Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR 202-10064-02 v1.
ii 202-10064-02, June 2005
Technical Support Please register to obtain technical support. Please retain your proof of purchase and warranty information. To register your product, get product support or obtain product information and product documentation, go to http://www.NETGEAR.com. If you do not have access to the World Wide Web, you may register your product by filling out the registration card and mailing it to NETGEAR customer service. You will find technical support information at: http://www.NETGEAR.
FCC Statement DECLARATION OF CONFORMITY We Netgear, 4500 Great America Parkway Santa Clara, CA 95054, USA Tel: +1 408 907 8000 declare under our sole responsibility that the product(s) WG102 (Model Designation) 802.11g ProSafe Wireless Access Point (Product Name) complies with Part 15 of FCC Rules.
However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try and correct the interference by one or more of the following measures: • Reorient or locate the receiving antenna. • Increase the separation between the equipment and receiver.
Antenna Statement for North America and Australia In addition to its own antenna, the WG102 device has been approved for use with the following detachable antennas and antenna cables: Approved Antennas Antenna Gain and type Approved Antenna Cable Antenna Cable Length Maximum Transmitted Power* NETGEAR ANT24D18 18 dBi, directional outdoor/indoor NETGEAR ACC-10314-01 thru 05 1.5 m to 30 m 18 dBm + 18 dBi ant. NETGEAR ANT2409 9 dBi, omnidirectional outdoor/indoor NETGEAR ACC-10314-01 thru 05 1.
Antenna Statement for the European Community Please note that the 100mW EIRP limit and regulations could vary in Europe from country to country. Please check the regulations in your country. The antenna cable type and length must comply with European regulations. Refer to the table below for approved antenna and cable accessories.
Certificate of the Manufacturer/Importer It is hereby certified that the NETGEAR WG102 ProSafe 802.11g Wireless Access Point has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating instructions.
Contents Chapter 1 About This Manual Audience, Scope, Conventions, and Formats ................................................................1-1 How to Use This Manual ................................................................................................1-2 How to Print this Manual .................................................................................................1-2 Chapter 2 Introduction About the NETGEAR WG102 ProSafe 802.11g Wireless Access Point ........................
How to Restrict Wireless Access by MAC Address ...............................................3-19 How to Configure WEP ..........................................................................................3-20 How to Configure WPA with Radius .......................................................................3-22 How to Configure WPA-PSK ..................................................................................3-25 How to Configure WPA2 with Radius ..........................................
Chapter 6 Troubleshooting No lights are lit on the access point. ...............................................................................6-1 The Wireless LAN activity light does not light up. ...........................................................6-2 The LAN light is not lit. ....................................................................................................6-2 I cannot access the Internet or the LAN with a wireless capable computer. .................
Changes to Wireless Access Points ............................................................... B-17 Changes to Wireless Network Adapters ......................................................... B-17 Changes to Wireless Client Programs ............................................................
Chapter 1 About This Manual This chapter describes the intended audience, scope, conventions, and formats of this manual. Audience, Scope, Conventions, and Formats This reference manual assumes that the reader has basic to intermediate computer and Internet skills. However, basic computer network, Internet, firewall, and VPN technologies tutorial information is provided in the Appendices and on the Netgear website. This guide uses the following typographical conventions: Table 1-1.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 How to Use This Manual The HTML version of this manual includes the following: • Buttons, at a time and , for browsing forwards or backwards through the manual one page • A button that displays the table of contents and an button. Double-click on a link in the table of contents or index to navigate directly to where the topic is described in the manual. • A product model.
Chapter 2 Introduction This chapter introduces the NETGEAR WG102 ProSafe 802.11g Wireless Access Point. Minimal prerequisites for installation are presented in “System Requirements” on page 2-4. About the NETGEAR WG102 ProSafe 802.11g Wireless Access Point The NETGEAR WG102 ProSafe 802.11g Wireless Access Point is the basic building block of a wireless LAN infrastructure.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Key Features The WG102 Access Point is easy-to-use and provides solid wireless and networking support. Supported Standards and Conventions The following standards and conventions are supported: • Standards Compliant. The Wireless Access Point complies with the IEEE 802.11g for Wireless LANs. • WEP support. Support for WEP is included. 64-bit, 128-bit, and 152-bit keys are supported. • Full WPA and WPA2 support.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • • • • • • • • • AutoCell RF Management. AutoCell provides advanced automated RF management that improves performance and enhances security. Upgradeable Firmware. Firmware is stored in a flash memory and can be upgraded easily, using only your Web browser, and can be upgraded remotely. Access Control.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Autosensing Ethernet Connections with Auto Uplink The WG102 can connect to a standard Ethernet network. The LAN interface is autosensing and capable of full-duplex or half-duplex operation. The wireless access point incorporates Auto UplinkTM technology.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • • • • • The Category 5 UTP straight through Ethernet cable with RJ-45 connector included in the package, or one like it A 100-240 V, 50-60 HZ AC power source A Web browser for configuration such as Microsoft Internet Explorer 6.0 or above, or Netscape Navigator 4.78 or above At least one computer with the TCP/IP protocol installed 802.11g or 802.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Front Panel Figure 2-1: WG102 front panel Viewed from left to right, the WG102 Access Point provides these four status LEDs: PWR, TEST, LAN, and WLAN. The following table explains these LED indicators: LED DESCRIPTION PWR Power Indicator Off No power. If this LED does not come on with the power adapter and cord correctly installed, see Chapter 4, Troubleshooting. On Power is on.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Rear Panel Figure 2-2: WG102 rear panel Viewed from left to right, the back of the WG102 provides the following: • Detachable Antenna The WG102 provides one detachable antenna. • Ground The WG102 provides a connector of grounding the unit.
Reference Manual for the NETGEAR ProSafe 802.
Chapter 3 Basic Installation and Configuration This chapter describes how to set up your NETGEAR WG102 ProSafe 802.11g Wireless Access Point for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b or 802.11g wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN. Note: Indoors, computers can connect over 802.11g wireless networks at ranges of several hundred feet or more.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the WG102. For complete performance specifications, see Appendix A, “Specifications”. For best results, place your wireless access point: • • • • • • Near the center of the area in which your PCs will operate.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Default Factory Settings When you first receive your WG102, the default factory settings will be set as shown below. You can restore these defaults with the Factory Default Restore switch on the rear panel — see “WG102 front panel” on page 2-6.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Understanding WG102 Wireless Security Options Your wireless data transmissions can be received well beyond your walls by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The WG102 Access Point provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • • Use WPA, WPA-PSK, WPA2, or WPA2-PSK. Wi-Fi Protected Access (WPA and WPA2) data encryption provides data security. The very strong authentication along with dynamic per frame rekeying of WPA make it virtually impossible to compromise. Because this is a new standard, wireless device driver and software availability may be limited. Use AutoCell Enhanced RF Security.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 2 CONFIGURE LAN AND WIRELESS ACCESS a. Configure the WG102 Ethernet port for LAN access. • Connect to the WG102 by opening your browser and entering http://192.168.0.229 in the address field. A login window opens. When prompted, enter admin for the user name and password for the password, both in lower case letters.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • The Web browser will then display the WG102 settings page. Figure 3-3: Login result: WG102 home page – When the wireless access point is connected to the Internet, click the Knowledge Base or the Documentation link under the Web Support menu to view support information or the documentation for the wireless access point.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • Click the Basic Settings link to view the Basic Settings menu. Figure 3-4: Basic Settings menu • b. Configure the settings appropriate for your network. Click the Wireless Settings link in the Setup section of the main menu to view the Wireless Settings menu.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 c. Configure the wireless interface for wireless access. See the online help or the “Understanding Wireless Settings” on page 3-12 topic of this Reference Manual for full instructions. Note: You must set the Country/Region. It may not be legal to operate the wireless access point in a region other than one of those identified in this field.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 How to Log In to the WG102 Using Its Default IP Address 192.168.0.229 is the default IP address of your access point. The WG102 is set, by default, the DHCP client to be disabled. Note: The computer you are using to connect to the WG102 should be configured with an IP address that starts with 192.168.0.x and a Subnet Mask of 255.255.255.0. 2. Open a Web browser such as Internet Explorer or Netscape Navigator. 3.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Using the Basic IP Settings Options To configure the basic settings of your wireless access point, click the Basic Settings link in the Setup section of the main menu of the browser interface. The Basic Settings menu will appear, as shown below. Figure 3-7: Basic Settings menu The Basic Settings menu options are discussed below. The default values are suitable for most users and situations.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • – IP Address: Enter an unused IP address from the address range used on your LAN (factory default: 192.168.0.229). – IP Subnet Mask: Enter the subnet mask value used on your LAN (factory default: 255.255.255.0). – Default Gateway: Enter the IP address of the Gateway for your LAN. For more complex networks, enter the address of the router for the network segment to which the Access Point is connected (factory default: 0.0.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 The Wireless Settings menu options are discussed below: • Country/Region. This field identifies the region where the WG102 can be used. It may not be legal to operate the wireless features of the wireless access point in a region other than one of those identified in this field. There is no default country domain, and the channel is set to 11. Unless a country domain is selected, the channel cannot be changed. • Turn Radio On.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • • Operating Mode. Select the desired wireless operating mode. The options are: – Auto (802.11g/802.11b) – Both 802.11g and 802.11b wireless stations can be used. This is the default. – 802.11g Only - Only 802.11g wireless stations can be used. – 802.11b Only - All 802.11b wireless stations can be used. 802.11g wireless stations can still be used if they can operate in 802.11b mode. Channel.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Understanding WEP/WPA Security Options The table below identifies the various WEP/WPA security options. A full explanation of these standards is available in Appendix B, “Wireless Networking Basics”. Figure 3-9: WEP/WPA Settings menu The WEP/WPA settings are explained as follows: • Network Authentication: Specifies the Authentication type used. The default is Open System.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 – WPA2-PSK: WPA2 is a later version of WPA. Only select this if all clients support WPA2. If selected, you must use AES encryption, and enter the WPA passphrase (Network key). – WPA-PSK and WPA2-PSK: This selection allows clients to use either WPA (with TKIP) or WPA2 (with AES). If selected, encryption must be TKIP + AES. The WPA passphrase (Network key) must also be entered.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • WPA Passphrase (Network Key): If using WPA-PSK, enter the passphrase here. All wireless stations must use the same passphrase (network key). The network key must be from 8 to 63 characters in length. • Wireless Client Security Separation: If enabled, the associated wireless clients will not be able to communicate with each other. This feature is intended for hotspots and other public access situations.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • Shared Secret: ___________________________________ WPA2 RADIUS Settings For WPA2, record the following settings for the primary and secondary RADIUS servers: Server Name/IP Address: Primary _________________ Secondary __________________ Port: ___________________________________ Shared Secret: ___________________________________ Use the procedures described in the following sections to configure the WG102.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Note: If you are configuring the WG102 from a wireless computer and you change the SSID, channel, or security settings, you will lose your wireless connection when you click Apply. You must then change the wireless settings of your computer to match the new settings. Configure and test your PCs for wireless connectivity. Program the wireless adapter of your PCs to have the same SSID and channel that you configured in the WG102.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Figure 3-10: Access Control List menu 3. Select the Turn Access Control On check box. 4. Choose to use the local MAC address database stored on the access point, or use the RADIUS MAC address database stored on a RADIUS server. • • 5. If you choose the RADIUS MAC Address Database, you must configure the RADIUS Server Settings first.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Log in to the WG102 using its default address of http://192.168.0.229 or at whatever IP address the unit is currently configured Use the default user name of admin and default password of password, or whatever LAN address and password you have set up. 2. Click the WEP/WPA Settings link in the main menu of the WG102. 1. Figure 3-11: WEP/WPA Settings menu Choose Open System or Shared Key authentication. 4.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Note: If you use a wireless computer to configure WEP settings, you will be disconnected when you click Apply. Reconfigure your wireless adapter to match the new settings or access the wireless access point from a wired computer to make any further changes. How to Configure WPA with Radius Note: Not all wireless adapters support WPA. Furthermore, client software is required on the client.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 2. Click Radius Server Settings in the Security menu. Figure 3-12: Radius Server Settings menu 3. Enter the Radius settings. • Authentication/Access Control Radius Server Configuration: This configuration is required for authentication using Radius. IP Address, Port No. and Shared Secret is required for communication with Radius Server.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • Global-key Re-Key Time: Check on this option to enable Re-keying of Global Key. The Global Key Re-Key can be done based on time interval in seconds or number of packets exchanged using the global key. The default is 3600 seconds. • Update if any station disassociates: Check on this option to refresh global key when any stations disassociated with wireless Access Point.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 How to Configure WPA-PSK Note: Not all wireless adapters support WPA. Furthermore, client software is required on the client. Windows XP and Windows 2000 with Service Pack 3 do include the client software that supports WPA. Nevertheless, the wireless adapter hardware and driver must also support WPA. Consult the product document for your wireless adapter and WPA client software for instructions on configuring WPA settings.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 How to Configure WPA2 with Radius Note: Not all wireless adapters support WPA2. Furthermore, client software is required on the client. Make sure your client card supports WPA2. Consult the product document for your wireless adapter and WPA2 client software for instructions on configuring WPA2 settings. To configure WPA2, follow these steps: 1. Log in at the default LAN address of http://192.168.0.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 4. • Authentication/Access Control Radius Server Configuration: This configuration is required for authentication using Radius. IP Address, Port No. and Shared Secret is required for communication with Radius Server. A Secondary Radius Server can be configured which is used on failure on Primary Radius Server • IP Address: The IP address of the Radius Server. The default is 0.0.0.0.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 5. Click WEP/WPA Settings in the Security menu. Figure 3-16: WEP/WPA Settings menu 6. Choose WPA2 with Radius from the list. 7. Click Apply to save your settings. How to Configure WPA2-PSK Note: Not all wireless adapters support WPA2. Furthermore, client software is required on the client. Make sure your client card supports WPA2.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 2. Click WEP/WPA Settings in the Security menu of the WG102. Figure 3-17: WEP/WPA Settings menu 3. Choose WPA2-PSK from the list. 4. Enter the pre-shared key passphrase. 5. Click Apply to save your settings. How to Configure WPA and WPA2 Note: Not all wireless adapters support WPA. Furthermore, client software is required on the client.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 To configure WPA and WPA2, follow these steps: 1. Log in at the default LAN address of http://192.168.0.229 with the default user name of admin and default password of password, or using whatever LAN address and password you have set up. 2. Click Radius Server Settings in the Security menu. Figure 3-18: Radius Server Settings menu 3. Enter the Radius settings.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • Shared Secret: This is shared between the Wireless Access Point and the Radius Server while authenticating the supplicant. • Re-authentication Time: The time interval in seconds after which the supplicant will be authenticated again with the Radius Server. The default is 3600 seconds. • Global-key Re-Key Time: Check on this option to enable Re-keying of Global Key.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 6. Choose WAP and WPA2 with Radius from the list. 7. Click Apply to save your settings. How to Configure WPA2-PSK and WPA2-PSK Note: Not all wireless adapters support WPA. Furthermore, client software is required on the client. Windows XP and Windows 2000 with Service Pack 3 do include the client software that supports WPA. Nevertheless, the wireless adapter hardware and driver must also support WPA.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 3. Choose WPA-PSK and WPA2-PSK from the list. 4. Enter the pre-shared key passphrase. 5. Click Apply to save your settings.
Reference Manual for the NETGEAR ProSafe 802.
Chapter 4 Management This chapter describes how to use the management features of your NETGEAR WG102 ProSafe 802.11g Wireless Access Point. These features can be found by clicking on the Maintenance heading in the Main Menu of the browser interface. Using Syslog and Activity Log Information The Information contains the activity log link you can use for setting up a syslog server and viewing activity log information.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Enable the SysLog option if you have a SysLog server on your LAN. If enabled, you must enter the IP address of your SysLog server and the port number your SysLog server is configured to use. • SysLog Server IP address: The access point will send all the SysLog to the specified IP address if SysLog option is enabled. Default: 0.0.0.0 • Port: The port number configured in the SysLog server on your LAN.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 This screen shows the following parameters: Table 4-1. General Information Fields Field Description Access Point Information Access Point Name (NetBIOS name) The default name may be changed if desired. MAC Address Displays the Media Access Control address (MAC address) of the wireless access point’s Ethernet port. Country/Region Displays the domain or region for which the wireless access point is licensed for use.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Statistics The Information - Statistics screen provides various LAN and WLAN statistics. Figure 4-3: Wireless Access Point Status screen Table 4-1. Statistics Fields Field Description Wired Ethernet Packets Bytes Received/Transmitted The number of packets sent since the WG102 was restarted.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Viewing a List of Attached Devices The Available Wireless Station List contains a table of all IP devices associated with the wireless access point in the wireless network defined by the Wireless Network Name (SSID). From the main menu of the browser interface, under the Information heading, click the Available Wireless Station List link to view the list, shown below.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 1. Download the new software file from NETGEAR, save it to your hard disk, and unzip it. 2. From the main menu Management section, click the Upgrade Firmware link to display the screen above. 3. In the Upgrade Firmware menu, click the Browse button and browse to the location of the image (.IMG) upgrade file. 4. Click Upload. When the upload completes, your wireless access point will automatically restart.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Saving and Retrieving the Configuration The Backup/Restore Settings menu allows you to save or retrieve a file containing your wireless access point’s configuration settings. To save your settings, click the Save button. Your browser will extract the configuration file from the wireless access point and prompts you for a location on your computer to store the file.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Changing the Administrator Password The default password is password. Change this password to a more secure password. You cannot change the administrator login name. From the main menu of the browser interface, under the Management heading, click Change Password to bring up the menu shown below. Figure 4-5: Set Password menu To change the password, first enter the old password, and then enter the new password twice.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Using SNMP Remote Management Enable SNMP to allow SNMP network management software such as HP OpenView to manage the wireless access point via the SNMPv1/v2 protocol. From the main menu of the browser interface, under the Management heading, click the Remote Management link to view this menu. Figure 4-6: Remote Management settings 1. Click Enable to use the SNMP remote management feature. 2.
Reference Manual for the NETGEAR ProSafe 802.
Chapter 5 Advanced Configuration This chapter describes how to configure the advanced features of your NETGEAR WG102 ProSafe 802.11g Wireless Access Point: • • • Hotspot Settings: Set up advanced wireless LAN parameters. Wireless Settings: Set up advanced wireless LAN parameters. Access Point Settings: Enable wireless bridging and repeating. These features can be found under the Advanced heading in the main menu.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • Advanced wireless parameters These options are discussed below. AutoCell RF Management AutoCell provides advanced RF wireless management features that improve performance and enhance security. Table 5-1. What does AutoCell do? Problem AutoCell Settings Erosion of privacy Optional setting allows Wi-Fi network to be nearly undetectable by neighbors and hackers.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Configuration Figure 5-2: Advanced Wireless Settings screen AutoCell Setup options There are two AutoCell configuration setting choices: • Enable/disable Auto RF Management: Enabled by default • Enable/disable Enhanced RF Security: Disabled by default Auto RF Management Note: Channel selection and power management is automatically adjusted by AutoCell when the Auto RF Management option is enabled.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 In this mode, AutoCell shrinks the size of coverage to the minimum to reach clients but also shrinks the size of the beacons that access points use to announce their presence. This mode makes an enterprise wireless LAN nearly invisible to users outside an office building. AutoCell AP/Client Interaction AutoCell's self-organizing micro cells provide performance benefits and an additional level of privacy for enterprises.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Configuring Advanced Wireless Settings The default advanced wireless LAN parameter settings usually work well. If you want the AP to operate in Super-G mode, use this feature. Figure 5-3: Advanced Wireless Settings screen The advanced wireless parameters settings normally do not need to be changed. • Super-G Mode: Super-G Mode is a proprietary extension to the 802.11g standard which can improve wireless throughput.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • RTS Threshold: Request to Send Threshold. The packet size that is used to determine if it should use the CSMA/CD (Carrier Sense Multiple Access with Collision Detection) mechanism or the CSMA/CA mechanism for packet transmission. With the CSMA/CD transmission mechanism, the transmitting station sends out the actual packet as soon as it has waited for the silence period.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 AP Settings: Enabling Wireless Bridging and Repeating The WG102 Access Point lets you build large bridged wireless networks. Figure 5-4: Advanced Wireless Settings Access Point Mode settings Examples of wireless bridged configurations are: • Point-to-Point Bridge – In this mode, the WG102 will communicate with another bridge-mode wireless station.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • • Multi-Point Bridge – Select this only if this WG102 is the “master” for a group of bridge-mode wireless stations. Then all traffic is sent to this “master,” rather than directly among each other. – In addition, you have the option of enabling client associations with this WG102. – For multi-point bridge mode, you must enter the MAC addresses of the other access points in the fields provided.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 How to Configure a WG102 as a Point-to-Point Bridge Figure 5-5: Point-to-Point Bridge Configure the WG102 (AP1) on LAN Segment 1 in Point-to-Point Bridge mode. 2. Configure the WG102 (AP2) on LAN Segment 2 in Point-to-Point Bridge mode. 1. AP1 must have AP2’s MAC address in its Remote MAC Address field and AP2 must have AP1’s MAC address in its Remote MAC Address field. 3. 4.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 How to Configure Multi-Point Wireless Bridging Figure 5-6: Multi-Point bridging 1. 2. Configure the Operating Mode of the WG102 Access Points. • Because it is in the central location, configure WG102 (AP1) on LAN Segment 1 in Point-to-Multi-Point Bridge mode. The MAC addresses of AP2 and AP3 are required in AP1. • Configure WG102 (AP2) on LAN Segment 2 in Point-to-Point Bridge mode with the Remote MAC Address of AP1.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 3. • If using DHCP, all WG102 Access Points should be set to “Obtain an IP address automatically (DHCP Client)” in the IP Address Source portion of the Basic IP Settings menu. • All WG102 Access Points use the same SSID, Channel, authentication mode, if any, and encryption in use. • All Point-to-Point APs must have AP2’s MAC address in its Remote AP MAC address field. Verify connectivity across the LANs.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 1. 2. 3. Configure the Operating Mode of the WG102 Access Points. • Configure AP1 on LAN Segment 1 in Repeater mode with the Remote MAC Address of the ‘downstream’ AP (AP2). • Configure AP2 in Repeater mode with the MAC addresses of the ‘upstream’ AP (AP1) and the MAC address of the ‘downstream’ AP (AP3). • Configure AP3 in Repeater mode with the Remote MAC Address of the ‘upstream’ AP (AP2).
Chapter 6 Troubleshooting This chapter provides information about troubleshooting your NETGEAR WG102 ProSafe 802.11g Wireless Access Point. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. • Is the WG102 on? • Have I connected the wireless access point correctly? Go to “Installing the WG102 Access Point” on page 3-5. • I cannot remember the wireless access point’s configuration password.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 The Wireless LAN activity light does not light up. The access point’s antennae are not working. • If the Wireless LAN activity light stays off, disconnect the adapter from its power source and then plug it in again. • Make sure the antennas are tightly connected to the WG102. • Contact NETGEAR technical support if the Wireless LAN activity light remains off. The LAN light is not lit. There is a hardware connection problem.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 I cannot connect to the WG102 to configure it. Check these items: • The WG102 is properly installed, LAN connections are OK, and it is powered on. Check that the LAN port LED is on (amber indicating a 10 Mbps Ethernet connection or green indicating a 100 Mbps Ethernet connection) to verify that the Ethernet connection is OK. • The default configuration of the WG102 is for a static IP address of 192.168.0.229 and a Mask of 255.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Using the Reset Button to Restore Factory Default Settings The Reset button (see “WG102 rear panel” on page 2-7) has two functions: • Reboot. When pressed and released quickly, the WG102 will reboot (restart). • Reset to Factory Defaults. This button can also be used to clear ALL data and restore ALL settings to the factory default values. To clear all data and restore the factory default values: 1.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Appendix A Specifications This appendix provides technical specifications for the NETGEAR WG102 ProSafe 802.11g Wireless Access Point. Specifications for the WG102 Parameter NETGEAR WG102 ProSafe 802.11g Wireless Access Point Network Management Web-based configuration and status monitoring Maximum Clients Limited by the amount of wireless network traffic generated by each node; typically 15 to 20 nodes.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Parameter 802.11b and g Typical Maximum Transmit Power NETGEAR WG102 ProSafe 802.11g Wireless Access Point 802.11b mode, 1 to 11Mbps: +19 dBm* 802.11g mode, 6 to 24 Mbps: +18 dBm* 802.11g mode, 36/48/54 Mbps: +17/16/15 dBm* *Note: Maximum transmit power varies based on country or region selection to ensure local regulatory compliance. 802.11b and g Typical Receive Sensitivity 802.11b mode at 1Mbps: -95 dBm 802.
Appendix B Wireless Networking Basics This chapter provides an overview of Wireless networking. Wireless Networking Overview The WG102 Access Point conforms to the Institute of Electrical and Electronics Engineers (IEEE) 802.11b and 802.11g standards for wireless LANs (WLANs). On an 802.11b or g wireless link, data is encoded using direct-sequence spread-spectrum (DSSS) technology and is transmitted in the unlicensed radio spectrum at 2.5GHz. The maximum data rate for the 802.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Ad Hoc Mode (Peer-to-Peer Workgroup) In an ad hoc network, computers are brought together as needed; thus, there is no structure or fixed points to the network - each node can generally communicate with any other node. There is no Access Point involved in this configuration.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • Shared Key. With Shared Key authentication, only those PCs that possess the correct authentication key can join the network. By default, IEEE 802.11 wireless devices operate in an Open System network. Wired Equivalent Privacy (WEP) data encryption is used when the wireless devices are configured to operate in Shared Key authentication mode. 802.11 Authentication The 802.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 2. The access point authenticates the station. 3. The station associates with the access point and joins the network. This process is illustrated below. Figure B-1: Open system authentication Shared Key Authentication The following steps occur when two devices use Shared Key Authentication: 1. The station sends an authentication request to the access point. 2. The access point sends challenge text to the station. 3.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 This process is illustrated below. Figure B-2: Shared key authentication Overview of WEP Parameters Before enabling WEP on an 802.11 network, you must first consider what type of encryption you require and the key size you want to use. Typically, there are three WEP Encryption options available for 802.11 products: 1. Do Not Use WEP: The 802.11 network does not encrypt data.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Key Size The IEEE 802.11 standard supports two types of WEP encryption: 40-bit and 128-bit. The 64-bit WEP data encryption method allows for a five-character (40-bit) input. Additionally, 24 factory-set bits are added to the forty-bit input to generate a 64-bit encryption key. The 24 factory-set bits are not user-configurable). This encryption key will be used to encrypt/decrypt all data transmitted via the wireless interface.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 WEP Configuration Options The WEP settings must match on all 802.11 devices that are within the same wireless network as identified by the SSID. In general, if your mobile clients will roam between access points, then all of the 802.11 access points and all of the 802.11 client adapters on the network must have the same WEP settings.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Table B-2: Channel 802.11b/g Radio Frequency Channels Center Frequency Frequency Spread 4 2427 MHz 2414.5 MHz - 2439.5 MHz 5 2432 MHz 2419.5 MHz - 2444.5 MHz 6 2437 MHz 2424.5 MHz - 2449.5 MHz 7 2442 MHz 2429.5 MHz - 2454.5 MHz 8 2447 MHz 2434.5 MHz - 2459.5 MHz 9 2452 MHz 2439.5 MHz - 2464.5 MHz 10 2457 MHz 2444.5 MHz - 2469.5 MHz 11 2462 MHz 2449.5 MHz - 2474.5 MHz 12 2467 MHz 2454.5 MHz - 2479.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 WPA and WPA2 offer the following benefits: • • • • Enhanced data privacy Robust key management Data origin authentication Data integrity protection The Wi-Fi Alliance is now performing interoperability certification testing on Wi-Fi Protected Access products. Starting August of 2003, all new Wi-Fi certified products have to support WPA. NETGEAR is implementing WPA and WPA2 on client and access point products. The 802.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 How Does WPA Compare to WPA2 (IEEE 802.11i)? WPA is forward compatible with the WPA2 security specification. WPA is a subset of WPA2 and used certain pieces of the early 802.11i draft, such as 802.1x and TKIP. The main pieces of WPA2 that are not included in WPA are secure IBSS (Ad-Hoc mode), secure fast handoff (for specialized 802.11 VoIP phones), as well as enhanced encryption protocols, such as AES-CCMP.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 The primary information conveyed in the Beacon frames is the authentication method and the cipher suite. Possible authentication methods include 802.1X and Pre-shared key. Pre-shared key is an authentication method that uses a statically configured pass phrase on both the stations and the access point.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 WPA/WPA2 Authentication: Enterprise-level User Authentication via 802.1x/EAP and RADIUS Figure B-3: WPA/WPA2 Overview IEEE 802.1x offers an effective framework for authenticating and controlling user traffic to a protected network, as well as providing a vehicle for dynamically varying data encryption keys via EAP from a RADIUS server, for example.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Figure B-4: 802.1x Authentication Sequence In the illustration above, the Supplicant could be a WPA/WPA2-enabled wireless adapter with supplicant software, the Authenticator would be a WPA/WPA2-enabled AP, and the Authenticating Server would be a RADIUS server. The AP sends Beacon Frames with WPA/WPA2 information element to the stations in the service set. Information elements include the required authentication method (802.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 4. The authentication server uses a specific authentication algorithm to verify the client's identity. This could be through the use of digital certificates or some other EAP authentication type. 5. The authentication server will either send an accept or reject message to the access point. 6. The access point sends an EAP-success packet (or reject packet) to the client. 7.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 • • • The verification of the security configuration after the encryption keys are determined. The synchronized changing of the unicast encryption key for each frame. The determination of a unique starting unicast encryption key for each preshared key authentication. Michael With 802.11 and WEP, data integrity is provided by a 32-bit integrity check value (ICV) that is appended to the 802.11 payload and encrypted with WEP.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Product Support for WPA/WPA2 Starting in August, 2003, NETGEAR, Inc. wireless Wi-Fi certified products will support the WPA standard. NETGEAR, Inc. wireless products that had their Wi-Fi certification approved before August, 2003 will have one year to add WPA so as to maintain their Wi-Fi certification.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Changes to Wireless Access Points Wireless access points must have their firmware updated to support the following: • • • • • The new WPA/WPA2 information element To advertise their support of WPA/WPA2, wireless APs send the beacon frame with a new 802.11 WPA/WPA2 information element that contains the wireless AP's security configuration (encryption algorithms and wireless security configuration information).
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Microsoft has worked with many wireless vendors to embed the WPA driver update in the wireless adapter driver. So, to update your Microsoft Windows wireless client, all you have to do is obtain the new WPA/WPA2-compatible driver and install the driver.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Glossary Use the list below to find definitions for technical terms used in this manual. 802.11 Standard 802.11, or IEEE 802.11, is a type of radio technology used for wireless local area networks (WLANs). It is a standard that has been developed by the IEEE (Institute of Electrical and Electronic Engineers), http://standards.ieee.org.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 The purpose of 11d is to add features and restrictions to allow WLANs to operate within the rules of these countries. Equipment manufacturers do not want to produce a wide variety of country-specific products and users that travel do not want a bag full of country-specific WLAN PC cards. The outcome will be country-specific firmware solutions. 802.11e Standard 802.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Access Point (AP) A wireless LAN transceiver or "base station" that can connect a wired LAN to one or many wireless devices. Access points can also bridge to each other. There are various types of access points, also referred to as base stations, used in both wireless and wired networks. These include bridges, hubs, switches, routers and gateways.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 for cables or wires. Bluetooth is a frequency-hopping technology in the 2.4 GHz frequency spectrum, with a range of 30 feet and up to 11Mbps raw data throughput. Bridge A product that connects a local area network (LAN) to another local area network that uses the same protocol (for example, wireless, Ethernet or token ring). Wireless bridges are commonly used to link buildings in campuses.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 CSMA-CD (Carrier Sense Multiple Action/Collision Detection) A method of managing traffic and reducing noise on an Ethernet network. A network device transmits data after detecting that a channel is available. However, if two devices transmit data simultaneously, the sending devices detect a collision and retransmit after a random time delay.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 ESSID (more commonly referred to as SSID – Short Set Identifier) The identifying name of an 802.11 wireless network. When you specify your correct ESSID in your client setup you ensure that you connect to your wireless network rather than another network in range. (See SSID.) The ESSID can be called by different terms, such as Network Name, Preferred Network, SSID or Wireless LAN Service Area.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 IEEE (Institute of Electrical and Electronics Engineers) A membership organization (www.ieee.org) that includes engineers, scientists and students in electronics and allied fields. It has more than 300,000 members and is involved with setting standards for computers and communications. IEEE 802.11 A set of specifications for LANs from The Institute of Electrical and Electronics Engineers (IEEE).
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 MAC (Media Access Control) Every wireless 802.11 device has its own specific MAC address hard-coded into it. This unique identifier can be used to provide security for wireless networks. When a network uses a MAC table, only the 802.11 radios that have had their MAC addresses added to that network's MAC table will be able to get onto the network.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 NIC (Network Interface Card) A type of PC adapter card that either works without wires (Wi-Fi) or attaches to a network cable to provide two-way communication between the computer and network devices such as a hub or switch. Most office wired NICs operate at 10 Mbps (Ethernet), 100 Mbps (Fast Ethernet) or 10/100 Mbps dual speed. High-speed Gigabit and 10 Gigabit NIC cards are also available. See PC Card.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Range The distance away from your access point that your wireless network can reach. Most Wi-Fi systems will provide a range of a hundred feet or more. Depending on the environment and the type of antenna used, Wi-Fi signals can have a range of up to mile Residential gateway A wireless device that connects multiple PCs, peripherals and the Internet on a home network. Most Wi-Fi residential gateways provide DHCP and NAT as well.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Site survey The process whereby a wireless network installer inspects a location prior to putting in a wireless network. Site surveys are used to identify the radio- and client-use properties of a facility so that access points can be optimally placed.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 TCP/IP The underlying technology behind the Internet and communications between computers in a network. The first part, TCP, is the transport part, which matches the size of the messages on either end and guarantees that the correct message has been received. The IP part is the user's computer address on a network.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 As a recent development, the debate over the legality of warchalking is still going on. The practice stems from the U.S. Depression-era culture of wandering hobos who would make marks outside of homes to indicate to other wanderers whether the home was receptive to drifters or was inhospitable.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 does not offer. With this feature, WPA provides roughly comparable security to VPN tunneling with WEP, with the benefit of easier administration and use. This is similar to 802.1x support and requires a RADIUS server in order to implement. The Wi-Fi Alliance will call this, 'WPA-Enterprise.
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 secure transmission and authentication is particularly important to users unknown to each other. The authentication capability defined in the specification enables a secure access control mechanism for the service providers and for mobile users not utilizing VPN connections.
Reference Manual for the NETGEAR ProSafe 802.
