background image

WG103 ProSafe 802.11g Wireless Access Point Reference Manual

Wireless Security

3-7

v1.0, February 2009

Different wireless access points within an ESS can use different channels. To reduce 
interference, adjacent wireless access points 

should

 use different channels. 

Roaming is the ability of wireless stations to connect wirelessly when they physically 
move from one BSS to another within the same ESS. The wireless station 
automatically changes to the wireless access point with the least interference or best 
performance.

Broadcast Wireless Network Name (SSID)

. These radio buttons let you enable and 

disable the SSID broadcast. If disable the SSID broadcast, then only stations that know the 
SSID can connect. Disabling the SSID broadcast somewhat hampers the wireless network 
discovery feature of some products. The default is to enable SSID broadcast.

5.

Enter the authentication settings in the Edit Security Profile screen:

Network Authentication

. Use the information in the following table to set the network 

authentication.

Table 3-1. Network Authentication Types 

Field 

Description

Open System

Can be used with WEP encryption, or no encryption. See 

“Configuring 

WEP” on page 3-10

.

Shared Key

WEP must be used. At least one shared key must be entered. See 

“Configuring WEP” on page 3-10

.

Legacy 802.1x

You must configure the RADIUS Server Settings to use this option. See 

“Configuring WPA” on page 3-12

.

WPA with Radius

You must configure the RADIUS Server Settings to use this option. See 

“Configuring WPA” on page 3-12

.

WPA2 with Radius

WPA2 is a later version of WPA. Select this option only if all clients support 
WPA2. If selected, you must use AES encryption, and configure the 
RADIUS Server Settings Screen. See 

“Configuring WPA” on page 3-12

.

WPA & WPA2 with 
Radius

This selection allows clients to use either WPA (with TKIP) or WPA2 (with 
AES). If selected, encryption must be TKIP + AES, and you must also 
configure the RADIUS Server Settings Screen. See 

“Configuring WPA” on 

page 3-12

.

WPA-PSK

You must use TKIP encryption, and enter the WPA passphrase (Network 
key). See 

“Configuring WPA” on page 3-12

.

Содержание WG103 ProSafe

Страница 1: ...202 10468 01 February 2009 v 1 0 NETGEAR Inc 350 East Plumeria Drive San Jose CA 95134 USA WG103 ProSafe 802 11g Wireless Access Point Reference Manual...

Страница 2: ...al design operational function and or reliability NETGEAR reserves the right to make changes to the products described in this document without notice NETGEAR does not assume any liability that may oc...

Страница 3: ...hysical placement of the wireless access point For best results identify a location for your wireless access point according to these guidelines Away from potential sources of interference such as PCs...

Страница 4: ...t tulenevatele teistele asjakohastele s tetele English Hereby NETGEAR Inc declares that this WG103 ProSafe 802 11g Wireless Access Point is in compliance with the essential requirements and other rele...

Страница 5: ...a e WG103 ProSafe 802 11g Wireless Access Point jest zgodny z zasadniczymi wymogami oraz pozosta ymi stosownymi postanowieniami Dyrektywy 1999 5 EC Portugu s Portuguese NETGEAR Inc declara que este WG...

Страница 6: ...uctions Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the series for compliance with the regul...

Страница 7: ...Supported Standards and Conventions 1 1 Key Features 1 2 802 11g Standards based Wireless Networking 1 3 Wi Fi Multimedia WMM Support 1 4 System Requirements 1 4 What s In the Box 1 4 Hardware Descri...

Страница 8: ...s 3 4 Creating and Editing Security Profiles 3 5 Configuring the RADIUS Server Settings 3 9 Configuring WEP 3 10 Configuring WPA 3 12 Restricting Wireless Access by MAC Address 3 14 Chapter 4 Managing...

Страница 9: ...5 11 How to Configure Repeater Mode 5 13 Chapter 6 Troubleshooting Basic Functioning 6 1 No LEDs are Lit on the Wireless Access Point 6 2 The LAN LED is Not Lit 6 2 The Wireless LAN Activity LED Does...

Страница 10: ...WG103 ProSafe 802 11g Wireless Access Point Reference Manual x Contents v1 0 February 2009...

Страница 11: ...and Configuration describes how to install and configure your WG103 Access Point for wireless connectivity Chapter 3 Wireless Security describes how to wireless security for your WG103 Access Point an...

Страница 12: ...ing to these specifications Italic Emphasis books CDs file and server names extensions Bold User input IP addresses GUI screen text Fixed Command prompt CLI text code italic URL links Note This format...

Страница 13: ...ual you can choose one of the following options according to your needs Printing a page from HTML Each page in the HTML version of the manual is dedicated to a major topic Select File Print from the b...

Страница 14: ...at the top left corner of any page in the manual The PDF version of the complete manual opens in a browser window Click the print icon in the upper left corner of your browser window Revision History...

Страница 15: ...several hundred feet Most wireless access points are rated between 30 50 users simultaneously The WG103 acts as a bridge between the wired LAN and wireless clients Connecting multiple WG103 access po...

Страница 16: ...reless Access Point Operates as a standard 802 11g wireless access point Point to point bridge In this mode the WG103 communicates only with another bridge mode wireless access point You must enter th...

Страница 17: ...tified VLAN Support Short for virtual LAN a network of computers that behave as if they are connected to the same network even though they may actually be physically located on different segments of a...

Страница 18: ...0 240 V 50 60 HZ AC power source A Web browser for configuration such as Microsoft Internet Explorer 6 0 or above or Mozilla Firefox 1 5 or above At least one computer with the TCP IP protocol install...

Страница 19: ...e hardware functions of the WG103 front and rear panels are described below Front Panel Viewed from left to right the WG103 has these four status LEDs PWR TEST LAN and WLAN Figure 1 1 Table 1 1 Front...

Страница 20: ...fault factory settings LAN Ethernet link indicator Off No connection detected on the Ethernet link Amber On 10 Mbps Ethernet link detected Amber Flashing Data is being transmitted or received on the 1...

Страница 21: ...t RJ 45 port to connect to an Ethernet LAN through a device such as a hub switch router or Power Over Ethernet POE switch 6 Power socket This connects to the WG103 power adapter Bottom Panel The botto...

Страница 22: ...WG103 ProSafe 802 11g Wireless Access Point Reference Manual 1 8 Introduction v1 0 February 2009...

Страница 23: ...You Begin You need to consider the following guidelines and requirements before you can set up your wireless access point See also System Requirements on page 1 4 Wireless Equipment Placement and Ran...

Страница 24: ...tions can take slightly longer to establish Also WEP encryption can consume more battery power on a notebook computer Ethernet Cabling Requirements The wireless access point connects to your LAN via t...

Страница 25: ...network record its TCP IP configuration settings 3 Configure the computer with a static IP address of 192 168 0 210 and 255 255 255 0 as the subnet mask 4 Connect an Ethernet cable from the wireless a...

Страница 26: ...DHCP client to be disabled 1 Open a Web browser such as Internet Explorer or Mozilla Firefox 2 Connect to the wireless access point by entering its default address of http 192 168 0 229 into your brow...

Страница 27: ...on the bottom label of the wireless access point You can modify the default name with a unique name up to 15 characters long The default is netgearxxxxxx8 where xxxxx represents the first five digits...

Страница 28: ...played NTP Client Select one of the following radio buttons Enable Your wireless access point synchronizes with a Network Time Protocol NTP server Disable Your wireless access point does not synchroni...

Страница 29: ...e wireless access point get its TCP IP configuration from the DHCP server on your network The wireless access point gets the IP address subnet mask and the default gateway settings automatically from...

Страница 30: ...elect this check box you must ensure that your default gateway is configured 3 Click Apply to save your settings Configure Basic Wireless Settings To configure the basic wireless settings 1 Log in to...

Страница 31: ...to disable access through the wireless access point Doing so can be helpful for configuration network tuning or troubleshooting activities Wireless Network Name SSID The SSID is also known as the wire...

Страница 32: ...rent channels to reduce interference The recommended channel spacing between adjacent wireless access points is five channels for example use channels 1 and 6 or 6 and 11 In infrastructure mode wirele...

Страница 33: ...to the Wireless Access Point on page 2 4 2 Select Configuration Wireless Basis QoS Settings The basic QoS Settings screen displays 3 Specify the following fields Wi Fi Multimedia WMM Select the Enable...

Страница 34: ...3 Wireless Security Deploying the Wireless Access Point After you have tested basic wireless connectivity see the previous section and have set up wireless security as described in Chapter 3 Wireless...

Страница 35: ...y by using a browser such as Internet Explorer or Mozilla Firefox to browse the Internet or check for file and printer access on your network Note By default the wireless access point is set with the...

Страница 36: ...WG103 ProSafe 802 11g Wireless Access Point Reference Manual 2 14 Basic Installation and Configuration v1 0 February 2009...

Страница 37: ...ress on page 3 14 Wireless Data Security Options Indoors computers can connect over 802 11g wireless networks at a maximum range of 300 feet Typically a wireless access point inside a building works b...

Страница 38: ...ess adds an obstacle against unwanted access to your network but the data broadcast over the wireless link is fully exposed For information about how to restrict access by MAC address see Restricting...

Страница 39: ...diting Security Profiles on page 3 5 To set up a security profile you select its network authentication type data encryption wireless client security separation and VLAN ID Network Authentication The...

Страница 40: ...information in a safe place SSID The Service Set Identification SSID identifies the wireless local area network You may customize it by using up to 32 alphanumeric characters Write your SSID on the li...

Страница 41: ...RADIUS servers Server Name IP Address Primary _________________ Secondary __________________ Port ___________________________________ Shared Secret ___________________________________ Creating and Edi...

Страница 42: ...tell profiles apart Wireless Network Name SSID The SSID is also known as the wireless network name The SSID separates network traffic from different wireless networks To connect any wireless device t...

Страница 43: ...ntication Use the information in the following table to set the network authentication Table 3 1 Network Authentication Types Field Description Open System Can be used with WEP encryption or no encryp...

Страница 44: ...WPA2 PSK This option allows clients to use either WPA with TKIP or WPA2 with AES If selected encryption must be TKIP AES The WPA passphrase Network key must also be entered See Configuring WPA on page...

Страница 45: ...ess point at its default LAN address of http 192 168 0 229 with its default user name of admin and default password of password or using whatever password and LAN address you have chosen for the wirel...

Страница 46: ...ey Every Seconds Select this check box to enable re keying of the global key and enter a value in seconds The global key re key can be done based on time interval in seconds The default is 1800 second...

Страница 47: ...use a passphrase to generate the WEP keys enter a word or group of characters and click Generate Keys The four key fields will be automatically populated with key values You can also enter the keys ma...

Страница 48: ...s in Appendix B Configuring WPA WPA PSK data encryption provides data security The very strong authentication along with dynamic per frame rekeying of WPA makes it virtually impossible to compromise N...

Страница 49: ...pull down menu select the WPA or WPA2 option of your choice Legacy 802 1X WPA with Radius WPA2 with Radius WPA WPA2 with Radius WPA PSK WPA2 PSK WPA PSK WPA2 PSK Some options require that you configu...

Страница 50: ...nnect to the wireless access point MAC address filtering adds an obstacle against unwanted access to your network but the data broadcast over the wireless link is fully exposed To restrict access base...

Страница 51: ...MAC Address Database There are two methods to enter a MAC address in the Trusted Wireless Stations table Select a station ID and MAC address from the list of available wireless cards that the wireles...

Страница 52: ...WG103 ProSafe 802 11g Wireless Access Point Reference Manual 3 16 Wireless Security v1 0 February 2009...

Страница 53: ...ur Settings The configuration settings of the wireless access point are stored in a configuration file in the wireless access point This file can be backed up to a computer restored from a computer or...

Страница 54: ...e your settings from a saved configuration file 1 Log in to the wireless access point at its default LAN address of http 192 168 0 229 with its default user name of admin and default password of passw...

Страница 55: ...ccess point see Rear Panel on page 1 6 The Reset button has two functions Reboot When pressed and released the wireless access point reboots restarts Reset to Factory Defaults When pressed and held do...

Страница 56: ...settings to the factory default values 1 Log in to the wireless access point at its default LAN address of http 192 168 0 229 with its default user name of admin and default password of password or us...

Страница 57: ...ess access point at its default LAN address of http 192 168 0 229 with its default user name of admin and default password of password or using whatever password and LAN address you have chosen for th...

Страница 58: ...ing Network Management Information The wireless access point provides a variety of status and usage information which are discussed in the following sections Viewing the Activity Log You can view the...

Страница 59: ...refresh the screen click Refresh Sending the Activity Log to a Syslog Server To send the activity log to a syslog server 1 Log in to the wireless access point at its default LAN address of http 192 1...

Страница 60: ...nds all the system activity information to the specified IP address Viewing System Information The System Information is a summary of the wireless access point configuration settings To view the syste...

Страница 61: ...ss Point Name NetBIOS name The default name may be changed if desired MAC Address The MAC Address of the wireless access point s Ethernet port Country Region The domain or region for which the wireles...

Страница 62: ...sk for the wireless access point Default Gateway The default gateway for the wireless access point communication DHCP Client If this is enabled the current IP address was obtained from a DHCP server o...

Страница 63: ...number of bytes sent since the wireless access point was restarted Wireless LAN Received Transmitted Unicast Packets The Unicast packets sent since the wireless access point was restarted Broadcast P...

Страница 64: ...ssword of password or using whatever password and LAN address you have chosen for the wireless access point 2 Select Monitoring Wireless Stations The Available Wireless Stations table displays For eac...

Страница 65: ...ess of http 192 168 0 229 with its default user name of admin and default password of password or using whatever password and LAN address you have chosen for the wireless access point 2 Select Monitor...

Страница 66: ...the Known AP List 1 Log in to the wireless access point at its default LAN address of http 192 168 0 229 with its default user name of admin and default password of password or using whatever passwor...

Страница 67: ...r using whatever password and LAN address you have chosen for the wireless access point 2 Select Maintenance Password Change Password The Change Password screen displays To change the password 1 Enter...

Страница 68: ...MP is used in network management systems to monitor network attached devices for conditions that warrant administrative attention SNMP exposes management data in the form of variables on the managed s...

Страница 69: ...the SNMP manager to read and write the MIB objects of the wireless access point The default setting is private Trap Community Name The community name that is associated with the IP address to receive...

Страница 70: ...assword of password or using whatever password and LAN address you have chosen for the wireless access point 2 Select Maintenance Remote Management Remote Console The Remote Console screen displays 3...

Страница 71: ...ser name of admin and default password of password or using whatever password and LAN address you have chosen for the wireless access point 2 Select Configuration Security Advanced Rogue AP The Rogue...

Страница 72: ...ist of known APs Select the Merge radio button to add the new MAC addresses to the existing list 3 Click Browse and navigate to the location where you saved the text file 4 Select the file and click O...

Страница 73: ...ettings on page 5 5 Configuring Advanced QoS Settings on page 5 6 This section describes how to configure station and access point Enhanced Distributed Channel Access EDCA settings Wireless Bridging a...

Страница 74: ...settings Hotspot Settings If you want the wireless access point to capture and redirect the first HTTP TCP port 80 request use this feature For example a hotel might want to direct all wireless connec...

Страница 75: ...equest will be redirected to the supplied URL 802 1Q VLAN Settings The 802 1Q VLAN protocol on the wireless access point logically separates traffic on the same physical network To configure VLAN sett...

Страница 76: ...e tagged with known VLAN IDs Management VLAN Management VLANs are used for managing traffic Telnet SNMP and HTTP to and from the wireless access point Frames belonging to the Management VLAN are not g...

Страница 77: ...ireless access point at its default LAN address of http 192 168 0 229 with its default user name of admin and default password of password or using whatever password and LAN address you have chosen fo...

Страница 78: ...owing radio buttons Auto A short transmit preamble gives better performance Auto automatically handles both long and short preambles The default setting is Auto Long A long transmit preamble may provi...

Страница 79: ...Settings screen displays For most networks the default QoS queue parameter settings work well QoS provides you with the ability to specify parameters on multiple queues for increased throughput and b...

Страница 80: ...Arbitration Inter Frame Space Specifies a wait time in milliseconds for data frames Valid values for AIFS are 1 through 255 cwMin Minimum Contention Window Upper limit in milliseconds of a range from...

Страница 81: ...mode wireless access points Then all traffic is sent to this master rather than to the other wireless access points See How Configure Point to Multi Point Bridge Mode on page 5 11 Repeater The wireles...

Страница 82: ...access point AP1 on LAN Segment 1 in Figure 5 7 a Select the Enable Wireless Bridging and Repeating check box b Select the Wireless Point to Point Bridge radio button c As an option you can enable wi...

Страница 83: ...as the LAN devices Both wireless access points must use the same ESSID channel authentication mode and security settings 4 Verify connectivity across LAN 1 and LAN 2 A computer on either LAN segment s...

Страница 84: ...8 on page 5 11 in point to point bridge mode with the remote MAC address of AP1 3 Verify the following for all wireless access points The LAN network configuration of the wireless access points are c...

Страница 85: ...eater Mode Select this option to enable the wireless access point to operate as a repeater only without communication with other wireless clients All traffic is sent to the remote or downstream wirele...

Страница 86: ...gure AP2 in repeater mode with the MAC address of the upstream wireless access point AP1 3 Verify the following for all wireless access points The LAN network configuration of the wireless access poin...

Страница 87: ...d the repeating functionality by adding up to two more wireless access points that are configured in repeater mode However since repeaters communicate in half duplex mode the bandwidth decreases as yo...

Страница 88: ...WG103 ProSafe 802 11g Wireless Access Point Reference Manual 5 16 Advanced Configuration v1 0 February 2009...

Страница 89: ...e Internet or the LAN from a Wireless Capable Computer on page 6 3 I cannot access the wireless access point from a browser Go to You Cannot Configure the Wireless Access Point from a Browser on page...

Страница 90: ...cess point The LAN LED is Not Lit There is a hardware connection problem Check these items Make sure the cable connectors are securely plugged in at the wireless access point and the network device hu...

Страница 91: ...d check that TCP IP is set up properly for that network The usual setting for Windows the Network Properties is set to Obtain an IP address automatically The wireless access point s default values may...

Страница 92: ...0 229 and the default subnet mask is 255 255 255 0 The wireless access point default setting is for a static IP address If the network where you are connecting it is using DHCP configure it according...

Страница 93: ...s settings If you cannot connect to the wireless access point check the LAN and power connections If the wireless access point is configured correctly check your Internet connection for example your c...

Страница 94: ...WG103 ProSafe 802 11g Wireless Access Point Reference Manual 6 6 Troubleshooting v1 0 February 2009...

Страница 95: ...mm 6 22 in x 3 98 in x 1 14 in Weight 402 5 g 0 89 lbs Environmental Specifications Operating temperature 0 to 45 C Operating humidity 10 90 non condensing Data Encoding 802 11b 1 and 2 Mbps Direct S...

Страница 96: ...sensitive password Operating Mode Access Point Access Point Name netgearxxxxx8 where xxxxx are the last five digits of the wireless access point s MAC address Built in DHCP client DHCP client disabled...

Страница 97: ...nk ITCP IP Networking Basics http documentation netgear com reference enu tcpip index htm Wireless Networking Basics http documentation netgear com reference enu wireless index htm Preparing Your Netw...

Страница 98: ...WG103 ProSafe 802 11g Wireless Access Point Reference Manual B 2 Related Documents v1 0 February 2009...

Страница 99: ...IP range lease time lease time status status subnet mask subnet mask wins server WINS server http redirect enable HTTP redirection http redirect url HTTP redirection URL interface select wireless lan...

Страница 100: ...it powers rogue ap detection enable rogue access point detection rts threshold wireless RTS CTS threshold security profile create security profile 1 1st security profile authentication authentication...

Страница 101: ...key 4 keyno key number name profile name presharedkey pre shared key security separation disable associated wireless client communication ssid network name 1 32 chars status profile status vlan id VL...

Страница 102: ...ytype wireless wep key type 6 6th security profile authentication authentication type encryption data encryption hide network name hide network name key1 wireless wep key 1 key2 wireless wep key 2 key...

Страница 103: ...number name profile name presharedkey pre shared key security separation disable associated wireless client communication ssid network name 1 32 chars status profile status vlan id VLAN id wep pass p...

Страница 104: ...key remote mac remote MAC status profile status wep pass phrase wireless wep passphrase key wepkey wireless wep key wepkeytype wireless wep key type wmm wmm settings ap data0 best effort access point...

Страница 105: ...wireless access control ACL operation mode wireless operation mode power wireless transmit power radio enable wireless radio rate wireless transmission date rate rifs transmission enable successive f...

Страница 106: ...ntication type encryption data encryption hide network name hide network name key1 wireless wep key 1 key2 wireless wep key 2 key3 wireless wep key 3 key4 wireless wep key 4 keyno key number name prof...

Страница 107: ...able associated wireless client communication ssid network name 1 32 chars status profile status vlan id VLAN id wep pass phrase wireless wep passphrase key wepkeytype wireless wep key type 6 6th secu...

Страница 108: ...on data encryption hide network name hide network name key1 wireless wep key 1 key2 wireless wep key 2 key3 wireless wep key 3 key4 wireless wep key 4 keyno key number name profile name presharedkey p...

Страница 109: ...phrase wireless wep passphrase key wepkey wireless wep key wepkeytype wireless wep key type 4 4th security profile authentication authentication type encryption data encryption name profile name pres...

Страница 110: ...ry port secondary accounting server port accounting server secondary sharedsecret secondary accounting server shared secret authentication server primary primary authentication server authentication s...

Страница 111: ...configuration restore system configuration restore default password restore default system password show show system settings configuration show system configuration interface show wireless lan interf...

Страница 112: ...WG103 ProSafe 802 11g Wireless Access Point Reference Manual C 14 Command Line Reference v1 0 February 2009 system system setting...

Страница 113: ...1 2 2 7 available wireless stations list 4 12 B backing up configuration file 4 1 bandwidth 1 3 5 15 Basic Service Set BSS 1 2 Basic Service Set Identifier BSSID description 1 2 number supported 3 3 b...

Страница 114: ...Indication Message interval 5 6 dynamic IP address 1 2 E electromagnetic compliance A 1 encryption data security profiles 3 3 settings 3 8 See also WEP See also WPA environmental specifications A 1 er...

Страница 115: ...pt 6 4 K keys WEP 1 1 3 12 knowledge base xiii known AP list 4 14 L LAN LED 1 6 2 3 6 2 LAN configuring access 2 5 LEDs front panel description of 1 5 LAN 1 6 2 3 6 2 Power 1 5 2 3 6 2 Test 1 5 2 3 6...

Страница 116: ...NMP traps 4 17 power adapter specifications A 1 Power LED 1 5 2 3 6 2 Power over Ethernet PoE 1 3 1 7 2 13 power source 1 4 powersave feature WMM 2 11 preamble type 5 6 printing manual xiii product up...

Страница 117: ...ic QoS 2 11 basic wireless 2 8 bridging and repeating 5 9 data encryption 3 8 Ethernet link 5 1 general 2 5 hotspot 5 2 MAC authentication 3 14 RADIUS servers 3 9 remote console 4 18 security profiles...

Страница 118: ...ying wireless connectivity 2 13 version firmware 4 9 viewing AP statistics 4 13 available wireless stations 4 12 statistics network traffic 4 10 system information 4 8 VLANs IDs 3 4 3 9 3 12 3 14 mana...

Страница 119: ...S 5 6 advanced wireless 5 5 basic QoS 2 11 basic wireless 2 8 wireless general channels 2 10 client security separation 3 8 connection losing 3 14 testing connectivity 2 12 trusted stations 3 15 WLAN...

Страница 120: ...WG103 ProSafe 802 11g Wireless Access Point Reference Manual Index 8 v1 0 February 2009...

Отзывы: