SOLWIZE KWG-6080 User Manual Download Page 37 | Manualshive

Page: 37 / 46

SOLWIZE KWG-6080 User Manual Download Page 37

32

3.5.2. Security

IEEE 802.11n security settings include

SSID broadcasts

,

Wireless client isolation

,

Security mode

, ,

MAC-Address-Based Access Control

.

TABLE OF SECURITY SETTING DEFINITIONS

SSID The network name

SSID Broadcasts

Enable or Disable SSID broadcast.
Enabling this feature broadcasts the SSID across the network.

Wireless Client

Isolation

When the Access Point is in AP/Bridge mode, wireless-to-wireless traffic can
be blocked so that the wireless clients cannot see each other. This capability
can be used in hotspots applications to prevent wireless hackers from attack-
ing other wireless users’ computers.

Security mode

The Security options for the primary SSID (SSID1) are up to 9 security modes
depending on AP model variations:

Open System.

No authentication, no data encryption.

«
...
35
36
37
38
39
...
»

Summary of Contents for KWG-6080

Page 1: ...i KWG 6080 802 11n Wall AP User Guide ...

Page 2: ...ii ...

Page 3: ...en the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help FCC Caution To assure continued compliance example use only shielded interface cables when connecting to computer or peripheral devices Any changes or modifications not expressly approved by the part...

Page 4: ...er special attention must be paid to the dangers of electric shock and static electricity when work ing with electrical equipment All guidelines of this and of the computer manufacture must therefore be allowed at all times to ensure the safe use of the equipment EU Countries Intended for Use The ETSI version of this device is intended for home and office use in Austria Belgium Denmark Finland Fra...

Page 5: ... 15 2 6 1 Checking if the IEEE 802 11n Related Settings Work 15 2 6 2 Checking if the TCP IP Related Settings Work 16 3 Advanced Network Management 17 3 1 Overview 17 3 1 1 Menu Structure 17 3 1 2 Apply and Cancel Commands 18 3 2 Viewing Status 19 3 2 1 Associated Wireless Clients 19 3 2 2 System Log 19 3 2 3 Link Monitor 20 3 3 General Operations 21 3 3 1 Specifying Operational Mode 21 3 3 2 Chan...

Page 6: ...e can be configured to work in IEEE 802 11n only IEEE 802 11g only IEEE 802 11g only or mixed mode 802 11n 802 11g and 802 11b simultaneously 64 bit and 128 bit WEP Wired Equivalent Privacy For authentication and data encryption Enabling Disabling SSID Broadcasts When the Access Point is in AP Bridge mode the administrator can enable or disable the SSID broadcasts functionality for security rea so...

Page 7: ...coverage Link Integrity When the Access Point is in AP Bridge mode and its Ethernet LAN inter face is detected to be disconnected from the wired network all currently associated wire less clients are disassociated by the Access Point and no wireless client can associate with it Associated Wireless Clients Status When the Access Point is in AP Bridge mode it can show the status of all wireless clie...

Page 8: ...ocol MIB I MIB II IEEE 802 1d IEEE 802 1x are supported UPnP The Access Point responds to UPnP discovery messages so that a Windows XP user can locate the Access Point in My Network Places and use a Web browser to config ure it System Log For system operational status monitoring Local log System events are logged to the on board RAM of the Access Point and can be viewed using a Web browser Remote ...

Page 9: ...ss Point Please refer to the definitions be low A WAN Green solid when connected flashing when data activity B Wireless Green solid when on flashing when wireless data activity C RJ 45 LAN port Amber solid when LAN connection Green solid when LAN connection flashing when activity ...

Page 10: ... for network and power input is at the rear of the wall AP 1 Plug one connector of an Ethernet cable to an available port of a PoE injector or switch 2 Plug the other connector of the Ethernet cable to the WAN port on the rear of the Access Point NOTE The Access Point is 802 3af compatible 2 2 Installing the Access Point The wall mount AP is supplied with a metal fascia affixed to a quad port euro...

Page 11: ... Typically you will need a box of at least 47mm internal depth Viewed from the side shows the fixing screw used to locate the AP into the metal fascia You can loosen the screw to allow the AP to be slid forwards and backwards in the housing Where a shallow box is used then a 10mm spacer can be used to increase the workable depth ...

Page 12: ...e in the same IP range You can connect the managing computer via the rear WAN connection of via the front LAN connec tion as shown below Fig 1 Fig 1 Connecting a managing computer and the Access Point via Ethernet You can use either a standard Ethernet cable included in the package or a switch hub with two nor mal Ethernet cables NOTE You must always have a LAN connection with PoE connected to the...

Page 13: ...ill be prompted to enter the user name and password to gain the right to access the Web based Network Manager For first time configuration use the default user name admin and default password admin respectively Fig 2 The Login page NOTE It is strongly recommended that the password be changed for security reasons On the start page click the General Password link to change the value of the password ...

Page 14: ...ess Point supports two operational modes AP Bridge This mode provides both Access Point and Static LAN to LAN Bridging functionality The static LAN to LAN bridging function is supported through Wireless Distribution System WDS AP Client This mode is for Dynamic LAN to LAN Bridging The AP Client automati cally establishes bridge links with APs from any vendors ...

Page 15: ... of wireless link is established between an IEEE 802 11 Station STA and an IEEE 802 11 Access Point AP An STA is usually a client computer PC or PDA with a WLAN network interface card NIC The AP Client mode is actually an STA WDS This type of wireless link is established between two IEEE 802 11 Access Point s Wireless packets transmitted along the WDS link comply with the IEEE 802 11 WDS Wireless ...

Page 16: ...ireless interface and Ethernet interface other type of traffic such as IPX and AppleTalk is not forwarded TIP When the Access Point is configured to be in AP Client it can be used as an Ethernet to wireless network adapter For example a notebook computer equipped with an Ethernet adapter can be connected to this device with a crossover Ethernet cable for wireless connectivity to another access poi...

Page 17: ... an appropriate regulatory domain to comply with local regulations The SSID of a wireless client computer and the SSID of the Access Point must be identical for them to communicate with each other NOTE Put a check in the Auto Channel Selection checkbox to allow the Frequency Channel of the Access Point to be automatically set Fig 6 IEEE 802 11n communication settings 1 Click on Wireless Settings f...

Page 18: ...e of the Access Point in order for a wireless link to be established 2 5 1 Configure IEEE 802 11 Settings Before the TCP IP networking system of a wireless client computer can communicate with other hosts the underlying wireless link must be established between a wireless enabled computer and the Access Point To establish a wireless link Launch the configuration monitoring utility provided by the ...

Page 19: ...r better wireless security IEEE 802 1x capability of the Access Point must be enabled so that only authenticated wireless users can access the wireless network 2 5 2 Configure TCP IP Related Settings Use Windows Network Control Panel Applet to change the TCP IP settings of the client computers so that the IP addresses of the client computers and the IP address of the Access Point are in the same I...

Page 20: ...1 Checking if the IEEE 802 11n Related Settings Work To check if a wireless client computer can associate with the AP 1 Launch the configuration monitoring utility provided by the vendor of the installed WLAN NIC 2 Check if the client computer is associated to an access point and the access point is the Access Point If the check fails see Appendix B 1 Wireless Settings Problems for troubleshooting...

Page 21: ...ay of the wireless client computer Then press Enter If the gateway responds go to the next step else see Appendix B 2 TCP IP Settings Prob lems for troubleshooting 4 Type ping 1st_dns_server where 1st_dns_server is a placeholder for the IP address of the primary DNS server of the wireless client computer Then press Enter If this DNS server responds go to the next step else see Appendix B 2 TCP IP ...

Page 22: ... 3 1 Overview To enter simply click on the Advanced of Wireless Settings option on the Home page after login Fig 8 The Summary page 3 1 1 Menu Structure The left side of the screen contains a menu for you to carry out commands Here is a brief description of the menu options Summary Click this tab to view a screen with at a glance status information ...

Page 23: ...rypting wire less data IEEE 802 1x RADIUS Modify IEEE 802 1x Port Based Network Access Control and RADIUS Remote Authentication Dial In User Service security settings Administration Administration related settings of the Access Point Operational Mode Operational mode of the Access Point AP Bridge or AP Client Management Modify the Password change the language and time zone setting Upgrade Firmware...

Page 24: ...ress user name if the client has been IEEE 802 1x authenticated number of bytes it has sent number of bytes it has received and the time of its last activity is shown Fig 10 Status of associated wireless clients 3 2 2 System Log System events are recorded in the memory of the Access Point The logged information is useful for troubleshooting purposes ...

Page 25: ...s Point is in AP Client mode use the Link Monitor feature to monitor the link quality and signal strength of the connection Larger values mean better wireless connectivity to the Access Point Fig 12 Link monitor NOTE The values are updated every 20 seconds ...

Page 26: ...red hosts on the Ethernet side and wireless host s on the wireless side There are 2 types of wireless links as specified by the IEEE 802 11 standard STA AP This type of wireless link is established between an IEEE 802 11 Station STA and an IEEE 802 11 Access Point AP An STA is usually a client computer PC or PDA with a WLAN network interface card NIC The AP Client mode is actually an STA WDS This ...

Page 27: ... Point that is using the matched SSID and establishes a bridge link with the scanned Access Point NOTE Although it s more convenient to use dynamic bridging it has a limitation the AP Client only can forward TCP IP packets between its wireless interface and Ethernet interface other type of traffic such as IPX and AppleTalk is not forwarded TIP When the Access Point is configured to be in AP Client...

Page 28: ...g 14 Password 3 3 3 Managing Firmware 3 3 3 1 Upgrading Firmware by HTTP Fig 15 Firmware upgrade by HTTP To upgrade firmware of the Access Point by HTTP 1 Click Browse and then select a correct firmware bin file The firmware file path will be shown in the Firmware file name text box 2 Click Apply to begin the upgrade process ...

Page 29: ...ration set tings will be removed 3 4 Configuring TCP IP Related Settings 3 4 1 Addressing The IP address of the Access Point can be manually set STATIC fixed IP or automatically as signed by a DHCP server on the LAN Obtain from a DHCP Server If you are manually setting the IP address Subnet mask and Default gateway settings set them appropriately so that they comply with your LAN environment In ad...

Page 30: ...nly one DHCP server on the LAN otherwise DHCP would not work prop erly If there is already a DHCP server on the LAN disable the DHCP server functionality of the Ac cess Point NOTE By default the DHCP server function is disabled 3 4 2 2 Static DHCP Mappings IP addresses of servers are often static so that clients could always locate the servers by the static IP addresses By Static DHCP Mappings you...

Page 31: ...ig 19 Static DHCP mappings To always assign a static IP address to a specific DHCP client 1 Specify the MAC address of the DHCP client and the IP address to be assigned to it 2 Apply the setting of changes ...

Page 32: ...int functionality can be disabled so that no wireless client can associate with the Access Point Fig 20 Basic IEEE 802 11n communication settings The RF type of the WLAN interface can be configured to work in IEEE 802 11n only n Only IEEE 802 11g only g Only or mixed mode Mixed 802 11n and 802 11g and 802 11b simultaneously The number of available RF channels depends on local regulations therefore...

Page 33: ...by Ethernet By Wireless Distribution System WDS APs can communicate with one another wirelessly For example in Fig 22 AP 2 acts as an access point for the notebook computers and it forwards packets sent from the notebook computers to AP 1 through WDS Then AP 1 forwards the packets to the Ethernet LAN Packets destined for the note book computers follow a reverse path from the Ethernet LAN through t...

Page 34: ...29 Fig 23 LAN to LAN bridging NOTE A Access Point can have up to 6 WDS links to other APs or wireless bridges ...

Page 35: ...lect the corresponding Enabled check box For example assume you want two Access Point s with MAC addresses 00 02 65 01 62 C5 and 00 02 65 01 62 C6 to establish a WDS link between them On Access Point 00 02 65 01 62 C5 set the peer MAC address of port 1 to 00 02 65 01 62 C6 and on AP 00 02 65 01 62 C6 set the peer MAC address of port 1 to 00 02 65 01 C5 ...

Page 36: ...e for an example network planning diagram Fig 25 Sample wireless bridge network topology WARNING Don t let your network topology consisting of wireless bridges Ethernet switches Ethernet links and WDS links contain loops If any loops exist packets will circle around the loops and network performance will be seriously degraded Fig 38 Network topology containing a loop If external high gain directio...

Page 37: ...the SSID across the network Wireless Client Isolation When the Access Point is in AP Bridge mode wireless to wireless traffic can be blocked so that the wireless clients cannot see each other This capability can be used in hotspots applications to prevent wireless hackers from attack ing other wireless users computers Security mode The Security options for the primary SSID SSID1 are up to 9 securi...

Page 38: ...annot associate with the AP Fig 26 Basic IEEE 802 11n security settings When the Wireless client isolation setting is set to This AP Only wireless clients of this Access Point cannot see each other and wireless to wireless traffic is blocked This feature is useful for WLANs deployed in public places In this way hackers have no chance to attack other wireless users in a hotspot When the Wireless cl...

Page 39: ...en STA 2 and STA 3 which are associated with different APs is still allowed Choose from up to 7 security modes Open System No authentication no data encryption Static WEP WEP Wired Equivalent Privacy keys must be manually configured Static TKIP WPA PSK Only TKIP Temporal Key Integrity Protocol mechanism of WPA Wi Fi Protected Access is enabled In this mode you have to specify the Pre shared key wh...

Page 40: ...n is used if WEP data encryption is enabled In rare cases Open System authentication may be used when WEP data encryption is enabled The Authentication algo rithm setting is provided for better compatibility with wireless clients with various WLAN network adapters There are three options available including Open System Shared Key and Auto When WEP is enabled by a security mode the Key length can b...

Page 41: ...pecify the MAC address of a wireless client to be denied access and then click Add 4 Repeat Steps 3 for other wireless clients To grant wireless clients access to the wireless network 1 Select Enabled from the Functionality drop down list 2 Set the Access control type to inclusive 3 Specify the MAC address of a wireless client to be denied access and then click Add 4 Repeat Steps 3 for other wirel...

Page 42: ...ces by HTTP Fig 29 UPnP settings When the UPnP functionality is enabled you can see the Access Point in My Network Places of Windows XP The Access Point can be given a friendly name that will be shown in My Network Places Double clicking the Access Point icon in My Network Places will launch the default Web browser for you to configure the AP ...

Page 43: ...Transmit Power High MAC Address See the label on the accompanying PCMCIA card or the label on the housing of the AP Security Mode Disable MAC Address Based Access Control Disabled Access Control Table Type Inclusive Wireless Client Isolation Disabled AP Load balancing Disabled Link Integrity Disabled LAN Interface Method of obtaining an IP Address STATIC fixed IP IP Address 192 168 100 1 if can t ...

Page 44: ... B 1 Wireless Settings Problems The wireless client computer cannot associate with the Access Point Is the wireless client in infrastructure mode Check the operating mode of the wireless adapter Is the SSID identical to that of the Access Point Verify that the SSID setting of the wireless adapter matches that of the Access Point Is the WEP enabled If necessary ensure that the appropriate WEP setti...

Page 45: ...rrespondent host and sends further packets to this IP address As illustrated in Fig 30 the communication path could be broken at some of the stages The OS provided network diagnostic tool ping exe can be employed to find out TCP IP related commu nication problems NOTE If two or more NICs are installed and operating on a client computer TCP IP may not work properly due to incorrect entries in the r...

Page 46: ...ireless Router AP Browser to get the information see Appendix B 3 The default gateway of the client computer does not respond to ping from the client computer Solve the preceding problem first Are the IP address of the Access Point and the IP address of the client computer in the same IP subnet If you cannot find any incorrect settings of the AP the default gateway may be really down or there are ...

Reviews:

No comments