versa VX-AP310N User Manual
VX-AP310N
Wireless
Access Point
User's Guide
V1.01
i
TABLE OF CONTENTS
CHAPTER 1 INTRODUCTION ............................................................................................. 1
Features of your Wireless Access Point ........................................................................... 1
Package Contents .............................................................................................................. 3
Physical Details .................................................................................................................. 4
CHAPTER 2 INSTALLATION ............................................................................................... 6
Requirements ..................................................................................................................... 6
Procedure ........................................................................................................................... 6
CHAPTER 3 ACCESS POINT SETUP .................................................................................. 8
Overview ............................................................................................................................ 8
Setup using a Web Browser .............................................................................................. 9
System Basic Settings Screen .......................................................................................... 11
System Advanced Settings Screen .................................................................................. 13
Wireless Screens .............................................................................................................. 14
Basic Screen ..................................................................................................................... 14
Virtual AP Settings .......................................................................................................... 17
Virtual AP Screen ............................................................................................................ 18
Radius Server Settings .................................................................................................... 31
Access Control ................................................................................................................. 32
Advanced Settings ........................................................................................................... 35
CHAPTER 4 PC AND SERVER CONFIGURATION ....................................................... 37
Overview .......................................................................................................................... 37
Using WEP ....................................................................................................................... 37
Using WPA-PSK/WPA2-PSK ........................................................................................ 38
Using WPA-Enterprise ................................................................................................... 39
802.1x Server Setup (Windows 2000 Server) ................................................................ 40
802.1x Client Setup on Windows XP ............................................................................. 50
Using 802.1x Mode (without WPA) ............................................................................... 56
CHAPTER 5 OPERATION AND STATUS ......................................................................... 57
Operation ......................................................................................................................... 57
Status Screen .................................................................................................................... 57
CHAPTER 6 ACCESS POINT MANAGEMENT ............................................................... 64
Overview .......................................................................................................................... 64
AP Type Screen .............................................................................................................. 64
Management .................................................................................................................... 66
Auto Config ...................................................................................................................... 69
Config File ........................................................................................................................ 70
Ping Test ........................................................................................................................... 72
Auto Reboot ..................................................................................................................... 73
Firmware Upgrade .......................................................................................................... 74
APPENDIX A SPECIFICATIONS ....................................................................................... 75
Wireless Access Point ...................................................................................................... 75
APPENDIX B TROUBLESHOOTING ................................................................................ 78
Overview .......................................................................................................................... 78
General Problems ............................................................................................................ 78
APPENDIX C WINDOWS TCP/IP ....................................................................................... 80
Overview .......................................................................................................................... 80
Checking TCP/IP Settings - Windows 9x/ME: ............................................................. 80
Checking TCP/IP Settings - Windows NT4.0 ............................................................... 82
Checking TCP/IP Settings - Windows 2000 .................................................................. 84
Checking TCP/IP Settings - Windows XP .................................................................... 86
Wireless Access Point User Guide
ii
Checking TCP/IP Settings - Windows Vista ................................................................. 88
APPENDIX D ABOUT WIRELESS LANS .......................................................................... 90
Overview .......................................................................................................................... 90
Wireless LAN Terminology ............................................................................................ 90
APPENDIX E COMMAND LINE INTERFACE ................................................................ 93
Overview .......................................................................................................................... 93
Command Reference ....................................................................................................... 93
1
Chapter 1
Introduction
This Chapter provides an overview of the Wireless Access Point's features
and capabilities.
Congratulations on the purchase of your new Wireless Access Point. The Wireless Access
Point links your Wireless Stations to your wired LAN. The Wireless stations and devices on
the wired LAN are then on the same network, and can communicate with each other without
regard for whether they are connected to the network via a Wireless or wired connection.
Figure 1: Wireless Access Point
Features of your Wireless Access Point
The Wireless Access Point incorporates many advanced features, carefully designed to provide
sophisticated functions while being easy to use.
Standards Compliant. The Wireless Access Point complies with the IEEE802.11g and
IEEE802.11n draft 2.0 specifications for Wireless LANs.
Supports 11n Wireless Stations. The 802.11n Draft standard provides for backward
compatibility with the 802.11b standard, so 802.11n, 802.11b and 802.11g Wireless stations can be used simultaneously.
Bridge Mode Support. The Wireless Access Point can operate in Bridge Mode, con-
necting to another Access Point. Both PTP (Point to Point) and PTMP (Point to MultiPoint) Bridge modes are supported.
And you can even use both Bridge Mode and Access Point Mode simultaneously!
DHCP Client Support. Dynamic Host Configuration Protocol provides a dynamic IP
address to PCs and other devices upon request. The Wireless Access Point can act as a
DHCP Client, and obtain an IP address and related information from your existing DHPC
Server.
1
Wireless Access Point User Guide
2
Thin AP. Support thin AP function.
Upgradeable Firmware. Firmware is stored in a flash memory and can be upgraded
easily, using only your Web Browser.
PoE Support. You can use PoE (Power over Ethernet) to provide power to the Wireless
Access Point, so only a single cable connection is required.
Security Features
Virtual APs. For maximum flexibility, wireless security settings are stored in Virtual AP.
Up to 8 Virtual APs can be defined and used as any time.
Multiple BSSIDs. Because each Virtual AP has it own SSID and beacon, and up to 4
Virtual APs can be active simultaneously, multiple SSIDs are supported. Different clients
can connect to the Wireless Access Point using different SSIDs, with different security
settings.
Virtual APs Isolation. If desired, PCs and devices connecting to different Virtual APs
can be isolated from each other.
VLAN Support. The 802.1Q VLAN standard is supported, allowing traffic from differ-
ent sources to be segmented. Combined with the multiple SSID feature, this provides a
powerful tool to control access to your LAN.
WEP support. Support for WEP (Wired Equivalent Privacy) is included. Both 64 Bit
128 Bit, and 152 Bit keys are supported.
WPA support. Support for WPA is included. WPA is more secure than WEP, and
should be used if possible. Both TKIP and AES encryption methods are supported.
802.1x Support. Support for 802.1x mode is included, providing for the industrial-
strength wireless security of 802.1x authentication and authorization.
Radius Client Support. The Wireless Access Point can login to your existing Radius
Server (as a Radius client).
Radius MAC Authentication. You can centralize the checking of Wireless Station
MAC addresses by using a Radius Server.
Rogue AP Detection. The Wireless Access Point can detect unauthorized (Rouge)
Access Points on your LAN.
Access Control. The Access Control feature can check the MAC address of Wireless
clients to ensure that only trusted Wireless Stations can use the Wireless Access Point to
gain access to your LAN.
Password - protected Configuration. Optional password protection is provided to
prevent unauthorized users from modifying the configuration data and settings.
Advanced Features
Command Line Interface. If desired, the command line interface (CLI) can be used for
configuration. This provides the possibility of creating scripts to perform common configuration changes.
Auto Configuration. The Wireless Access Point can perform self-configuration by
copying the configuration data from another Access Point. This feature is enabled by default.
Auto Update. The Wireless Access Point can automatically update its firmware, by
downloading and installing new firmware from your FTP server.
Radius Accounting Support. If you have a Radius Server, you can use it to provide
accounting data on Wireless clients.
Introduction
3
Syslog Support. If you have a Syslog Server, the Wireless Access Point can send its log
data to your Syslog Server.
SNMP Support. SNMP (Simple Network Management Protocol) is supported, allowing
you to use a SNMP program to manage the Wireless Access Point.
Package Contents
The following items should be included:
Wireless Access Point
Power Adapter
2Pcs Antenna
If any of the above items are damaged or missing, please contact your dealer immediately.
Wireless Access Point User Guide
4
Physical Details
Front Panel LEDs
Figure 2: Front Panel
Power
On - Normal operation.
Off - No power
WLAN
On - Idle
Off - Wireless connection is not available.
Flashing - Data is being transmitted or received via the Wireless access
point. Data includes "network traffic" as well as user data.
Status
On - Error condition.
Off - Normal operation.
Blinking - During start up, and when the Firmware is being upgraded.
Ethernet
On - The LAN (Ethernet) port is active.
Off - No active connection on the LAN (Ethernet) port.
Flashing - Data is being transmitted or received via the corresponding
LAN (Ethernet) port.
Introduction
5
Rear Panel
Figure 3: Rear Panel
Reset Button
This button has two (2) functions:
Reboot. When pressed and released, the Wireless Access Point
will reboot (restart).
Reset to Factory Defaults. This button can also be used to clear
ALL data and restore ALL settings to the factory default values.
To Clear All Data and restore the factory default values:
1. Hold the Reset Button until the Status (Red) LED blinks TWICE,
usually more than 5 seconds.
2. Release the Reset Button.
The factory default configuration has now been restored, and the
Access Point is ready for use.
ETHERNET
Use a standard LAN cable (RJ45 connectors) to connect this port to a
10/100/1000BaseT hub/switch on your LAN.
Power port
Connect the supplied power adapter (12V@1A) here.
CONSOLE
DB9 female RS232 port.
6
Chapter 2
Installation
This Chapter covers the physical installation of the Wireless Access Point.
Requirements
Requirements:
TCP/IP network
Ethernet cable with RJ-45 connectors
Installed Wireless network adapter for each PC that will be wirelessly connected to the
network
Procedure
1. Select a suitable location for the installation of your Wireless Access Point. To maximize
reliability and performance, follow these guidelines:
Use an elevated location, such as wall mounted or on the top of a cubicle.
Place the Wireless Access Point near the center of your wireless coverage area.
If possible, ensure there are no thick walls or metal shielding between the Wireless
Access Point and Wireless stations. Under ideal conditions, the Wireless Access Point
has a range of around 150 meters (450 feet). The range is reduced, and transmission
speed is lower, if there are any obstructions between Wireless devices.
Figure 4: Installation Diagram
Installation
7
2. Use a standard LAN cable to connect the "LAN" port on the Wireless Access Point to a
10/100/1000BaseT hub/switch on your LAN.
3. Connect the supplied power adapter to the Wireless Access Point and a convenient power
outlet, and power up.
4. Check the LEDs:
The Status LED should flash, then turn OFF.
The Power, Ethernet and WLAN LEDs should be ON.
For more information, refer to Front Panel LEDs in Chapter 1.
Using PoE (Power over Ethernet)
The Wireless Access Point supports PoE (Power over Ethernet). To use PoE:
1. Do not connect the supplied power adapter to the Wireless Access Point.
2. Connect one end of a standard (category 5) LAN cable to the Ethernet port on the Wire-
less Access Point.
3. Connect the other end of the LAN cable to the powered Ethernet port on a suitable PoE
Adapter. (48V DC)
4. Connect the unpowered Ethernet port on the PoE adapter to your Hub or switch.
5. Connect the power supply to the PoE adapter and power up.
6. Check the LEDs on the Wireless Access Point to see it is drawing power via the Ethernet
connection.
Figure 5: Using PoE (Power over Ethernet)
8
Chapter 3
Access Point Setup
This Chapter provides details of the Setup process for Basic Operation of
your Wireless Access Point.
Overview
This chapter describes the setup procedure to make the Wireless Access Point a valid device
on your LAN, and to function as an Access Point for your Wireless Stations.
Wireless Stations may also require configuration. For details, see Chapter 4 - PC and Server
Configuration.
The Wireless Access Point can be configured using your Web Browser.
Access Point Setup
9
Setup using a Web Browser
Your Browser must support JavaScript. The configuration program has been tested on the
following browsers:
Netscape V4.08 or later
Internet Explorer V4 or later
Setup Procedure
Before commencing, install the Wireless Access Point in your LAN, as described previously.
1. Check the Wireless Access Point to determine its Default Name. This is shown on a label
on the base or rear, and is in the following format:
SCxxxxxx
Where xxxxxx is a set of 6 Hex characters (0 ~ 9, and A ~ F).
2. Use a PC which is already connected to your LAN, either by a wired connection or anoth-
er Access Point.
Until the Wireless Access Point is configured, establishing a Wireless connection to it
may be not possible.
If your LAN contains a Router or Routers, ensure the PC used for configuration is on
the same LAN segment as the Wireless Access Point.
3. Start your Web browser.
4. In the Address box, enter "HTTP://" and the IP Address of the 11N Wireless Access Point,
as in this example, which uses the Wireless Access Point's default IP Address:
HTTP://192.168.0.228
5. You should then see a login prompt, which will ask for a User Name and Password.
Enter admin for the User Name, and password for the Password.
These are the default values. The password can and should be changed. Always enter the
current user name and password, as set on the Admin Login screen.
Figure 6: Password Dialog
6. You will then see the Status screen, which displays the current settings and status. No data
input is possible on this screen. See Chapter 5 for details of the Status screen.
Wireless Access Point User Guide
10
7. From the menu, check the following screens, and configure as necessary for your envi-
ronment. Details of these screens and settings are described in the following sections of
this chapter.
System - Basic and Advanced settings
Wireless - Basic, Advanced, Access Control, Radius Server, Virtual APs & WIFI
Protected Setup.
8. You may also wish to set the admin password and administration connection options.
These are on the Admin Login screen accessed from the Management menu. See Chapter
6 for details of the screens and features available on the Management menu.
9. Use the Apply and Reboot buttons on the menu to apply your changes and restart the
Wireless Access Point.
Setup is now complete.
Wireless stations must now be set to match the Wireless Access Point. See Chapter 4 for
details.
If you can't connect:
It is likely that your PC’s IP address is incompatible with the Wireless Access
Point’s IP address. This can happen if your LAN does not have a DHCP Server.
The default IP address of the Wireless Access Point is 192.168.0.228, with a
Network Mask of 255.255.255.0.
If your PC’s IP address is not compatible with this, you must change your PC’s IP
address to an unused value in the range 192.168.0.1 ~ 192.168.0.254, with a
Network Mask of 255.255.255.0. See Appendix C - Windows TCP/IP for details
for this procedure.
Access Point Setup
11
System Basic Settings Screen
Click Basic Settings on the System menu to view a screen like the following.
Figure 7: System Basic Settings Screen
Data - System Basic Settings Screen
Identification
Access Point
Name
Enter a suitable name for this Access Point.
Description
If desired, you can enter a description for the Access Point.
Country Domain
The country or domain which is matching your current location.
MAC Address
The MAC address is displayed.
IP Settings
DHCP Client
Select this option if you have a DHCP Server on your LAN, and you
wish the Access Point to obtain an IP address automatically.
Fixed IP Address
If selected, the following data must be entered.
IP Address - The IP Address of this device. Enter an unused IP
address from the address range on your LAN.
Subnet Mask - The Network Mask associated with the IP Address
above. Enter the value used by other devices on your LAN.
Gateway - The IP Address of your Gateway or Router. Enter the
value used by other devices on your LAN.
DNS - Enter the DNS (Domain Name Server) used by PCs on
your LAN.
DHCP Server
If Enabled, the Access Point will allocate IP Addresses to PCs
(DHCP clients) on your LAN when they start up. The default (and
recommended) value is Enabled.
The Start IP Address and Finish IP Address fields set the values
used by the DHCP server when allocating IP Addresses to DHCP
clients. This range also determines the number of DHCP clients
supported.
Wins Server
Name/IP Address
Enter the server name or IP address of the Wins Server.
TimeZone
TimeZone
Choose the Time Zone for your location from the drop-down list. If
your location is currently using Daylight Saving, enable the Adjust for
Daylight Saving Time checkbox.
You must UNCHECK this checkbox when Daylight Saving Time
finishes.
Wireless Access Point User Guide
12
NTP Server
Name/IP Address
Enter the server name or IP address of the NTP.
Access Point Setup
13
System Advanced Settings Screen
Click Advanced Settings on the System menu to view a screen like the following.
Figure 8: System Advanced Settings Screen
Data - System Advanced Settings Screen
VLAN
Enable 802.1Q
VLAN
This option is only useful if the hubs/switches on your LAN support the
VLAN standard.
Native VLAN
Enter the desired value for the Native VLAN. Default value is 1.
AP Management
VLAN
Define the VLAN ID used for management.
VLAN List
Define the unique ID value (1 - 4094) for each VAP.
Network Integrality Check
Enable Network
Integrality Check
If enabled, the AP will disable the wireless connection if the wired
connect of AP is invalid.
Enable Bonjour
Enable Bonjour
If checked, the Bonjour will enable applications to discover the devices
and the services on IP networks. Now, this AP only publish http and
https service.
LLTD
Enable Link
Layer Topology
Discovery
Enable this if you want to use Link Layer Topology Discovery protocol
(LLTD) feature.
STP
Enable Spanning
tree Protocol
Enable this if you want to use this feature.
802.1x Supplicant
Enable 802.1x
Supplicant
Enable this if your network requires this AP to use 802.X authentication
in order to operate.
Authentication
Authentication via MAC Address
Select this if you want to Use MAC Address for Authentication.
Authentication via Name and Password
Select this if you want to Use name and password for Authentication.
Wireless Access Point User Guide
14
Wireless Screens
There are 6 configuration screens available:
Basic
Virtual APs
Radius Server Settings
Access Control
Advanced Settings
WIFI Protected Setup
Basic Screen
The settings on this screen must match the settings used by Wireless Stations.
Click Basic Settings on the Wireless menu to view a screen like the following.
Figure 9:Wireless Basic Screen
Data - Wireless Basic Settings Screen
Operation
Turn Radio On
Enable this to use the wireless feature.
Wireless Mode
Select the desired option:
Disable - select this if for some reason you do not this AP to
transmit or receive at all.
Access Point Setup
15
802.11b - if selected, only 802.11b connections are allowed.
802.11g wireless stations will only be able to connect if they are
fully backward-compatible with the 802.11b standard.
802.11g - only 802.11g connections are allowed. If you only have
802.11g, selecting this option may provide a performance improvement over using the default setting.
802.11n - only 802.11n connections are allowed. If you only have
802.11n, selecting this option may provide a performance improvement over using the default setting.
802.11b and 802.11g - this will allow connections by both
802.11b and 802.11g wireless stations.
802.11n and 802.11g - this will allow connections by both
802.11n and 802.11g wireless stations.
Mixed 802.11n/802.11g/802.11b - this is the default, and will
allow connections by 802.11n, 802.11b and 802.11g wireless stations.
Auto Channel
Scan
If "Enable" is selected, the Access Point will select the best available
Channel.
Channel
/Frequency
If you experience interference (shown by lost connections and/or slow
data transfers) you may need to experiment with manually setting
different channels to see which is the best.
Channel Bandwidth
Select the desired bandwidth from the list.
Extension
Sub-Channel
Select Above or Below Primary Channel from the list.
Wireless Access Point User Guide
16
Operation Mode
Select the desired mode:
Access Point - operate as a normal Access Point
Bridge (Point-to-Point) - Bridge to a single AP. You must
provide the MAC address of the other AP in the PTP Bridge AP
MAC Address field.
Bridge (Multi-Point) - Select this only if this AP is the "Master"
for a group of Bridge-mode APs. The other Bridge-mode APs
must be set to Point-to-Point Bridge mode, using this AP's MAC
address. They then send all traffic to this "Master".
Wireless Client/Repeater - Act as a client or repeater for another
Access Point. If selected, you must provide Remote SSID and the
address (MAC address) of the other AP in the Remote AP MAC
Address field. In this mode, all traffic is sent to the specified AP.
Wireless Detection - This mode will turn the access point into a
wireless Monitor. A "Rouge AP" is an Access Point which should
not be in use, and so can be considered to be providing unauthorized access to your LAN.
No Security - If checked, then any AP operating with security
disabled is considered to be a Rogue AP.
Not in Legal AP List - If checked, then any AP not listed in
the "Legal AP List" is considered to be a Rogue AP. If
checked, you must maintain the Legal AP List.
Define Legal AP - Click this to open a sub-screen where you
can modify the "Legal AP List". This list must contain all
known APs, so must be kept up to date.
Remote MAC
Address
You must enter the MAC address(es) of other AP(s) in the fields.
Select Remote
AP
If the other AP is on-line, you can click the "Select Remote AP" button
and select from a list of available APs.
Access Point Setup
17
Virtual AP Settings
Clicking the Virtual APs link on the Wireless menu will result in a screen like the following.
Bridge (Multi-Point) - Select this only if this AP is the "Master" for a group of Bridge-
mode APs. The other Bridge-mode APs must be set to Point-to-Point Bridge mode, using
this AP's MAC address. They then send all traffic to this "Master".
Figure 10: Virtual AP Settings
Data - Virtual AP Settings Screen
VAPs
VAP List
All available VAPs are listed. For each VAP, the following data
is displayed:
*
If displayed before the name of the VAP, this indicates
the VAP is currently enabled. If not displayed, the
VAP is currently disabled.
VAP Name
The current VAP name is displayed.
[SSID]
The current SSID associated with this VAP.
Security System
The current security system (e.g. WPA-PSK) is displayed.
Enable Button
Enable the selected VAP.
Configure Button
Change the settings for the selected VAP.
Disable Button
Disable the selected VAP.
Isolation
Isolate all Virtual APs
from each other
If this option is enabled, wireless clients using different VAPs
(different SSIDs) are isolated from each other, so they will
NOT be able to communicate with each other. They will still be
able to communicate with other clients using the same profile,
unless the "Wireless Separation" setting on the "Advanced"
screen has been enabled.
Wireless Access Point User Guide
18
Virtual AP Screen
This screen is displayed when you select a VAP on the Virtual AP Settings screen, and click
the Configure button.
Figure 11: Virtual AP Screen
VAP Data
Enter the desired settings for each of the following:
VAP Name
Enter a suitable name for this VAP.
SSID
Enter the desired SSID. Each VAP must have a unique SSID.
Broadcast SSID
If Disabled, no SSID is broadcast.
If enabled, the SSID will then be broadcast to all Wireless Stations.
Stations which have no SSID (or a "null" value) can then adopt the
correct SSID for connections to this Access Point.
Isolation within
VAP
If enabled, then each Wireless station using the Access Point is
invisible to other Wireless stations. In most business stations, this
setting should be Disabled.
Security Settings
Select the desired option, and then enter the settings for the selected method.
The available options are:
None - No security is used. Anyone using the correct SSID can connect to your network.
Access Point Setup
19
WEP - The 802.11b standard. Data is encrypted before transmission, but the encryption
system is not very strong.
WPA-PSK - Like WEP, data is encrypted before transmission. WPA is more secure than
WEP, and should be used if possible. The PSK (Pre-shared Key) must be entered on each
Wireless station. The 256Bit encryption key is derived from the PSK, and changes frequently.
WPA2-PSK - This is a further development of WPA-PSK, and offers even greater securi-
ty, using the AES (Advanced Encryption Standard) method of encryption.
WPA-PSK and WPA2-PSK - This method, sometimes called "Mixed Mode", allows
clients to use EITHER WPA-PSK (with TKIP) OR WPA2-PSK (with AES).
WPA with Radius - This version of WPA requires a Radius Server on your LAN to
provide the client authentication according to the 802.1x standard. Data transmissions are
encrypted using the WPA standard.
If this option is selected:
This Access Point must have a "client login" on the Radius Server.
Each user must have a "user login" on the Radius Server.
Each user's wireless client must support 802.1x and provide the login data when re-
quired.
All data transmission is encrypted using the WPA standard. Keys are automatically
generated, so no key input is required.
WPA2 with Radius - This version of WPA2 requires a Radius Server on your LAN to
provide the client authentication according to the 802.1x standard. Data transmissions are
encrypted using the WPA2 standard.
If this option is selected:
This Access Point must have a "client login" on the Radius Server.
Each user must authenticate on the Radius Server. This is usually done using digital
certificates.
Each user's wireless client must support 802.1x and provide the Radius authentication
data when required.
All data transmission is encrypted using the WPA2 standard. Keys are automatically
generated, so no key input is required.
WPA and WPA2 with Radius - EITHER WPA or WPA2 require a Radius Server on
your LAN to provide the client authentication according to the 802.1x standard. Data
transmissions are encrypted using EITHER WPA or WPA2 standard.
If this option is selected:
This Access Point must have a "client login" on the Radius Server.
Each user must authenticate on the Radius Server. This is usually done using digital
certificates.
Each user's wireless client must support 802.1x and provide the Radius authentication
data when required.
All data transmission is encrypted using EITHER WPA or WPA2 standard. Keys are
automatically generated, so no key input is required.
802.1x - This uses the 802.1x standard for client authentication, and WEP for data encryp-
tion.
If this option is selected:
This Access Point must have a "client login" on the Radius Server.
Each user must have a "user login" on the Radius Server.
Wireless Access Point User Guide
20
Each user's wireless client must support 802.1x and provide the login data when re-
quired.
All data transmission is encrypted using the WEP standard. You only have to select
the WEP key size; the WEP key is automatically generated.
Access Point Setup
21
Security Settings - None
Figure 12: Wireless Security - None
No security is used. Anyone using the correct SSID can connect to your network.
Security Settings - WEP
This is the 802.11b standard. Data is encrypted before transmission, but the encryption system
is not very strong.
Wireless Access Point User Guide
22
Figure 13: WEP Wireless Security Screen
Data - WEP Screen
WEP
Data
Encryption
Select the desired option, and ensure your Wireless stations have the
same setting:
64 Bit Encryption - Keys are 10 Hex (5 ASCII) characters.
128 Bit Encryption - Keys are 26 Hex (13 ASCII) characters.
152 Bit Encryption - Keys are 32 Hex (16 ASCII) characters.
Authentication
Normally, you can leave this at “Automatic”, so that Wireless Stations
can use either method ("Open System" or "Shared Key".).
If you wish to use a particular method, select the appropriate value "Open System" or "Shared Key". All Wireless stations must then be set
to use the same method.
Key Input
Select "Hex" or "ASCII" depending on your input method. (All keys
are converted to Hex, ASCII input is only for convenience.)
Key Value
Enter the key values you wish to use. The default key, selected by the
radio button, is required. The other keys are optional. Other stations
must have matching key values.
Passphrase
Use this to generate a key or keys, instead of entering them directly.
Enter a word or group of printable characters in the Passphrase box
and click the "Generate Key" button to automatically configure the
WEP Key(s).
Access Point Setup
23
Security Settings - WPA-PSK
Like WEP, data is encrypted before transmission. WPA is more secure than WEP, and should
be used if possible. The PSK (Pre-shared Key) must be entered on each Wireless station. The
256Bit encryption key is derived from the PSK, and changes frequently.
Figure 14: WPA-PSK Wireless Security Screen
Data - WPA-PSK Screen
WPA-PSK
Network Key
Enter the key value. Data is encrypted using a 256Bit key derived
from this key. Other Wireless Stations must use the same key.
WPA Encryption
The encryption method is TKIP. Wireless Stations must also use
TKIP.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Wireless Access Point User Guide
24
Security Settings - WPA2-PSK
This is a further development of WPA-PSK, and offers even greater security, using the AES
(Advanced Encryption Standard) method of encryption.
Figure 15: WPA2-PSK Wireless Security Screen
Data - WPA2-PSK Screen
WPA2-PSK
Network Key
Enter the key value. Data is encrypted using a 256Bit key derived
from this key. Other Wireless Stations must use the same key.
WPA Encryption
The encryption method is AES. Wireless Stations must also use
AES.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Access Point Setup
25
Security Settings - WPA-PSK and WPA2-PSK
This method, sometimes called "Mixed Mode", allows clients to use EITHER WPA-PSK (with
TKIP) OR WPA2-PSK (with AES).
Figure 16: WPA-PSK and WPA2-PSK Wireless Security Screen
Data - WPA-PSK and WPA2-PSK Screen
WPA-PSK and WPA2-PSK
Network Key
Enter the key value. Data is encrypted using this key. Other
Wireless Stations must use the same key.
WPA Encryption
The encryption method is TKIP for WPA-PSK, and AES for
WPA2-PSK.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Wireless Access Point User Guide
26
Security Settings - WPA with Radius
This version of WPA requires a Radius Server on your LAN to provide the client authentication according to the 802.1x standard. Data transmissions are encrypted using the WPA
standard.
Figure 17: WPA with Radius Wireless Security Screen
Data - WPA with Radius Screen
WPA with Radius
WPA Encryption
The encryption method is TKIP. Wireless Stations must also use
TKIP.
Group Key Update
This refers to the key used for broadcast transmissions. Enable
this if you want the keys to be updated regularly.
Key Lifetime
This field determines how often the Group key is dynamically
updated. Enter the desired value.
Update Group key
when any membership
terminates
If enabled, the Group key will be updated whenever any member
leaves the group or disassociates from the Access Point.
Loading...