ALFA NETWORK 9283 802.11n Long-Range outdoor AP/CPE User Manual N2 0418x

ALFA NETWORK Inc. 802.11n Long-Range outdoor AP/CPE N2 0418x

Users Manual

1 N2 2.4GHz 802.11bgn Outdoor AP/CPE User Guide
2TABLEOFCONTENTSINTRODUCTION...............................................................................................................3HARDWARE DESCRIPTION.....................................................................................3HARDWARE INSTALLATION.....................................................................................4INITIAL CONFIGURATION.................................................................................................6CONNECTING TO THE LOGIN PAGE.........................................................................6STATUS PAGE................................................................................................................7EASY SETUP...................................................................................................................7OPERATION MODE - ROUTER................................................................................8SETTINGS – PPPoE(ADSL).........................................................................8SETTINGS – STATIC (FIXED IP).....................................................................9SETTINGS – CABLE/DYNAMIC IP (DHCP)..................................................10OPERATION MODE - BRIDGE...............................................................................11OPERATION MODE - WISP..................................................................................12OPERATION MODE – ETHERNET CONVERTER....................................................13ADVANCED SETUP.......................................................................................................14MANAGEMENT..............................................................................................15ADVANCED SETTINGS..................................................................................16OPERATION MODE.......................................................................................17FIREWALL CONFIGURATION.................................................................................17MAC/IP/PORT FILTERING...........................................................................17VIRTUAL SERVER SETTINGS........................................................................19DMZ.............................................................................................................20FIREWALL.....................................................................................................21CONTENT FILTERING....................................................................................22NETWORK SETTINGS...........................................................................................23WAN............................................................................................................23LAN..............................................................................................................25ADVANCED ROUTING...................................................................................26WIRELESS SETTINGS...........................................................................................27BASIC...........................................................................................................27SECURITY.....................................................................................................28
3INTRODUCTION The N2 is a 2x2 MIMO IEEE 802.11an wireless outdoor AP/CPE which support high through-put up to 300Mbps. It is rain and splash proof when install in upright position. N2 also integrated 14dBi patch antenna and passive PoE for simplify installation. HARDWARE DESCRIPTION Below are N2 hardware descriptions ①②③① PoE LAN ② PoE WAN (in Rouer mode ) PoE LAN (in Bridge Mode) ③ Reset L‐Mount(Option)PoleMountHoldersWallMountHoleWallMountHoleLEDIndicator
4HARDWARE INSTALLATION ◆ How to open the sliding door Unlatchtheweatherproofslidingdoorfromtherearofthebasetoopen.Slidetheweatherproofslidingdoordownwardsbygripingontotheindentedsurfaceoftheweatherproofslidingdoorandtherear.Alignthebasewiththeweatherproofslidingdoor.Slidetheweatherproofslidingdoorupwardsuntilitclicksintoplace.◆ How to close the sliding door ◆ How to tie the strap on the pole 
5 ◆ Mounting and Radio forward Diagram StandardPoleMount*OptionAdjustAntennaL‐Mount*OptionWallMount
6INITIAL CONFIGURATION The N2, outdoor 2.4GHz AP/CPE offers a user-friendly web-based management interface for the configuration of all the unit’s features. Any PC directly attached to the unit can access the management interface using a web browser, such as Internet Explorer (version 6.0 or above). CONNECTING TO THE LOGIN PAGEIt is recommended to make initial configuration changes by connecting a PC directly to the N2’s LAN port. The N2 has a default IP address of 192.168.2.1 and a subnet mask of 255.255.255.0. You must set your PC IP address to be on the same subnet as the N2 (that is, the PC and N2 addresses must both start 192.168.2.x). To access the N2’s management GUI interface, follow these steps: 1. Use your web browser to connect to the management interface using the default IP address of 192.168.2.1. 2. Log into the interface by entering the default username “admin” and password “admin,” then click OK. 
7STATUS PAGE After logging in to the web interface, the Status page displays. The Home page top-menu-bar shows the Status, Easy Setup, Advanced and Language. EASY SETUP The Easy Setup is designed to help you configure the basic settings required to get the N2 up and running. There are only a few basic steps you need to set up the N2 to get the connection. Click on Easy Setup to bring up the wizard
8OPERATION MODE - ROUTER In Router mode, the POE port of the N2 will turn into the WAN port. The wireless interface will become the LAN side. It will turn N2 into a wireless router. Since the Ethernet interface becomes WAN; if your PC is connected to the POE port, the management IP will change to the WAN IP (192.168.2.1). The remote management will be automatically turned on to allow you managing the device from the POE WAN port..  SETTINGS – PPPoE(ADSL) 1) Select PPPoE to be assigned automatically from an Internet service provider (ISP) through a DSL modem using Point-to-Point Protocol over Ethernet (PPPoE). 2)◆ User Name — Sets the PPPoE user name for the WAN port. (Default: pppoe_user; Range: 1~32 characters) ◆ Password — Sets a PPPoE password for the WAN port. (Default: pppoe_password; Range: 1~32 characters)
9◆ Verify Password — Prompts you to re-enter your chosen password. ◆ Operation Mode — Enables and configures the keep alive time and configures the on-demand idle time. 3) Security Setup SSID Choice—ThesamenameofSSID(ServiceSetIdentification)mustbeassignedtoallwirelessdevicesinyournetwork.Consideringyourwirelessnetworksecurity. Security Mode — Select the security method and then configure the required parameters. (Options: Disabled, WEP-AUTO, WPA-PSK, WPA2-PSK, WPA-Auto-PSK, WPA, WPA2, WPA-Auto, 802.1X; Default: Disabled) SETTINGS – STATIC (FIXED IP) 1) Select Static(Fixed IP), if your Internet service provider (ISP) to be permanent address on the Internet. A Static IP address is a number (in the form of a dotted quad) 2) ◆ IP Address — Sets the static IP address. ◆ Subnet Mask — Sets the static IP subnet mask. (Default: 255.255.255.0)
10◆ Default Gateway — The IP address of a router that is used when the requested destination IP address is not on the local subnet. ◆ Primary DNS Server — The IP address of the Primary Domain Name Server. A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses. To specify a DNS server, type the IP addresses in the text field provided. Otherwise, leave the text field blank. ◆ Secondary DNS Server — The IP address of the Secondary Domain Name Server. 3) Security Setup SSID Choice—ThesamenameofSSID(ServiceSetIdentification)mustbeassignedtoallwirelessdevicesinyournetwork.Consideringyourwirelessnetworksecurity. Security Mode — Select the security method and then configure the required parameters. (Options: Disabled, WEP-AUTO, WPA-PSK, WPA2-PSK, WPA-Auto-PSK, WPA, WPA2, WPA-Auto, 802.1X; Default: Disabled) SETTINGS – CABLE/DYNAMIC IP (DHCP) 1) Select Cable/Dynamic IP (DHCP), if your Internet service provider (ISP) use a DHCP service to assign your Router an IP address when connecting to the Internet. 2)
11The host name that you selected from the DDNS service provider. 3) Security Setup SSID Choice—ThesamenameofSSID(ServiceSetIdentification)mustbeassignedtoallwirelessdevicesinyournetwork.Consideringyourwirelessnetworksecurity. Security Mode — Select the security method and then configure the required parameters. (Options: Disabled, WEP-AUTO, WPA-PSK, WPA2-PSK, WPA-Auto-PSK, WPA, WPA2, WPA-Auto, 802.1X; Default: Disabled) OPERATION MODE - BRIDGE 1) InthismodebridgeyourN2toanotherAccessPoint.2)  Security Setup SSID Choice—ThesamenameofSSID(ServiceSetIdentification)mustbeassignedtoallwirelessdevicesinyournetwork.Consideringyourwirelessnetworksecurity. Security Mode — Select the security method and then configure the required parameters. (Options: Disabled, Open, Shared, WEP-AUTO, WPA-PSK, WPA2-PSK, WPA-PSK_WPA2-PSK, WPA, WPA2, WPA1_WPA2, 802.1X; Default: Disabled
12OPERATION MODE - WISP IntheWISPmodeisalsoknownasClientRouter.TheN2wirelesssideisconnectedtotheremoteAP(Base‐Station)asinClientInfrastructuremode.BetweenthewirelessandLANistheIPsharingrouterfunction.ThisisusedtoshareWISPconnection.TheWANisonthewirelessside.2) PressSiteSurveybuttonandlookforavailablewirelessnetworkthenclickontheSSIDthatyouattempttoconnecttoit;MikroTikistheSSIDthatwearegoingtoconnectinthisexample.PressSelectbuttonwhenfinished.3) Now,itshowstheProfileName,SSID,BSSID,andencryptiontypereceivedfromyourtargetnetworkandpressDonebuttonwhenisfinished.
13OPERATION MODE – ETHERNET CONVERTER IntheEthernetConvertermodewhere wireless client interface is treated as WAN port, and the wireless interface and the Ethernet port are LAN ports.2) PressSiteSurveybuttonandlookforavailablewirelessnetworkthenclickontheSSIDthatyouattempttoconnecttoit;MikroTikistheSSIDthatwearegoingtoconnectinthisexample.PressSelectbuttonwhenfinished.3) Now,itshowstheProfileName,SSID,BSSID,andencryptiontypereceivedfromyourtargetnetworkandpressDonebuttonwhenisfinished.
14ADVANCED SETUP In the Advanced Manual Bar, it includes all the settings such as firmware upgrade, LAN, WAN and wireless settings that change the RF behaviors. It is important to read through this section before attempting to make changes. 
15MANAGEMENT The Management section is provided for configuration of administrative needs such as language type, user name / Password, firmware upgrade, export and import settings, load factory defaults and reboots system.◆ Language Setting — Select the Language. ◆ Password — The new password must not exceed 32 characters in length and must not include any spaces. Enter the new password a second time to confirm it. ◆ Export Settings — Click the Export Button to download current router configuration to your PC. ◆ Import Settings — Click the Import Button to browse for the configuration file that is currently saved on your PC. Click Import to overwrite all current configurations with the one in the configuration file. ◆ Load Factory Defaults — If you have problems with N2, which might be a result from changing some settings, but you are unsure what settings exactly, you can restore the factory defaults by click the Load Default Button. ◆ Reboot System — If you want to reboot the N2, click the Reboot Now Button.
16ADVANCED SETTINGS The Advanced Settings section is provided for configuration of Time Zone and DDNS. ◆ Time Zone Settings — The Time Zone Settings allows you to configure, update and maintain the correct time on the N2’s internal system clock. ◆ DDNS Settings — DDNS lets you assign a fixed host and domain name to dynamic Internet IP address. It is useful when you are hosting your own website, FTP server, or other server behind the N2. Before using this feature, you need to sign up for DDNS service at www.dyndns.org , a DDNS service provider. ◆ SNTP Server — Enter the address of an SNTP server to receive time updates. ◆ SNTP synchronization (seconds) — Specify the interval between SNTP server updates. ◆ User Name — Sets the DDNS user name for the connection. ◆ Password — Sets a DDNS password for the connection. ◆ HostName — The host name that you selected from the DDNS service provider.
17OPERATION MODE The Operation Mode content four modes: Bridge, router, WISP and Ethernet converter. ◆ Bridge — The wired Ethernet and wireless are bridged together. Once the mode is selected, all WAN related functions will be disabled. ◆ Router — The WAN port is used to connect with ADSL/Cable modem and the wireless is used for your private WLAN. The NAT is existed between the 2 RJ45 ports and all wireless clients share the same public IP address through the WAN port to ISP. The default IP configuration for WAN port is DHCP client ◆ WISP — The N2 will behave just the same as the client mode for wireless function. However, router functions are added between the wireless WAN side and the Ethernet LAN side. Therefore, the WSIP subscriber can share the WISP connection without the extra router. ◆ Ethernet Converter — The wireless client interface is treated as WAN port, and the wireless interface and the Ethernet port are LAN ports. FIREWALL CONFIGURATION MAC/IP/PORT FILTERING MAC/IP/Port filtering restricts connection parameters to limit the risk of intrusion and defends against a wide array of common hacker attacks. MAC/IP/Port filtering allows the unit to permit, deny or proxy traffic through its MAC addresses, IP addresses and ports. The N2 allows you define a sequential list of permit or deny filtering rules (up to 32). This device tests ingress packets against the filter rules one by one. A packet will be accepted as soon as it matches a permit rule, or dropped as soon as it matches a deny rule. If no rules match, the packet is either accepted or dropped depending on the default policy setting.
18 ◆ MAC/IP/Port Filtering — Enables or disables MAC/IP/Port Filtering. (Default: Disable) ◆ Default Policy — When MAC/IP/Port Filtering is enabled, the default policy will be enabled. If you set the default policy to “Dropped”, all incoming packets that don’t match the rules will be dropped. If the policy is set to "Accepted," all incoming packets that don't match the rules are accepted. (Default: Dropped) ◆ MAC Address — Specifies the MAC address to block or allow traffic from. ◆ Destination IP Address — Specifies the destination IP address to block or allow traffic from. ◆ Source IP Address — Specifies the source IP address to block or allow traffic from. ◆ Protocol — Specifies the destination port type, TCP, UDP or ICMP. (Default: None). ◆ Destination Port Range — Specifies the range of destination port to block traffic from the specified LAN IP address from reaching. ◆ Source Port Range — Specifies the range of source port to block traffic from the specified LAN IP address from reaching. ◆ Action — Specifies if traffic should be accepted or dropped. (Default: Accept) ◆ Comment — Enter a useful comment to help identify the filtering rules. ◆ Current Filtering rules — The Current Filter Table displays the configured IP addresses and ports that are permitted or denied access to and from. ¾ No. — The table entry number. ¾ MAC Address — Displays a MAC address to filter. ¾ Destination IP Address (DIP) — Displays the destination IP address. ¾ Source IP Address (SIP) — Displays the source IP address. ¾ Protocol — Displays the protocol type. ¾ Destination Port Range (DPR) — Displays the destination port range.
19¾ Source Port Range (SPR) — Displays the source port range. ¾ Action — Displays if the specified traffic is accepted or dropped. ¾ Comment — Displays a useful comment to identify the filter rules. VIRTUAL SERVER SETTINGS Virtual Server (sometimes referred to as Port Forwarding) is the act of forwarding traffic from one network node to another based on received protocol port number. This technique can allow an external user to reach a port on a private IP address (inside a LAN) from the outside through a NAT enabled router. (Maximum 32 entries are allowed.) ◆ Virtual Server — Selects between enabling or disabling port forwarding the virtual server. (Default: Disable) ◆ IP Address — Specifies the IP address of a server on the local network to allow external access. ◆ Private Port — The protocol port number on the local server. ◆ Public Port — The protocol port number on the router’s WAN interface. ◆ Protocol — Specifies the protocol to forward, either TCP, UDP, or TCP&UDP. ◆ Comment — Enter a useful comment to help identify the port forwarding service on the network. ◆ Current Virtual Servers in System — The Current Port Forwarding Table displays the entries that are allowed to forward packets through the N2’s firewall. ¾ No. — The table entry number. ¾ IP Address — The IP address of a server on the local network to allow
20external access. ¾ Port Mapping — displays the port mapping for the server. ¾ Protocol — Displays the protocol used for forwarding this port. ¾ Comment — Displays a useful comment to identify the nature of the port to be forwarded. DMZ DMZ is to specified host PC on the local network to access the Internet without any firewall protection. Some Internet applications, such as interactive games or video conferencing, may not function properly behind the firewall. By specifying a Demilitarized Zone (DMZ) host, the PC's TCP ports are completely exposed to the Internet, allowing open two-way communication. The host PC should be assigned a static IP address (which is mapped to its MAC address) and this must be configured as the DMZ IP address. ◆ DMZ Settings — Sets the DMZ status. (Default: Disable) ◆ DMZ IP Address — Specifies an IP address on the local network allowed unblocked access to the WAN.
21FIREWALL Firewall functions which will help to protect your network and computer. You can utilized firmware functions to protect your network from hackers and malicious intruders. ◆ Remote Management (via WAN) — allow or deny to manage the router from anywhere on the Internet. ◆ Remote Management Port — The port that you will use to address the management from the Internet. For example, if you specify port 1080, then to access the N2 from Internet, you would use a URL of the form: http://xxx.xxx.xxx.xxx:1080/ ◆ Ping from WAN Filter — When Allow, the N2 does not respond to ping packets received on the WAN port. ◆ SPI Firewall — SIP firewall help to keep track of the state of network connections (such as TCP streams, UDP communication) traveling across it. It is programmed to distinguish legitimate packets for different types of connections. Only packets matching a known active connection will be allowed by the firewall; others will be rejected. ◆ Network Address Translation — NAT is the process of modifying IP address information in IP packet headers while in transit across a traffic routing device.
22CONTENT FILTERING The N2 provides a variety of options for blocking Internet access based on content, URL and host name. ◆ Web URL Filter Settings — By filtering inbound Uniform Resource Locators (URLs) the risk of compromising the network can be reduced. URLs are commonly used to point to websites. By specifying a URL or a keyword contained in a URL traffic from that site may be blocked. ◆ Current URL Filters — Displays current URL filter. ◆ Add a URL Filter — Adds a URL filter to the settings. ◆ Delete a URL Filter — Deletes a URL filter entry from the list. Web Host Filter Settings — Allows Internet content access to be restricted based on web address keywords and web domains. A domain name is the name of a particular web site. For example, for the address www.HOST.com, the domain name is HOST.com. Enter the Keyword then click “Add.” ◆ Current Host Filters — Displays current Host filter. ◆ Add a Host Filter — Enters the keyword for a host filtering. ◆ Delete a Host Filter — Deletes a Host filter entry from the list.
23NETWORK SETTINGS WAN In this section, there are several connection types to choose from; Static IP, DHCP, PPPoE, PPTP and L2TP. If you are unsure of your connection method, please contact your Internet Service Provider. CABLE/DYNAMIC IP (DHCP) ◆ Hostname — Specifies the host name of the DHCP client. ◆ Primary DNS Server — The IP address of the Primary Domain Name Server. A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses. To specify a DNS server, type the IP addresses in the text field provided. Otherwise, leave the text field blank. ◆ Secondary DNS Server — The IP address of the Secondary Domain Name Server. PPPoE (ADSL) ◆ User Name — Sets the PPPoE user name for the WAN port. (Default: pppoe_user; Range: 1~32 characters) ◆ Password — Sets a PPPoE password for the WAN port.
24(Default: pppoe_password; Range: 1~32 characters) ◆ Verify Password — Prompts you to re-enter your chosen password. ◆ Operation Mode — Enables and configures the keep alive time and configures the on-demand idle time. STATIC IP (FIXED IP) ◆ IP Address — Sets the static IP address. ◆ Subnet Mask — Sets the static IP subnet mask. (Default: 255.255.255.0) ◆ Default Gateway — The IP address of a router that is used when the requested destination IP address is not on the local subnet. ◆ Primary DNS Server — The IP address of the Primary Domain Name Server. A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses. To specify a DNS server, type the IP addresses in the text field provided. Otherwise, leave the text field blank. ◆ Secondary DNS Server — The IP address of the Secondary Domain Name Server. PPTP ◆ Server IP — Sets the PPTP server IP Address. (Default: pptp_server) ◆ User Name — Sets the PPTP user name for the WAN port. (Default: pptp_user; Range: 1~32 characters) ◆ Password — Sets a PPTP password for the WAN port. (Default: pptp_password; Range: 1~32 characters)
25◆ Address Mode — Sets a PPTP network mode. (Default: Dynamic IP) ◆ Operation Mode — Enables and configures the keep alive time. ◆ Primary DNS Server — The IP address of the Primary Domain Name Server. A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses. To specify a DNS server, type the IP addresses in the text field provided. Otherwise, leave the text field blank. ◆ Secondary DNS Server — The IP address of the Secondary Domain Name Server. L2TP ◆ Server IP — Sets the L2TP server IP Address. (Default: l2tp_server) ◆ User Name — Sets the L2TP user name for the WAN port. (Default: l2tp_user; Range: 1~32 characters) ◆ Password — Sets a L2TP password for the WAN port. (Default: l2tp_password; Range: 1~32 characters) ◆ Address Mode — Sets a L2TP network mode. (Default: Dynamic IP) ◆ Operation Mode — Enables and configures the keep alive time. ◆ Primary DNS Server — The IP address of the Primary Domain Name Server. A DNS maps numerical IP addresses to domain names and can be used to identify network hosts by familiar names instead of the IP addresses. To specify a DNS server, type the IP addresses in the text field provided. Otherwise, leave the text field blank. ◆ Secondary DNS Server — The IP address of the Secondary Domain Name Server. LAN In this section, the LAN settings are configured based on the IP Address and Subnet Mask. The IP address is also used to access this Web-based management interface. It is recommended to use the default settings if you do not have an existing network.
26◆ IP Address — The IP address of N2 on the local area network. ( Default: 192.168.2.1 ) ◆ Subnet Mask — The subnet mask of N2 on the local area network ◆ DHCP Server — The DHCP Server is to assign private IP address to the N2 in your local area network(LAN). The default LAN IP address is 192.168.2.1, changing IP address will also change the DHCP server’s IP subnet. ADVANCED ROUTING In this section, allow to configure routing feature in the N2. ◆ Destination — The IP address of packets that can be routed. ◆ Type — Defines the type of destination. ( Host: Signal IP address / Net: Portion of Network ) ◆ Netmask — Displays the subnetwork associated with the destination. ◆ Gateway — Defines the packets destination next hop
27◆ Interface — Select interface to which a static routing subnet is to be applied ◆ Comment — Help identify the routing ◆ RIP — Enable or disable the RIP(Routing Information Protocol) for the WAN or LAN interface. WIRELESS SETTINGSBASIC  ◆ Wireless On/Off — Enables or Disable the radio. (Default: Turn On) ◆ Wireless Mode — There are 4 wireless mode, those are Access Point, WDS Access Point, WDS Repeater and WDS Client ◆ Network Name (SSID) — The name of the wireless network service provided by the N2. Clients that want to connect to the network must set their SSID to the same as that of N2. (Range: 1-32 characters) ◆ Multiple SSID — One additional VAP interface supported on the device. (Default: no name configured; Range: 1-32 characters) ◆ Frequency (Channel) — The radio channel that the N2 uses to communicate with wireless clients. ◆ Network Mode — Defines the radio operating mode.(Default: 11an HT20) ◆ Packet Aggregate — The process of joining multiple packets together into a single transmission unit, in order to reduce the overhead associated with each transmission.
28SECURITY  WIRED EQUIVALENT PRIVACY (WEP) WEP provides a basic level of security, preventing unauthorized access to the network, and encrypting data transmitted between wireless clients and an access point. WEP uses static shared keys (fixed-length hexadecimal or alphanumeric strings) that are manually distributed to all clients that want to use the network. When you select to use WEP, be sure to define at least one static WEP key for user authentication or data encryption. Also, be sure that the WEP shared keys are the same for each client in the wireless network. ◆ WEP-AUTO — Allows wireless clients to connect to the network using Open-WEP (uses WEP for encryption only) or Shared-WEP (uses WEP for authentication and encryption). ◆ Encrypt Type — Selects WEP for data encryption (OPEN mode only). ◆ Security Key Index — Selects the WEP key number to use for authentication or data encryption. If wireless clients have all four WEP keys configured to the same values, you can change the encryption key to any of the settings without having to update the client keys. (Default: 1; Range: 1~4)
29◆ WEP Keys — Sets WEP key values. The user must first select ASCII or hexadecimal keys. Each WEP key has an index number. Enter key values that match the key type and length settings. Enter 5 alphanumeric characters or 10 hexadecimal digits for 64-bit keys, or enter 13 alphanumeric characters or 26 hexadecimal digits for 128-bit keys. (Default: Hex, no preset value) WPA & WPA2 Wi-Fi Protected Access (WPA) was introduced as an interim solution for the vulnerability of WEP pending the adoption of a more robust wireless security standard. WPA2 includes the complete wireless security standard, but also offers backward compatibility with WPA. ◆ WPA — Clients using WPA for authentication. ◆ WPA2 — Clients using WPA2 for authentication. ◆ WPA-Auto — Clients using WPA or WPA2 for authentication. ◆ WPA Algorithms — Selects the data encryption type to use. (Default is determined by the Security Mode selected.) ■ TKIP — Uses Temporal Key Integrity Protocol (TKIP) keys for encryption. WPA specifies TKIP as the data encryption method to replace WEP. TKIP avoids the problems of WEP static keys by dynamically changing data encryption keys. ■ AES — Uses Advanced Encryption Standard (AES) keys for encryption. WPA2 uses AES Counter-Mode encryption with Cipher Block Chaining Message Authentication Code (CBC-MAC) for message integrity. The AES Counter-Mode/CBCMAC Protocol (AESCCMP) provides extremely robust data confidentiality using a 128- bit key. Use of AES-CCMP encryption is specified as a standard requirement for WPA2. Before implementing WPA2 in the network, be sure client devices are upgraded to WPA2-compliant hardware. ■ Auto — Uses either TKIP or AES keys for encryption. WPA and WPA2 mixed modes allow both WPA and WPA2 clients to associate to a common SSID. In mixed mode, the unicast encryption type (TKIP or AES) is negotiated for
30each client. ◆ Key Renewal Interval — Sets the time period for automatically changing data encryption keys and redistributing them to all connected clients. (Default: 3600 seconds) RADIUS Server — Configures RADIUS server settings. ◆ IP Address — Specifies the IP address of the RADIUS server. ◆ Port — The User Datagram Protocol (UDP) port number used by the RADIUS server for authentication messages. (Range: 1024-65535; Default: 1812) ◆ Shared Secret — A shared text string used to encrypt messages between the access point and the RADIUS server. Be sure that the same text string is specified on the RADIUS server. Do not use blank spaces in the string. (Maximum length: 20 characters) WPA-PSK & WPA2-PSK Wi-Fi Protected Access (WPA) was introduced as an interim solution for the vulnerability of WEP pending the adoption of a more robust wireless security standard. WPA2 includes the complete wireless security standard, but also offers backward compatibility with WPA. Both WPA and WPA2 provide an “enterprise” and “personal” mode of operation. For small home or office networks, WPA and WPA2 provide a simple “personal” operating mode that uses just a pre-shared key for network access. The WPA Pre-Shared Key (WPA-PSK) mode uses a common password phrase for user authentication that is manually entered on the access point and all wireless clients. Data encryption keys are automatically generated by the access point and distributed to all clients connected to the network. ◆ WPA-PSK — Clients using WPA with a Pre-shared Key are accepted for authentication. The default data encryption type for WPA is TKIP. ◆ WPA2-PSK — Clients using WPA2 with a Pre-shared Key are accepted for authentication. The default data encryption type for WPA is AES. ◆ WPA- Auto-PSK — Clients using WPA or WPA2 with a Preshared
31Key are accepted for authentication. The default data encryption type is TKIP/AES. ◆ WPA Algorithms — Selects the data encryption type to use. (Default is determined by the Security Mode selected.) ■ TKIP — Uses Temporal Key Integrity Protocol (TKIP) keys for encryption. WPA specifies TKIP as the data encryption method to replace WEP. TKIP avoids the problems of WEP static keys by dynamically changing data encryption keys. ■ AES — Uses Advanced Encryption Standard (AES) keys for encryption. WPA2 uses AES Counter-Mode encryption with Cipher Block Chaining Message Authentication Code (CBC-MAC) for message integrity. The AES Counter-Mode/CBCMAC Protocol (AESCCMP) provides extremely robust data confidentiality using a 128- bit key. Use of AES-CCMP encryption is specified as a standard requirement for WPA2. Before implementing WPA2 in the network, be sure client devices are upgraded to WPA2-compliant hardware. ■ Auto — Uses either TKIP or AES keys for encryption. WPA and WPA2 mixed modes allow both WPA and WPA2 clients to associate to a common SSID. In mixed mode, the unicast encryption type (TKIP or AES) is negotiated for each client. ◆ Pass Phrase — The WPA Preshared Key can be input as an ASCII string (an easy-to-remember form of letters and numbers that can include spaces) or Hexadecimal format. (Range: 8~63 ASCII characters, or exactly 64 Hexadecimal digits) ◆ Key Renewal Interval — Sets the time period for automatically changing data encryption keys and redistributing them to all connected clients. (Default: 3600 seconds) IEEE 802.1X AND RADIUS IEEE 802.1X is a standard framework for network access control that uses a central RADIUS server for user authentication. This control feature prevents unauthorized access to the network by requiring an 802.1X client application to submit user credentials for authentication. The 802.1X standard uses the Extensible Authentication Protocol (EAP) to pass user credentials (either digital certificates, user names and passwords, or other) from the client to the RADIUS server. Client authentication is then verified on the RADIUS server before the client can access the network. Remote Authentication Dial-in User Service (RADIUS) is an authentication protocol that uses software running on a central server to control access to RADIUS-aware devices on the network. An authentication server contains a database of user credentials for each user that requires network access. The WPA and WPA2 enterprise security modes use 802.1X as the method of user
32authentication. IEEE 802.1X can also be enabled on its own as a security mode for user authentication. When 802.1X is used, a RADIUS server must be configured and be available on the connected wired network. 802.1X WEP: Selects WEP keys for data encryption. When enabled, WEP encryption keys are automatically generated by the RADIUS server and distributed to all connected clients. (Default: Disabled) RADIUS Server — Configures RADIUS server settings. ◆ IP Address — Specifies the IP address of the RADIUS server. ◆ Port — The User Datagram Protocol (UDP) port number used by the RADIUS server for authentication messages. (Range: 1024-65535; Default: 1812) ◆ Shared Secret — A shared text string used to encrypt messages between the access point and the RADIUS server. Be sure that the same text string is specified on the RADIUS server. Do not use blank spaces in the string. (Maximum length: 20 characters) WI-FI PROTECTED SETUP (WPS) Wi-Fi Protected Setup (WPS) is designed to ease installation and activation of security features in wireless networks. WPS has two basic modes of operation, Push-button Configuration (PBC) and Personal Identification Number (PIN). The WPS PIN setup is optional to the PBC setup and provides more security. The WPS button on the 3G Mobile Wireless Router can be pressed at any time to allow a single device to easily join the network. The WPS Settings page includes configuration options for setting WPS device PIN codes and activating the virtual WPS button. Click on “Wireless Settings,” followed by “WPS”.
33 ◆ WPS SSID — The service set identifier for the unit. ◆ AP PIN — Displays the PIN Code for the 3G Mobile Wireless Router. The default is exclusive for each unit. (Default: 64824901) ◆ WPS Name — WPS name for connecting to the device. ◆ Security Mode — Selects between methods of broadcasting the WPS beacon to network clients wanting to join the network: WPA Algorithms — Selects the data encryption type to use. (Default is determined by the Security Mode selected.) ◆ TKIP — Uses Temporal Key Integrity Protocol (TKIP) keys for encryption. WPA specifies TKIP as the data encryption method to replace WEP. TKIP avoids the problems of WEP static keys by dynamically changing data encryption keys. ◆ AES — Uses Advanced Encryption Standard (AES) keys for encryption. WPA2 uses AES Counter-Mode encryption with Cipher Block Chaining Message Authentication Code (CBC-MAC) for message integrity. The AES Counter-Mode/CBCMAC Protocol (AESCCMP) provides extremely robust data confidentiality using a 128- bit key. Use of AES-CCMP encryption is specified as a standard requirement for WPA2. Before implementing WPA2 in the network, be sure client devices are upgraded to WPA2-compliant hardware. ◆ Auto — Uses either TKIP or AES keys for encryption. WPA and WPA2 mixed modes allow both WPA and WPA2 clients to associate to a common SSID. In mixed mode, the unicast encryption type (TKIP or AES) is negotiated for each client. ◆ Key Renewal Interval — Sets the time period for automatically changing data encryption keys and redistributing them to all connected clients. (Default: 3600 seconds) ◆ Pass Phrase — The WPA Preshared Key can be input as an ASCII string (an easy-to-remember form of letters and numbers that can include spaces) or Hexadecimal format. (Range: 8~63 ASCII characters, or exactly 64 Hexadecimal digits)
34 Warning:ThisProductisonlyusedinindustryFCCWarning:Thisdevicecomplieswithpart15oftheFCCRules.Operationissubjecttothefollowingtwoconditions:(1)Thisdevicemaynotcauseharmfulinterference,and(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethatmaycauseundesiredoperation.AnyChangesormodificationsnotexpresslyapprovedbythepartyresponsibleforcompliancecouldvoidtheuser’sauthoritytooperatetheequipment.FCCRadiationExposureStatement:ThisequipmentcomplieswithFCCradiationexposurelimitssetforthforanuncontrolledenvironment.Thisequipmentshouldbeinstalledandoperatedwithminimumdistance20cmbetweentheradiator&yourbody.Thistransmittermustnotbeco‐locatedoroperatinginconjunctionwithanyotherantennaortransmitter.

Navigation menu