Security

The Security page lets you configure and change the security settings for the access point, including your wireless security settings, MAC address filtering options, and login information.

Access Point Login

This section lets you change the user name and password required to use the configuration pages in the access point. To change these fields, enter the new user name and password and click Save at the bottom of the page. Then use the new name and password to log in to your access point.

Password Rules:

1. You can set a password up to 15 characters long. The most secure passwords are usually between 8 and 15 characters long.

2. You can enter a space or other punctuation in your password.

3. Use a mixture of uppercase (A through Z) and lowercase (a through z) letters.

4. Adding numbers 0 through 9 to a password increases security.

5. Use ASCII symbols, such as ~ ! @ # $ % & ^ *, etc., to further increase the security of your password.

Wireless

In this section you can enable the wireless security features. USRobotics strongly recommends that you enable some form of wireless security so that unauthorised wireless devices are not able to access your network.

For your wireless security settings, it is recommended that you select the WPA2 and WPA (PSK) or the WPA2 and WPA with 802.1x (RADIUS) wireless security method using TKIP and AES encryption for the most secure wireless network.

Note: All the wireless devices you want to connect to the network must have the same wireless security settings including the pass phrase or key that you use to secure your wireless network.

Select the encryption Method that you want the wireless network to use. You can select from the following options:

• WPA2 and WPA (PSK) (recommended)

• WPA2 (PSK)

• WPA (PSK)

• WEP open

• WEP shared

• WPA2 and WPA with 802.1x (RADIUS)

• WPA2 with 802.1x (RADIUS)

• WPA with 802.1x (RADIUS)

• None

Depending on the wireless security method you select, there are different encryption types and pass phrase or key settings.

WPA2 and WPA (PSK) Options

1. Select one of the following WPA2 and WPA options:

   • WPA2 and WPA (PSK)

   • WPA2 (PSK)

   • WPA (PSK)

2. Select your Encryption type: TKIP and AES, AES, or TKIP.

   Note: Not all wireless devices support AES encryption when using WPA (PSK) security. TKIP encryption with WPA (PSK) is supported by most wireless devices. You can use TKIP and AES encryption to cover both AES and TKIP devices.

3. Enter a Pass phrase (which is also commonly called a Network key, WPA key, or WPA Pre-shared key). The pass phrase must be between eight and sixty-three characters long. This pass phrase must be the same on each computer that is connected to the wireless network.

4. You can also specify a Key rotation, in seconds, or enter 0 in the field to disable the option. Key rotation specifies how often the access point generates a new group key for broadcast and multicast packets.

WEP Options

1. Select either of the following WEP options:

   • WEP open

   • WEP shared

2. Select your Key type as 128-bit ASCII, 128-bit hex, 64-bit ASCII or 64-bit hex.

3. Enter at least one Key (which is also commonly called a Network key).

   Each key must be 13 characters long for a 128-bit ASCII key type, 26 characters long for a 128-bit hex key type, and 5 characters long for a 64-bit ASCII key type or 10 characters long for a 64-bit hex key type.

   If you enter multiple keys, select the Current key that should be used for wireless connections.

RADIUS Options

You can use the RADIUS options only if you have access to a RADIUS server.

1. Select one of the following RADIUS options:

   • WPA2 and WPA with 802.1x (RADIUS)

   • WPA2 with 802.1x (RADIUS)

   • WPA with 802.1x (RADIUS)

2. Select your Encryption type: TKIP and AES, AES, or TKIP.

   Note: Not all wireless devices support AES encryption when using WPA (PSK) security. TKIP encryption with WPA (PSK) is supported by most wireless devices. You can use TKIP and AES encryption to cover both AES and TKIP devices.

3. Enter the RADIUS server IP address and RADIUS Port settings of your RADIUS server.
4. Enter the RADIUS key of your RADIUS server.
5. Enter the Re-authentication time, in minutes.
6. If required for your connection to the RADIUS server, select Pre-authentication. This option is not available with WPA with 802.1x (RADIUS).

None

None disables all wireless security on your access point.

Note: The setting of None is not recommended since without any encryption enabled, your network will be vulnerable to outside malicious attacks.

MAC Filter

In this area you can control which wireless devices are allowed or denied access to the access point based upon their MAC addresses. The MAC address can usually be found either on a label on the external wireless product or in the configuration utility of the wireless device, depending on the wireless device you are using.

You can click Allow Current Clients button to grant access to all wireless devices that are currently connected to the access point, or you can apply one of the following filters to determine which devices are allowed access:

• Allow all wireless devices: Any wireless device that has the correct security information is allowed to connect to the access point. This is the default setting.

• Allow only these devices: Allows only devices with specific MAC addresses to establish a wireless connection with the access point.

  1. Enter the MAC address of the device that should be allowed connection to the access point.
  2. Click Add.

• Deny only these devices: Denies a wireless connection to the access point for devices with the specified MAC addresses. This can be used if you notice unauthorised wireless devices that are connected to your network.

  1. Enter the MAC address of the device that should be denied connection to the access point.
  2. Click Add.

Note: Click Save to apply all your new settings and reboot the access point after you have completed all your changes.