TRENDnet TEW-6APB User Manual
i
TABLE OF CONTENTS
CHAPTER 1 INTRODUCTION ............................................................................................. 1
Features of your Wireless Access Point ........................................................................... 1
Package Contents
.............................................................................................................. 4
Physical Details .................................................................................................................. 4
CHAPTER 2 INSTALLATION
............................................................................................... 6
Requirements ..................................................................................................................... 6
Procedure ........................................................................................................................... 6
CHAPTER 3 ACCESS POINT SETUP
.................................................................................. 9
Overview
............................................................................................................................ 9
Setup using the Windows Utility
...................................................................................... 9
Setup using a Web Browser ............................................................................................ 10
System Basic Settings Screen
.......................................................................................... 12
System Advanced Settings Screen
.................................................................................. 14
Wireless Screens .............................................................................................................. 16
Basic Screen ..................................................................................................................... 16
Virtual AP Settings .......................................................................................................... 18
Virtual AP Screen
............................................................................................................ 19
Radius Server Settings
.................................................................................................... 31
Access Control
................................................................................................................. 32
Advanced Settings
........................................................................................................... 35
Wi-Fi Protected Setup
..................................................................................................... 36
CHAPTER 4 PC AND SERVER CONFIGURATION
....................................................... 37
Overview
.......................................................................................................................... 37
Using WEP
....................................................................................................................... 37
Using WPA-PSK/WPA2-PSK
........................................................................................ 38
Using WPA-Enterprise
................................................................................................... 39
802.1x Server Setup (Window
s 2000 Server) ................................................................ 40
802.1x Client Setup on Window
s XP ............................................................................. 50
Using 802.1x Mode (w
ithout WPA) ............................................................................... 56
CHAPTER 5 OPERATION AND STATUS
......................................................................... 57
Operation ......................................................................................................................... 57
Status Screen
.................................................................................................................... 57
CHAPTER 6 ACCESS POINT MANAGEMENT
............................................................... 64
Overview
.......................................................................................................................... 64
Admin Login Screen
........................................................................................................ 64
Config File
........................................................................................................................ 66
Rogue APs
........................................................................................................................ 68
SNMP ............................................................................................................................... 70
Syslog Settings
................................................................................................................. 72
Firmw
are Upgrade .......................................................................................................... 73
APPENDIX
A SPECIFICATIONS ....................................................................................... 74
Wireless Access Point
...................................................................................................... 74
APPENDIX
B TROUBLESHOOTING ................................................................................ 77
Overview
.......................................................................................................................... 77
General Problems ............................................................................................................ 77
APPENDIX
C WINDOWS TCP/IP ....................................................................................... 79
Overview
.......................................................................................................................... 79
Checking TCP/IP Settings - Window
s 9x/ME: ............................................................. 79
Checking TCP/IP Settings - Window
s NT4.0 ............................................................... 81
Checking TCP/IP Settings - Window
s 2000 .................................................................. 83
ii
Checking TCP/IP Settings - Windows XP .................................................................... 85
Checking TCP/IP Settings - Window
s Vista ................................................................. 87
APPENDIX
D ABOUT WIRELESS LANS .......................................................................... 89
Overview
.......................................................................................................................... 89
Wireless LAN Terminology ............................................................................................ 89
APPENDIX
E COMMAND LINE INTERFACE ................................................................ 92
Overview
.......................................................................................................................... 92
Command Reference
....................................................................................................... 92
P/
N: 956YHD0001
Copyright © 2007. All Rights Reserved.
Document Version: 1.0
All trademarks and trade names are the properties of their respective owners.
1
Chapter 1
Introduction
This Chapter provides an overview of the Wireless Access Point's features
and capabilities.
Congratulations on the purchase of your new Wireless Access Point. The Wireless Access
Point links your Wireless Stations to your wired LAN. The Wireless stations and devices on
the wired LAN are then on the same network, and can communicate with each other without
regard for whether they are connected to the network via a Wireless or wired connection.
Figure 1: Wireless Access Point
The auto-sensing capability of the Wireless Access Point allows packet transmission up to
300Mbps for maximum throughput, or automatic speed reduction to lower speeds when the
environment does not permit maximum throughput.
Features of your Wireless Access Point
The Wireless Access Point incorporates many advanced features, carefully designed to provide
sophisticated functions while being easy to use.
•
Standards Compliant. The Wireless Access Point complies with the IEEE802.11g and
IEEE802.11n draft 2.0 specifications for Wireless LANs.
•
Supports 11n Wireless Stations. The 802.11n Draft standard provides for backward
compatibility with the 802.11b standard, so 802.11n, 802.11b and 802.11g Wireless stations can be used simultaneously.
•
Speeds to 300Mbps. All speeds up to the 802.11n maximum of 300Mbps are supported.
1
Wireless Access Point User Guide
2
•
Bridge Mode Support. The Wireless Access Point can operate in Bridge Mode, con-
necting to another Access Point. Both PTP (Point to Point) and PTMP (Point to MultiPoint) Bridge modes are supported.
And you can even use both Bridge Mode and Access Point Mode simultaneously!
•
WPS Support. WPS (Wi-Fi Protected Setup) can simplify the process of connecting any
device to the wireless network by using the push button configuration (PBC) on the Wireless Access Point, or entering a 8-digit PIN code if there's no button.
•
DHCP Client Support. Dynamic Host Configuration Protocol provides a dynamic IP
address to PCs and other devices upon request. The Wireless Access Point can act as a
DHCP Client, and obtain an IP address and related information from your existing DHPC
Server.
•
Upgradeable Firmware. Firmware is stored in a flash memory and can be upgraded
easily, using only your Web Browser.
Security Features
• Virtual APs. For maximum flexibility, wireless security settings are stored in Virtual AP.
Up to 4 Virtual APs can be defined and used as any time.
•
Multiple BSSIDs. Because each Virtual AP has it own SSID and beacon, and up to 4
Virtual APs can be active simultaneously, multiple SSIDs are supported. Different clients
can connect to the Wireless Access Point using different SSIDs, with different security
settings.
•
Virtual APs Isolation. If desired, PCs and devices connecting to different Virtual APs
can be isolated from each other.
•
VLAN Support. The 802.1Q VLAN standard is supported, allowing traffic from differ-
ent sources to be segmented. Combined with the multiple SSID feature, this provid es a
powerful tool to control access to your LAN.
•
WEP support. Support for WEP (Wired Equivalent Privacy) is included. Both 64 Bit
128 Bit, and 152 Bit keys are supported.
•
WPA support. Support for WPA is included. WPA is more secure than WEP, and
should be used if possible. Both TKIP and AES encryption methods are supported.
•
802.1x Support. Support for 802.1x mode is included, providing for the industrial-
strength wireless security of 802.1x authentication and authorization.
•
Radius Client Support. The Wireless Access Point can login to your existing Radius
Server (as a Radius client).
•
Radius MAC Authentication. You can centralize the checking of Wireless Station
MAC addresses by using a Radius Server.
•
Rogue AP Detection. The Wireless Access Point can detect unauthorized (Rouge)
Access Points on your LAN.
•
Access Control. The Access Control feature can check the MAC address of Wireless
clients to ensure that only trusted Wireless Stations can use the Wireless Access Point to
gain access to your LAN.
•
Password - protected Configuration. Optional password protection is provided to
prevent unauthorized users from modifying the configuration data and settings.
Advanced Features
• Command Line Interface. If desired, the command line interface (CLI) can be used for
configuration. This provides the possibility of creating scripts to perform common configuration changes.
Introduction
3
•
Radius Accounting Support. If you have a Radius Server, you can use it to provide
accounting data on Wireless clients.
•
Syslog Support. If you have a Syslog Server, the Wireless Access Point can send its log
data to your Syslog Server.
•
SNMP Support. SNMP (Simple Network Management Protocol) is supported, allowing
you to use a SNMP program to manage the Wireless Access Point.
• WDS Support. Support for WDS (Wireless Distribution System) allows the Wireless
Access Point to act as a Wireless Bridge. Both Point-to-Point and Multi-Point Bridge
modes are supported.
Wireless Access Point User Guide
4
Package Contents
The following items should be included:
• Wireless Access Point
• Power Adapter
• Quick Start Guide
• CD-ROM containing the on-line manual and setup utility.
If any of the above items are damaged or missing, please contact your dealer immediately.
Physical Details
Front Panel LEDs
Figure 2: Front Panel
Security/WPS Off - WPS feature is not in use.
On (Blue) - If the LED is on for a while and then off, WPS is processing
successfully.
Blinking (Blue) - WPS feature is currently in use.
Blinking (Amber) - WPS is in error condition.
Power On - Normal operation.
Off - No power
WLAN On -
Idle
Off - Wireless connection is not available.
Flashing - Data is being transmitted or received via the Wireless access
point. Data includes "network traffic" as well as user data.
Status On - Error condition.
Off - Normal operation.
Blinking - During start up, and when the Firmware is being upgraded.
Introduction
5
Rear Panel
Figure 3: Rear Panel
WPS Button
Push the WPS button on the device and on your other wireless device
to perform WPS function that easily creates an encryption-secured
wireless connection automatically.
LAN
Use a standard LAN cable (RJ45 connectors) to connect this port to a
10BaseT or 100BaseT hub/switch on your LAN.
Reset Button
This button has two (2) functions:
• Reboot. When pressed and released, the Wireless Access Point
will reboot (restart).
• Reset to Factory Defaults. This button can also be used to clear
ALL data and restore ALL settings to the factory default values.
To Clear All Data and restore the factory default values:
1. Hold the Reset Button until the Status (Red) LED blinks TWICE,
usually more than 5 seconds.
2. Release the Reset Button.
The factory default configuration has now been restored, and the
Access Point is ready for use.
Power port
Connect the supplied power adapter (12V@1A) here.
6
Chapter 2
Installation
This Chapter covers the physical installation of the Wireless Access Point.
Requirements
Requirements:
• TCP/IP network
• Ethernet cable with RJ-45 connectors
• Installed Wireless network adapter for each PC that will be wirelessly connected to the
network
Procedure
1. Select a suitable location for the installation of your W ireless Access Point. To maximize
reliability and performance, follow these guidelines:
• Use an elevated location, such as wall mounted or on the top of a cubicle.
• Place the Wireless Access Point near the center of your wireless coverage area.
• If possible, ensure there are no thick walls or metal shielding between the W ireless
Access Point and Wireless stations. Under ideal conditions, the Wireless Access Po int
has a range of around 150 meters (450 feet). The range is reduced, and transmission
speed is lower, if there are any obstructions between Wireless devices.
2
Installation
7
Figure 4: Installation Diagram
2. Use a standard LAN cable to connect the “LAN” port on the Wireless Access Point to a
10/100BaseT hub/switch on your LAN.
3. Connect the supplied power adapter to the Wireless Access Point and a convenient power
outlet, and power up.
4. Check the LEDs:
• The Status LED should flash, then turn OFF.
• The Power and WLAN LEDs should be ON.
For more information, refer to Front Panel LEDs in
Chapter 1.
9
Chapter 3
Access Point Setup
This Chapter provides details of the Setup process for Basic Operation of
your Wireless Access Point.
Overview
This chapter describes the setup procedure to make the Wireless Access Point a valid device
on your LAN, and to function as an Access Point for your Wireless Stations.
Wireless Stations may also require configuration. For details, see Chapter 4 - Wireless Station
Configuration.
The Wireless Access Point can be configured using Web Browser
3
Wireless Access Point User Guide
10
Setup using a Web Browser
Your Browser must support JavaScript. The configuration program has been tested on the
following browsers:
• Netscape V4.08 or later
• Internet Explorer V4 or later
Setup Procedure
Before commencing, install the Wireless Access Point in your LAN, as described previously.
1. Use a PC which is already connected to your LAN, either by a wired connection or anoth-
er Access Point.
• Until the Wireless Access Point is configured, establishing a Wireless connection to it
may be not possible.
• If your LAN contains a Router or Routers, ensure the PC used for configuration is on
the same LAN segment as the Wireless Access Point.
• The TEW-636APB is configured as DHCP for the default IP Address setting.
2. Start your Web browser. (Note:
If you have changed the default IP Address assigned
to the TEW-636APB, make sure to enter the correct IP Address).
3. Open your web browser, type HTTP://SCXXXXXX, in the Address bar, and then press Enter.
XXXXXX represents the last 6 digits of the Mac Address. You can find the Mac Address
on the bottom of the router or enter "HTTP://" and the IP Address of the TEW-636APB,
as in this example, which uses the TEW-636APB's IP Address: HTTP://192.168.0.228
4. You should then see a login prompt, which will ask for a User Name and Password.
Enter admin for the User Name, and password for the Password.
These are the default values. The password can and should be changed. Always enter the
current user name and password, as set on the Admin Login screen.
Figure 5: Password Dialog
5. You will then see the Status screen, which displays the current settings and status. No data
input is possible on this screen. See Chapter 5 for details of the Status screen.
Access Point Setup
11
6. From the menu, check the following screens, and configure as necessary for your envi-
ronment. Details of these screens and settings are described in the following sections of
this chapter.
• System - Basic and Advanced settings
• Wireless - Basic, Advanced, Access Control, Radius Server, Virtual APs & WIFI
Protected Setup.
7. You may also wish to set the admin password and administration connection options.
These are on the Admin Login screen accessed from the Management menu. See Chapter
6 for details of the screens and features available on the Management menu.
8. Use the Apply and Reboot buttons on the menu to apply your changes and restart the
Wireless Access Point.
Setup is now complete.
Wireless stations must now be set to match the Wireless Access Point. See Chapter 4 for
details.
If you can't connect:
It is likely that your PC’s IP address is incompatible with the Wireless Access
Point’s IP address. This can happen if your LAN does not have a DHCP Server.
The default IP address of the Wireless Access Point is 0.0.0.0,. The TEW-636APB
will receive an IP Address from the LANs DHCP server automatically. Using a
Router with DHCP server enable or a DHCP server will allow the Wireless Access
Point to receive an IP Address.
Wireless Access Point User Guide
12
System Basic Settings Screen
Click Basic Settings on the System menu to view a screen like the following.
Figure 6: System Basic Settings Screen
Data - System Basic Settings Screen
Identification
Access Point
Name
Enter a suitable name for this Access Point.
Description
If desired, you can enter a description for the Access Point.
Country Domain
The country or domain which is matching your current location.
MAC Address
The MAC address is displayed.
IP Settings
DHCP Client
Select this option if you have a DHCP Server on your LAN, and you
wish the Access Point to obtain an IP address automatically.
Fixed IP Address
If selected, the following data must be entered.
• IP Address - The IP Address of this device. Enter an unused IP
address from the address range on your LAN.
• Subnet Mask - The Network Mask associated with the IP Address
above. Enter the value used by other devices on your LAN.
• Gateway - The IP Address of your Gateway or Router. Enter the
value used by other devices on your LAN.
• DNS - Enter the DNS (Domain Name Server) used by PCs on
your LAN.
Access Point Setup
13
DHCP Server
• If Enabled, the Access Point will allocate IP Addresses to PCs
(DHCP clients) on your LAN when they start up. The default (and
recommended) value is Enabled.
• The Start IP Address and Finish IP Address fields set the values
used by the DHCP server when allocating IP Addresses to DHCP
clients. This range also determines the number of DHCP clients
supported.
NTP
NTP Server
Name/IP Address
Enter the server name or IP address of the NTP.
Time Zone
Time Zone
Choose the Time Zone for your location from the drop-down list. If
your location is currently using Daylight Saving, enable the Adjust for
Daylight Saving Time checkbox.
You must UNCHECK this checkbox when Daylight Saving Time
finishes.
Wireless Access Point User Guide
14
System Advanced Settings Screen
Click Advanced Settings on the System menu to view a screen like the following.
Figure 7: System Advanced Settings Screen
Data - System Advanced Settings Screen
VLAN
Enable 802.1Q
VLAN
This option is only useful if the hubs/switches on your LAN support
the VLAN standard.
Delete, Add
buttons
Use these buttons to add or delete the VLAN ID.
Management
VLAN
Define the VLAN IDs used for management.
LLTD
Enable Link
Layer Topology
Discovery
Enable this if you want to use LLTD feature.
STP
Enable Spanning
tree Protocol
Enable this if you want to use this feature.
802.1x Supplicant
Enable 802.1x
Supplicant
Enable this if your network requires this AP to use 802.X authentication in order to operate.
Access Point Setup
15
Authentication
• Aut
hentication via MAC Address
Select this if you want to Use MAC Address for Authentication.
• Authentication via Name and Password
Select this if you want to Use name and password for Authentication.
Wireless Access Point User Guide
16
Wireless Screens
There are 6 configuration screens available:
• Basic
• Virtual Aps
• Radius Server
• Access Control
• Advanced
• WIFI Protected Setup
Basic Screen
The settings on this screen must match the settings used by Wireless Stations.
Click Basic Settings on the Wireless menu to view a screen like the following.
Figure 8:Wireless Basic Screen
Data - Wireless Basic Settings Screen
Operation
Wireless Mode
Select the desired option:
• Disable - select this if for some reason you do not this AP to
transmit or receive at all.
• Auto (802.11n/802.11g/802.11b) - this is the default, and will
allow connections by 802.11n, 802.11b and 802.11g wireless stations.
Access Point Setup
17
Operation Mode
Select the desired mode:
• Access Point - operate as a normal Access Point
• Bridge (Point-to-Point) - Bridge to a single AP. You must
provide the MAC address of the other AP in the PTP Bridge AP
MAC Address field.
• Bridge (Multi-Point) - Select this only if this AP is the "Master"
for a group of Bridge-mode APs. The other Bridge-mode APs
must be set to Point-to-Point Bridge mode, using this AP's MAC
address. They then send all traffic to this "Master".
• Bridge (Point-to-Point) + Access Point - act as a Bridge (Point-
to-Point) and Access Point.
• Bridge (Multi-Point) + Access Point - act as a Bridge (Multi-
Point) and Access Point.
If required, you can specify the MAC addresses of the APs which are
allowed to connect to this AP. To specify the allowed APs:
1. Click the button "Set PTMP APs".
2. On the resulting sub-screen, enter the MAC addresses of the
allowed APs.
PTP Bridge AP
MAC Address
This is not required unless the Bridge Mode is "Point-to-Point Bridge
(PTP)". In this case, you must enter the MAC address of the other AP
in this field.
Set PTMP APs
Use this to open a sub-window where you can specify the MAC
addresses of the APs which are allowed to connect to this AP.
Parameters
Channel No
If "Automatic" is selected, the Access Point will select the best availa-
ble Channel.
If you experience interference (shown by lost connections and/or slow
data transfers) you may need to experiment with manually setting
different channels to see which is the best.
Current Channel
No
This displays the current channel used by the Access Point.
11n Parameters
Channel Bandwidth
Select the desired bandwidth from the list.
Extension SubChannel
Select the desired option from the drop-down list.
Wireless Access Point User Guide
18
Virtual AP Settings
Clicking the Virtual APs link on the Wireless menu will result in a screen like the following.
Figure 9: Virtual AP Settings
Data - Virtual AP Settings Screen
VAPs
VAP List
All available VAPs are listed. For each VAP, the following data
is displayed:
• *
If displayed before the name of the VAP, this indicates
the VAP is currently enabled. If not displayed, the
VAP is currently disabled.
• VAP Name
The current VAP name is displayed.
• [SSID]
The current SSID associated with this VAP.
• Security System
The current security system (e.g. WPA-PSK ) is displayed.
Enable Button
Enable the selected VAP.
Configure Button
Change the settings for the selected VAP.
Disable Button
Disable the selected VAP.
Isolation
Isolate all Virtual APs
from each other
If this option is enabled, wireless clients using different VAPs
(different SSIDs) are isolated from each other, so they will
NOT be able to communicate with each other. They will still be
able to communicate with other clients using the same profile,
unless the "Wireless Separation" setting on the "Advanced"
screen has been enabled.
Access Point Setup
19
Virtual AP Screen
This screen is displayed when you select a VAP on the Virtual AP Settings screen, and click
the Configure button.
Figure 10: Virtual AP Screen
VAP Data
Enter the desired settings for each of the following:
VAP Name
Enter a suitable name for this VAP.
SSID
Enter the desired SSID. Each VAP must have a unique SSID.
Broadcast SSID
If Disabled, no SSID is broadcast.
If enabled, the SSID will then be broadcast to all Wireless Stations.
Stations which have no SSID (or a "null" value) can then adopt the
correct SSID for connections to this Access Point.
Wireless Separation
If enabled, then each Wireless station using the Access Point is
invisible to other Wireless stations. In most business stations, this
setting should be Disabled.
VLAN ID
Enter the desired VLAN ID, as used on your network. IDs must be
in the range 1 ~ 4095. These IDs must match the IDs used by other
network devices.
Security Settings
Select the desired option, and then enter the settings for the selected method.
The available options are:
• None - No security is used. Anyone using the correct SSID can connect to your network.
• WEP - The 802.11b standard. Data is encrypted before transmission, but the encryption
system is not very strong.
• WPA-PSK - Like WEP, data is encrypted before transmission. WPA is more secure than
WEP, and should be used if possible. The PSK (Pre-shared Key) must be entered on each
Wireless Access Point User Guide
20
Wireless station. The 256Bit encryption key is derived from the PSK, and changes frequently.
• WPA2-PSK - This is a further development of WPA-PSK, and offers even greater securi-
ty, using the AES (Advanced Encryption Standard) method of encryption.
• WPA-PSK and WPA2-PSK - This method, sometimes called "Mixed Mode", allows
clients to use EITHER WPA-PSK (with TKIP) OR WPA2-PSK (with AES).
• WPA with Radius - This version of WPA requires a Radius Server on your LAN to
provide the client authentication according to the 802.1x standard. Data transmissions are
encrypted using the WPA standard.
If this option is selected:
• This Access Point must have a "client login" on the Radius Server.
• Each user must have a "user login" on the Radius Server.
• Each user's wireless client must support 802.1x and provide the login data when re-
quired.
• All data transmission is encrypted using the WPA standard. Keys are automatically
generated, so no key input is required.
• WPA2 with Radius - This version of WPA2 requires a Radius Server on your LAN to
provide the client authentication according to the 802.1x standard. Data transmissions are
encrypted using the WPA2 standard.
If this option is selected:
• This Access Point must have a "client login" on the Radius Server.
• Each user must authenticate on the Radius Server. This is usually done using digital
certificates.
• Each user's wireless client must support 802.1x and provide the Radius authentication
data when required.
• All data transmission is encrypted using the WPA2 standard. Keys are automatically
generated, so no key input is required.
• WPA and WPA2 with Radius - EITHER WPA or WPA2 require a Radius Server on
your LAN to provide the client authentication according to the 802.1x standard. Data
transmissions are encrypted using EITHER WPA or WPA2 standard.
If this option is selected:
• This Access Point must have a "client login" on the Radius Server.
• Each user must authenticate on the Radius Server. This is usually done using digital
certificates.
• Each user's wireless client must support 802.1x and provide the Radius authentication
data when required.
• All data transmission is encrypted using EITHER WPA or WPA2 standard. Keys are
automatically generated, so no key input is required.
• 802.1x - This uses the 802.1x standard for client authentication, and WEP for data encryp-
tion.
If this option is selected:
• This Access Point must have a "client login" on the Radius Server.
• Each user must have a "user login" on the Radius Server.
• Each user's wireless client must support 802.1x and provide the login data when re-
quired.
• All data transmission is encrypted using the WEP standard. You only have to select
the WEP key size; the WEP key is automatically generated.
Access Point Setup
21
Security Settings - None
Figure 11: Wireless Security - None
No security is used. Anyone using the correct SSID can connect to your network.
Security Settings - WEP
This is the 802.11b standard. Data is encrypted before transmission, but the encryption system
is not very strong.
Figure 12: WEP Wireless Security Screen
Wireless Access Point User Guide
22
Data - WEP Screen
WEP
Data
Encryption
Select the desired option, and ensure your Wireless stations have the
same setting:
• 64 Bit Encryption - Keys are 10 Hex (5 ASCII) characters.
• 128 Bit Encryption - Keys are 26 Hex (13 ASCII) characters.
• 152 Bit Encryption - Keys are 32 Hex (16 ASCII) characters.
Authentication
Normally, you can leave this at “Automatic”, so that Wireless Stations
can use either method ("Open System" or "Shared Key".).
If you wish to use a particular method, select the appropriate value "Open System" or "Shared Key". All Wireless stations must then be set
to use the same method.
Key Input
Select "Hex" or "ASCII" depending on your input method. (All keys
are converted to Hex, ASCII input is only for convenience.)
Key Value
Enter the key values you wish to use. The default key, selected by the
radio button, is required. The other keys are optional. Other stations
must have matching key values.
Passphrase
Use this to generate a key or keys, instead of entering them directly.
Enter a word or group of printable characters in the Passphrase box
and click the "Generate Key" button to automatically configure the
WEP Key(s).
Access Point Setup
23
Security Settings - WPA-PSK
Like WEP, data is encrypted before transmission. WPA is more secure than WEP, and should
be used if possible. The PSK (Pre-shared Key) must be entered on each Wireless station. The
256Bit encryption key is derived from the PSK, and changes frequently.
Figure 13: WPA-PSK Wireless Security Screen
Data - WPA-PSK Screen
WPA-PSK
Network Key
Enter the key value. Data is encrypted using a 256Bit key derived
from this key. Other Wireless Stations must use the same key.
WPA Encryption
The encryption method is TKIP. Wireless Stations must also use
TKIP.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Wireless Access Point User Guide
24
Security Settings - WPA2-PSK
This is a further development of WPA-PSK, and offers even greater security, using the AES
(Advanced Encryption Standard) method of encryption.
Figure 14: WPA2-PSK Wireless Security Screen
Data - WPA2-PSK Screen
WPA2-PSK
Network Key
Enter the key value. Data is encrypted using a 256Bit key derived
from this key. Other Wireless Stations must use the same key.
WPA Encryption
The encryption method is AES. Wireless Stations must also use
AES.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Access Point Setup
25
Security Settings - WPA-PSK and WPA2-PSK
This method, sometimes called "Mixed Mode", allows clients to use EITHER WPA-PSK (with
TKIP) OR WPA2-PSK (with AES).
Figure 15: WPA-PSK and WPA2-PSK Wireless Security Screen
Data - WPA-PSK and WPA2-PSK Screen
WPA-PSK and WPA2-PSK
Network Key
Enter the key value. Data is encrypted using this key. Other
Wireless Stations must use the same key.
WPA Encryption
The encryption method is TKIP for WPA-PSK, and AES for
WPA2-PSK.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Wireless Access Point User Guide
26
Security Settings - WPA with Radius
This version of WPA requires a Radius Server on your LAN to provide the client authentication according to the 802.1x standard. Data transmissions are encrypted using the WPA
standard.
Figure 16: WPA with Radius Wireless Security Screen
Data - WPA with Radius Screen
WPA with Radius
WPA Encryption
The encryption method is TKIP. Wireless Stations must also use
TKIP.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Access Point Setup
27
Security Settings - WPA2 with Radius
This version of WPA2 requires a Radius Server on your LAN to provide the client authentication according to the 802.1x standard. Data transmissions are encrypted using the WPA2
standard.
Figure 17: WPA2 with Radius Wireless Security Screen
Data - WPA2 with Radius Screen
WPA2 with Radius
WPA Encryption
The encryption method is AES. Wireless Stations must also use
AES.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Wireless Access Point User Guide
28
Security Settings - WPA and WPA2 with Radius
EITHER WPA or WPA2 require a Radius Server on your LAN to provide the client authentication according to the 802.1x standard. Data transmissions are encrypted using EITHER
WPA or WPA2 standard.
Figure 18: WPA and WPA2 with Radius Wireless Security Screen
Data - WPA and WPA2 with Radius Screen
WPA and WPA2 with Radius
WPA Encryption
The encryption method is TKIP for WPA, and AES for WPA2.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Loading...