utility to view context- sensitive
help information, or see
“Enabling Wireless
Security Features” on page 3-8.
2-10Basic Setup
Page 27
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Verify wireless connectivity to your network.
a.Verify that your Connection and Status Monitor information matches your wireless
network.
b.Check the two LEDs on the WG511v2:
Activity LED
Link LED
Table 2-2:LED Descriptions
LED ActivityDescription
Link - GreenOn
Blinking
Activity Amber
On/Blinking
Off
The card is plugged in to the notebook PC.
Blinking indicates the WG511 is trying to establish a
connection but is unable to do so.
If blinking, the WG511 has a connection and is
transmitting or receiving data.
There is no data transmission on the wireless network.
c.Verify connectivity to the Internet or network resources.
Note: If you are unable to connect, see troubleshooting tips in the Basic Installation section of
the Reference Manual on the NETGEAR 54 Mbps Wireless PC Card WG511v2 Resource CD.
Basic Setup2-11
Page 28
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
WG511v2 Wireless Connection Indicators
The NETGEAR 54 Mbps Wireless PC Card WG511v2 provides the following three indicators
which give you feedback on the status of your wireless connection:
•The two LEDs on the NETGEAR 54 Mbps Wireless PC Card WG51 1v2 indicate the condition
of wireless link.
•The color of the SysTray icon is on the System Tray portion of the taskbar in the Microsoft
Windows desktop indicates the status of the connection.
Interpreting the LEDs on the WG511v2
Activity LED
Figure 2-1: WG511v2 LEDs
Link LED
These LEDs are described in this table.
Table 2-1:LED Desc riptions
LED ActivityDescription
Link - GreenOn
Blinking
Activity - Amber On/Blinking
Off
2-12Basic Setup
The card is plugged in to the notebook PC.
Blinking indicates the WG511 is trying to establish a connection but is
unable to do so.
If blinking, the WG511 has a connection and is transmitting or receiving
data.
There is no data transmission on the wireless network.
Page 29
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Interpreting System Tray Icon Colors
The System Tray (SysTray) resides on one end of the taskbar in the Microsoft Windows desktop.
ColorConditionDescription
Red
Yellow
Green
The wireless PC Card has
no connection to any
other wireless node.
The wireless PC Card has
a connection with another
wireless node.
The wireless PC Card has
a connection with another
wireless node.
The wireless PC Card is not able to link to any other
wireless node or the link is lost. Check your
configuration or try moving to a location where the
wireless signal quality is better.
The wireless link is weak. You may deed to move to a
better spot, such as closer to the wireless access point.
Also, look for possible interference such as a 2.4 GHz
cordless phone or large metal surface.
The wireless PC Card has established good
communication with an access point and the signal
quality is strong.
Basic Setup2-13
Page 30
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
2-14Basic Setup
Page 31
Chapter 3
Configuration
This chapter describes how to configure your NETGEAR 54 Mbps Wireless PC Card WG511v2
for wireless connectivity on your Wireless Local Area Network (WLAN) and use the data security
encryption features.
Note: The instructions in this section refer to the NETGEAR WG511v2 configuration
utility . For W indows XP users to use the NETGEAR configuration utility, you must first
disable the Windows XP configuration utility. Open the network connections from the
system tray icon, click the Properties button, click the Wireless Networks tab and then
clear the “Use Windows to configure my wireless network settings” check box.
Understanding the Configuration Options
The WG511v2 configuration utility provides a complete and easy to use set of tools to:
•Configure wireless settings
•Monitor wireless network connections
•Save your settings in configuration profiles
The section below introduces these capabilities of the configuration utility.
Using Configuration Profiles
The WG511v2 configuration utility uses profiles to store all the configuration settings for a
particular wireless network. You can store multiple profiles and recall the one which matches the
network you want to join.
Configuration3-1
Page 32
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
For example, if you use your notebook PC to connect to a wireless network in an office and a
wireless network in your home, you can create a profile for each wireless network. Then, you can
easily load the profile that has all the configuration settings you need to join the network you are
using at the time.
There are two types of wireless network connections you can configure:
•Infrastructure Mode — uses the 802.11 infrastructure mode.
•Ad Hoc Mode — uses the 802.11 Ad Hoc mode.
For more information on 802.11 wireless network modes, see “Wireless Networking Overview”
on page B-1 of this manual.
Connecting to an Access Point in Infrastructure Mode
Wireless Access Point
Cable/DSL Router
NETGEAR 54 Mbps Wireless
PC Card WG511 in a
Notebook Computer
Cable or DSL modem
Figure 3-1: WG511v2 Wireless PC Card connecting to a wireless access point.
Infrastructure mode is used when configuring the NETGEAR 54 Mbps Wireless PC Card
WG511v2 to connect to a wireless access point or wireless router.
3-2Configuration
Page 33
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
How to Configure an Infrastructure Mode Profile
Follow the instructions below to configure an infrastructure mode profile for connecting to an
access point.
1. Run the WG511v2 Configuration Utility.
a.Make sure the WG511v2 software is installed and the WG511v2 is fully inserted in an
available CardBus slot in your PC.
b.Open the configuration utility by clicking on the WG511v2 icon in the Windows
c.Click the Settings tab to display the view shown above.
2. Configure the wireless network settings.
a.In the Network Type section, be sure that Access Point (Infrastructure) is selected.
b.Enter the SSID. This is also called the Wireless Network Name.
Note: You will not get a wireless network connection unless the network SSID matches
exactly what is configured in the access point.
Tip: You can click the Networks tab to view a list of the available wireless networks and
their SSIDs at the location where you are.
Configuration3-3
Page 34
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
3. Save your settings in a Profile.
a.Type a descriptive name for the Profile in the Profiles field.
b.Click Save Profile. All the configuration settings are saved in this profile.
c.Click Apply.
d.Click Close to exit the configuration utility or Cancel to return to the previous settings.
4. Verify wireless connectivity to your network.
Verify connectivity by using a browser such as Netscape or Internet Explorer to connect to the
Internet, or check for file and printer access on your network.
You can check the status bar in the configuration utility for the current connection status.
Note: If you cannot connect, see “Troubleshooting” on page 4-1. Also, for problems with
accessing network resources, the Windows Client and File and Print Sharing software might
not be installed and configured properly on your computers. Please refer to “Preparing Your
Computers for TCP/IP Networking” on page C-1.
Connecting to Another PC in Ad Hoc Mode
Notebook with 802.11b or g
wireless adapter
Figure 3-3: NETGEAR WG511v2 Wireless PC Card in Peer-to-Peer Mode
3-4Configuration
Page 35
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
The peer-to-peer setting of the WG511v2 uses Ad Hoc mode. Ad Hoc mode is an 802.11
networking framework in which devices or computers communicate directly with each other,
without the use of an access point. For example, this mode is used when two Windows computers
are configured with file and print sharing enabled and you want to exchange files directly between
them.
How to Configure an Ad Hoc Mode Profile
Note: Ad Hoc mode will not work using DHCP settings. Ad Hoc mode requires either static IP
addresses (such as
addresses on a Windows PC, refer to the PC Networking Tutorial included on the NETGEAR 54 Mbps Wirele ss PC Card WG511v2 Resource CD.
Follow the instructions below to configure an Ad Hoc mode profile.
1. Run the WG511v2 Configuration Utility.
a.Make sure the WG511v2 software is installed and the WG511v2 is fully inserted in an
available CardBus slot in your PC.
b.Open the configuration utility by clicking on the WG511v2 icon in the Windows
system tray.
192.168.0.1) or the IPX protocol. For instructions on setting up static IP
Figure 3-4: Settings page, Ad Hoc configuration
Configuration3-5
Page 36
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
c.Click the Settings tab to display the view shown above.
d.Select Computer-to-Computer (Ad Hoc) for the Network Type.
e.Enter the SSID for the Ad Hoc network.
f.Click Apply.
2. Save your settings in a Profile.
a.Type a descriptive name in the “Profiles” field.
b.Click Save Profile. All the configuration settings are saved in this profile.
c.Click Apply.
d.Click Close to exit the configuration utility.
3.Configure the PC network settings.
a.Configure each PC with either a static IP address or with the IPX protocol.
Note: For instructions on configuring static IP addresses, refer to the networking tutorial
on your NETGEAR 54 Mbps Wireless PC Card WG511v2 Resource CD.
b.Restart the PCs.
4. Verify wireless connectivity between your peer devices.
Verify connectivity by using the Ping program:
a.On the Windows taskbar click the Start button, and then click Run.
b.Assuming the target PC is configured with 192.168.0.1 as its IP address, type ping -t
192.168.0.1
c.This will cause a continuous ping to be sent to the device with the 192.168.0.1 static IP
and then click OK.
address. The ping response should change to “reply”.
3-6Configuration
Page 37
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
At this point the connection is established.
You may need to rebo ot in certain Windows operating systems such as Windows 98SE.
Note: If you cannot connect, see “Troubleshooting” on page 4-1. Also, for problems with
accessing network resources, the Windows Client and File and Print Sharing software might
not be installed and configured properly on your computers. Please refer to “Preparing Your
Computers for TCP/IP Networking” on page C-1.
How to Start a Computer-to-Computer (Ad Hoc) Network
1.Fill in the Network Name (SSID).
2.Select the Computer-to-Computer (Ad Hoc) network type.
3.Click Initiate Ad Hoc. The Ad Hoc Setting dialog box will appear, as shown below.
Figure 3-5: Ad Hoc Setting page
4.In the S tart Ad Hoc field, choose the wireless standard (802.1 1a, 802.1 1 b, or 802.1 1g) for your
Ad Hoc computer-to-computer network.
5.In the Channel field, Automatic should work. If you notice interference problems with another
nearby wireless device, select a channel that is not being used by any other wireless networks
near your wireless adapter. Use the Networks tab page to identify the channels in use in your
area.
6.Click OK.
Note: The channel number differs depending on the country. The connection speed automatically
defaults to the highest speed.
Configuration3-7
Page 38
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Enabling Wireless Security Features
You can strengthen the security of your wireless connection by enabling Wired Equivalent Privacy
(WEP) encryption of the wireless data communications. For more information on 802.11 wireless
security, see “Authentication and WEP” on page B-2.
Alternatively, you can use WPA-PSK (Wi-Fi Protected Access Pre-Shared Key) encryption. For
more information on WPA security, see “WPA Wireless Security” on page B-8.
In addition to the WG511v2 wireless security features, you should also configure appropriate LAN
network security features such as requiring a user name and password to access the shared
resources in your network.
The procedures below identify how to configure the WEP encryption settings of your NETGEAR
54 Mbps Wireless PC Card WG511v2.
Identifying the Wireless Network Name (SSID) and WEP Security
Settings
Print this form, fill in the configuration parameters and put it in a safe place for possible future
reference. For an existing wireless network, the person who set up the network will be able to
provide this information.
•Wireless Network Name (SSID): The Service Set Identification (SSID) identifies the wireless
local area network.
name (SSID). You may customize it using up to 32 alphanumeric characters. Write your
customized wireless network name (SSID) on the line below.
Note
: The SSID in the wireless access point is the SSID you configure in the wireless PC card.
For the access point and wireless nodes to communicate with each other, all must be
configured with the same SSID.
Wireless network name (SSID): ______________________________
•WEP Security Encryption key: The default WEP encryption key number is 1, and the default
key size is 64 bits.
Note: The key number as well as the key value used by all wireless nodes must be the same. If
they are different, you will not be able to connect.
WEP Encryption Key Size, circle one: 64 or 128 bits
WEP Encryption Passphrase, if used: ____________________________
3-8Configuration
Any (First available network) is the default WG511v2 wireless network
Page 39
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
A Passphrase is used to automatically generate the WEP hexadecimal numbers for the key. If
the wireless network Access Point uses a Passphrase, you can also use that here. Otherwise,
you will have to manually enter the hexadecimal numbers.
WEP Hexadecimal Numbers: ______________________________
The WEP Hexadecimal Numbers are needed if a Passphrase is not used in the wireless
network access point, but rather if the key is manually entered.
Use the procedures below to configure basic security settings in the WG511v2.
How to Configure WEP Encryption Security
Follow the steps below to configure WEP Encryption Security.
1.Run the WG511v2 Configuration Utility.
a.Make sure the WG511v2 software is installed and the WG511v2 is fully inserted in an
available CardBus slot in your PC.
b.Open the configuration utility by clicking on the WG511v2 icon in the Windows
system tray.
c.Click on the Settings tab to display the view shown below.
Figure 3-6: Settings tab page
Configuration3-9
Page 40
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
2. Configure the Security settings.
a.Enter the SSID. This is also called the Wireless Network Name.
Note: You will not get a wireless network connection unless the network SSID matches
exactly what is configured in the access point.
Tip: You can click the Networks tab to view a list of the available wireless networks and
their SSIDs at your location.
b.In the Security section, select WEP.
3.Select the WEP encryption strength you will use.
The choices are:
•64-bit WEP data encryption
•128-bit WEP data encryption
Note: Larger encryption keys require more processing and may slow the communications
response times.
4.Select Create with Passphrase and enter the passphrase. The configuration utility will
automatically generate the WEP keys.
Note: The characters are case sensitive. Be sure to use the same passphrase for all the wireless
devices in the network.
If the passphrase method is not available in the other devices, you must manually enter the
keys to match exactly what is in the access point and other 802.11b wireless devices.
5.Save your settings in a Profile.
a.Type a descriptive name in the Profiles field.
b.Click Save Profile. All the configuration settings are saved in this profile.
c.Click Apply.
6.Click Close to exit the configuration utility.
3-10Configuration
Page 41
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
How to Configure WPA-PSK Encryption Security
Wi-Fi Protected Access (WPA) is wireless security with far greater protection than WEP.
WPS-PSK (pre-shared key) uses encryption of a shared key as the starting point. WPA has a
significant advantages over WEP — an encryption key differing in every packet. It is extremely
difficult for hackers to read messages even if they have intercepted the data.
The Advanced Security button is used to set WPA-PSK security. It is located in the Settings page,
Security section.
1.Open the configuration utility by clicking on the WG511v2 icon in the Windows
system tray.
2.Select WPA-PSK to display the passphrase text box.
3.Enter a Passphrase. The Passphrase can be between 8 and 63 characters.
4.Click Apply.
For more information on WPA security, see “WPA Wireless Security” on page B-8.
Configuration3-11
Page 42
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Networks Page
The Networks Page scans and displays all available wireless networks in your area.
Figure 3-7: Networks page
The following information is displayed for each network scanned:
•Wireless Network Name (SSID): Wireless Network Name (SSID) is the name assigned to a
wireless network. This is the same as the SSID or ESSID configuration parameter. Note that as
a security measure, some wireless access points do not broadcast their SSID. In such cases, the
SSID field will be blank even though the rest of the information will still be displayed.
•Channel: The channel determines which operating frequency will be used.
•Authentication: Identifies whether the wireless network requires authentication.
•Encryption: Identifies whether the wireless network requires WEP or WPA-PSK security
settings.
•Signal: Identifies the signal strength of the communications.
•MAC Address: Identifies the hardware address (MAC Address) of the wireless device
broadcasting this information.
•Mode: Identifies the type of wireless network — Access Point (Infrastructure) or
Computer-to-Computer (Ad Hoc).
3-12Configuration
Page 43
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Statistics Page
The Statistics page provides real time and historical trend information on the data traffic and
performance of your wireless adapter.
Figure 3-8: Statistics tab page
•Transmit/Receive Performance (%): A real time graph identifying the transmit, receive, or
total utilization as a percentage the total possible. The Transmit, Receive, and Total (TxRx)
radio buttons let you select whether to display the transmit performance, the receive
performance, or the total of both in the same graph. Total is the default.
•Transmit Statistics: Identifies transmit megabits per second (Mbps), transmit packets per
second (Tx Packets/s), total transmitted packets, and transmit errors.
•Receive S tatis tics: Identifies receive megabits per second (Mbps), receive packets per second
(Rx Packets/s), total received packets, and reception errors.
Configuration3-13
Page 44
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
About Page
The About page displays the current software version information.
Figure 3-9: About page
The following information is displayed in the About page:
•Regional Domain: This is the region setting for the wireless adapter. The approved channels
for the region are automatically scanned. Governments regulate the channels used for wireless
transmission. Operating the wireless adapter in a different region may violate local laws.
•Driver Version: The wireless adapter driver version.
•Driver Date: The wireless adapter driver release date.
•MAC Address: The MAC address of the adapter. The Media Access Control address is a
unique 48-bit hardware address assigned to every network interface card. Some wireless
networks will restrict access based on a list of known MAC addresses. If you are
communicating with such a network, you would have to provide the address shown here to the
network administrator before you would be allowed to connect. Restricting access by MAC
address adds an obstacle against unwanted access to your network. However, unless you use
data encryption security, the data broadcast over the wireless link is fully exposed.
•IP Address: The IP address assigned to this adapter.
•Smart Wizard Wireless Utility: The version and release date of this utility.
3-14Configuration
Page 45
Chapter 4
Troubleshooting
This chapter provides information about troubleshooting your NETGEAR 54 Mbps Wireless PC
Card WG511v2. After each problem description, instructions are given to help you diagnose and
solve the problem.
Also, for problems with accessing network resources, the Windows software might not be installed
and configured properly on your computers. Please refer to Appendix C, “Preparing Your PCs for
Network Access”.
Basic Troubleshooting Tips
If you have problems connecting to your wireless network, try the tips below.
SymptomCauseSolution
The PC Card
LEDs are not lit.
The LEDs blink
alternately and
cannot connect
to an access
point.
Troubleshooting4-1
The WG511v2 is
not inserted into
the slot properly
or the WG511v2
software is not
loaded.
The WG511v2 is
attempting to
connect to an
access point, but
cannot connect.
Remove and reinsert the WG511v2.
Check the Windows device manager to see if the PC
Card is recognized and enabled. Reload the WG511v2
software, if necessary.
The access point may not be powered on. Or, the
access point and the PC card are not configured with
the same wireless parameters. Check the SSID and
WEP settings.
Page 46
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
I can connect to
an access point,
but I cannot
connect to other
computers on
the network or
the Internet.
This could be a
physical layer
problem or a
network
configuration
problem.
Check to make sure that the access point is physically
connected to the Ethernet network.
Make sure that the IP addresses and the Windows
networking parameters are all configured correctly.
Restart the cable or DSL modem, router, access point,
and notebook PC.
Frequently Asked Questions
Use the information below to solve common problems you may encounter. Also, please refer to the
knowledge base on the NETGEAR web site at www.netgear.com/support/main.asp.
The WG511v2 Smart Configuration Utility keeps asking me to
save my settings
This is because you have made changes to the settings and the utility is offering you the chance to
save the changes. If you want to avoid these Profile setting prompts, simply click Apply before
you close the utility program.
Ad Hoc mode is not working correctly
You need to click the Initiate Ad Hoc button before you click Apply. Here is how you start an Ad
Hoc network:
1.Fill in the Network Name (SSID).
2.Select the Computer-to-Computer (Ad Hoc) Network Type.
3.Click Initiate Ad Hoc.
4.Accept the default settings or make your changes and click OK.
5.Click Apply.
Note: Be sure all computers in your Ad Hoc network are configured with static IP addresses in the
same subnet.
4-2Troubleshooting
Page 47
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
How to know if the WG51 1v2 card has received a valid IP address
from the Wireless Router/AP
The easiest way is to open up the WG511v2 utility program and check the IP address in the About
page.
How to use XP’s own Wireless configuration utility that comes
with Windows XP
The NETGEAR WG511v2 software is designed so that the user will be asked to choose one of the
utility programs during initial software installation. Be sure the WG511v2 is connected to the PC
and follow these instructions to change your selection.
1.Go to Control Panel and select Network Connections.
2.Right click on the connection and select Properties.
3.Click the Wireless Networks tab.
4.Select or clear the WG51 1v2 “Use Windows to configure my wireless network settings” check
box.
How to remove the WG511v2 utility and software
To remove the WG511 software, go to Windows Start > Programs > NETGEAR WG511 Adapter.
Select Uninstall WG511 software.
I cannot connect to the AP that I want from the Networks browser
list.
The access point is available and there is good signal strength. There are a few possibilities:
•If the access point (AP) is WPA-PSK protected, you will need to have the correct WPA-PSK
passphrase. Otherwise, the WG511v2 will still be connected to the previous access point and
you will not be able to change to the WPA-PSA access point.
•If the access point is WEP protected (either 64 or 128 bit encryption), you will be prompted to
enter the WEP encryption security information.
Troubleshooting4-3
Page 48
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
The WG511v2 is not getting an IP address
You probably upgraded your WG511v2 software and did not reboot your system.
T o get an IP address assigned, you can either restart your computer or choose another access point
to connect to. If there are no additional access points for you to choose from, restart your system
and connect to your desired access point again.
Note: It does not usually help to shut down the utility or disable/enable the card.
Why do I see two WG511v2 utilities icons in the System Tray?
If you see two WG511 utilities icons in the System Tray at the bottom right corner of the screen,
you have the previous WG511v2 software installed on your system and it needs to be removed.
Follow the procedures below to remove the old WG511v2 software.
T o remove the WG51 1 software, use “Add or Remove Programs” in the Control Panel and remo ve
the NETGEAR WG511 54Mbps Wireless PC Card.
If you would like to keep the original WG511 utility and use it interchangeably, you can do so by
upgrading your current WG511 software from v1.1 or v1.2 to v1.5. The v1.5 utility will co-exist
with the new WG511T utility . In this way, the correct utility will be activated for the corresponding
card.
To upgrade your software from v1.1 or v1.2 to v1.5, follow the procedure below:
1.Run WG511v15.exe.
2.Select Repair from the InstallShield Wizard prompt and click Next.
3.Click Finish when done to restart your computer.
Your WG511v1.5 upgrade is complete. This should solve the two utility display issue.
XP Professional and XP Home occasional connection problems
Some WG511T XP users will experience inability to connect to the Internet, dropped wireless
connections, or both after applying the W indows HotFix #Q815485 from the W ind ows XP Update
Service.
You can delete the Q815485 from the Add or Remove Program utility in the Control Panel. (The
Official name is Windows XP Hotfix (SP2) Q815485).
4-4Troubleshooting
Page 49
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Follow this removal procedure:
1.Click Start, point to Control Panel, and then double-click Add/Remove Programs.
2.Click Windows XP Hotfix (SP2) Q815485, and then click Remove.
3.You may receive an error message that states that some program on the computer may not
work correctly if the update is removed.
4.You can ignore this error message, and then click Yes to remove the update.
5.Restart your computer and rerun the Smart Display Setup Wizard.
This should solve your connection issue.
You can restore this hotfix by following the link below:
URL: http://microsoft.com/downloads/
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
4-6Troubleshooting
Page 51
Appendix A
Technical Specifications
This appendix provides technical specifications for the NETGEAR 54 Mbps Wireless PC Card
WG511v2
Antennae2 Integrated internal diversity antennae
Radio Data Rate1, 2, 5.5, 6, 9, 12, 18, 24, 36, 48, and 54 Mbp s (Auto Rate Sensing)
Frequency2.4GHz to 2.5GHz CCK and OFDM Modulation)
Power Consumption3.3V DC, typically 450mA in full Transmit (TX), 280mA in full Receive (RX)
EmissionsFCC, CE, IC
Bus interfaceCardbus
Provided driversMicrosoft Windows 98SE, 2000 Professional, ME, XP
DimensionsL: 120mm
Weight40 g
Status LEDWireless Link, Data
Operating Environment Operating temperature: 0 to 55 degrees C
Encryption40-bit (also called 64-bit) and 128-bit WEP data encryption
WarrantyLimited 1-year warranty
.
W: 54 mm
H: 7 mm
Technical SpecificationsA-1
Page 52
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
A-2Technical Specifications
Page 53
Appendix B
Wireless Networking Basics
This chapter provides an overview of Wireless networking.
Wireless Networking Overview
The WG511v2 Wireless PC Card conforms to the Institute of Electrical and Electronics Engineers
(IEEE) 802.11b standard for wireless LANs (WLANs) and a product update will bring the
WG511v2 into conformance to the 802.11g standard when it is ratified. On an 802.11b or g
wireless link, data is encoded using direct-sequence spread-spectrum (DSSS) technology and is
transmitted in the unlicensed radio spectrum at 2.5GHz. The maximum data rate for the wireless
link is 11 Mbps, but it will automatically back down from 1 1 Mbps to 5.5, 2, and 1 Mbps when the
radio signal is weak or when interference is detected. The 802.11g auto rate sensing rates are 1, 2,
5.5, 6, 9, 12, 18, 24, 36, 48, and 54 Mbps.
The 802.11 standard is also called Wireless Ethernet or Wi-Fi by the Wireless Ethernet
Compatibility Alliance (WECA, see http://www.wi-fi.net), an industry standard group promoting
interoperability among 802.11 devices. The 802.11 standard offers two methods for configuring a
wireless network - ad hoc and infrastructure.
Infrastructure Mode
With a wireless Access Point, you can operate the wireless LAN in the infrastructure mode. This
mode provides wireless connectivity to multiple wireless network devices within a fixed range or
area of coverage, interacting with wireless nodes via an antenna.
In the infrastructure mode, the wireless access point converts airwave data into wired Ethernet
data, acting as a bridge between the wired LAN and wireless clients. Connecting multiple Access
Points via a wired Ethernet backbone can further extend the wireless network coverage. As a
mobile computing device moves out of the range of one access point, it moves into the range of
another. As a result, wireless clients can freely roam from one Access Point domain to another and
still maintain seamless network connection.
Wireless Networking BasicsB-1
Page 54
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Ad Hoc Mode (Peer-to-Peer Workgroup)
In an ad hoc network, computers are brought together as needed; thus, there is no structure or fixed
points to the network - each node can generally communicate with any other node. There is no
Access Point involved in this configuration. This mode enables you to quickly set up a small
wireless workgroup and allows workgroup members to exchange data or share printers as
supported by Microsoft networking in the various W indows operating systems. Some vendors also
refer to ad hoc networking as peer-to-peer group networking.
In this configuration, network packets are directly sent and received by the intended transmitting
and receiving stations. As long as the stations are within range of one another, this is the easiest
and least expensive way to set up a wireless network.
Network Name: Extended Service Set Identification (ESSID)
The Extended Service Set Identification (ESSID) is one of two types of Service Set Identification
(SSID). In an ad hoc wireless network with no access points, the Basic Service Set Identification
(BSSID) is used. In an infrastructure wireless network that includes an access point, the ESSID is
used, but may still be referred to as SSID.
An SSID is a thirty-two character (maximum) alphanumeric key identifying the name of the
wireless local area network. Some vendors refer to the SSID as network name. For the wireless
devices in a network to communicate with each other, all devices must be configured with the
same SSID.
Authentication and WEP
The absence of a physical connection between nodes makes the wireless links vulnerable to
eavesdropping and information theft. To provide a certain level of security, the IEEE 802.11
standard has defined two types of authentication methods, Open System and Shared Key. With
Open System authentication, a wireless PC can join any network and receive any messages that are
not encrypted. With Shared Key authentication, only those PCs that possess the correct
authentication key can join the network. By default, IEEE 802.11 wireless devices operate in an
Open System network.
Wired Equivalent Privacy (WEP) data encryption is used when the wireless devices are configured
to operate in Shared Key authentication mode. There are two shared key methods implemented in
most commercially available products, 64-bit and 128-bit WEP data encryption.
B-2Wireless Networking Basics
Page 55
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
802.11 Authentication
The 802.11 standard defines several services that govern how two 802.11 devices communicate.
The following events must occur before an 802.11 Station can communicate with an Ethernet
network through an access point such as the one built in to the WG511v2:
1.Turn on the wireless station.
2.The station listens for messages from any access points that are in range.
3.The station finds a message from an access point that has a matching SSID.
4.The station sends an authentication request to the access point.
5.The access point authenticates the station.
6.The station sends an association request to the access point.
7.The access point associates with the station.
8.The station can now communicate with the Ethernet network through the access point.
An access point must authenticate a station before the station can associate with the access point or
communicate with the network. The IEEE 802.11 standard defines two types of authentication:
Open System and Shared Key.
•Open System Authentication allows any device to join the network, assuming that the device
SSID matches the access point SSID. Alternatively, the device can use the “ANY” SSID
option to associate with any available Access Point within range, regardless of its SSID.
•Shared Key Authentication requires that the station and the access point have the same WEP
Key to authenticate. These two authentication procedures are described below.
Open System Authentication
The following steps occur when two devices use Open System Authentication:
1.The station sends an authentication request to the access point.
2.The access point authenticates the station.
3.The station associates with the access point and joins the network.
This process is illustrated in below.
Wireless Networking BasicsB-3
Page 56
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
802.11 Authentication
Open System Steps
1) Authentication request sent to AP
Access Point (AP)
Client
2) AP authenticates
3) Client connects to network
INTERNETLOCAL
WLAN
ProSafeWirelessVPNSecurityFirewall
Cable/DSL
LNK
PWR TEST
ACT
Enable
12345678
100
LNK/ACT
MODEL
FVM318
Cable or
DLS modem
attempting
to connect
Figure 4-1: 802.11 open system authentication
Shared Key Authentication
The following steps occur when two devices use Shared Key Authentication:
1.The station sends an authentication request to the access point.
2.The access point sends challenge text to the station.
3.The statio n uses it s co nfig ured 64-bit or 128-bit default key to encrypt the challenge text, and
sends the encrypted text to the access point.
4.The access point decrypts the encrypted text using its configured WEP Key that corresponds
to the station’s default key. The access point compares the decrypted text with the original
challenge text. If the decrypted text matches the original challenge text, then the access point
and the station share the same WEP Key and the access point authenticates the station.
5.The station connects to the network.
If the decrypted text does not match the original challenge text (i.e., the access point and station do
not share the same WEP Key), then the access point will refuse to authenticate the station and the
station will be unable to communicate with either the 802.11 network or Ethernet network.
This process is illustrated in below.
B-4Wireless Networking Basics
Page 57
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
802.11 Authentication
Shared Key Steps
Access Point (AP)1) Authentication
request sent to AP
100
LNK/ACT
MODEL
FVM318
Cable or
DLS modem
Client
attempting
to connect
2) AP sends challenge text
3) Client encrypts
challenge text and
sends it back to AP
INTERNETLOCAL
WLAN
ProSafeWirelessVPNSecurityFirewall
Cable/DSL
LNK
PWR TEST
ACT
Enable
12345678
4) AP decrypts, and if correct,
authenticates client
5) Client connects to network
Figure 4-2: 802.11 shared key authentication
Overview of WEP Parameters
Before enabling WEP on an 802.11 network, you must first consider what type of encryption you
require and the key size you want to use. Typically, there are three WEP Encryption options
available for 802.11 products:
1. Do Not Use WEP: The 802.11 network does not encrypt data. For authentication purposes, the
network uses Open System Authentication.
2. Use WEP for Encryption: A transmitting 802.11 device encrypts the data portion of every
packet it sends using a configured WEP Key. The receiving 802.1 1b device decry pts the data using
the same WEP Key. For authentication purposes, the 802.11b network uses Open System
Authentication.
3. Use WEP for Authentication and Encryption: A transmitting 802.11 device encrypts the data
portion of every packet it sends using a configured WEP Key. The receiving 802.11 device
decrypts the data using the same WEP Key. For authentication purposes, the 802.11 network uses
Shared Key Authentication.
Note: Some 802.11 access points also support Use WEP for Authentication Only (Shared Key
Authentication without data encryption).
Wireless Networking BasicsB-5
Page 58
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Key Size
The IEEE 802.11 standard supports two types of WEP encryption: 40-bit and 128-bit.
The 64-bit WEP data encryption method, allows for a five-character (40-bit) input. Additionally,
24 factory-set bits are added to the forty-bit input to generate a 64-bit encryption key. (The 24
factory-set bits are not user-configurable). This encryption key will be used to encrypt/decrypt all
data transmitted via the wireless interface. Some vendors refer to the 64-bit WEP data encryption
as 40-bit WEP data encryption since the user-configurable portion of the encryption key is 40 bits
wide.
The 128-bit WEP data encryption method consists of 104 user-configurable bits. Similar to the
forty-bit WEP data encryption method, the remaining 24 bits are factory set and not user
configurable. Some vendors allow passphrases to be entered instead of the cryptic hexadecimal
characters to ease encryption key entry.
128-bit encryption is stronger than 40-bit encryption, but 128-bit encryption may not be available
outside of the United States due to U.S. export regulations.
When configured for 40-bit encryption, 802.11 products typically support up to four WEP Keys.
Each 40-bit WEP Key is expressed as 5 sets of two hexadecimal digits (0-9 and A-F). For
example, “12 34 56 78 90” is a 40-bit WEP Key.
When configured for 128-bit encryption, 802.11b products typically support four WEP Keys but
some manufacturers support only one 128-bit key . The 128-bit WEP Key is expressed as 13 sets of
two hexadecimal digits (0-9 and A-F). For example, “12 34 56 78 90 AB CD EF 12 34 56 78 90”
is a 128-bit WEP Key.
Note: Typically, 802.11 access points can store up to four 128-bit WEP Keys but some 802.11
client adapters can only store one. Therefore, make sure that your 802.11 access and client
adapters configurations match.
WEP Configuration Options
The WEP settings must match on all 802.11 devices that are within the same wireless network as
identified by the SSID. In general, if your mobile clients will roam between access points, then all
of the 802.11 access points and all of the 802.11 client adapters on the network must have the same
WEP settings.
B-6Wireless Networking Basics
Page 59
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Note: Whatever keys you enter for an AP, you must also enter the same keys for the client adapter
in the same order. In other words, WEP key 1 on the AP must match WEP key 1 on the client
adapter, WEP key 2 on the AP must match WEP key 2 on the client adapter, etc.
Note: The AP and the client adapters can have different default WEP Keys as long as the keys are
in the same order. In other words, the AP can use WEP key 2 as its default key to transmit while a
client adapter can use WEP key 3 as its default key to transmit. The two devices will communicate
as long as the AP’s WEP key 2 is the same as the client’s WEP key 2 and the AP’s WEP key 3 is
the same as the client’s WEP key 3.
Wireless Channels
IEEE 802.11b and g wireless nodes communicate with each other using radio frequency signals in
the ISM (Industrial, Scientific, and Medical) band between 2.4 GHz and 2.5 GHz. Neighboring
channels are 5 MHz apart. However, due to spread spectrum effect of the signals, a node sending
signals using a particular channel will utilize frequency spectrum 12.5 MHz above and below the
center channel frequency. As a result, two separate wireless networks using neighboring channels
(for example, channel 1 and channel 2) in the same general vicinity will interfere with each other.
Applying two channels that allow the maximum channel separation will decrease the amount of
channel cross-talk, and provide a noticeable performance increase over networks with minimal
channel separation.
Wireless Networking BasicsB-7
Page 60
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
The radio frequency channels used are listed in Table 4-1:
Note: The available channels s upporte d by the wireless products in various countries are dif ferent.
The preferred channel separation between the channels in neighboring wireless networks is 25
MHz (5 channels). This means that you can apply up to three different channels within your
wireless network. There are only 11 usable wireless channels in the United States. It is
recommended that you start using channel 1 and grow to use channel 6, and 11 when necessary, as
these three channels do not overlap.
WPA Wireless Security
Wi-Fi Protected Access (WPA) is a specification of standards-based, interoperable security
enhancements that increase the level of data protection and access control for existing and future
wireless LAN systems.
B-8Wireless Networking Basics
Page 61
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
The IEEE introduced the WEP as an optional security measure to secure 802.11b (W i-Fi) WLANs,
but inherent weaknesses in the standard soon became obvious. In response to this situation, the
Wi-Fi Alliance announced a new security architecture in October 2002 that remedies the
shortcomings of WEP. This standard, formerly known as Safe Secure Network (SSN), is designed
to work with existing 802.11 products and offers forward compatibility with 802.11i, the new
wireless security architecture being defined in the IEEE.
WPA offers the following benefits:
•Enhanced data privacy
•Robust key management
•Data origin authentication
•Data integrity protection
The Wi-Fi Alliance is now performing interoperability certification testing on Wi-Fi Protected
Access products. Starting August of 2003, all new Wi-Fi certified products will have to support
WPA. NETGEAR will implement WPA on client and access point products and make this
available in the second half of 2003. Existing Wi-Fi certified products will have one year to add
WPA support or they will lose their Wi-Fi certification.
The 802.11i standard is currently in draft form, with ratification due at the end of 2003. While the
new IEEE 802.11i standard is being ratified, wireless vendors have agreed on WPA as an
interoperable interim standard.
How Does WPA Compare to WEP?
WEP is a data encryption method and is not intended as a user authentication mechanism. WPA
user authentication is implemented using 802.1x and the Extensible Authentication Protocol
(EAP). Support for 802.1x authentication is required in WPA. In the 802.11 standard, 802.1x
authentication was optional. For details on EAP specifically, refer to IETF's RFC 2284.
With 802.1 1 WEP, all access points and client wireless adapters on a particular wireless LAN must
use the same encryption key. A major problem with the 802.11 standard is that the keys are
cumbersome to change. If you do not update the WEP keys often, an unauthorized person with a
sniffing tool can monitor your network for less than a day and decode the encrypted messages.
Products based on the 802.11 standard alone offer system administrators no effective method to
update the keys.
Wireless Networking BasicsB-9
Page 62
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
For 802.11, WEP encryption is optional. For WPA, encryption using Temporal Key Integrity
Protocol (TKIP) is required. TKIP replaces WEP with a new encryption algorithm that is stronger
than the WEP algorithm, but that uses the calculation facilities present on existing wireless devices
to perform encryption operations. TKIP provides important data encryption enhancements
including a per-packet key mixing function, a message integrity check (MIC) named Michael, an
extended initialization vector (IV) with sequencing rules, and a re-keying mechanism. Through
these enhancements, TKIP addresses all of known WEP vulnerabilities.
How Does WPA Compare to IEEE 802.11i?
WPA will be forward compatible with the IEEE 802.11i security specification currently under
development. WPA is a subset of the current 802.11i draft and uses certain pieces of the 802.11i
draft that are ready to bring to market today, such as 802.1x and TKIP. The main pieces of the
802.11i draft that are not included in WPA are secure IBSS (Ad Hoc mode), secure fast handoff
(for specialized 802.11 VoIP phones), as well as enhanced encryption protocols, such as
AES-CCMP. These features are either not yet ready for market or will require hardware upgrades
to implement.
What are the Key Features of WPA Security?
The following security features are included in the WPA standard:
•WPA Authentication
•WPA Encryption Key Management
–Temporal Key Integrity Protocol (TKIP)
–Michael message integrity code (MIC)
–AES Support (to be phased in)
•Support for a Mixture of WPA and WEP Wireless Clients, but mixing WEP and WPA is
discouraged
These features are discussed below.
WPA addresses most of the known WEP vulnerabilities and is primarily intended for wireless
infrastructure networks as found in the enterprise. This infrastructure includes stations, access
points, and authentication servers (typically RADIUS servers). The RADIUS server holds (or has
access to) user credentials (for example, user names and passwords) and authentica tes wireless
users before they gain access to the network.
B-10Wireless Networking Basics
Page 63
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
The strength of WPA comes from an integrated sequence of operations that encompass 802.1X/
EAP authentication and sophisticated key management and encryption techniques. Its major
operations include:
•Network security capability determination. This occurs at the 802.11 level and is
communicated through WPA information elements in Beacon, Probe Response, and (Re)
Association Requests. Information in these elements includes the authentication method
(802.1X or Pre-shared key) and the preferred cipher suite (WEP, TKIP, or AES).
The primary information conveyed in the Beacon frames is the authentication method and the
cipher suite. Possible authentication methods include 802.1X and Pre-shared key. Pre-shared
key is an authentication method that uses a statically configured pass phrase on both the
stations and the access point. This obviates the need for an authentication server, which in
many home and small office environments will not be available nor desirable. Possible cipher
suites include: WEP, TKIP, and AES (Advanced Encryption Standard). We talk more about
TKIP and AES when addressing data privacy below.
•Authentication. EAP over 802.1X is used for authentication. Mutual authentication is gained
by choosing an EAP type supporting this feature and is required by WPA. 802.1X port access
control prevents full access to the network until authentication completes. 802.1X
EAPOL-Key packets are used by WPA to distribu te per-session keys to those stations
successfully authenticated.
The supplicant in the station uses the authentication and cipher suite information contained in
the information elements to decide which authentication method and cipher suite to use. For
example, if the access point is using the pre-shared key method then the supplicant need not
authenticate using full-blown 802.1X. Rather, the supplicant must simply prove to the access
point that it is in possession of the pre-shared key. If the supplicant detects that the service set
does not contain a WPA information element then it knows it must use pre-WPA 802.1X
authentication and key management in order to access the network.
•Key management. WPA features a robust key generation/management system that integrates
the authentication and data privacy functions. Keys are generated after successful
authentication and through a subsequent 4-way handshake between the station and Access
Point (AP).
•Data Privacy (Encryption). Temporal Key Integrity Protocol (TKIP) is used to wrap WEP in
sophisticated cryptographic and security techniques to overcome most of its weaknesses.
•Data integrity. TKIP includes a message integrity code (MIC) at the end of each plaintext
message to ensure messages are not being spoofed.
Wireless Networking BasicsB-11
Page 64
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
WPA Authentication: Enterprise-level User
Authentication via 802.1x/EAP and RADIUS
Wired Network with Optional
Wireless LAN
802.1x Port Based Network
Access Control
TCP/IP
WPA
enabled
wireless
client with
“supplicant”
Figure B-1: WPA Overview
WPA enabled
Access Point
using
pre-shared key
or
802.1x
IEEE 802.1x offers an effective framework for authenticating and controlling user traffic to a
protected network, as well as providing a vehicle for dynamically varying data encry ption keys via
EAP from a RADIUS server, for example. This framework enables using a central authentication
server, which employs mutual authentication so that a rogue wireless user does not join the
network.
Ports Closed
Until
TCP/IP
Ports Opened
After
Authenticated
RADIUS Server
Login
Authentication
Certificate
Authority
(for
example
Win Server,
VeriSign)
It is important to note that 802.1x does not provide the actual authentication mechanisms. When
using 802.1x, the EAP type, such as Transport Layer Security (EAP-TLS), or EAP Tunneled
Transport Layer Security (EAP-TTLS), defines how the authenticati on takes place.
Note: For environments with a Remote Authentication Dial-In User Service (RADIUS)
infrastructure, WPA supports Extensible Authentication Protocol (EAP). For environments
without a RADIUS infrastructure, WPA supports the use of a pre-shared key.
Together, these technologies provide a framework for strong user authentication.
Windows XP implements 802.1x natively, and several NETGEAR switch and wireless access
point products support 802.1x.
B-12Wireless Networking Basics
Page 65
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Client with a WPA-
enabled wireless
adapter and supplicant
(Win XP, Funk,
Meetinghouse)
For example, a
WPA-enabled AP
For example, a
RADIUS server
Figure B-2: 802.1x Authentication Sequence
The AP sends Beacon Frames with WPA information element to the stations in the service set.
Information elements include the required authentication method (802.1x or Pre-shared key) and
the preferred cipher suite (WEP, TKIP, or AES). Probe Responses (AP to station) and Association
Requests (station to AP) also contain WPA information elements.
1.Initial 802.1x communications begin with an unauthenticated supplicant (client device)
attempting to connect with an authenticator (802.11 access point). The client sends an
EAP-start message. This begins a series of message exchanges to authenticate the client.
2.The access point replies with an EAP-request identity message.
Wireless Networking BasicsB-13
Page 66
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
3.The client sends an EAP-response packet containing the identity to the authentication server.
The access point responds by enabling a port for passing only EAP packets from the client to
an authentication server located on the wired side of the access point. The access point blocks
all other traffic, such as HTTP, DHCP, and POP3 packets, until the access point can verify the
client's identity using an authentication server (for example, RADIUS).
4.The authentication server uses a specific authentication algorithm to verify the client 's identity .
This could be through the use of digital certificates or some other EAP authentication type.
5.The authentication server will either send an accept or reject message to the access point.
6.The access point sends an EAP-success packet (or reject packet) to the client.
7.If the authentication server accepts the client, then the access point will transition the client's
port to an authorized state and forward additional traffic.
The important part to know at this point is that the software supporting the specific EAP type
resides on the authentication server and within the operating system or application “supplicant”
software on the client devices. The access point acts as a “pass through” for 802.1x messages,
which means that you can specify any EAP type without needing to upgrade an 802.1x-compliant
access point. As a result, you can update the EAP authentication type to such devices as token
cards (Smart Cards), Kerberos, one-time passwords, certificates, and public key authentication, or
as newer types become available and your requirements for security change.
WPA Data Encryption Key Management
With 802.1x, the rekeying of unicast encryption keys is optional. Additionally, 802.11 and 802.1x
provide no mechanism to change the global encryption key used for multicast and broadcast
traffic. With WPA, rekeying of both unicast and global encryption keys is required.
For the unicast encryption key, the Temporal Key Integrity Protocol (TKIP) changes the key for
every frame, and the change is synchronized between the wireless client and the wireless access
point (AP). For the global encryption key, WPA includes a facility (the Information Element) for
the wireless AP to advertise the changed key to the connected wireless clients.
If configured to implement dynamic key exchange, the 802.1x authentication server can return
session keys to the access point along with the accept message. The access point uses the session
keys to build, sign and encrypt an EAP key message that is sent to the client immediately after
sending the success message. The client can then use contents of the key message to define
applicable encryption keys. In typical 802.1x implementations, the client can automatically change
encryption keys as often as necessary to minimize the possibility of eavesdroppers having enough
time to crack the key in current use.
B-14Wireless Networking Basics
Page 67
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Temporal Key Integrity Protocol (TKIP)
WPA uses TKIP to provide important data encryption enhancements including a per-packet key
mixing function, a message integrity check (MIC) named Michael, an extended initialization
vector (IV) with sequencing rules, and a re-keying mechanism. TKIP also provides for the
following:
•The verification of the security configuration after the encryption keys are determined.
•The synchronized changing of the unicast encryption key for each frame.
•The determination of a unique starting unicast encryption key for each preshared key
authentication.
Michael
With 802.11 and WEP, data integrity is provided by a 32-bit int eg ri t y ch ec k valu e (ICV) that is
appended to the 802.11 payload and encrypted with WEP. Although the ICV is encrypted, you can
use cryptanalysis to change bits in the encrypted payload and update the encrypted ICV without
being detected by the receiver.
With WPA, a method known as Michael specifies a new algorithm that calculates an 8-byte
message integrity check (MIC) using the calculation facilities available on existing wireless
devices. The MIC is placed between the data portion of the IEEE 802.1 1 frame and the 4-byte ICV.
The MIC field is encrypted together with the frame data and the ICV.
Michael also provides replay protection. A new frame counter in the IEEE 802.11 frame is used to
prevent replay attacks.
Optional AES Support to be Phased In
One of the encryption methods supported by WPA, besides TKIP, is the advanced encryption
standard (AES), although AES support will not be required initially for W i-Fi certification. This is
viewed as the optimal choice for security conscience organizations, but the problem with AES is
that it requires a fundamental redesign of the NIC’s hardware in both the station and the access
point. TKIP is a pragmatic compromise that allows organizations to deploy better security while
AES capable equipment is being designed, manufactured, and incrementally deployed.
Wireless Networking BasicsB-15
Page 68
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Is WPA Perfect?
WPA is not without its vulnerabilities. Specifically, it is susceptible to denial of service (DoS)
attacks. If the access point receives two data packets that fail the message integrity code (MIC)
within 60 seconds of each other, then the network is under an active attack, and as a result, the
access point employs counter measures, which include disassociating each station using the access
point. This prevents an attacker from gleaning information about the encryption key and alerts
administrators, but it also causes users to lose network connectivity for 60 seconds. More than
anything else, this may just prove that no single security tactic is completely invulnerable. WPA is
a definite step forward in WLAN security over WEP and has to be thought of as a single part of an
end-to-end network security strategy.
Product Support for WPA
Starting in August, 2003, NETGEAR, Inc. wireless W i-Fi certified products will support the WPA
standard. NETGEAR, Inc. wireless products that had their Wi-Fi certification approved before
August, 2003 will have one year to add WPA so as to maintain their Wi-Fi certification.
WPA requires software changes to the following:
•Wireless access points
•Wireless network adapters
•Wireless client programs
Supporting a Mixture of WPA and WEP Wireless Clients is Discouraged
To support the gradual transition of WEP-based wireless networks to WPA, a wireless AP can
support both WEP and WPA clients at the same time. During the association, the wireless AP
determines which clients use WEP and which clients use WPA. The disadvantage to supp orting a
mixture of WEP and WPA clients is that the global encryption key is not dynamic. This is because
WEP-based clients cannot support it. All other benefits to the WPA clients, such as integrity, are
maintained.
However, a mixed mode supporting WPA and non-WPA clients would offer network security that
is no better than that obtained with a non-WPA network, and thus this mode of operation is
discouraged.
B-16Wireless Networking Basics
Page 69
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Changes to Wireless Access Points
Wireless access points must have their firmware updated to support the following:
•The new WPA information element
To advertise their support of WPA, wireless APs send the beacon frame with a new 802.11
WPA information element that contains the wireless AP's security configuration (encryption
algorithms and wireless security configuration information).
•The WPA two-phase authentication
Open system, then 802.1x (EAP with RADIUS or preshared key).
•TKIP
•Michael
•AES (optional)
T o upgrade your wireless access points to support WPA, obtain a WP A firmware update from your
wireless AP vendor and upload it to your wireless AP.
Changes to Wireless Network Adapters
Wireless networking software in the adapter, and possibly in the OS or client application, must be
updated to support the following:
•The new WPA information element
Wireless clients must be able to process the WPA information element and respond with a
specific security configuration.
•The WPA two-phase authentication
Open system, then 802.1x supplicant (EAP or preshared key).
•TKIP
•Michael
•AES (optional)
To upgrade your wireless network adapters to support WPA, obtain a WPA update from your
wireless network adapter vendor and update the wireless network adapter driver.
For Windows wireless clients, you must obtain an updated network adapter driver that supports
WP A. For wireless network adapter drivers that are compatible with W indows XP (Service Pack 1)
and Windows Server 2003, the updated network adapter driver must be able to pass the adapter's
WPA capabilities and security configuration to the Wireless Zero Configuration service.
Wireless Networking BasicsB-17
Page 70
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Microsoft has worked with many wireless vendors to embed the WPA firmware update in the
wireless adapter driver. So, to update your Microsoft W i ndows wireless client, all you have to do is
obtain the new WPA-compatible driver and install the driver. The firmware is automatically
updated when the wireless network adapter driver is loaded in Windows.
Changes to Wireless Client Programs
Wireless client programs must be updated to permit the configuration of WPA authentication (and
preshared key) and the new WPA encryption algorithms (TKIP and the optional AES component).
To obtain the Microsoft WPA client program, visit the Microsoft Web site.
B-18Wireless Networking Basics
Page 71
Appendix C
Preparing Your PCs for Network Access
This appendix describes how to prepare your PCs to connect to the Internet through the
NETGEAR 54 Mbps Wireless PC Card WG511v2.
For adding file and print sharing to your network, please consult the Windows help information
included with the version of Windows installed on each computer on your network.
Preparing Your Computers for TCP/IP Networking
Computers access the Internet using a protocol called TCP/IP (Transmission Control Protocol/
Internet Protocol). Each computer on your network must have TCP/IP installed and selected as its
networking protocol. If a Network Interface Card (NIC) is already installed in your PC, then TCP/
IP is probably already installed as well.
Most operating systems include the software components you need for networking with TCP/IP.
Windows 95 or later includes the software components for establishing a TCP/IP network.
In your TCP/IP network, each PC and the wireless access point must be assigned a unique IP
addresses. Each PC must also have certain other TCP/IP configuration information such as a
subnet mask (netmask), a domain name server (DNS) address, and a default gateway address. In
most cases, you should install TCP/IP so that the PC obtains its specific network configuration
information automatically from a DHCP server during startup.
Configuring Windows 98 and Me for TCP/IP Networking
As part of the PC preparation process, you may need to install and configure
TCP/IP on your PC. Before starting, locate your Windows CD; you may need to insert it during the
TCP/IP installation process.
Install or Verify Windows Networking Components
To install or verify the necessary components for IP networking:
Preparing Your PCs for Network AccessC-1
Page 72
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
1.On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel.
2.Double-click the Network icon.
The Network window opens, which displays a list of installed components:
You must have an Ethernet adapter or an WG511v2, the TCP/IP protocol, and the Client for
Microsoft Networks.
Note: It is not necessary to remove any other network components shown in the
Network window in order to install the adapter, TCP/IP, or Client for Microsoft
Networks.
If you need to add TCP/IP:
a.Click the Add button.
b.Select Protocol, and then click Add.
c.Select Microsoft.
d.Select TCP/IP, and then click OK.
If you need to add the Client for Microsoft Networks:
a.Click the Add button.
b.Select Client, and then click Add.
c.Select Microsoft.
d.Select Client for Microsoft Networks, and then click OK.
If you need to add File and Print Sharing for Microsoft Networks:
C-2Preparing Your PCs for Network Access
Page 73
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
a.Click the Add button.
b.Select Client, and then click Add.
c.Select Microsoft.
d.Select File and Print Sharing for Microsoft Networks, and then click OK.
3.Restart your PC for the changes to take effect.
Enabling DHCP to Automatically Configure TCP/IP Settings in
Windows 98 and Me
After the TCP/IP protocol components are installed, each PC must be assigned specific
information about itself and resources that are available on its network. The simplest way to
configure this information is to allow the PC to obtain the information from a DHCP server in the
network.
You will find there are many similarities in the procedures for different Windows systems
when using DHCP to configure TCP/IP.
The following steps will walk you through the configuration process for each of these
versions of Windows.
Preparing Your PCs for Network AccessC-3
Locate your Network Neighborhood icon.
•If the Network Neighborhood icon is on the Windows desktop, position your
mouse pointer over it and right-click your mouse button.
•If the icon is not on the desktop,
•Click Start on the task bar located at the bottom left of the window.
•Choose Settings, and then Control Panel.
•Locate the Network Neighborhood icon and click on it. This will open
the Network panel as shown below.
Page 74
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Verify the following settings as shown:
• Client for Microsoft Network exists
• Ethernet adapter is present
• TCP/IP is present
• Primary Network Logon is set to
Windows logon
Click on the Properties button. The
following TCP/IP Properties window will
display.
C-4Preparing Your PCs for Network Access
Page 75
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
By default, the IP Address tab is open on
this window.
• Verify the following:
Obtain an IP address automatically is
selected. If not selected, click in the
radio button to the left of it to select it.
This setting is required to enable the
DHCP server to automatically assign an
IP address.
• Click OK to continue.
Restart the PC.
Repeat these steps for each PC with this
version of Windows on your network.
Selecting Windows’ Internet Access Method
1.On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel.
2.Double-click the Internet Options icon.
3.Select “I want to set up my Internet connection manually” or “I want to connect through a
Local Area Network” and click Next.
4.Select “I want to connect through a Local Area Network” and click Next.
5.Uncheck all boxes in the LAN Internet Configuration screen and click Next.
6.Proceed to the end of the Wizard.
Verifying TCP/IP Properties
After your PC is configured and has rebooted, you can check the TCP/IP configuration using the
utility winipcfg.exe:
1.On the Windows taskbar, click the Start button, and then click Run.
Preparing Your PCs for Network AccessC-5
Page 76
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
2.Type winipcfg, and then click OK.
The IP Configuration window opens, which lists (among other things), your IP address, subnet
mask, and default gateway.
3.From the drop-down box, select your Ethernet adapter.
The window is updated to show your settings, which should match the values below if you are
using the default TCP/IP settings that NETGEAR recommends for connecting through a
router or gateway:
•The IP address is between 192.168.0.2 and 192.168.0.254
•The subnet mask is 255.255.255.0
•The default gateway is 192.168.0.1
Configuring Windows 2000 or XP for TCP/IP Networking
As part of the PC preparation process, you may need to install and configure
TCP/IP on each networked PC. Before starting, locate your Windows CD; you may need to insert
it during the TCP/IP installation process.
Install or Verify Windows Networking Components
To install or verify the necessary components for IP networking:
1.On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel.
2.Double-click the Network and Dialup Connections icon.
3.If an Ethernet adapter is present in your PC, you should see an entry for Local Area
Connection. Double-click that entry.
4.Select Properties.
5.Verify that ‘Client for Microsoft Networks’ and ‘Internet Protocol (TCP/IP)’ are present. If
not, select Install and add them.
6.Select ‘Internet Protocol (TCP/IP)’, click Properties, and verify that “Obtain an IP address
automatically is selected.
7.Click OK and close all Network and Dialup Connections windows.
8.Then, restart your PC.
C-6Preparing Your PCs for Network Access
Page 77
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
DHCP Configuration of TCP/IP in Windows XP or 2000
You will find there are many similarities in the procedures for different Windows systems when
using DHCP to configure TCP/IP.
The following steps will walk you through the configuration process for each of these versions of
Windows.
DHCP Configuration of TCP/IP in Windows XP
Locate your Network Neighborhood icon.
• Select Control Panel from the Windows XP Start Menu.
• Select the Network Connections icon on the Control Panel. This will take you to the next
step.
Now the Network Connection window
displays.
The Connections List that shows all the
network connections set up on the PC,
located to the right of the window.
• Right-click on the Connection with the wireless icon and choose Status.
Preparing Your PCs for Network AccessC-7
Page 78
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Now you should be at the Local Area
Network Connection Status window. This
box displays the connection status,
duration, speed, and activity statistics.
Administrator logon access rights are
needed to use this window.
• Click the Properties button to view
details about the connection.
The TCP/IP details are presented on the
Support tab page.
• Select Internet Protocol, and click
Properties to view the configuration
information.
C-8Preparing Your PCs for Network Access
Page 79
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Verify that Obtain an IP address
automatically radio button is selected and that the Obtain DNS server address
automatically radio button is selected.
• Click the OK button.
This completes the DHCP configuration in
Windows XP.
Repeat these steps for each PC with this
version of Windows on your network.
DHCP Configuration of TCP/IP in Windows 2000
After you install a network card, TCP/IP for Windows 2000 is configured and set to DHCP
without your having to configure it. However, if there are problems, following the steps below to
configure TCP/IP with DHCP for Windows 2000.
Click on the My Network Places icon on the Windows desktop. This will bring up a window
called Network and Dial-up Connections.
• Right click on Local Area Connection and select Properties.
Preparing Your PCs for Network AccessC-9
Page 80
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
The Local Area Connection Properties
dialog box appears. Verify that you have
the correct Ethernet card selected in the
Connect using: box and that the following
two items are displayed and selected in the
box of “Components checked are used by
this connection:”
•Client for Microsoft Networks and
•Internet Protocol (TCP/IP)
Click OK.
With Internet Protocol (TCP/IP) selected,
click on Properties to open the Internet
Protocol (TCP/IP) Properties dialogue
box. Verify that
•Obtain an IP address
automatically is selected.
•Obtain DNS server address
automatically is selected.
Click OK to return to Local Area
Connection Properties. Click OK again to
complete the configuration process.
Restart the PC. Repeat these steps for each
PC with this version of Windows on your
network.
C-10Preparing Your PCs for Network Access
Page 81
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
Verifying TCP/IP Properties for Windows XP or 2000
To check your PC’s TCP/IP configuration:
1.On the Windows taskbar, click the Start button, and then click Run.
The Run window opens.
2.Type cmd and then click OK.
A command window opens
3.Type ipconfig /all
Your IP Configuration information will be listed, and should match the values below if you are
using the default TCP/IP settings that NETGEAR recommends for connecting through a
router or gateway:
•The IP address is between 192.168.0.2 and 192.168.0.254
•The subnet mask is 255.255.255.0
•The default gateway is 192.168.0.1
4.Type exit
Preparing Your PCs for Network AccessC-11
Page 82
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
C-12Preparing Your PCs for Network Access
Page 83
Glossary
List of Glossary Terms
Use the list below to find definitions for technical terms used in this manual.
10BASE-T
IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring.
100BASE-Tx
IEEE 802.3 specification for 100 Mbps Ethernet over twisted pair wiring.
802.11b
IEEE specification for wireless networking at 11 Mbps using direct-sequence s pread-spectrum (DSSS)
technology and operating in the unlicensed radio spectrum at 2.5GHz.
802.11g
A soon to be ratified IEEE specification for wireless networking at 54 Mbps using direct-sequence
spread-spectrum (DSSS) technology and operating in the unlicensed radio spectrum at 2.5GHz. 802.11g is
backwards compatible with 802.11b.
ADSL
Short for asymmetric digital subscriber line, a technology that allows data to be sent over existing copper
telephone lines at data rates of from 1.5 to 9 Mbps when receiving data (known as the downstream rate) and
from 16 to 640 Kbps when sending data (known as the upstream rate).
ADSL requires a special ADSL modem. ADSL is growing in popularity as more areas around the world
gain access.
DHCP
An Ethernet protocol specifying how a centralized DHCP server can assign network configuration
information to multiple DHCP clients. The assigned information includes IP addresses, DNS addresses, and
gateway (router) addresses.
DNS
Short for Domain Name System (or Service), an Inte rnet service that translates domain names into IP
addresses.
Because domain names are alphabetic, they're easier to remember. The Internet however, is really based on
IP addresses. Every time you use a domain name, therefore, a DNS service must translate the name into the
corresponding IP address. For example, the domain name www.example.com might translate to
Glossary
1
Page 84
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
198.105.232.4. The DNS system is, in fact, its own network. If one DNS server doesn't know how to
translate a particular domain name, it asks another one, and so on, until the correct IP address is returned.
Domain Name
A descriptive name for an address or group of addresses on the Internet. Domain names are of the form of a
registered entity name plus one of a number of predefined top level suffixes such as .com, .edu, .uk, etc. For
example, in the address mail.NETGEAR.com, mail is a server name and NETGEAR.com is the domain.
DSL
Short for digital subscriber line, but is commonly used in reference to the asymmetric version of this
technology (ADSL) that allows data to be sent over existing copper telephone lines at data rates of from 1.5
to 9 Mbps when receiving data (known as the downstream rate) and from 16 to 640 Kbps when sending data
(known as the upstream rate).
ADSL requires a special ADSL modem. ADSL is growing in popularity as more areas around the world
gain access.
Dynamic Host Configuration Protocol
DHCP. An Ethernet protocol specifyin g how a centralized DHCP server can assign network configuration
information to multiple DHCP clients. The assigned information includes IP addresses, DNS addresses, and
gateway (router) addresses.
ESSID
The Extended Service Set Identification (ESSID) is a thirty-two character (maximum) alphanumeric key
identifying the wireless local area network.
Gateway
A local device, usually a router, that connects hosts on a local networ k to ot h er net w or k s .
IETF
Internet Engineering Task Force. Working groups of the IETF propose standard protocols and procedures for
the Internet, which are published as RFCs (Request for Comment) at
www.ietf.org.
An open international community of network designers, operators, vendors, and researchers concerned with
the evolution of the Internet architecture and the smooth operation of the Internet.
IP
Internet Protocol is the main internetworking protocol used in the Internet. Used in conjunction with the
Transfer Control Protocol (TCP) to form TCP/IP.
IP Address
A four-byte number uniquely defining each host on the Internet, usually written in dotted-decimal notation
with periods separating the bytes (for example, 134.177.244.57).
Ranges of addresses are assigned by Internic, an organization formed for this purpose.
2Glossary
Page 85
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
IPX
Short for Internetwork Packet Exchange, a networking protocol used by the Novell NetWare operating
systems.
Like UDP/IP, IPX is a datagram protocol used for connectionless communications. Higher-level protocols,
such as SPX and NCP, are used for additional error recovery services.
ISP
Internet service provider.
Internet Protocol
The main internetworking protocol used in the Internet. Used in conjunction with the Transfer Control
Protocol (TCP) to form TCP/IP.
LAN
A communications network serving users within a limited area, such as one floor of a building.
local area network
LAN. A communications network serving users within a limited area, such as one floor of a building.
A LAN typically connects multiple personal computers and shared network devices such as storage and
printers. Although many technologies exist to implement a LAN, Ethernet is the most common for
connecting personal computers.
MAC address
The Media Access Control address is a unique 48-bit hardware address assigned to every network interface
card. Usually written in the form 01:23:45:67:89:ab.
Mbps
Megabits per second.
NetBIOS
The Network Basic Input Output System is an application programming interface (API) for sharing services
and information on local-area networks (LANs).
Provides for communication between stations of a network where each station is given a name. These names
are alphanumeric names, up to 16 characters in length.
Network Address Translation
NAT. A technique by which several hosts share a single IP address for access to the Internet.
NIC
Network Interface Card. An adapter in a computer which provides connectivity to a network.
Glossary
3
Page 86
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
packet
A block of information sent over a network. A packet typically contains a source and destination network
address, some protocol and length information, a block of data, and a checksum.
router
A device that forwards data between networks. An IP router forwards data based on IP source and
destination addresses.
Routing Information Protocol
RIP. A protocol in which rou ters periodically exchange information with one another so that they can
determine minimum distance paths between sources and destinations.
router
A device that forwards data between networks. An IP router forwards data based on IP source and
destination addresses.
SSID
A Service Set Identification is a thirty-two character (maximum) alphanumeric key identifying a wireless
local area network. For the wireless devices in a network to communicate with each other, all devices must
be configured with the same SSID.
This is typically the configuration parameter for a wireless PC card. It corresponds to the ESSID in the
wireless Access Point and to the wireless network name.
See also Wireless Network Name and ESSID.
Subnet Mask
A mask used to determine what subnet an IP address belongs to. Subnetting enables a network administrator
to further divide an IP address into two or more subnets.
TCP/IP
The main internetworking protocols used in the Internet. The Internet Protocol (IP) used in conjunction with
the Transfer Control Protocol (TCP) form TCP/IP.
WAN
A long distance link used to extend or connect remotely located local area networks. The Internet is a large
WAN.
WEB Proxy Server
A Web proxy server is a specialized HTTP server that allows clients access to the Internet from behind a
firewall.
The proxy server listens for requests from clients within the firewall and forwards these requests to remote
Internet servers outside the firewall. The proxy server reads responses from the external servers and then
sends them to internal client clients.
4Glossary
Page 87
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2
WEP
Wired Equivalent Privacy is a data encryption protocol for 802.11b wireless networks.
All wireless nodes and access points on the network are configured with a 64-bit or 128-bit Shared Key for
data encryption.
wide area network
WAN. A long distance link used to extend or connect remotely located local area networks. The Internet is a
large WAN.
Wi-Fi
A trade name for the 802.11b wireless networking standard, given by the Wireless Ethernet Compatibility
Alliance (WECA, see http://www.wi-fi.net), an industry standards group promoting interoperability among
802.11b devices.
Windows Internet Naming Service
WINS. Windows Internet Naming Service is a server process for resolving Windows-based computer names
to IP addresses.
If a remote network contains a WINS server, your Windows PCs can gather information from that WINS
server about its local hosts. This allows your PCs to browse that remote network using the Windows
Network Neighborhood feature.
WINS
WINS. Windows Internet Naming Service is a server process for resolving Windows-based computer names
to IP addresses.
Wireless Network Name (SSID)
Wireless Network Name (SSID) is the name assigned to a wireless network. This is the same as the SSID or
ESSID configuration parameter.
WPA
Wi-Fi Protected Access (WPA) is data encryption protocol for 802.11 wireless networks. With WPA-PSK
(pre-shared key), all wireless nodes and access points on the network are configured with a Shared Key for
data encryption.
Glossary
5
Page 88
User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511v2