TRENDnet TEW-311BRP User Manual
Hide thumbs Also See for TEW-311BRP:

Advertisement

Quick Links

Wireless Router
User's Manual
V. 1.2

Advertisement

Table of Contents
loading

Summary of Contents for TRENDnet TEW-311BRP

  • Page 1 Wireless Router User’s Manual V. 1.2...
  • Page 3 Copyright This publication, including all photographs, illustrations and software, is protected under international copyright laws, with all rights reserved. Neither this manual, nor any of the material contained herein, may be reproduced without written consent of the author. Disclaimer The information in this document is subject to change without notice. The manufacturer makes no representations or war- ranties with respect to the contents hereof and specifically disclaims any implied warranties of merchantability or fitness for any particular purpose.
  • Page 4: Regulatory Compliance

    Wireless Router user’s manual Regulatory compliance This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules. This equipment also complies with CE EN55022 Class B and VCCI V3 Class B specifications. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
  • Page 5: Safety Information

    Preface Safety Information Before installing and using the Wireless Router, take note of the following precautions: Read all instructions carefully. Do not place the unit on an unstable surface, cart, or stand. Only use the supplied power adapter. Do not place anything on the power cord. Place the power cord where it will not be in the way of foot traffic. Follow all warnings and cautions in this manual and on the unit case.
  • Page 6: Table Of Contents

    Wireless Router user’s manual Table of contents WIRELESS ROUTER USER’S MANUAL V. 1.2 CHAPTER 1 Packing Checklist System and Setup Requirements Applications Features Identifying Components Front View......................5 Rear View ......................7 About Wireless LAN Networking Modes CHAPTER 2 Setup Considerations Connecting the Router to the WAN Connecting the Router to the LAN Connecting the Router to the WLAN CHAPTER 3...
  • Page 7 Preface APPENDIX C: NETWORKING BASIS APPENDIX D: 802.1X AUTHENTICATION SETUP 802.1x Authentication Infrastructure Supplicant: Wireless Network PC Card Authenticator: Wireless Network Router Radius Server: Window2000 Server APPENDIX E: TECHNICAL SPECIFICATIONS – v –...
  • Page 9 HAPTER Introduction Thank you for purchasing the Wireless Router. The Wireless Router is an ideal broadband sharing solution for SOHO and home networks, featuring a wireless LAN function that reduces the necessity of connecting stations via a wired LAN. The Wireless Router manages all IP address assignments by DHCP, relieving users of the necessity of manually configuring clients for inter-client communication and access to the Internet.
  • Page 10: Packing Checklist

    Wireless Router user’s manual Packing Checklist Carefully unpack the Wireless Router and check that the following items are included: Wireless Router Power adapter One category-5 UTP Ethernet cable with RJ-45 connectors User’s manual or CD-ROM Contact your dealer immediately if any items appear damaged or if the unit does not work. –...
  • Page 11: System And Setup Requirements

    System and Setup Requirements To ensure smooth operation of the Router, the following minimum system and setup requirements should be met: • WindowsMe/NT4/2000/98/95 • Mac OS • Netscape Navigator 4.7 or Microsoft Internet Explorer 5.0 • DSL/Cable Modem Broadband Internet connection and ISP account •...
  • Page 12: Features

    Wireless Router user’s manual Features • Wireless Features Compatible with IEEE 802.11b Direct Sequence high data rate specifications Supports high-speed wireless connections up to 22 Mbps Advanced Power Management mode for workstations Auto fallback data rate for long distance communications and noisy environments WEP 64/128/256-bit encryption function Two fixed dipole antennas provide flexible station configuration...
  • Page 13: Identifying Components

    Identifying Components Refer to the following illustrations to familiarize yourself with the Router’s front-panel LEDs and rear-panel ports. Front View Rear WAN • Rear LAN ports 1 ~ 4 – 5 –...
  • Page 14 Wireless Router user’s manual Refer to the table below for the LED meanings. Color State MEANING Indicates WLAN link status WLAN Act Green Blinking Indicates WLAN traffic Indicates that the device is WLAN Link Green connected to the WLAN. Green The unit is receiving power.
  • Page 15: Rear View

    Rear View The following illustration shows the router’s rear-panel ports: Power Reset Item Function Reset button Push and hold this button for five seconds to re- set the Wireless Router to the factory default settings. WAN port Connect the Wireless Router to the Internet via your cable or ADSL modem and this RJ-45 port.
  • Page 16: Networking Modes

    Wireless Router user’s manual Networking Modes Wireless LANs can be configured in one of two ways: Also known as a peer-to-peer network, an ad-hoc Ad-hoc Networking network is one that allows all workstations and computers in the network to act as servers to all other users on the network.
  • Page 17 Infrastructure networking has the following advantages over ad-hoc networking: • Extended range Each wireless LAN computer within the range of the access point can communicate with other wireless LAN computers within range of the access point. • Roaming The access point enables a wireless LAN computer to move through a building and still be connected to the LAN.
  • Page 18: Setup Considerations

    HAPTER Hardware installation This chapter covers plugging in the Wireless Router, and connecting the router to a WAN, LAN, and wireless LAN (WLAN). Setup Considerations When setting up the Router be sure to note the following points: • Optimize the performance of the Router by ensuring that the distance between access points is not too far.
  • Page 19: Connecting The Router To The Wan

    Connecting the Router to the WAN Follow the procedure below to connect the Wireless Router to the WAN. 1. Plug the supplied straight cable into the WAN RJ-45 jack: 2. Plug the other end of the cable into the RJ-45 jack on your ADSL or cable modem. 3.
  • Page 20: Connecting The Router To The Wlan

    Wireless Router user’s manual Connecting the Router to the WLAN Follow the procedure below to connect the Wireless Router to the WLAN. 1. Open the browser interface (refer to page 20). 2. Click Wireless to view the WLAN configuration page: 3.
  • Page 21: Tcp/Ip Configuration Windows And Mac

    HAPTER Network Configuration The following sections cover setting up the network configuration of your operating system, connecting to the router via the Web browser interface, and running the interface setup wizard. TCP/IP Configuration Windows and Mac If you want to set up your router with a fixed IP address, you must manually configure your operating system network parameters.
  • Page 22: Windows Me/9X

    Wireless Router user’s manual Windows ME/9X 1. Click Start, Settings, then click Control Panel. The Control Panel opens: 2. Double-click the Network icon to open the Network configuration dialog: 3. Go to step six if TCP/IP is shown in the network components installed list. Otherwise, click Add. The fol- lowing screen appears prompting you to select the network component: 4.
  • Page 23 5. Under “Manufacturers” select Microsoft. In the “Network Protocols” list, select TCP/IP. Click OK. You are returned to the Network Configuration screen, and TCP/IP is listed: 6. Select TCP/IP and click Properties. The TCP/IP properties dialog box opens: 7. Click the radio button next to “Obtain an IP address automatically” and go to step eight if you want the DHCP server to assign the IP address.
  • Page 24 Wireless Router user’s manual c. Type a Subnet Mask value for the router. The default value is shown. Click the Gateway tab. The following screen appears: d. Type the router’s IP address in the “New gateway” field and click Add. The IP address appears un- der “Installed gateways.”...
  • Page 25: Windows 2000

    Windows 2000 1. Click Start, Settings, then click Control Panel. The Control Panel opens: 2. Right-click the Network and Dial-up Connections icon and select Open to open the Network and Dial- up configuration dialog. 3. Double-click Local Area Connection 2 to open the following dialog box: 4.
  • Page 26: Windows Nt4.0

    Wireless Router user’s manual d. Type the router’s IP address in the “Default gateway” field. e. Check the radio button next to “Use the following DNS server addresses” and type the ISP/BSP do- main name server IP address. An ISP (Internet Service Provider) or BSP (Broadband Service Provider) is an organization that provides us- Note! ers with Internet access via modem or cable/DSL...
  • Page 27 3. Click the Protocols tab: 4. Select TCP/IP Protocol, and click Properties: 5. If you are going to use DHCP to IP assign settings, click the radio buttons next to “Obtain an IP address from a DHCP server” and go to step 6. If you want to assign a fixed IP address, follow these steps: a.
  • Page 28: Windows Xp

    Wireless Router user’s manual You can find the computer name by clicking the Identi- fication Tab in the Network Configuration dialog: Note! Type the ISP/BSP domain name server IP address in the Domain field. Contact your ISP/BSP for the information. An ISP (Internet Service Provider) or BSP (Broadband Note! Service Provider) is an organization that provides us-...
  • Page 29 3. Right-click the appropriate LAN connection and click Properties to open the properties dialog for the connection: 4. Check the box next to Internet Protocol (TCP/IP) and click Properties: 5. If you are going to use DHCP to IP assign settings, click the radio buttons next to “Obtain an IP address automatically”...
  • Page 30: Starting The Web Browser Interface

    Wireless Router user’s manual Starting the Web Browser Interface • Refer to the following instructions for starting the Web browser interface. Before using the Web browser interface, be sure you Note! have set up your computer’s network configuration. Refer to page 13. 1.
  • Page 31: Setup Wizard

    Setup Wizard The setup wizard enables you to configure the router quickly and conveniently. Follow these instructions: 1. Open the browser inter- face as described in the previous section. 2. In the Settings screen Setup Wizard page, click Run Wizard. The screen shown to the right appears.
  • Page 32 Wireless Router user’s manual 9. Click Next. Select how the router will set up the Internet connection. If you have enabled DHCP server, choose "Obtain IP automatically (DHCP client)" to have the router assign IP ad- dresses automatically. 10. Click to enable or dis- able wireless LAN.
  • Page 33: Main Screen

    HAPTER Using the Interface This chapter covers the router user interface functions, settings, and parameters. Refer to the glossary in Appendix A for unfamiliar terms. Main Screen The main screen enables you to configure the LAN & DHCP Server, set WAN parameters, create Administrator and User passwords, and set the local time, time zone, and default NTP server.
  • Page 34: Lan & Dhcp Server

    Wireless Router user’s manual LAN & DHCP Server This page enables you to set LAN and DHCP properties, such as the host name, IP address, subnet mask, and domain name. LAN and DHCP profiles are listed in the DHCP table at the bottom of the screen. Host Name: Type the host name in the text box.
  • Page 35: Wan

    This screen enables you to set up the router WAN connection, specify the IP address for the WAN, add DNS numbers, enter the MAC address, and set the MTU. Connection Type: Select the connection type, either DHCP client/Fixed IP or PPPoE from the drop-down list. When using DHCP client/Fixed IP, enter the following information in the fields (some information is provided by your ISP): WAN IP: Select whether you want to specify an IP address manually, or want DHCP to obtain an IP address...
  • Page 36 Wireless Router user’s manual WAN IP: Select whether you want the ISP to provide the IP address automatically, or whether you want to assign a static IP address to the router WAN. When Specify IP is selected, type the PPPoE IP address in the text box.
  • Page 37: Password

    Password This screen enables you to set administrative and user passwords. These passwords are used to gain access to the router interface. Administrator: Type the password the Administrator will use to log in to the system. The password must be typed again for confirmation.
  • Page 38 Wireless Router user’s manual Daylight Saving: Enables you to enable or disable daylight saving time. When enabled, select the start and end date for daylight saving time. – 30 –...
  • Page 39: Wireless

    Wireless This page enables you to set wireless communications parameters for the router's wireless LAN feature. The following functions are covered in this section: • Basic • • Advanced Basic This page enables you to enable and disable the wireless LAN function, enter a SSID, and set the channel for wireless communications.
  • Page 40: Advanced

    Wireless Router user’s manual Key 1 ~ Key 4: Enables you to create an encryption scheme for Wireless LAN transmissions. Manually enter a set of values for each key. Select which key you want to use by clicking the radio button next to the key. Click Clear to erase key values.
  • Page 41 802.1x There are three essential components to the 802.1x infrastructure: (1) Supplicant, (2) Authenticator and (3) Server. The Router serves as an Authenticator, and the EAP methods used must be supported by the backend Radius Server. The 802.1x security supports both MD5 and TLS Extensive Authentication Protocol (EAP). Please follow the steps below to configure 802.1x security.
  • Page 42: Status

    Wireless Router user’s manual Status This screen enables you to view the status of the router LAN, WAN and wireless LAN connections, and view logs and statistics pertaining to connections and packet transfers. The following functions are covered in this section: •...
  • Page 43: Log

    This screen enables you to view a running log of router system statistics, events, and activities. The log displays up to 200 entries. Older entries are overwritten by new entries. You can save logs via the Log Settings screen (Send to). The Log screen commands are as follows: •...
  • Page 44: Log Settings

    Wireless Router user’s manual Log Settings This screen enables you to set router logging parameters. SMTP Server: Type the SMTP server address for the email that the log will be sent to in the next field. Send to: Type an email address for the log to be sent to. Click Email Log Now to immediately send the current log.
  • Page 45: Wireless

    Wireless This screen enables you to view information about wireless devices that are connected to the router wireless in- terface. Connected Time: Displays how long the wireless device has been connected to the LAN via the router. MAC Address: Displays the devices wireless LAN interface MAC address. –...
  • Page 46: Routing

    Wireless Router user’s manual Routing This page enables you to set how the router forwards data. The following functions are covered in this section: • Static • Dynamic • Routing Table Static This screen enables you to set parameters by which the router forwards data to its destination if your network has a static IP address.
  • Page 47: Dynamic

    Dynamic This screen enables you to set up NAT parameters. NAT: Click the radio buttons to enable or disable NAT. Transmit: Click the radio buttons to set the desired transmit parameters, disabled, RIP 1 or RIP 2. Receive: Click the radio buttons to set the desired transmit parameters, disabled, RIP 1 or RIP 2. –...
  • Page 48: Routing Table

    Wireless Router user’s manual Routing Table This screen enables you to view the routing table for the router. The routing table is a database created by the router that displays the network interconnection topology. Network Address: Displays the network IP address of the connected node. Network Mask: Displays the network (subnet) mask of the connected node.
  • Page 49: Protocol Filter

    MAC Filter: Enables you to allow or deny Internet access to users within the LAN based upon the MAC ad- dress of their network interface. Click the radio button next to Disabled to disable the MAC filter. • Enable: All users are allowed Internet access except those users you have assigned to groups 1 to 4 in the User Table are allowed Internet access.
  • Page 50: Ip Filter

    Wireless Router user’s manual The protocol filter profiles are listed in the table at the bottom of the page. When selecting items in the table at the bottom, click anywhere in the item. The line is selected, and the fields automatically load the item's parameters, which you can edit: Note! Click anywhere in the line to select it.
  • Page 51 The IP filter profiles are listed in the table at the bottom of the page. When selecting items in the table at the bottom, click anywhere in the item. The line is selected, and the fields automatically load the item's parameters, which you can edit: Note! Click anywhere in the line to select it.
  • Page 52: Virtual Server

    Wireless Router user’s manual Virtual Server This screen enables you to create a virtual server via the router. If the router is set as a virtual server, remote users requesting Web or FTP services through the WAN are directed to local servers in the LAN. The router re- directs the request via the protocol and port numbers to the correct LAN server.
  • Page 53: Special Ap

    Special AP This screen enables you to specify special applications, such as games that require multiple connections that are inhibited by NAT. The special applications profiles are listed in the table at the bottom of the page. When selecting items in the table at the bottom, click anywhere in the item.
  • Page 54: Dmz

    Wireless Router user’s manual This screen enables you to create a DMZ for those computers that cannot access Internet applications properly through the router and associated security settings. Enable: Click to enable or disable the DMZ. DMZ Host IP: Type a host IP address for the DMZ. The computer with this IP address acts as a DMZ host with unlimited Internet access.
  • Page 55 The rule profiles are listed in the table at the bottom of the page. When selecting items in the table at the bottom, click anywhere in the item. The line is selected, and the fields automatically load the item's parameters, which you can edit: Note! Click anywhere in the line to select it.
  • Page 56: Management

    Wireless Router user’s manual Management This screen enables you to set up SNMP and remote management features. The following functions are covered in this section: • SNMP • Remote Management SNMP This screen enables you to configure SNMP. Enabled/Disabled: Click to enable or disable SNMP. System Name: Displays the name given to the router.
  • Page 57: Tools

    Telnet: Enables you to set up Telnet access for remote management. • Enable: Click to enable or disable Telnet access for remote management. • Remote IP Range: Type the range of IP addresses that can be used for remote access. Allow to Ping WAN Port: Type a range of router IP addresses that can be pinged from remote locations.
  • Page 58: Restart

    Wireless Router user’s manual Restart Click Restart to restart the system in the event the system is not performing correctly. – 50 –...
  • Page 59: Settings

    Settings This screen enables you to save your settings as a profile and load profiles for different circumstances. You can also load the factory default settings, and run a setup wizard to configure the router and router interface. Save Settings: Click to save the current configuration as a profile that you can load when necessary. Load Settings: Click Browse and go to the location of a stored profile.
  • Page 60: Ping Test

    Wireless Router user’s manual Ping Test The ping test enables you to determine whether an IP address or host is present on the Internet. Type the host name or IP ad- dress in the text box and click Ping. If the ping is successful, you see a screen similar to the one shown here: If the ping is unsuccessful, you...
  • Page 61 3. Click Next. Select your time zone from the drop-down list. 4. Click Next. 5. Type the LAN IP ad- dress in the text box. The default IP ad- dress 192.168.1.1. 6. Type the subnet mask in the text box. 7.
  • Page 62 Wireless Router user’s manual — This page left blank intentionally — – 54 –...
  • Page 63: Appendix A: Glossary

    A: G PPENDIX LOSSARY The following glossary of networking terms is provided for your convenience. Access points are way stations in a wireless LAN that are Access Point connected to an Ethernet hub or server. Users can roam within the range of access points and their wireless device connections are passed from one access point to the next.
  • Page 64 Wireless Router user’s manual IP (Internet Protocol) is the protocol in the TCP/IP commu- nications protocol suite that contains a network address and allows messages to be routed to a different network or sub- net. However, IP does not ensure delivery of a complete message—TCP provides the function of ensuring delivery.
  • Page 65 PPPoE PPPoE (Point-to-Point Protocol Over Ethernet) is used for running PPP protocol (normally used for dial-up Internet connections) over an Ethernet. Preamble Preamble refers to the length of a CRC (Cyclic Redundancy Check) block that monitors communications between roam- ing wireless enabled devices and access points. Protocol A protocol is a rule that governs the communication of data.
  • Page 66 Wireless Router user’s manual Telnet Telnet is a terminal emulation protocol commonly used on the Internet and TCP- or IP-based networks: Windows Telnet Client Telnet is used for connecting to remote devices and running programs. Telnet is an integral component of the TCP/IP communications protocol.
  • Page 67 — This page left blank intentionally — – 59 –...
  • Page 68: Appendix B: Troubleshooting

    B: T PPENDIX ROUBLESHOOTING Q&A for Windows environments These guidelines give you tips to deal with some problems you may encounter while using the Wireless Router. If the problems remain unsolved, contact your dealer for assistance. Common problems and solutions These guidelines give you tips to deal with some problems you may encounter while using the Wireless Router.
  • Page 69 Cannot connect to the Wireless Router Check that the IP address in the URL field is correct. The default IP address is 192.168.1.1. Check the TCP/IP settings in the Network Control Panel on the client computer. Check that you are within range for wireless operation. The maximum range is typically 200 meters, depending on ambient noise, thickness of walls and other environmental characteristics.
  • Page 70: Appendix C: Networking Basis

    APPENDIX C: NETWORKING BASIS This chapter will help you learn the basics of home networking. Using the Windows XP Network Setup Wizard Go to Start menu > Control Panel > Network Connec- tions In the menu on the left side of the win- dow, select “Set up a home or small of- fice network”...
  • Page 71 Select the option that best de- scribes how you connect your computer to the Internet. In the case of us- ing router in the network, choose the second op- tion. Click “Next” to continue. 1. Enter a short description for your computer.
  • Page 72 Wireless Router user’s manual Enter “Work- group name” for your home net- work. Click “Next” to continue” Click “Next” and wait for the wiz- ard to apply the settings. – 64 –...
  • Page 73 You may create a network setup disk which saves you the trouble of having to config- ure every PCs in your network. Select the first choice, and insert a floppy disk into your disk drive Click “Next” to continue. – 65 –...
  • Page 74 Wireless Router user’s manual Click “Format Disk” if you wish to format the disk. Click “Next” to copy the neces- sary files to the disk. – 66 –...
  • Page 75 Click “Next” to continue with the Network Setup Wizard – 67 –...
  • Page 76 Wireless Router user’s manual !Note: Now you may use the Network Setup Disk you just created in any PCs in your network that you wish to setup. Simply insert the Network Setup Disk into the disk drive of a PC, and open to browse the content of the disk with “My Computer”...
  • Page 77 Checking IP Address of Your Computer In Windows XP Sometimes you will need to know the IP address of the computer that you are using. For example, when you want to make sure that your computer is in the same network domain as that of your Access Point for you can configure and access the AP.
  • Page 78 Wireless Router user’s manual Type command, “ipconfig /renew” in the command prompt window and press Enter. This command releases the current IP address and acquire it from the network, i.e. DHCP server, once more. In this case, the IP address that we acquired is the same as previous one, 192. 168.0.23.
  • Page 79 Dynamic IP Address V.S. Static IP Address By definition Dynamic IP addresses are the IP addresses that are being automatically assigned to a network device on the network. These Dynamically assigned IP addresses will expire and may be changed over time. Static IP addresses are the IP addresses that users manually enter for each of the network adapters.
  • Page 80 Wireless Router user’s manual !Note: There might be two or more Local Area Connection to choose from. You must select the one that you will use to connect to the network. The Local Area Connection Properties would appear. Select “Internet Protocol (TCP/IP)”...
  • Page 81 Static IP Address Select “Use the following IP address” Enter the IP address and sub- net mask fields. Enter the IP address of the Router in the Default gateway field. Enter the IP address of the Router in the DNS server field Click “Ok”...
  • Page 82 Wireless Router user’s manual The TCP/IP Properties window appears. Select “Obtain an IP address automatically” if you are on a DHCP enabled network. Click “OK” to close the window with the changes made Select “Use the following IP address” Enter the IP address and sub- net mask fields.
  • Page 83 Wireless Network In Windows 98 and Windows ME Go to Start menu > Settings > Control Panel > Double-click on Network Select TCP/IP of the network device Click “Properties” to continue The TCP/IP Properties window appears. Select “Obtain an IP address automatically”...
  • Page 84 Wireless Router user’s manual Select “Use the following IP address” Enter the IP address and sub- net mask fields. In the DNS Configuration Tab Page, (1) enter the IP address of the Router in the Default gateway field. (2) Enter the IP address of the Router in the DNS server field –...
  • Page 85: X Authentication Infrastructure

    APPENDIX D: 802.1X AUTHENTICATION SETUP There are three essential components to the 802.1x infrastructure: (1) Supplicant, (2) Authenticator and (3) Server. The 802.1x security supports both MD5 and TLS Extensive Authentication Protocol (EAP). The 802.1x Authentication is a complement to the current WEP encryption used in wireless network. The current security weakness of WEP encryption is that there is no key management and no limitation for the duration of key life- time.
  • Page 86: Supplicant: Wireless Network Pc Card

    Wireless Router user’s manual 5. The RADIUS server responds to the client with its digital certificate. 6. The client validates the digital certificate, and replies its own digital certificate to the RADIUS server. 7. The RADIUS server validates client’s digital certificate. 8.
  • Page 87 Click on the “Wireless Network” tab. – 79 –...
  • Page 88 Wireless Router user’s manual Click “Properties” of the available wireless network, which you wish to connect or configure. Please note that if you are going to change to a different 802.1x authentication EAP method, i.e. switch from using MD5 to TLS, , you must remove the current existing wireless network from your Preferred networks first, and add it in again.
  • Page 89 TLS Authentication Select “The key is provided for me automatically” option Click “OK” to close the Wireless Network Properties window. – 81 –...
  • Page 90 Wireless Router user’s manual Click “Authentication” tab Select “Enable network access control using IEEE 802.1x” option to enable 802.1x authentication. Select “Smart Card or other Certificate” from the drop-down list box for EAP type. Click “OK” to close the Wireless Network Connection Properties window, thus make the changes effective. The wireless client configuration in the zero-configuration utility provided in Windows XP is now completed for TLS configuration.
  • Page 91 TLS Authentication – Download Digital Certificate from Server In most corporations, it requires internal IT or MIS staff’s help to have the certificated downloaded to your local computer. One of the main reasons is that each corporation uses its own server systems, and you will need the assistance from your IT or MIS for account/password, CA server location and etc.
  • Page 92 Wireless Router user’s manual 16. Now we are connected to the Certificate Service. Select “Request a certificate”, and click “Next” to con- tinue. – 84 –...
  • Page 93 17. Select “User Certificate request”, and click “Next” to continue. – 85 –...
  • Page 94 Wireless Router user’s manual 18. Click “Submit >” to continue. – 86 –...
  • Page 95 19. The Certificate Service is now processing the certificate request. – 87 –...
  • Page 96 Wireless Router user’s manual 20. The certificate is issued by the server, click “Install this certificate” to download and store the certificate to your local computer. 21. Click “Yes” to store the certificate to your local computer. – 88 –...
  • Page 97 22. Certificate is now installed. – 89 –...
  • Page 98 Wireless Router user’s manual All the configuration and certificate download are now complete. Let’s try to connect to the Access Point using 802.1x TLS Authentication. 23. Windows XP will prompt you to select a certificate for wireless network connection. Click on the network connection icon in the system tray to continue.
  • Page 99 24. Select the certificate that was issued by the server (WirelessCA), and click “OK” to continue. 25. Check the server to make sure that it’s the server that issues certificate, and click “OK” to complete the au- thentication process. – 91 –...
  • Page 100 Wireless Router user’s manual MD5 Authentication Select “Data encryption (WEP enabled)” option, but leave other option unselected. Select the key format that you want to use to key in your Network key. ASCII characters: 0~9, a~z and A~Z HEX characters: 0~9, a~f Select the key length that you wish to use 40 bits (5 characters for ASCII, 10 characters for HEX) 104 bits (13 characters for ASCII, 26 characters for HEX)
  • Page 101 Select “Authentication” tab. Select “Enable network access control using IEEE 802.1X” to enable 802.1x authentication. Select “MD-5 Challenge” from the drop-down list box for EAP type. Click “OK” to close Wireless Network Connection Properties window, thus make all the changes effective. –...
  • Page 102 Wireless Router user’s manual Unlike TLS, which uses digital certificate for validation, the MD-5 Authentication is based on the user ac- count/password. Therefore, you must have a valid account used by the server for validation. WindowsXP will prompt you to enter your user name and password. Click on the network connection icon in the system tray to continue.
  • Page 103 Enter the user name, password and the logon domain that your account belongs if you have one or more network domain exist in your network. Click “OK” to complete the validation process. – 95 –...
  • Page 104: Authenticator: Wireless Network Router

    Wireless Router user’s manual Authenticator: Wireless Network Router This is the web page configuration in the Router that we use. Enable 802.1x security by selecting “Enable”. Select the Encryption Key Length Size ranging from 64 to 256 Bits that you would like to use.Select the Life- time of the Encryption Key from 5 Minutes to 1 Day.
  • Page 105: Radius Server: Window2000 Server

    Radius Server: Window2000 Server This section to help those who has Windows 2000 Server installed and wants to setup Windows2000 Server for 802.1x authentication, which includes setting up Certificate Service for TLS Authentication, and enable EAP- methods. Login into your Windows 2000 Server as Administrator, or account that has Administrator authority. Go to Start >...
  • Page 106 Wireless Router user’s manual Select “Enterprise root CA”, and click “Next” to continue. Enter the information that you want for your Certificate Service, and click “Next” to continue. – 98 –...
  • Page 107 Go to Start > Program > Administrative Tools > Certificate Authority Right-click on the “Policy Setting”, select “new” Select “Certificate to Issue” 10. Select “Authenticated Session” and “Smartcard Logon” by holding down to the Ctrl key, and click “OK” to continue. –...
  • Page 108 Wireless Router user’s manual 11. Go to Start > Program > Administrative Tools > Active Directory Users and Computers. 12. Right-click on domain, and select ”Properties” to continue. 13. Select “Group Policy” tab and click “Properties” to continue. – 100 –...
  • Page 109 14. Go to “Computer Configuration” > “Security Settings” > “Public Key Policies” 15. Right-click “Automatic Certificate Request Setting”, and select “New” 16. Click “Automatic Certificate Request ...” – 101 –...
  • Page 110 Wireless Router user’s manual 17. The Automatic Certificate Request Setup Wizard will guide you through the Automatic Certificate Request setup, simply click “Next” through to the last step. 18. Click “Finish” to complete the Automatic Certificate Request Setup 19. Go to Start > Run, and type “command” and click “Enter” to open Command Prompt. 20.
  • Page 111 22. Select “Add/Remove Windows Components” from the panel on the left. 23. Select “Internet Authentication Service”, and click “OK” to install. – 103 –...
  • Page 112 Wireless Router user’s manual Setting Internet Authentication Service 24. Go to Start > Program > Administrative Tools > Internet Authentication Service 25. Right-click “Client”, and select “New Client” – 104 –...
  • Page 113 26. Enter the IP address of the Access Point in the Client address text field, a memorable name for the Ac- cess Point in the Client-Vendor text field, the access password used by the Access Point in the Shared secret text field. Re-type the password in the Confirmed shared secret text field. 27.
  • Page 114 Wireless Router user’s manual 28. In the Internet Authentication Service, right-click “Remote Access Policies” 29. Select “New Remote Access Policy”. 30. Select “Day-And-Time-Restriction”, and click “Add” to continue. – 106 –...
  • Page 115 31. Unless you want to specify the active duration for 802.1x authentication, click “OK” to accept to have 802.1x authentication enabled at all times. 32. Select “Grant remote access permission”, and click “Next” to continue. – 107 –...
  • Page 116 Wireless Router user’s manual 33. Click “Edit Profile” to open up – 108 –...
  • Page 117 For TLS Authentication Setup (Steps 34 ~ 38) 34. Select “Authentication” Tab 35. Enable “Extensible Authentication Protocol”, and select “Smart Card or other Certificate” for TLS au- thentication – 109 –...
  • Page 118 Wireless Router user’s manual 36. Go to Start > Program > Administrative Tools > Active Directory Users and Computers 37. Select “Users”, and double-click on the user that can be newly created or currently existing, who will be configured to have the right to obtain digital certificate remotely. Please note that in this case, we have a user called, test, whose account/password are used to obtain the digi- tal certificate from server.
  • Page 119 38. Go to the “Dial-in” tab, and check “Allow access” option for Remote Access Permission and “No Call- back” for Callback Options. – 111 –...
  • Page 120 Wireless Router user’s manual For MD5 Authentication (Steps 39 ~ 54) 39. Go to Start > Program > Administrative Tools > Active Directory Users and Computers. 40. Right click on the domain, and select “Properties” – 112 –...
  • Page 121 41. Select “Group Policy” tab, and click “Edit” to edit the Group Policy. – 113 –...
  • Page 122 Wireless Router user’s manual 42. Go to “Computer Configuration” > “Windows Settings” > “Security Settings” > “Account Policies” > “Pass- word Policies” 43. Click “Define this policy setting”, select “Enabled”, and click “OK” to continue. – 114 –...
  • Page 123 44. Go to Start > Program > Administrative Tools > Active Directory Users and Computers. 45. Go to Users. Right-click on the user that you are granting access, and select “Properties” – 115 –...
  • Page 124 Wireless Router user’s manual 46. Go to “Account” tab, and enable “Store password using reversible encryption” 47. Click “OK” to continue. – 116 –...
  • Page 125 48. Go to Start > Program > Administrative Tools > Internet Authentication Service. 49. Go to Remote Access Policies 50. Make sure that MD5 is moved up to Order 1 51. Right-click “MD5”, and select “Properties” – 117 –...
  • Page 126 Wireless Router user’s manual 52. Go to “Authentication” tab 53. Enable “Extensible Authentication Protocol” 54. Select “MD5-Challenge” for EAP type. – 118 –...
  • Page 127 PPENDIX ECHNICAL PECIFICATIONS General Specifications Standards compliance IEEE802.11b Regulations compliance FCC Part 15 Class B, Sec. 15.247 and 15.109 ETS 300 328, ETS 300 826, EN60950 and CE-Mark Telec (Japan) Wi-Fi Compliant Data rate 1/2/5.5/11/22 Mbps Security Wired Equivalent Privacy (WEP) 64/128/256 Bit Dimensions 200 x 150 x 60 mm LED indicators...

Table of Contents