Gateway 7001 Series Manual de usuario

User GuideGateway 7001 Series Access Point

5www.gateway.comDefault settings and supported administrator/client platformsBefore you plug in and boot a new access point, review the following sect

95www.gateway.comWPA with RADIUSWi-Fi Protected Access (WPA) with Remote Authentication Dial-In User Service (RADIUS) is a Wi-Fi Alliance subset of IE

96www.gateway.comField DescriptionCipher Suites Select the cipher you want to use from the list:• TKIP• CCMP (AES)• BothTemporal Key Integrity Protoc

97www.gateway.comWPA-PSKWi-Fi Protected Access (WPA) with Pre-Shared Key (PSK) is a Wi-Fi Alliance subset of IEEE 802.11i, which includes Temporal Key

98www.gateway.comUpdating settingsTo apply your changes, click Update.Field DescriptionCipher Suites Select the cipher you want to use from the list:

99www.gateway.comSetting up Guest AccessOut-of-the-box guest interface features allow you to configure the Gateway 7001 Series self-managed AP for con

100www.gateway.comConfiguring the guest interfaceTo configure the Guest interface:1 Do one of the following:Configure the access point to represent tw

101www.gateway.com(Start by choosing For Internal and Guest access, use two: Ethernet Ports as described in “Specifying a physical or virtual Guest ne

102www.gateway.comTo set up the captive portal:1 Click Advanced > Guest Login on the Administration Web page. The Modify guest welcome screen setti

103www.gateway.com3 The guest client chooses Guest SSID.The guest client starts a Web browser and receives a Guest Welcome Screen.The Guest Welcome Sc

104www.gateway.comConfiguring radio settingsUnderstanding radio settingsRadio settings directly control the behavior of the radio device in the access

6www.gateway.comPassword admin “Providing administrator password and wireless network name” on page 32“Configuring security settings on wireless clien

105www.gateway.comNavigating to radio settingsTo specify radio settings, click Advanced > Radio on the Administration Web page. The Modify radio se

106www.gateway.comConfiguring radio settingsField DescriptionRadio The Gateway 7001 Series self-managed AP is available in a dual band and single band

107www.gateway.comBeacon IntervalBeacon frames are transmitted by an access point at regular intervals to announce the existence of the wireless netwo

108www.gateway.comRTS Threshold Specify an RTS Threshold value between 0 and 2347.The RTS threshold specifies the packet size of a request to send (RT

109www.gateway.comUpdating settingsTo apply your changes, click Update.Important If you are using the dual band version of the Gateway 7001 Series sel

110www.gateway.comControlling access by MAC address filteringA Media Access Control (MAC) address is a hardware address that uniquely identifies each

111www.gateway.comUsing MAC address filteringThis page lets you control access to Gateway 7001 Series self-managed AP based on Media Access Control (M

112www.gateway.comConfiguring a Wireless Distribution System (WDS)The Gateway 7001 Series self-managed AP lets you connect multiple access points usin

113www.gateway.comConference Room (LAN 1), and another Ethernet-wired access point serving stations in the West Wing offices (LAN 2). You can bridge t

114www.gateway.comby placing a second access point closer to second group of stations (“Poolside” in our example) and bridge the two APs with a WDS li

7www.gateway.comIEEE 802.11 Mode 802.11g pr 802.11a+g “Configuring radio settings” on page 104802.11g Channel Auto “Configuring radio settings” on pag

115www.gateway.comSecurity considerations related to WDS bridgesStatic Wired Equivalent Privacy (WEP) is a data encryption protocol for 802.11 wireles

116www.gateway.comImportant The following figure shows the WDS settings page for the dual band AP (Gateway 7001 802.11 A+G Wireless Access Point). The

117www.gateway.comConfiguring WDS settingsThe following notes summarize some critical guidelines regarding WDS configuration. Read all the notes befor

118www.gateway.comField DescriptionRadio The Gateway 7001 AP is available in a dual band and single band version.Single-Band AP:On the single band ver

119www.gateway.comExample of configuring a WDS linkWhen using WDS, be sure to configure WDS settings on both access points on the WDS link.To create a

120www.gateway.com3 Configure a WDS interface for data exchange with MyAP2 (for example).Start by typing the MAC address for MyAP2 as the “Remote Addr

121www.gateway.comConfiguring security settings on wireless clientsTypically, users will configure security on their wireless clients for access to ma

122www.gateway.com “Configuring a client to access an unsecure network (plain text mode)” on page 125 “Configuring static WEP security on a client”

123www.gateway.com “IEEE 802.1x client using EAP-TLS certificate” on page 133 “WPA with RADIUS client using EAP-TLS certificate” on page 141 “Confi

124www.gateway.comd Select the SSID of the network to which you want to connect, then click Advanced. The Wireless Network Connection Properties dialo

8www.gateway.comWhat the access point does not provideThe Gateway 7001 Series self-managed AP is not designed to function as a gateway to the Internet

125www.gateway.comUse this dialog box for configuring all the different types of client security described in the following sections. Make sure that t

126www.gateway.comConfiguring static WEP security on a client Static Wired Equivalent Privacy (WEP) encrypts data moving across a wireless network bas

127www.gateway.comTo configure WEP security on each client:1 On the Network Properties dialog box, select the Association tab. The Association dialog

128www.gateway.comConnecting to the wireless network with a static WEP clientStatic WEP clients should now be able to associate and authenticate with

129www.gateway.comConfiguring IEEE 802.1x security on a clientIEEE 802.1x is the standard defining port-based authentication and infrastructure for do

130www.gateway.comTo configure the clients with IEEE 802.1x security with PEAP authentication:1 On the Network Properties dialog box, select the Assoc

131www.gateway.com4 Click to select the Enable IEEE 802.1x authentication for this network check box, select Protected EAP (PEAP) from the EAP type li

132www.gateway.comLogging on to the Wireless Network with an IEEE 802.1x PEAP ClientIEEE 802.1x PEAP clients should now be able to associate with the

133www.gateway.comIEEE 802.1x client using EAP-TLS certificateExtensible Authentication Protocol (EAP) Transport Layer Security (TLS), or EAP-TLS, is

134www.gateway.comIf you configured the Gateway 7001 AP to use IEEE 802.1x security mode with an external RADIUS server, you need to configure IEEE 80

9www.gateway.comAdministrator’s computerConfiguration and administration of the Gateway 7001 Series self-managed AP is accomplished with the KickStart

135www.gateway.com3 Click the Authentication tab. The Authentication dialog box opens.4 Click to select the Enable IEEE 802.1x authentication for this

136www.gateway.com5 Enable the Validate server certificate option, then select the name of the certificate you downloaded for this client in step 4 of

137www.gateway.comConfiguring WPA with RADIUS security on a clientWi-Fi Protected Access (WPA) with Remote Authentication Dial-In User Service (RADIUS

138www.gateway.comTo set up user accounts on the access point:1 Access the Administration Web page for the access point (“Navigating to basic settings

139www.gateway.com2 Select WPA in the Network Authentication list, and TKIP or AES in the Data Encryption list, then click the Authentication tab. The

140www.gateway.com4 Disable the Validate server certificate option, select Secured password (EAP-MSCHAP v2) from the Select Authentication Method list

141www.gateway.comWPA with RADIUS client using EAP-TLS certificateExtensible Authentication Protocol (EAP) Transport Layer Security (TLS), or EAP-TLS,

142www.gateway.comIf you configured the Gateway 7001 AP to use WPA with RADIUS security mode with an external RADIUS server, you must configure WPA se

143www.gateway.com3 Select Smart Card or other Certificate from the EAP Type list, click to select the Authenticate as computer when computer informat

144www.gateway.comLogging on to the wireless network with a WPA client using a certificateWPA clients should now be able to connect to the access poin

10www.gateway.comKickStart Wizard onCDYou can run the KickStart CD on any laptop or computer that is connected to the access point (through Wired or W

145www.gateway.comConnecting to the wireless network with a WPA-PSK clientWPA-PSK clients should now be able to associate and authenticate with the ac

146www.gateway.comConfiguring an external RADIUS server to recognize the Gateway 7001 AP An external Remote Authentication Dial-in User Server (RADIUS

147www.gateway.comKeep in mind that the information you need to provide to the RADIUS server about the access point corresponds to settings on the acc

148www.gateway.comTo identify your Gateway 7001 AP as a client to the RADIUS server:1 Log on to the system hosting your RADIUS server and open the Int

149www.gateway.com A logical (friendly) name for the access point. (You might want to use the DNS name or location.) IP address for the access point

150www.gateway.com6 Click Finish.The access point is now displayed as a client of the Authentication Server.

151www.gateway.comObtaining a TLS-EAP certificate for a clientWireless clients configured to use either “WPA with RADIUS” or “IEEE 802.1x” security mo

152www.gateway.comClick Yes to proceed to the secure Web page for the server. The Welcome screen for the Certificate Server is displayed in the browse

153www.gateway.comThe Request a Certificate dialog box opens.4 Click User Certificate. A Security Warning opens.5 Click Yes on the dialog box displaye

154www.gateway.com6 Click Submit to complete. A Potential Security Violation dialog box opens.7 Click Yes to confirm the submittal. The Certificate Is

11www.gateway.comWireless client computersThe Gateway 7001 Series self-managed AP provides wireless access to any client with a correctly configured W

155www.gateway.comSetting the administrator passwordThe administrator password controls access to the Administration Web pages for the Gateway 7001 Se

156www.gateway.comUpdating settingsTo apply your changes, click Update.Field DescriptionExisting PasswordType a new administrator password. The text y

Chapter 8157Maintenance and Monitoring Interfaces Event log Transmit/receive statistics Associated wireless clients Rebooting the access point R

158www.gateway.comIntroductionThe maintenance and monitoring tasks described here all pertain to viewing and modifying settings on specific access poi

159www.gateway.comInterfacesTo monitor wired LAN and wireless LAN (WLAN) settings, select the access point you want to monitor on the Administration W

160www.gateway.comEthernet (Wired) settingsThe internal interface includes the MAC Address, IP Address, Subnet Mask, and Associated Network Wireless N

161www.gateway.comEvent logTo view transmit/receive statistics for a particular access point, select the access point you want to monitor on the Admin

162www.gateway.comTransmit/receive statisticsTo view transmit/receive statistics for a particular access point, select the access point you want to mo

163www.gateway.comField DescriptionIP Address IP Address for the access point.MAC Address Gateway 7001 AP Administrators Guide MAC Address Media Acces

164www.gateway.comAssociated wireless clientsTo view the client stations associated with a particular access point, select the access point you want t

12www.gateway.comUnderstanding dynamic and static IP addressingGateway 7001 Series self-managed APs are built to auto-configure, with very little setu

165www.gateway.comRebooting the access pointFor maintenance purposes or as a troubleshooting measure, you can reboot the Gateway 7001 AP as follows.To

166www.gateway.comResetting the configurationIf you are experiencing extreme problems with the Gateway 7001 Series self-managed AP and have tried all

167www.gateway.com2 Click Reset. Factory defaults are restored.Important Keep in mind that if you do reset the configuration from this page, you are d

168www.gateway.comUpgrading the firmwareAs new versions of the Gateway 7001 Series self-managed AP firmware become available, you can upgrade the firm

169www.gateway.comWhen clicking Update for the firmware upgrade, a popup confirmation window is displayed that describes the upgrade process.Click OK

170www.gateway.com

Chapter 9171Troubleshooting and GettingHelp Known problems Technical support

172www.gateway.comKnown problemsThe following table summarizes problems that have been identified in the Gateway 7001 AP software.Bug NumbersDescripti

173www.gateway.comTechnical SupportGateway offers a wide range of customer service, technical support, and information services.Telephone numbersYou c

174www.gateway.com

13www.gateway.comStatic IP addressingThe Gateway 7001 Series self-managed AP ships with a default Static IP Address of 192.168.1.1. (See the default s

Appendix A175Glossary

176www.gateway.com802IEEE 802 (IEEE Std. 802-2001) is a family of standards for peer-to-peer communication over a LAN. These technologies use a shared

177www.gateway.com802.11bIEEE 802.11b (IEEE Std. 802.11b-1999) is an enhancement of the initial 802.11 PHY to include 5.5 Mbps and 11 Mbps data rates.

178www.gateway.com802.1QIEEE 802.1Q is the IEEE standard for Virtual Local Area Networks (VLANs) specific to wireless technologies.(See http://www.iee

179www.gateway.com The Beacon interval defines the amount of time between transmitting beacon frames. Before entering power save mode, a station need

180www.gateway.comCCMPCounter mode/CBC-MAC Protocol (CCMP) is an encryption method for 802.11i that uses AES. It employs a CCM mode of operation, comb

181www.gateway.comDCFThe Distribution Control Function is a component of the IEEE 802.11e Quality of Service (QoS) technology standard. The DCF coordi

182www.gateway.comEAPThe Extensible Authentication Protocol (EAP) is an authentication protocol that supports multiple methods, such as token cards, K

183www.gateway.comBefore a host on a LAN can access the Internet, it needs to know the address of its default gateway.HTMLThe Hypertext Markup Languag

184www.gateway.comAn infrastructure mode framework can be provided by a single access point (BSS) or a number of access points (ESS).Intrusion Detecti

14www.gateway.com

185www.gateway.comIPSecIP Security (IPSec) is a set of protocols to support the secure exchange of packets at the IP layer. It uses shared public keys

186www.gateway.comLease TimeThe Lease Time specifies the period of time the DHCP Server gives its clients an IP Address and other required information

187www.gateway.comNATNetwork Address Translation is an Internet standard that masks the internal IP addresses being used in a LAN. A NAT server runnin

188www.gateway.com Layer 5, the Session layer, defines protocols for initiating, maintaining, and ending communication and transactions across the ne

189www.gateway.comPPPThe Point-to-Point Protocol is a standard for transmitting network layer datagrams (IP packets) over serial point-to-point links.

190www.gateway.comRC4A symmetric stream cipher provided by RSA Security. It is a variable key-size stream cipher with byte oriented operations. It all

191www.gateway.comSSIDThe Service Set Identifier (SSID) is a thirty-two character alphanumeric key that uniquely identifies a wireless local area netw

192www.gateway.comTCPThe Transmission Control Protocol (TCP) is built on top of Internet Protocol (IP). It adds reliable communication (guarantees del

193www.gateway.comUDP neither guarantees delivery nor does it require a connection. It is lightweight and efficient. All error processing and retransm

194www.gateway.comTypically, an Access Point is connected to a wired LAN. WDS lets access points be connected wirelessly. The access points can functi

iwww.gateway.comContents1 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Chapter 215Quick Setup Unpacking the access point Connecting the access point to network and power Turning on the access point Running KickStart t

195www.gateway.comWRAPWireless Robust Authentication Protocol (WRAP) is an encryption method for 802.11i that uses AES but another encryption mode (OC

196www.gateway.com

Appendix B197Specifications

198www.gateway.comGateway Yes No CommentsSupports Infrastructure Mode XSupports Ad-Hoc Mode XConsole Port X Access through Web-based connection onlyDe

199www.gateway.comWireless data rates with Automatic FallbackX 54 Mbps, 48 Mbps, 36 Mbps, 24 Mbps, 18 Mbps, 12 Mbps, 11 Mbps, 9 Mbps, 6 Mbps, 5.5 Mbps

200www.gateway.comTFTP capable X None802.1q VLAN capable XMultiple SSID per radio X Supports different SSID for 802.11a & 802.11b/gSSID Broadcast

Appendix C201Safety, Regulatory, and LegalInformation

202www.gateway.comImportant safety informationYour Gateway access point is designed and tested to meet the latest standards for safety of information

203www.gateway.comPreventing static electricity dischargeThe components inside your AP are extremely sensitive to static electricity, also known as el

204www.gateway.comRegulatory compliance statementsWireless GuidanceThe Gateway 7001 Series APs, (low power Radio Frequency, RF, transmitting device),

16www.gateway.comSetting up the access pointSetting up and deploying one or more Gateway 7001 Series self-managed APs is in effect creating and launch

205www.gateway.comUnited States of AmericaFederal Communications Commission (FCC) Intentional emitter per FCC Part 15The power output of the AP is wel

206www.gateway.comFCC declaration of conformityResponsible party:Gateway Companies, Inc.610 Gateway Drive, North Sioux City, SD 57049(605) 232-2000

207www.gateway.comNoticesCopyright © 2004 Gateway, Inc.All Rights Reserved14303 Gateway PlacePoway, CA 92064 USAAll Rights ReservedThis publication is

208www.gateway.com

209www.gateway.comIndexAaccess pointadding to cluster 52connecting to a network 18definition 17IP address 40removing from cluster 51setting up 16turni

210www.gateway.comconfiguring guest interface wired settings 73configuring security settings 87configuring the guest interface 100configuring WDS sett

211www.gateway.comdisabling 79network time protocol settingsnavigating to 78Ooperating system 9Ppasswordadministrator 24password, administrator 155phy

212www.gateway.comunderstanding the wireless distribution system 112unpacking the access point 16unwanted loops, WDS 113, 114upgrading the firmware 16

A MAN 7001 SRS ACC PTS GDE R1 05/04

17www.gateway.comWhat’s inside the access point?An access point is a single-purpose computer designed to function as a wireless hub. Inside the access

18www.gateway.comConnecting the access point to network and powerThe next step is to set up the network and power connections.To set up the network an

19www.gateway.com2 Connect the power adapter to the power port on the back of the access point, then plug the other end of the power cord into a power

20www.gateway.comHardware connections for a physically separate guest networkIf you plan to configure a physically separate guest network, you need to

21www.gateway.comRun the KickStart CD on a laptop or computer that is connected to the same network as your access points and use it to step through t

22www.gateway.comTo run KickStart:1 Insert the KickStart Wizard CD into the CD drive on your computer. If the KickStart window is not displayed automa

23www.gateway.com2 Click Next to search for access points. Wait for the search to complete, or until KickStart has found your new access points.3 Revi

24www.gateway.comLogging on to the administration Web pagesWhen you follow the link from KickStart to the Gateway 7001 Series self-managed AP administ

iiwww.gateway.comCluster mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44St

25www.gateway.comType the user name and password and click OK.

26www.gateway.comViewing basic settings for Gateway 7001 Series self-managed access pointsWhen you log in, the Basic Settings page for Gateway 7001 Se

27www.gateway.comConfiguring basic settings and starting the wireless networkProvide a minimal set of configuration information by defining the basic

28www.gateway.comWhat’s next?Make sure the access point is connected to the LAN and access some wireless clients. After you have tested the basics of

Chapter 329Configuring Basic NetworkSettings Navigating to basic settings Reviewing and describing the access point Setting configuration policy fo

30www.gateway.comNavigating to basic settingsTo configure basic Network settings, click Network, then click Basic Settings.If you use Kickstart to lin

31www.gateway.comReviewing and describing the access pointField ActionIP Address This box is not editable because the IP address is already assigned (

32www.gateway.comProviding administrator password and wireless network nameCaution The Gateway 7001 Series self-managed AP is not designed for multipl

33www.gateway.comWireless Network Name (SSID)Type a name for the wireless network as a character string. This name will apply to all access points on

34www.gateway.comSetting configuration policy for new access points

iiiwww.gateway.comEnabling or disabling a network time protocol (NTP) server . . . . . . . . . . . . . . . . . . . . 79Configuring network security

35www.gateway.comField ActionNew Access PointsChoose the policy you want to put in effect for adding New Access Points to the network.• If you choose

36www.gateway.comUpdating basic settingsWhen you have reviewed the new configuration, click Update to apply the settings and deploy the access points

37www.gateway.comUnderstanding basic settings for a standalone access pointThe Basic Settings tab for a standalone access point indicates only that th

38www.gateway.comUnderstanding indicator iconsAll the network settings tabs on the Administration Web pages include visual indicator icons showing cur

Chapter 439Managing Access Points andClusters Navigating to access points management Understanding clustering and access points Modifying the locat

40www.gateway.comIntroductionThe Gateway 7001 Series self-managed APs show current basic configuration settings for clustered access points (location,

41www.gateway.comNavigating to access points managementTo view or edit information on access points in a cluster, click Cluster > Access Points on

42www.gateway.comUnderstanding clusteringA key feature of the Gateway 7001 Series self-managed AP is the ability to form a dynamic, configuration-awar

43www.gateway.comHaving a mix of APs on the network does not adversely affect Gateway 7001 Series self-managed AP clustering in any way, however it is

44www.gateway.comSettings that are not shared must be configured individually on the Administration pages for each access point. To get to the Adminis

ivwww.gateway.comA Glossary. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

45www.gateway.comYou can re-enable cluster mode on a standalone access point. (See “Adding an access point to a cluster” on page 52.)Cluster formation

46www.gateway.comNote that auto-synchronization always occurs during configuration updates that affect the cluster, but the processing time is usually

47www.gateway.comThe Stop Clustering page for this access point opens.2 Click the Stop Clustering button.3 Repeat steps 1 and 2 for every access point

48www.gateway.com5 On the Administration UI left-hand tabs, click Advanced > Reset Configuration to open the Reset page. The Reset page opens.6 Cli

49www.gateway.com8 Refresh the cluster view by clicking Cluster > Access Points on the Administration Web pages for any one of the access points. T

50www.gateway.comUnderstanding access point settingsThe Access Points tab on the Administration Web page provides information about all access points

51www.gateway.comWorking with access points in a clusterModifying the location descriptionTo make modifications to the location description:1 Click Ba

52www.gateway.comAdding an access point to a clusterTo add an access point that is currently in standalone mode back into a cluster:1 Go to the Admini

53www.gateway.comNavigating to information for a specific AP and managing standalone APsIn general, Gateway 7001 Series self-managed APs are designed

54www.gateway.com

Chapter 11Introduction Features and benefits Networking Maintainability Default settings and supported administrator/client platforms

Chapter 555Managing User Accounts Navigating to user management for clustered access points Viewing and changing user accounts Adding a user Editi

56www.gateway.comIntroductionThe Gateway 7001 Series self-managed APs include user management capabilities for controlling client access to access poi

57www.gateway.comNavigating to user management for clustered access pointsTo set up or modify user accounts, click Cluster > User Management on the

58www.gateway.comViewing and changing user accountsViewing user accountsUser accounts are shown at the top of the Manage user accounts screen under Us

59www.gateway.comEditing a user accountAfter you have created a user account, it is displayed under User Accounts at the top of the User Management We

60www.gateway.comTo disable a user account: On the User Management Web page, under User Accounts, click the box next to the user name, then click Dis

Chapter 661Session Monitoring Navigating to session monitoring Understanding session monitoring information Viewing session information for access

62www.gateway.comNavigating to session monitoringTo view session monitoring information, click Cluster > Sessions on the Administration Web page. T

63www.gateway.comUnderstanding session monitoring informationThe Monitor active client station sessions page shows the stations associated with access

64www.gateway.comSignal Indicates the strength of the radio frequency (RF) signal the client receives from the access point.The measure used for this

2www.gateway.comOverview of the Gateway 7001 Series of self-managed APsThe Gateway 7001 Series of self-managed APs (access points) provide continuous,

65www.gateway.comViewing session information for access pointsYou can view session information for all access points on the network at the same time,

66www.gateway.com

Chapter 767Advanced Configuration Configuring an Ethernet (wired) interface Configuring a wireless interface Configuring network security Configur

68www.gateway.comConfiguring an Ethernet (wired) interfaceEthernet (Wired) Settings describe the configuration of your Ethernet local area network (LA

69www.gateway.comNavigating to Ethernet (wired) settingsTo set the wired address for an access point, Advanced > Ethernet (Wired) Settings on the A

70www.gateway.comEnabling or Disabling Guest AccessYou can provide controlled guest access over an isolated network and a secure internal LAN on the s

71www.gateway.comChoose either physically separate or virtually separate internal and guest LANs as described in the following section.Configuring Int

72www.gateway.comConnection Type You can select “DHCP Client” or “Static IP”.The Dynamic Host Configuration Protocol (DHCP) is a protocol specifying h

73www.gateway.comConfiguring Guest interface Ethernet settingsTo configure Ethernet (Wired) settings for the “Guest” interface, fill in the boxes as d

74www.gateway.comConfiguring a wireless interfaceNavigating to wireless settingsTo set the wireless address for an access point, click Advanced > W

3www.gateway.comFeatures and benefitsIEEE standards support and Wi-Fi compliance Support for IEEE 802.11a, 802.11b, and 802.11g wireless networking s

75www.gateway.comField DescriptionMAC Addresses (Shown on dual-band AP only)Indicates the Media Access Control (MAC) addresses for the interface.On th

76www.gateway.comConfiguring internal LAN wireless settingsThe internal settings describe the MAC Address (read-only) and Network Name (also known as

77www.gateway.comUpdating settingsTo apply your changes, click Update.SSID Type the SSID for the internal WLAN.The Service Set Identifier (SSID) is an

78www.gateway.comEnabling a network time protocol serverThe Network Time Protocol (NTP) is an Internet standard protocol that synchronizes computer cl

79www.gateway.comEnabling or disabling a network time protocol (NTP) serverTo configure your access point to use a network time protocol (NTP) server,

80www.gateway.comConfiguring network securityUnderstanding security issues on wireless networksWireless mediums are inherently less secure than wired

81www.gateway.comComparison of security modes for key management, authentication, and encryption algorithmsThe three major factors that determine the

82www.gateway.comRecommendationsStatic WEP was designed to provide security equivalent of sending unencrypted data through an Ethernet connection, how

83www.gateway.comRecommendationsIEEE 802.1x mode is a better choice than Static WEP because keys are dynamically generated and changed periodically. H

84www.gateway.comRecommendationsWPA with RADIUS mode is the recommended mode. The CCMP (AES) and TKIP encryption algorithms used with WPA modes are fa

4www.gateway.comOut-of-the-Box guest interface Unique network name (SSID) for the Guest interface Captive portal to guide guests to customized, gues

85www.gateway.comFor information on how to configure WPA with RADIUS security mode, see “WPA with RADIUS” on page 95.When to use WPA-PSKWi-Fi Protecte

86www.gateway.comFor example, some devices on your network may not support WPA with EAP talking to a RADIUS server. Embedded printer servers or other

87www.gateway.comNavigating to security settingsTo set the security mode, click Advanced > Security on the Administration Web page. The Modify secu

88www.gateway.comBroadcast SSID and Security ModeTo configure security on the access point, select a security mode and fill in the related boxes as de

89www.gateway.comFor a minimum level of protection on a guest network, you can choose to suppress (prohibit) the broadcast of the SSID (network name)

90www.gateway.comField DescriptionTransfer Key IndexSelect a key index from the list. Key indexes 1 through 4 are available. The default is 1.The Tran

91www.gateway.comRules to Remember for Static WEP All client stations must have the Wireless LAN (WLAN) security set to WEP and all clients must have

92www.gateway.comExample of Using Static WEPFor a simple example, suppose you configure three WEP keys on the access point. In our example, the Transf

93www.gateway.comIf you have a second client station, that station also needs to have one of the WEP keys defined on the AP. You could give it the sam

94www.gateway.comWhen configuring IEEE 802.1x mode, you have a choice of whether to use the embedded RADIUS server or an external RADIUS server that y