NETGEAR ME103 - 802.11b ProSafe Wireless Access Point User Manual

802.11b prosafe wireless access point
Hide thumbs Also See for ME103 - 802.11b ProSafe Wireless Access Point:
Table of Contents

Advertisement

User's Guide for the ME103
802.11b ProSafe Wireless

Access Point

NETGEAR, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
Phone 1-888-NETGEAR
M-WB02NA-0
March 2003

Advertisement

Table of Contents
loading

Summary of Contents for NETGEAR ME103 - 802.11b ProSafe Wireless Access Point

  • Page 1: Access Point

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR M-WB02NA-0 March 2003...
  • Page 2: Technical Support

    In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s)
  • Page 3 Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice Warning! NETGEAR ProSafe Wireless Access Point ME103 To comply with the FCC’s of exposure Tested to Comply requirements you must maintain a with FCC Standards distance of at least 1 cm from the FOR HOME OR OFFICE USE antenna of this device while it is in use.
  • Page 4 Radio Frequency Interference Requirements This device is restricted to indoor use due to its operation in the 2.4 GHz frequency range. FCC requires this product to be used indoors in 2.4 GHz the frequency range to reduce the potential for harmful interference to co-channel Mobile Satellite systems.
  • Page 5: Ce Declaration Of Conformity

    CE Declaration of Conformity For the following equipment: ME103 802.11b ProSafe Wireless Access Point 0470 ! is herewith confirmed to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the Member States relating to Electromagnetic Compatibility (89/336/EEC), Low-voltage Directive (73/23/EEC) and the Amendment Directive (93/68/EEC), the procedures given in European Council Directive 99/5/EC and 89/3360EEC.
  • Page 7: Table Of Contents

    About the ME103 802.11b ProSafe Wireless Access Point ...........1-1 Key Features ........................1-2 802.11b Standards-based Wireless Networking ............1-3 Autosensing Ethernet Connections with Auto Uplink ..........1-3 Compatible and Related NETGEAR Products ............1-3 System Requirements ....................1-4 What’s In the Box? ......................1-4 Hardware Description .....................1-5 ME103 Wireless Access Point Front Panel ..............1-5...
  • Page 8 How to Set Up and Test Basic Wireless Connectivity ..........2-15 How to Restrict Wireless Access by MAC Address ..........2-16 How to Configure WEP ..................2-17 Using the Basic IP Settings Options ................2-18 Chapter 3 Management Viewing General, Log, Station, and Statistical Information ..........3-1 Statistics ........................3-3 Activity Log .......................3-5 Viewing a List of Attached Devices .................3-6...
  • Page 9 Appendix A Specifications Specifications for the ME103 ..................A-1 Appendix B Wireless Networking Basics Wireless Networking Overview ..................B-1 Infrastructure Mode ....................B-1 Ad Hoc Mode (Peer-to-Peer Workgroup) ..............B-2 Network Name: Extended Service Set Identification (ESSID) ........ B-2 Authentication and WEP ....................B-2 802.11 Authentication ....................
  • Page 10 Denial of Service Attack ..................B-11 Ethernet Cabling ......................B-12 Uplink Switches, Crossover Cables, and MDI/MDIX Switching ......B-12 Cable Quality ......................B-13 Appendix D Preparing Your PCs for Network Access Preparing Your Computers for TCP/IP Networking ............C-1 Configuring Windows 98 and Me for TCP/IP Networking ..........C-1 Install or Verify Windows Networking Components ..........
  • Page 11: Preface

    Preface About This Guide Thank you for purchasing the NETGEAR ME103 Access Point. ™ Audience This reference manual assumes that the reader has basic to intermediate computer and Internet skills. However, basic computer network, Internet, and wireless technologies tutorial information is provided in the Appendices.
  • Page 12 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point About This Guide...
  • Page 13: Introduction

    Chapter 1 Introduction This chapter introduces the NETGEAR ME103 802.11b ProSafe Wireless Access Point. Minimal prerequisites for installation are presented in “System Requirements” on page 1-4. About the ME103 802.11b ProSafe Wireless Access Point The ME103 802.11b ProSafe Wireless Access Point is the basic building block of a wireless LAN infrastructure.
  • Page 14: Key Features

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Key Features The ME103 Access Point provides the following features: • Standards Compliant. The Wireless Access Point complies with the IEEE 802.11b (DSSS) and IEEE 802.1x specifications for Wireless LANs. •...
  • Page 15: 802.11B Standards-Based Wireless Networking

    For a list of compatible products from other manufacturers, see the Wireless Ethernet Compatibility Alliance website (WECA, see http://www.wi-fi.net). Compatible NETGEAR products are listed below. The following NETGEAR products work with the ME103 Access Point. • POE101 Power Over Ethernet Adapter •...
  • Page 16: System Requirements

    Netscape Navigator 4.78 or later version. • At least one computer with the TCP/IP protocol installed. • 802.11b-compliant devices, such as the NETGEAR MA401 Wireless Adapter. What’s In the Box? The product package should contain the following items: • ME103 802.11b ProSafe Wireless Access Point.
  • Page 17: Hardware Description

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point To qualify for product updates and product warranty registrations, we encourage you to register on the NETGEAR Web page at: http://www.NETGEAR.com. Hardware Description The ME103 802.11b ProSafe Wireless Access Point front and rear hardware functions are described below.
  • Page 18 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point DESCRIPTION Ethernet LAN Link Activity Indicator Indicates no Ethernet link detected. Green On 100 Mbps Fast Ethernet link detected, no activity. Green Blink Indicates data traffic on the 100Mbps Ethernet LAN. Amber 0n 10 Mbps Ethernet link detected, no activity.
  • Page 19: Me103 Wireless Access Point Rear Panel

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point ME103 Wireless Access Point Rear Panel ETH ERN ET 5-12V D RESET Figure 1-2: ME103 rear panel Left Side Primary and Right Side Secondary Detachable Antenna The ME103 provides two detachable antenna. The one on the left is the primary, and the one on the right is the secondary.
  • Page 20: Restore To Factory Default Button

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point and positioning the antenna to best take advantage of diversity and range capabilities of the ME103. Restore to Factory Default Button The restore to default button located between the Ethernet RJ-45 connector and the power socket restores the ME103 to the factory default settings.
  • Page 21 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Introduction...
  • Page 22: Basic Installation And Configuration

    Chapter 2 Basic Installation and Configuration This chapter describes how to set up your ME103 802.11b ProSafe Wireless Access Point for wireless connectivity on your Local Area Network (LAN). This basic configuration will enable computers with 802.11b or 802.11g wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN.
  • Page 23: Cabling Requirements

    Note: The power adapter and cord shipped with the ME103 limits the distance from an AC outlet. To overcome this, consider using NETGEAR’s POE101 Power Over Ethernet Adapter with a Cat 5 Ethernet cable like the one included with your ME103.
  • Page 24: Default Factory Settings

    IP Configuration IP Address: 192.168.0.224 (if DHCP server is unavailable) Subnet Mask: 255.255.255.0 Gateway: 0.0.0.0 Primary DNS Server: 0.0.0.0 Secondary DNS Server: 0.0.0.0 Network Name (SSID) NETGEAR 802.11b Radio Frequency Channel Authentication Type Open System Disabled 802.1x Disabled Basic Installation and Configuration...
  • Page 25: Understanding Me103 Wireless Security Options

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Understanding ME103 Wireless Security Options Unlike wired network data, your wireless data transmissions can be received well beyond your walls by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment.
  • Page 26: Install The Me103 802.11B Prosafe Wireless Access Point

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Install the ME103 802.11b ProSafe Wireless Access Point Before installing the ME103 802.11b ProSafe Wireless Access Point, you should make sure that your Ethernet network is up and working. You'll be connecting the access point to the Ethernet network so that computers with 802.11b or 802.11g wireless adapters will be able to communicate with computers on the Ethernet network.
  • Page 27 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point ME103 802.11b ProSafe Wireless Access Point E T H E R N E T 5 - 1 2 V D C R E S E T LO CA L 1 0 / 1 0 0 M IN TER N ET 1 2 V D C O .
  • Page 28 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Wireless Network Name (SSID): NETGEAR • Mode (Infrastructure or Ad Hoc): Infrastructure • WEP: Disabled or Off • To change the ME103 settings, see “Understanding Basic Wireless Settings” on page 2-10.
  • Page 29: How To Log In To The Me103

    NetBIOS name of your access point, and press enter. You do not need to include "www" or "http://." Note: There is no space required between “netgear” and the 6 digits of the access point name. Figure 2-4: ME103 NetBIOS name in browser address bar...
  • Page 30 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Enter the default user name of admin and default password of password, or using whatever password you have set up. Figure 2-6: Main menu Once you have entered your access point name, your web browser should automatically find the ME103 Access Point and display the home page, as shown above.
  • Page 31: Understanding Basic Wireless Settings

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Understanding Basic Wireless Settings To configure the wireless settings of your wireless access point, click the Wireless Settings link in the Basic section of the main menu of the browser interface. The Basic Wireless Settings menu will appear, as shown below.
  • Page 32 Any device you want to participate in a particular wireless network will need to use this SSID for that network. The ME103 default SSID is: NETGEAR. –...
  • Page 33: Understanding Wep Authentication And Data Encryption

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Understanding WEP Authentication and Data Encryption Restricting wireless access to your network prevents intruders from connecting to your network. However, the wireless data transmissions are still vulnerable to snooping. Using the WEB data encryption settings described below will prevent a determined intruder from eavesdropping on your wireless data communications.
  • Page 34: Data Encryption Choices

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Be sure to set your wireless adapters according to whatever authentication and data encryption scheme you choose for the ME103 Access Point. Please refer to “Authentication and WEP” on page B-2 for a full explanation of each of these options, as defined by the IEEE 802.11 wireless communication standard.
  • Page 35: Before You Change The Ssid And Wep Settings

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Before You Change the SSID and WEP Settings Before customizing your wireless settings, print this form and record the following information. If you are working with an existing wireless network, the person who set up or is responsible for the network will be able to provide this information.
  • Page 36: How To Set Up And Test Basic Wireless Connectivity

    Choose a suitable descriptive name for the wireless network name (SSID). In the SSID box, enter a value of up to 32 alphanumeric characters. The default SSID is NETGEAR. Note: The SSID of any wireless access adapters must match the SSID you configure in the ME103 802.11b ProSafe Wireless Access Point.
  • Page 37: How To Restrict Wireless Access By Mac Address

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point How to Restrict Wireless Access by MAC Address To restrict access based on MAC addresses, follow these steps: Log in to the ME103 using the MDI/MDIX name printed on the bottom of the unit or at its default address of http://192.168.0.224 or at whatever IP address the unit is currently...
  • Page 38: How To Configure Wep

    ME103. The PC should then appear in the Station List menu. Tip: You can import a list of MAC addresses from saved a Netgear ME102 access point access control list. Or, you can produce a list in a text file where each line is a single MAC address.
  • Page 39: Using The Basic Ip Settings Options

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point • Automatic - Enter a word or group of printable characters in the Passphrase box and click the Generate button. The four key boxes will be automatically populated with key values. •...
  • Page 40 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point • The IP Address Source The wireless access point is shipped preconfigured to use private IP addresses on the LAN side, and to act as a DHCP client. If the wireless access point does not find a DHCP server on the Ethernet LAN, it defaults to this IP configuration: –...
  • Page 41 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Note: If you change the LAN IP address of the wireless access point while connected through the browser, you will be disconnected. You may need to restart your computer for the new IP address setting to take effect. •...
  • Page 42 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point 2-21 Basic Installation and Configuration...
  • Page 43: Management

    Chapter 3 Management This chapter describes how to use the management features of your ME103 802.11b ProSafe Wireless Access Point. These features can be found by clicking on the Maintenance heading in the Main Menu of the browser interface. Viewing General, Log, Station, and Statistical Information The General information screen provides a summary of the current ME103 configuration settings.
  • Page 44 Wireless Network Name This field displays the wireless network name (SSID) being used by the (SSID) wireless port of the wireless access point. The default is NETGEAR. Channel Identifies if the channel the wireless port is using. 11 is the default channel setting.
  • Page 45: Statistics

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Statistics The Information - Statistics screen provides various LAN and WLAN statistics. Figure 3-2: Wireless Access Point Status screen Management...
  • Page 46 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Table 3-1. Statistics Fields Field Description System Up Time The length of time the ME103 802.11b ProSafe Wireless Access Point has been connected to your network since it was last restarted. Wired Ethernet Received/Transmitted Packets...
  • Page 47: Activity Log

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Activity Log Use the Activity Log to view step-by-step login exchanges or other information about the wireless communications sessions on the ME103 802.11b ProSafe Wireless Access Point. Figure 3-3: Activity Log screen Management...
  • Page 48: Viewing A List Of Attached Devices

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Viewing a List of Attached Devices The Station List menu contains a table of all IP devices associated with this wireless access point in the wireless network defined by the Wireless Network Name (SSID). From the main menu of the browser interface, under the Information heading, click the Station List link to view the table, shown below.
  • Page 49: Upgrading The Wireless Access Point Software

    Note: The Web browser used to upload new firmware into the ME103 Access Point must support HTTP uploads, such as Microsoft Internet Explorer or Netscape Navigator 4.0 or above. Download the new software file from NETGEAR, save it to your hard disk, and unzip it. Figure 3-5: ME103 Upgrade menu From the main menu Management section, click the Upgrade Firmware link to display the screen above.
  • Page 50: Configuration File Management

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Click Upload. When the upload is complete, your wireless access point will automatically restart. The upgrade process will typically take about one minute. In some cases, you may need to reconfigure the wireless access point after upgrading. Configuration File Management The configuration settings of the ME103 Access Point are stored in the wireless access point in a configuration file.
  • Page 51: Saving And Restoring The Configuration

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Saving and Restoring the Configuration The Save and Restore options in the Backup/Restore Settings menu allow you to save and retrieve a file containing your wireless access point’s configuration settings. To save your settings, click the Save button.
  • Page 52: Changing The Administrator Password

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Changing the Administrator Password The default password for the router’s Web Configuration Manager is password. Change this password to a more secure password. You cannot change the administrator login name. From the main menu of the browser interface, under the Management heading, select Change Password to bring up the menu shown below.
  • Page 53: Advanced Configuration

    Chapter 4 Advanced Configuration This chapter describes how to configure the advanced features of your ME103 802.11b ProSafe Wireless Access Point. These features can be found under the Advanced heading in the main menu. Configuring Advanced Security 802.1x Options The default advanced wireless security settings are for 802.1x to be turned off. For an overview of 802.1x, please see “Understanding 802.1x Port Based Network Access Control”...
  • Page 54: How To Configure The 802.1X Eap-Md5 Option

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point For the EAP-TLS option, you will also need a Certificate Authority such as Windows 2000 server. Both the RADIUS server and the client need to have a certificate from a Certification Authority (CA) such as a Windows 2000 certificate server or a public service such as Verisign.
  • Page 55 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point 1. Configure the RADIUS server to use the 802.1x settings in the worksheet above. Add the ME103 to the RADIUS server with either its IP address or the NetBIOS name. Configure the shared key so that the RADIUS server allows the ME103 to log in.
  • Page 56 802.1x support for a variety of Windows, Macintosh, Unix, and Linux clients. The information below is only an example of one of many possible scenarios you may encounter when deploying 802.1x. Netgear does not support Windows or third party software.
  • Page 57 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Select the wireless network to which you will connect (NETGEAR in the screen above), and click the Configure button to display the dialog box shown below. Figure 4-3: Configure a Windows XP wireless adapter association...
  • Page 58 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Figure 4-5: Running a Ping test from Windows This will cause a continuous ping to be sent to the router. After between several seconds and two minutes, the ping response should change from “timed out” to “reply.” Figure 4-6: Ping test results At this point the connection is established and your wireless connection is working.
  • Page 59: How To Configure The 802.1X Eap-Tls Option

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point How to Configure the 802.1x EAP-TLS Option Follow this procedure to configure a ME103 for 802.1x EAP-TLS security. The sample configuration worksheet below is filled in with the parameters used in this procedure. To configure your ME103, print and fill out the blank worksheet found at the end of this section and record your network configuration.
  • Page 60 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Figure 4-7: Advanced Security Settings EAP-TLS Menu Note: Perform this procedure from a LAN connected computer rather than over a wireless link. This procedure will change the ME103’s data encryption settings, so a wireless connections would be disconnected when you apply the settings.
  • Page 61 802.1x support for a variety of Windows, Macintosh, Unix, and Linux clients. The information below is only an example of one of many possible scenarios you may encounter when deploying 802.1x. Netgear does not support Windows or third party software.
  • Page 62 Wireless Networks tab page. Figure 4-9: Windows XP wireless adapter configuration utility Select the wireless network to which you will connect (NETGEAR in the screen above), and click the Configure button to display the Wireless network properties dialog box shown below.
  • Page 63 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point The first time you establish the EAP-TLS wireless session from a client workstation, Windows will prompt you to verify that the certificate it found is the correct one. Note: During the authentication processes, there is a session timeout. If any side between the authenticator and the client does not respond with the proper data to the other side in 30 seconds, the authentication fails.
  • Page 64: Understanding Advanced Wireless Settings

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Figure 4-13: Running a Ping test from Windows This will cause a continuous ping to be sent to the router. After between several seconds and two minutes, the ping response should change from “timed out” to “reply.” Figure 4-14: Ping test results At this point the connection is established and your wireless connection is working.
  • Page 65 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Figure 4-15: Advanced Wireless Settings screen This screen shows the following parameters: Table 4-1. Advanced Wireless Settings Fields Field Description Operating Mode Wireless Access Point Broadcast Wireless If you disable broadcast of the SSID, only devices that have the correct Network Name (SSID) SSID can connect.
  • Page 66 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Table 4-1. Advanced Wireless Settings Fields Field Description Parameters These parameters determine the properties of the radio frequency communications of the wireless access point. RTS Threshold The packet size that is used to determine if it should use the CSMA/CD (Carrier Sense Multiple Access with Collision Detection) mechanism or the CSMA/CA (Carrier Sense Multiple Access with Collision Avoidance) mechanism for packet transmission.
  • Page 67: Antenna Installation

    Only high gain antenna (more than 10dBi) should be used with a long cable such as 5 or 10m. To cope with this inherent limitation, NETGEAR also provides bi-directional booster. This component amplifies the RF signal in transmit mode and in receive mode. It automatically switches itself to the receive or transmit mode.
  • Page 68 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Please note that ME103 diversity is provided only in receive mode, not in transmit mode. The PRIMARY RF port provides transmit and receive. The SECONDARY provides receive mode only. Therefore passive components such as external antennae can be connected to either PRIMARY or SECONDARY ME103 RF ports.
  • Page 69: Troubleshooting

    If it is plugged directly into the wall, verify that it is not a switched outlet. • Make sure you are using the correct NETGEAR power adapter supplied with your access point. Troubleshooting...
  • Page 70: The Wireless Lan Activity Light Does Not Light Up

    • If the Wireless LAN activity light stays off, disconnect the adapter from its power source and then plug it in again. Contact NETGEAR if the Wireless LAN activity light remains off. The LAN light is not lit. There is a hardware connection problem.
  • Page 71: I Am Using Eap-Tls Security But Get Disconnected

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point I am using EAP-TLS security but get disconnected. With 802.1x, occasionally, sporadic wireless communications interference might cause the encryption key to get dropped. This is not a breach of security. However, if so, your wireless client will be disconnected from the ME103.
  • Page 72: Using The Reset Button To Restore Factory Default Settings

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point • If the PCs are configured correctly, but still not working, check the ME103. Ensure that it is connected and turned on. Connect to it and check its settings. (If you can't connect to it, check the LAN and power connections.) •...
  • Page 73: Appendix A Specifications

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Appendix A Specifications This appendix provides technical specifications for the ME103 802.11b ProSafe Wireless Access Point. Specifications for the ME103 Parameter ME103 802.11b ProSafe Wireless Access Point 802.11b Data Rates 1, 2, 5.5, &...
  • Page 74 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Specifications...
  • Page 75: Wireless Networking Basics

    Appendix B Wireless Networking Basics This chapter provides an overview of wireless networking and security. Wireless Networking Overview The ME103 Access Point conforms to the Institute of Electrical and Electronics Engineers (IEEE) 802.11b standard for wireless LANs (WLANs). On an 802.11b wireless link, data is encoded using direct-sequence spread-spectrum (DSSS) technology and is transmitted in the unlicensed radio spectrum at 2.5GHz.
  • Page 76: Ad Hoc Mode (Peer-To-Peer Workgroup

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Ad Hoc Mode (Peer-to-Peer Workgroup) In an ad hoc network, computers are brought together as needed; thus, there is no structure or fixed points to the network - each node can generally communicate with any other node. There is no Access Point involved in this configuration.
  • Page 77: 802.11 Authentication

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point 802.11 Authentication The 802.11 standard defines several services that govern how two 802.11 devices communicate. The following events must occur before an 802.11 Station can communicate with an Ethernet network through an access point such as the one built in to the ME103: Turn on the wireless station.
  • Page 78: Shared Key Authentication

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point 802.11 Authentication Open System Steps 1) Authentication request sent to AP Access Point (AP) 2) AP authenticates IN TER N ET W LA N LO CA L MODEL FVM318 ProSafeWirelessVPN Security Firewall Cable/DSL TEST Enable...
  • Page 79: Overview Of Wep Parameters

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point 802.11 Authentication Shared Key Steps Access Point (AP) 1) Authentication request sent to AP MODEL FVM318 IN TER N ET W LA N LO CA L 2) AP sends challenge text Cable/DSL ProSafeWirelessVPN Security Firewall TEST...
  • Page 80: Key Size

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Key Size The IEEE 802.11 standard supports two types of WEP encryption: 40-bit and 128-bit. The 64-bit WEP data encryption method, allows for a five-character (40-bit) input. Additionally, 24 factory-set bits are added to the forty-bit input to generate a 64-bit encryption key. (The 24 factory-set bits are not user-configurable).
  • Page 81: Wireless Channels

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Note: Whatever keys you enter for an AP, you must also enter the same keys for the client adapter in the same order. In other words, WEP key 1 on the AP must match WEP key 1 on the client adapter, WEP key 2 on the AP must match WEP key 2 on the client adapter, etc.
  • Page 82 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point The radio frequency channels used are listed in Table B-1: Table B-1. 802.11b Radio Frequency Channels Channel Center Frequency Frequency Spread 2412 MHz 2399.5 MHz - 2424.5 MHz 2417 MHz 2404.5 MHz - 2429.5 MHz 2422 MHz 2409.5 MHz - 2434.5 MHz...
  • Page 83: Understanding 802.1X Port Based Network Access Control

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Understanding 802.1x Port Based Network Access Control 802.1x is well on its way to becoming an industry standard, and provides an effective wireless LAN security solution. Windows XP implements 802.1x natively, and the ME103 802.11b ProSafe Wireless Access Point supports 802.1x.
  • Page 84 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point The client sends an EAP-start message. This begins a series of message exchanges to authenticate the client. The access point replies with an EAP-request identity message. The client sends an EAP-response packet containing the identity to the authentication server. The authentication server uses a specific authentication algorithm to verify the client's identity.
  • Page 85 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Initial 802.1x communications begin with an unauthenticated supplicant (i.e., client device) attempting to connect with an authenticator (i.e., 802.11 access point). The access point responds by enabling a port for passing only EAP packets from the client to an authentication server located on the wired side of the access point.
  • Page 86 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point B-12 Wireless Networking Basics...
  • Page 87: Network, Routing, Firewall, And Cabling Basics

    Appendix C Network, Routing, Firewall, and Cabling Basics This chapter provides an overview of IP networks, routing, and wireless networking. As you read this document, you may be directed to various RFC documents for further information. An RFC is a Request For Comment (RFC) published by the Internet Engineering Task Force (IETF), an open organization that defines the architecture and operation of the Internet.
  • Page 88: What Is A Router

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point What is a Router? A router is a device that forwards traffic between networks based on network layer information in the data and on routing tables maintained by the router. In these routing tables, a router builds up a logical picture of the overall network by gathering and exchanging information with other routers in the network.
  • Page 89 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Class A Network Node Class B Network Node Class C Network Node 7261 Figure 5-3: Three Main Address Classes The five address classes are: • Class A Class A addresses can have up to 16,777,214 hosts on a single network. They use an eight-bit network number and a 24-bit node number.
  • Page 90: Netmask

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point This addressing structure allows IP addresses to uniquely identify each physical network and each node on each physical network. For each unique value of the network portion of the address, the base address of the range (host address of all zeros) is known as the network address and is not usually assigned to a host.
  • Page 91 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Subnet addressing allows us to split one IP network address into smaller multiple physical networks known as subnetworks. Some of the node numbers are used as a subnet number instead. A Class B address gives us 16 bits of node numbers translating to 64,000 nodes.
  • Page 92 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point The following table lists the additional subnet mask bits in dotted-decimal notation. To use the table, write down the original class netmask and replace the 0 value octets with the dotted-decimal value of the additional subnet bits.
  • Page 93: Private Ip Addresses

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighbors, it uses a destination address of the local network address with all ones for the host address. In order for this scheme to work, all devices on the segment must agree on which bits comprise the host address.
  • Page 94: Ip Configuration By Dhcp

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point The following figure illustrates a single IP address operation. Private IP addresses assigned by user IP addresses assigned by ISP 192.168.0.2 192.168.0.3 192.168.0.1 172.21.15.105 Internet 192.168.0.4 192.168.0.5 7786EA Figure 5-5: Single IP Address Operation Using NAT This scheme offers the additional benefit of firewall-like protection because the internal LAN addresses are not available to the Internet through the translated connection.
  • Page 95: Domain Name Server

    Many of the resources on the Internet can be addressed by simple descriptive names such as www.NETGEAR.com. This addressing is very helpful at the application level, but the descriptive name must be translated to an IP address in order for a user to actually contact the resource. Just as...
  • Page 96: Mac Addresses And Arp

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point MAC Addresses and ARP An IP address alone cannot be used to deliver data from one LAN device to another. To send data between LAN devices, you must convert the IP address of the destination device to its media access control (MAC) address.
  • Page 97: What Is A Firewall

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point What is a Firewall? A firewall is a device that protects one network from another, while allowing communication between the two. A firewall incorporates the functions of the NAT router, while adding features for dealing with a hacker intrusion or attack.
  • Page 98: Ethernet Cabling

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Ethernet Cabling Although Ethernet networks originally used thick or thin coaxial cable, most installations currently use unshielded twisted pair (UTP) cabling. The UTP cable contains eight conductors, arranged in four twisted pairs, and terminated with an RJ45 type connector. A normal straight-through UTP Ethernet cable follows the EIA568B standard wiring and pinout as described in Table 5-1.
  • Page 99: Cable Quality

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point The ME103 Access Point incorporates Auto Uplink technology (also called MDI/MDIX). The Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a normal connection (e.g. connecting to a PC) or an uplink connection (e.g. connecting to a router, switch, or hub).
  • Page 100 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point C-14 Network, Routing, Firewall, and Cabling Basics...
  • Page 101: Preparing Your Pcs For Network Access

    Appendix D Preparing Your PCs for Network Access This appendix describes how to prepare your PCs to connect to the Internet through the ME103 802.11b ProSafe Wireless Access Point. For adding file and print sharing to your network, please consult the Windows help information included with the version of Windows installed on each computer on your network.
  • Page 102 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel. Double-click the Network icon. The Network window opens, which displays a list of installed components: You must have an Ethernet adapter or an ME103, the TCP/IP protocol, and the Client for Microsoft Networks.
  • Page 103: Enabling Dhcp To Automatically Configure Tcp/Ip Settings

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Click the Add button. Select Client, and then click Add. Select Microsoft. Select File and Print Sharing for Microsoft Networks, and then click OK. Restart your PC for the changes to take effect. Enabling DHCP to Automatically Configure TCP/IP Settings After the TCP/IP protocol components are installed, each PC must be assigned specific information about itself and resources that are available on its network.
  • Page 104 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Verify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to Windows logon Click on the Properties button.
  • Page 105: Selecting Windows' Internet Access Method

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point By default, the IP Address tab is open on this window. • Verify the following: Obtain an IP address automatically is selected. If not selected, click in the radio button to the left of it to select it. This setting is required to enable the DHCP server to automatically assign an IP address.
  • Page 106: Configuring Windows 2000 Or Xp For Tcp/Ip Networking

    From the drop-down box, select your Ethernet adapter. The window is updated to show your settings, which should match the values below if you are using the default TCP/IP settings that NETGEAR recommends for connecting through a router or gateway: •...
  • Page 107: Dhcp Configuration Of Tcp/Ip In Windows Xp

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point DHCP Configuration of TCP/IP in Windows XP You will find there are many similarities in the procedures for different Windows systems when using DHCP to configure TCP/IP. The following steps will walk you through the configuration process for each of these versions of Windows.
  • Page 108 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Now you should be at the Local Area Network Connection Status window. This box displays the connection status, duration, speed, and activity statistics. Administrator logon access rights are needed to use this window. •...
  • Page 109: Dhcp Configuration Of Tcp/Ip In Windows 2000

    User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Verify that Obtain an IP address automatically radio button is selected and that the Obtain DNS server address automatically radio button is selected. • Click the OK button. This completes the DHCP configuration in Windows XP.
  • Page 110 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point The Local Area Connection Properties dialog box appears. Verify that you have the correct Ethernet card selected in the Connect using: box and that the following two items are displayed and selected in the box of “Components checked are used by this connection:”...
  • Page 111: Verifying Tcp/Ip Properties For Windows Xp Or 2000

    Type ipconfig /all Your IP Configuration information will be listed, and should match the values below if you are using the default TCP/IP settings that NETGEAR recommends for connecting through a router or gateway: • The IP address is between 192.168.0.2 and 192.168.0.254 •...
  • Page 112 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point D-12 Preparing Your PCs for Network Access...
  • Page 113: Glossary

    Glossary Use the list below to find definitions for technical terms used in this manual. 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twisted pair wiring. 802.1x 802.1x defines port-based, network access control used to provide authenticated network access and automated data encryption key management.
  • Page 114 .com, .edu, .uk, etc. For example, in the address mail.NETGEAR.com, mail is a server name and NETGEAR.com is the domain. Short for digital subscriber line, but is commonly used in reference to the asymmetric version of this technology (ADSL) that allows data to be sent over existing copper telephone lines at data rates of from 1.5...
  • Page 115 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point to 9 Mbps when receiving data (known as the downstream rate) and from 16 to 640 Kbps when sending data (known as the upstream rate). ADSL requires a special ADSL modem. ADSL is growing in popularity as more areas around the world gain access.
  • Page 116 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point A communications network serving users within a limited area, such as one floor of a building. local area network LAN. A communications network serving users within a limited area, such as one floor of a building. A LAN typically connects multiple personal computers and shared network devices such as storage and printers.
  • Page 117 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point RADIUS Short for Remote Authentication Dial-In User Service, RADIUS is an authentication system. Using RADIUS, you must enter your user name and password before gaining access to a network. This information is passed to a RADIUS server, which checks that the information is correct, and then authorizes access.
  • Page 118 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Short for Transport Layer Security, TLS is a protocol that guarantees privacy and data integrity between client/server applications communicating over the Internet. The TLS protocol is made up of two layers. The TLS Record Protocol ensures that a connection is private by using symmetric data encryption and ensures that the connection is reliable.
  • Page 119 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Glossary...
  • Page 120 User’s Guide for the ME103 802.11b ProSafe Wireless Access Point Glossary...
  • Page 121 Index Numerics DHCP B-8 domain name server (DNS) B-9 802.11b B-1 DoS attack B-11 Address Resolution Protocol B-10 Encryption Strength 2-13 ad-hoc mode B-2 ESSID 2-15, B-2 associated devices 3-6 Ethernet 1-2, 1-3 Auto MDI/MDI-X B-13, D-1 Ethernet cable B-12 Auto Uplink 1-3, B-13, D-1 factory settings, restoring 3-9 Basic IP Settings Menu 2-18...
  • Page 122 MDI/MDI-X B-13, D-1 MDI/MDI-X wiring B-12, D-4 Saving the Configuration File 3-9 Shared Key authentication B-2 SSID 2-11, 2-15, 3-2, B-2 netmask stateful packet inspection B-11 translation table B-6 Station List 3-6 Network Address Translation B-7 subnet addressing B-4 subnet mask B-5 Open System authentication B-2 TCP/IP properties verifying for Windows C-5...

Table of Contents