background image

CHAPTER 2 Access Point Setup

Linksys

16

Security Settings - WPA/WPA2-Personal

This method, sometimes called Mixed Mode, allows clients to use either WPA-
Personal or WPA2-Personal 

 

Figure 20: WPA/WPA2-Personal Wireless Security Screen

Data - WPA/WPA2-Personal Screen

WPA/WPA2-Personal 

WPA Algorithm

The encryption method is TKIP or AES 

Pre-shared Key

Enter the key value  It is 8 to 63 ASCII characters or 
64 HEX characters  Other wireless stations must 
use the same key 

Key Renewal

Specify the value of Group Key Renewal  It’s a value 
from 600 to 36000, and default is 3600 seconds  

WPA automatically changes secret keys after a certain 
period of time  The group key interval is the period 
of time in between automatic changes of the group 
key, which all devices on the network share  

Constantly keying the group key protects your 
network against intrusion, as the would-be intruder 
must cope with an ever-changing secret key 

Security Settings - WPA2-Enterprise

This version of WPA2-Enterprise requires a RADIUS Server on your LAN to 
provide the client authentication  Data transmissions are encrypted using the 
WPA2 standard 

 

Figure 21: WPA2-Enterprise Wireless Security Screen

 

Summary of Contents for LAPAC1200

Page 1: ...LAPAC1200 AC1200 Dual Band Access Point User Guide...

Page 2: ...Detection 19 Scheduler 20 Scheduler Association 21 Connection Control 21 Rate Limit 22 QoS 22 Workgroup Bridge 23 Advanced Settings 24 CHAPTER 3 OPERATION AND STATUS 27 Operation 27 System Summary 27...

Page 3: ...40 Using WPA2 PSK 40 Using WPA2 Enterprise 41 802 1x Server Setup Windows 2000 Server 41 802 1x Client Setup on Windows XP 46 Using 802 1x Mode without WPA 49 Copyright 2014 All Rights Reserved Docum...

Page 4: ...d Booting process or update failed hard reset or service required Port and Button Power Port Connect the AC power adapter to this port NOTE Use only the adapter that came with your access point Ethern...

Page 5: ...rnet cable through the hole 5 Connect the Ethernet cable and or AC power adapter to your device 6 Slide the device into the bracket Turn clockwise until it locks into place Ceiling Installation 1 Sele...

Page 6: ...r connected to your network Enter the IP address of your access point By factory default the IP address will be assigned by a DHCP server usually the network router If there is no DHCP serveronyournet...

Page 7: ...ress screen Figure 4 configure the IP address of the device then click Next If you want to configure more than 4 SSIDs please go to Configuration Wireless Basic Settings The access point supports up t...

Page 8: ...re correct and then click Submit to save the changes Figure 7 Setup Wizard Summary 9 Click Finish to leave the wizard Figure 8 Setup Wizard Finish User Accounts Click User Accounts on the Administrati...

Page 9: ...Time Screen Data Time Screen Time Current Time Display current date and time of the system Manually Set date and time manually Automatically When enabled default setting the access point will get the...

Page 10: ...for the SMTP server The port is a value from1to65535anddefaultis25 Username EntertheUsernametologintoyourSMTPserver TheUsernamecanincludeupto32characters Special charactersareallowed Password Enterth...

Page 11: ...rotocol Secure can provide more secure communication with the SSL TLS protocol which support data encryption to HTTP clients and servers Enable to allow Web access by HTTPS protocol HTTPS Port Specify...

Page 12: ...1 to 32 characters Special characters are allowed SNMPv3 Settings SNMPv3 Settings Configure the SNMPv3 settings if you want to use SNMPv3 Username Enter the username It includes 0 to 32 characters Spe...

Page 13: ...tion Workgroup Bridge can only be enabled when VLAN function is disabled Untagged VLAN Enables or disables VLAN tagging If enabled default traffic is untagged when VLAN ID is equal to Untagged VLAN ID...

Page 14: ...only when Auto Negotiation is disabled The option can be Half or Full default Operational Duplex Mode Displays the current duplex mode of the Ethernet port Flow Control Enable or disable flow control...

Page 15: ...point to be discovered by switch by LLDP MED protocol Information such as product name device name firmware version IP address MAC address and so on will be advertised Wireless Screens There are ten...

Page 16: ...el when device boots up If you experience lost connections and or slow data transfers experiment with manually setting different channels to see which is the best SSID Settings SSID Name Enter the des...

Page 17: ...ES Advanced Encryption Standard method This method sometimes called Mixed Mode allows clients to use either WPA Personal with TKIP or WPA2 Personal with AES WPA2 Enterprise Requires a RADIUS Server on...

Page 18: ...e WEP key It consists of 1 to 30 characters Key Value Enter a key in hexadecimal format Security Settings WPA2 Personal This is a further development of WPA Personal and offers even greater security F...

Page 19: ...enewal Specify the value of Group Key Renewal It s a value from600to36000 anddefaultis3600seconds WPAautomaticallychangessecretkeysafteracertain period of time The group key interval is the period of...

Page 20: ...1812 Backup Shared Secret Enter the key value to match the Backup RADIUS Server It consists of 1 to 64 characters WPA Algorithm The encryption method is AES Key Renewal Timeout SpecifythevalueofGroup...

Page 21: ...changes secret keys after a certain period of time The group key interval is the period of time between automatic changes of the group key which all devices on the network share Constantly keying the...

Page 22: ...tected Rogue AP List Action Click Trust to move the AP to the Trusted AP List MAC Address The MAC address of the Rogue AP SSID The SSID of the Rogue AP Channel The channel of the Rogue AP Security The...

Page 23: ...duler Operational Status Status The operational status of the scheduler Reason The detailed reason for the scheduler operational status It includes the following situations System time is outdated Sch...

Page 24: ...s when the SSID is enabled Connection Control Exclude or allow only listed client stations to authenticate with the access point Figure 27 Connection Control Screen Data Connection Control Screen SSID...

Page 25: ...formance derived from IEEE Standard 802 11 specifications draft specificationsfor802 11ac Actualperformancecanvary includinglowerwireless network capacity data throughput rate range and coverage Perfo...

Page 26: ...and background For an application to receive the benefits of WMM QoS both it and the client running that application have to have WMM enabled Legacy applications that do not support WMM and applicatio...

Page 27: ...ich Workgroup Bridge will connect or click Site Survey button to choose from the list You must do this for Workgroup Bridge to connect to a remote access point Remote MAC Address Normally Workgroup Br...

Page 28: ...ct the guard interval manually for Wireless N connections The two options are Short 400 nanoseconds and Long 800 nanoseconds The default is Auto CTS Protection Mode CTS Clear To Send ProtectionModeboo...

Page 29: ...n Threshold Enter the fragmentation threshold an integer from 256 to 2346 The default is 2346 The fragmentation threshold is a way of limiting the size of packets frames transmitted over the network I...

Page 30: ...en used to identify device model number and region Firmware Version The version of the firmware currently installed Firmware Checksum The checksum of the firmware running in the access point Hardware...

Page 31: ...ed to the network VLAN 1 is the default ID for untagged VLAN Management VLAN Displays the Management VLAN ID The VLAN associated with the IP address you use to connect to the access point Provide a nu...

Page 32: ...ddress MAC address of the SSID VLAN ID VLAN ID of the SSID Priority The 802 1p priority of the SSID Scheduler State Current scheduler status of the SSID N A No scheduler is enabled on the SSID or the...

Page 33: ...atistics Statistics provides real time transmitted and received statistics data based on each SSID per Radio and LAN interface Figure 36 Statistics Screen Data Statistics Wireless Radio Select the des...

Page 34: ...e generated by each single log entry such as login attempts and configuration changes Figure 37 Log View Screen Data Log View Log Messages Log Messages Show the log messages Buttons Refresh Update the...

Page 35: ...ordisconnecttheEthernet cable Device will reboot automatically after firmware upgrade is completed Figure 38 Firmware Upgrade Screen To perform the firmware upgrade from local PC 1 Click the Browse bu...

Page 36: ...the settings to a file on your computer You can later restore the access point s settings from this file if necessary To create a backup file of the current settings Click Backup If you don t have yo...

Page 37: ...Screen Data Factory Default Screen Factory Default If you click Save when the Yes radio button is selected your current configuration file will be deleted and the system will reboot The access point...

Page 38: ...red number from the drop list 5 10 15 Unlimited Packet Capture Packet Capture is used to capture and store 802 3 packets received and transmitted by the access point based on one specified network int...

Page 39: ...ion such as configuration file system status and statistics data hardware information operational status The information is useful in troubleshooting and working with technical support Figure 44 Diagn...

Page 40: ...ing followed by the default name of the wireless access point Default name is lap followed by the last five characters of device MAC address e g ping lap964d6 3 Check the output of the ping command to...

Page 41: ...ss point all using the same ID SSID form a Basic Service Set BSS Using the same SSID is essential Devices with different SSIDs are unable to communicate with each other ESS ESSID A group of wireless s...

Page 42: ...It should be used if possible WPA Enterprise This version of WPA requires a RADIUS server on your LAN to provide the client authentica tion according to the 802 1X standard Data transmissions are enc...

Page 43: ...SMB5G for radio 2 Note The SSID is case sensitive WirelessSecurity Each wireless station must be set to use WEP data encryption The key size 64 bit 128 bit must be set to match the access point Thekey...

Page 44: ...name However your RADIUS server may ignore this and use the IP address instead The Shared Key set on the Security Screen of the access point must match the Shared Secret value on the RADIUS server Enc...

Page 45: ...icate Authority and click Next Figure 48 CA Screen 7 Click Next if you don t want to change the CA s configuration data 8 Installation will warn you that Internet Information Services are running and...

Page 46: ...f preferred Click Next 8 Select Yes I want to configure these options now and click Next 9 Enter the router address for the current subnet The router address may be left blank if there is no router Cl...

Page 47: ...hority Screen 3 Select Authenticated Session and Smartcard Logon select more than one by holding down the Ctrl key Click OK Figure 53 Template Screen 4 Select Start Programs Administrative Tools Activ...

Page 48: ...ay take a few minutes to take effect InternetAuthenticationService RADIUS Setup 1 Select Start Programs AdministrativeTools InternetAuthenticationService 2 Right click on Clients and select New Client...

Page 49: ...emoteAccessLoginforUsers 1 Select Start Programs Administrative Tools Active Directory Users and Computers 2 Double click on the user who you want to enable 3 Select the Dial in tab and enable Allow a...

Page 50: ...authentication 2 Start your Web browser In the Address box enter the IP address of the Windows 2000 Server followed by certsrv e g http 192 168 0 2 certsrv 3 You will be prompted for a user name and p...

Page 51: ...ge Click Yes Figure 67 Root Certificate Screen 9 Certificate setup is now complete 802 1xAuthenticationSetup 1 Open the properties for the wireless connection by selecting Start Control Panel Network...

Page 52: ...or a wireless network follow this procedure 1 Click on the Wireless Networks tab Figure 69 Wireless Networks Screen 2 Select the wireless network from the Available Networks list and click Configure 3...

Page 53: ...suring it matches the WEP key used on the access point Figure 71 Properties Screen NOTE On some systems the 64 bit WEP key is shown as 40 bit and the 128 bit WEP key is shown as 104 bit This differenc...

Page 54: ...014 Belkin International Inc and or its affiliates All rights reserved BELKIN LINKSYS and many product names and logos are trademarks of the Belkin group of companies Third party trademarks mentioned...

Reviews: