Reference Manual for the ME103 802.11b ProSafe Wireless Access Point NETGEAR, Inc.
NETGEAR, INC. www.NETGEAR.com Technical Support Please register to obtain technical support. Please retain your proof of purchase and warranty information. To register your product, get product support or obtain product information and product documentation, go to http://www.NETGEAR.com. If you do not have access to the World Wide Web, you may register your product by filling out the registration card and mailing it to NETGEAR customer service. You will find technical support information at: http://www.
Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice NETGEAR ProSafe Wireless Access Point ME103 Warning! To comply with the FCC’s of exposure requirements you must maintain a distance of at least 1 cm from the antenna of this device while it is in use. Tested to Comply with FCC Standards FOR HOME OR OFFICE USE FCC ID: PY3ME103 This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: 1.
Radio Frequency Interference Requirements This device is restricted to indoor use due to its operation in the 2.4 GHz frequency range. FCC requires this product to be used indoors in 2.4 GHz the frequency range to reduce the potential for harmful interference to co-channel Mobile Satellite systems. Regulatory Compliance Information This device is restricted to indoor use due to reduce the potential for harmful interference to co-channel Mobile Satellite and Radar Systems.
CE Declaration of Conformity For the following equipment: ME103 802.11b ProSafe Wireless Access Point 0470 ! is herewith confirmed to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the Member States relating to Electromagnetic Compatibility (89/336/EEC), Low-voltage Directive (73/23/EEC) and the Amendment Directive (93/68/EEC), the procedures given in European Council Directive 99/5/EC and 89/3360EEC. The equipment was passed.
August 2003
Contents Chapter 1 About This Manual Audience ......................................................................................................................... 1-v Scope ............................................................................................................................. 1-v Typographical Conventions ........................................................................................... 1-vi Special Message Formats ........................................................
How to Log In to the ME103 Using Its Default NetBIOS Name ......................................3-8 How to Log In to the ME103 Using Its Default IP Address ...........................................3-10 Understanding Basic Wireless Settings ........................................................................ 3-11 Understanding Basic Wireless Security Options ..........................................................3-12 Information to Gather Before Changing Basic Wireless Settings .....................
The Wireless LAN activity light does not light up. ...........................................................6-2 The LAN light is not lit. ....................................................................................................6-2 I cannot access the Internet or the LAN with a wireless capable computer. .................6-2 I am using EAP-TLS security but get disconnected. ......................................................6-3 I cannot connect to the ME103 to configure it. ..................
Domain Name Server .............................................................................................. B-9 Routing Protocols .................................................................................................... B-9 RIP .................................................................................................................... B-9 MAC Addresses and ARP .............................................................................. B-10 Internet Security and Firewalls ........
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Chapter 1 About This Manual Congratulations on your purchase of the ME103 802.11b ProSafe Wireless Access Point. The ME103 provides connection for multiple personal computers to the Internet through an external broadband access device (such as a cable modem or DSL modem). Audience This reference manual assumes that the reader has basic to intermediate computer and Internet skills.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Typographical Conventions This guide uses the following typographical conventions: Table 1. Typographical conventions italics Emphasis. bold times roman User input. [Enter] Named keys in text are shown enclosed in square brackets. The notation [Enter] is used for the Enter key and the Return key. SMALL CAPS DOS file and directory names.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point How to Use the HTML Version of this Manual The HTML version of this manual includes these features. 2 1 3 Figure 1-1: HTML version of this manual 1. Left pane. Use the left pane to view the Contents, Index, Search, and Favorites tabs. To view the HTML version of the manual, you must have a version 4 or later browser with Java or JavaScript enabled. To use the Favorites feature, your browser must be set to accept cookies.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point How to Print this Manual To print this manual you man choose one of the following several options, according to your needs. • A “How To” Sequence of Steps in the HTML View. Use the Print button on the upper right of the toolbar to print the currently displayed topic.
Chapter 2 Introduction This chapter introduces the NETGEAR ME103 802.11b ProSafe Wireless Access Point. Minimal prerequisites for installation are presented in “System Requirements” on page 2-5. About the ME103 802.11b ProSafe Wireless Access Point The ME103 802.11b ProSafe Wireless Access Point is the basic building block of a wireless LAN infrastructure.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Key Features The ME103 Access Point is easy-to-use and provides solid wireless and networking support. Supported Standards and Conventions The following standards and conventions are supported: • Standards Compliant. The Wireless Access Point complies with the IEEE 802.11b (DSSS) and IEEE 802.1x specifications for Wireless LANs. • 802.1x Support. Support for 802.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point • • • • • • • • • • Upgradeable Firmware. Firmware is stored in a flash memory and can be upgraded easily, using only your Web browser, and can be upgraded remotely. Access Control. The Access Control MAC address filtering feature can ensure that only trusted wireless stations can use the ME103 to gain access to your LAN. Simple Configuration. If the default settings are unsuitable, they are easy to change. Hidden Mode.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Autosensing Ethernet Connections with Auto Uplink The ME103 can connect to a standard Ethernet network. The LAN interface is autosensing and capable of full-duplex or half-duplex operation. The wireless access point incorporates Auto UplinkTM technology.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point • • At least one computer with the TCP/IP protocol installed 802.11b-compliant devices, such as the NETGEAR MA401 Wireless Adapter What’s In the Box? The product package should contain the following items: • • • • • ME103 802.11b ProSafe Wireless Access Point Power adapter and cord (12Vdc, 800mA) Straight through Category 5 Ethernet cable ME103 802.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point ME103 Wireless Access Point Front Panel The ME103 Access Point provides three status LEDs. 802.11b PWR ProSafe Wireless Access Point LAN MODEL ME103 Wireless LAN Figure 2-1: ME103 front panel The following table explains the LED indicators: LED DESCRIPTION Power Power Indicator Off On Blink LAN No power. If this LED does not come on with the power adapter and cord correctly installed, see Chapter 4, Troubleshooting.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point ME103 Wireless Access Point Rear Panel ETH ERN ET 5-12V D C RESET Figure 2-2: ME103 rear panel Left Side Primary and Right Side Secondary Detachable Antenna The ME103 provides two detachable antenna. The one on the left is the primary, and the one on the right is the secondary.
Chapter 3 Basic Installation and Configuration This chapter describes how to set up your ME103 802.11b ProSafe Wireless Access Point for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b or 802.11g wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN. Note: Indoors, computers can connect over 802.11b wireless networks at ranges of several hundred feet or more.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the ME103. For complete performance specifications, see Appendix A, “Specifications”. For best results, place your wireless access point: • • • • • Near the center of the area in which your PCs will operate.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Default Factory Settings When you first receive your ME103, the default factory settings will be set as shown below. You can restore these defaults with the Factory Default Restore switch on the rear panel — see “ME103 Wireless Access Point Rear Panel” on page 2-7.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Understanding ME103 Wireless Security Options Unlike wired network data, your wireless data transmissions can be received well beyond your walls by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The ME103 Access Point provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Installing the ME103 802.11b ProSafe Wireless Access Point Before installing the ME103 802.11b ProSafe Wireless Access Point, you should make sure that your Ethernet network is up and working. You will be connecting the access point to the Ethernet network so that computers with 802.11b or 802.11g wireless adapters will be able to communicate with computers on the Ethernet network.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 2 CONFIGURE LAN AND WIRELESS ACCESS a. b. Configure the ME103 Ethernet port for LAN access. – Connect to the ME103 by opening your browser and entering http://192.168.0.224 in the address field. – When prompted, enter admin for the user name and password for the password, both in lower case letters. – Click the IP Settings link and configure the IP Settings for your network. Configure the wireless interface for wireless access.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point ME103 802.11b ProSafe Wireless Access Point ETH ER N ET 5 -1 2 V DC R ESET B LO CA L 10/100M 8 7 6 5 4 3 2 2 1 IN TER N ET 1 2 V DC O . 5 A Router, Switch, or Hub Broadband modem Figure 3-3: Connecting the Ethernet cable to a router, hub, or switch c. Connect an Ethernet cable from your ME103 Access Point to a LAN port (B) on your router, switch, or hub. Note: By default, ME103 is set to be a DHCP client.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point How to Log In to the ME103 Using Its Default NetBIOS Name The ME103 802.11b ProSafe Wireless Access Point can be configured remotely from Microsoft Internet Explorer browser version 5.0 or above, or Netscape Navigator web browser version 4.78 or above. You can connect to the ME103 by using its default NetBIOS name or its default IP address. The instructions for connecting using the default NetBIOS name are below.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Enter the default user name of admin and the default password of password. Figure 3-6: Login result: ME103 home page The Web browser will then display the ME103 home page.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point How to Log In to the ME103 Using Its Default IP Address 192.168.0.224 is the default IP address of your access point. However, the ME103 is also set, by default, to be a DHCP client. So, if the ME103 has not yet been installed, and there is no DHCP server on the network, you can log in to the ME103 using its default IP address.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Understanding Basic Wireless Settings To configure the wireless settings of your wireless access point, click the Wireless Settings link in the Basic section of the main menu of the browser interface. The Basic Wireless Settings menu will appear, as shown below. Figure 3-8: Basic Wireless Settings menu The Basic Wireless Settings menu options are discussed below: • Country Domain.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point • Wireless Network Name (SSID). The SSID is also known as the wireless network name. Enter a value of up to 32 alphanumeric characters. In a setting where there is more than one wireless network, different wireless network names provide a means for separating the traffic. Any device you want to participate in a particular wireless network will need to use the SSID. The ME103 default SSID is: NETGEAR.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Table 3-1. Basic Wireless Security Options Field Description Network Authentication You can select the following network authentication options: • Open: the ME103 does not perform any authentication. However, if the 802.1x option is configured, authentication of connections can be performed by a RADIUS server. • Shared: this is for shared key authentication. The SSID and data are encrypted.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Information to Gather Before Changing Basic Wireless Settings Before customizing your wireless settings, print this form and record the following information. If you are working with an existing wireless network, the person who set up or is responsible for the network will be able to provide this information. Otherwise, you will choose the settings for your wireless network.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point How to Set Up and Test Basic Wireless Connectivity Follow the instructions below to set up and test basic wireless connectivity. Once you have established basic wireless connectivity, you can enable security settings appropriate to your needs. Log in to the ME103 using the MDI/MDIX name printed on the bottom of the unit or at its default address of http://192.168.0.224 or at whatever IP address the unit is currently configured.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point How to Restrict Wireless Access by MAC Address To restrict access based on MAC addresses, follow these steps: 1. Log in to the ME103 using the MDI/MDIX name printed on the bottom of the unit or at its default address of http://192.168.0.224 or at whatever IP address the unit is currently configured. Use the default user name of admin and default password of password, or whatever LAN address and password you have set up.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 4. Select the Turn Access Control On check box. 5. Then, either select from the list of available wireless cards the ME103 has found in your area, or enter the MAC address and device name for a device you plan to use. You can usually find the MAC address printed on the wireless adapter. Tip: You can copy and paste the MAC addresses from the ME103’s Station List menu into the MAC Address box.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point • Automatic - enter a word or group of printable characters in the Passphrase box and click the Generate button. The four key boxes will be automatically populated with key values. • Manual - enter ten hexadecimal digits (any combination of 0-9, a-f, or A-F) Select which of the four keys will be active. See “Overview of WEP Parameters” on page B-5 for a full explanation of each of these options, as defined by the IEEE 802.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point • The IP Address Source The wireless access point is shipped preconfigured to use a private IP address on the LAN side, and to act as a DHCP client. If the wireless access point does not find a DHCP server on the Ethernet LAN, it defaults to this IP configuration: – IP Address— 192.168.0.224 – IP Subnet Mask— 255.255.255.0 – Gateway — 0.0.0.
Chapter 4 Maintenance This chapter describes how to use the management features of your ME103 802.11b ProSafe Wireless Access Point. These features can be found by clicking on the Maintenance heading in the Main Menu of the browser interface. Viewing General, Log, Station, and Statistical Information The General information screen provides a summary of the current ME103 configuration settings. From the main Menu of the browser interface, click General to view the System Status screen, shown below.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Table 4-1. General Information Fields Field Description Access Point Information Access Point Name The default name may be changed if desired. Note: In 802.1x mode, this name is used as the client Login name for the RADIUS server. MAC Address Displays the Media Access Control address (MAC address) of the wireless access point’s Ethernet port.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Statistics The Information - Statistics screen provides various LAN and WLAN statistics.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Table 4-1. Statistics Fields Field Description System Up Time The length of time the ME103 802.11b ProSafe Wireless Access Point has been connected to your network since it was last restarted. Wired Ethernet Received/Transmitted Packets The number of packets sent since the ME103 was last restarted. Bytes The number of bytes sent since the ME103 was last restarted. Throughput (B/sec) The current bandwidth used on the LAN port.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Activity Log Use the Activity Log to view step-by-step login exchanges or other information about the wireless communications sessions on the ME103 802.11b ProSafe Wireless Access Point.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Viewing a List of Attached Devices The Station List menu contains a table of all IP devices associated with the wireless access point in the wireless network defined by the Wireless Network Name (SSID). From the main menu of the browser interface, under the Information heading, click the Station List link to view the list, shown below.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Upgrading the Wireless Access Point Software . Note: When uploading software to the ME103 Access Point, it is important not to interrupt the Web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, the upload may fail, corrupt the software, and render the ME103 completely inoperable. You cannot perform the firmware upgrade from a workstation connected to the ME103 via a wireless link.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 4. Click Upload. When the upload completes, your wireless access point will automatically restart. The upgrade process typically takes about one minute. In some cases, you may need to reconfigure the wireless access point after upgrading. Configuration File Management The ME103 Access Point settings are stored in the wireless access point in a configuration file.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Saving and Retrieving the Configuration The Backup/Restore Settings menu allows you to save or retrieve a file containing your wireless access point’s configuration settings. To save your settings, click the Save button. Your browser will extract the configuration file from the wireless access point and prompts you for a location on your PC to store the file. You can give the file a meaningful name at this time, such as operations.cfg.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Changing the Administrator Password The default password is password. Change this password to a more secure password. You cannot change the administrator login name. From the main menu of the browser interface, under the Management heading, click Change Password to bring up the menu shown below. Figure 4-7: Set Password menu To change the password, first enter the old password, and then enter the new password twice.
Chapter 5 Advanced Configuration This chapter describes how to configure the advanced features of your ME103 802.11b ProSafe Wireless Access Point. These features can be found under the Advanced heading in the main menu. Configuring Advanced Security 802.1x Options For an overview of 802.1x, see “Understanding 802.1x Port Based Network Access Control” on page B-9. The ME103 802.11b ProSafe Wireless Access Point supports these 802.1x options: • Key Exchange.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point With the above basic requirements, 802.1x security can be implemented with the ME103. Refer to “Understanding 802.1x Port Based Network Access Control” on page B-9 for a description of basic 802.1x functionality. How to Configure the 802.1x Key Exchange Option Follow this procedure to configure the ME103 for 802.1x Key Exchange security. The sample configuration worksheet below is filled in with the parameters used in this procedure.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Note: Perform this procedure from a LAN connected computer rather than over a wireless link. This procedure will change the ME103’s data encryption settings, so all wireless connections will be disconnected when you apply the settings. b. Fill in the settings from the worksheet as illustrated above. Data Encryption (WEP) features are not functional in this mode.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Figure 5-1: Request a certificate Note: The procedure for obtaining certificates differs between a CA like Verisign and a CA such as a Windows 2000 certificate server. Organizations operate Windows 2000 certificate servers to provide certificates for its members. For example, an administrator of a Windows 2000 certificate server might provide a certificate to you via e-mail rather than connecting directly as shown in this example. b.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point c. Select the wireless network to which you will connect (NETGEAR in the screen above), and click the Configure button to display the Wireless network properties dialog box shown below. Figure 5-3: Configure a Windows XP wireless adapter association d. Select only the “Data encryption (WEP enabled)” check box. e. Click the Authentication tab to display the screen below.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Figure 5-5: Information Activity Log for starting a 802.1x wireless connection The simplest method is to ping the LAN IP address of another computer on the Ethernet LAN. a. From a wireless PC, on the Windows taskbar click the Start button, then click Run. b. Type ping -t 192.168.0.1 , and click OK. Figure 5-6: Running a Ping test from Windows c. This command causes a continuous ping to be sent.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Figure 5-7: Ping test results At this point the connection is established and your wireless connection is working.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Understanding Advanced Wireless Settings The default advanced wireless settings usually work well. These settings should not be changed unless you are sure it is necessary.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Table 5-1. Advanced Wireless Settings Fields Field Description Operating Mode You can select the following options: • Wireless Access Point • Point-to-Point Bridge • Point-to-Multi-Point Bridge Worldwide Mode If you enable 802.11d, you will have access to additional regulatory domains. Broadcast Wireless Network Name (SSID) If you disable broadcast of the SSID, only devices that have the correct SSID can connect.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Configuring Wireless Operating Modes The ME103 802.11b ProSafe Wireless Access Point lets you build large bridged wireless networks. Examples of wireless bridged configurations are: • Client Access Point to Access Point. • Point-to-Point Bridge. • Multi-point bridging. These features are discussed below.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 4. Verify connectivity across the LAN 1 and LAN 2. • A PC on either LAN segment should be able to connect to the Internet or share files and printers of any other PCs or servers connected to LAN Segment 1 or LAN Segment 2.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 3. • All APs must be on the same LAN. That is, all the APs LAN IP address must be in the same network. • If using DHCP, all ME103 Access Points should be set to “Obtain an IP address automatically (DHCP Client)” in the IP Address Source portion of the Basic IP Settings menu. • All ME103 Access Points use the same SSID, Channel, authentication mode, if any, and encryption in use.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Antenna Installation The ME103 comes with two removable 2-dBi antenna. Two antennae provide what is called “space diversity”, which helps to combat the addition of electromagnetic waves in the space where the unit is installed. This effect is called “multipath fading.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Note that ME103 diversity is provided only in receive mode, not in transmit mode. The Primary RF port provides transmit and receive. The Secondary RF port provides receive mode only. Therefore passive components such as external antennae can be connected to either Primary or Secondary ME103 RF ports. However, an active device such as bi-directional booster has to be used on the Primary RF port only.
Chapter 6 Troubleshooting This chapter provides information about troubleshooting your ME103 802.11b ProSafe Wireless Access Point. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. • Is the ME103 on? • Have I connected the wireless access point correctly? Go to “Installing the ME103 802.11b ProSafe Wireless Access Point” on page 3-5.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point The Wireless LAN activity light does not light up. The access point’s antennae are not working. • If the Wireless LAN activity light stays off, disconnect the adapter from its power source and then plug it in again. • Make sure the antennas are tightly connected to the ME103. • Contact NETGEAR if the Wireless LAN activity light remains off. The LAN light is not lit. There is a hardware connection problem.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point I am using EAP-TLS security but get disconnected. With 802.1x, occasionally, sporadic wireless communications interference might cause the encryption key to get dropped. This is not a breach of security. However, if so, your wireless client can be disconnected from the ME103. Perform these steps: 1.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point • If the PCs are configured correctly, but still not working, ensure that the ME103 is connected and turned on. Connect to it and check its settings. If you cannot connect to it, check the LAN and power connections. • If the ME103 is configured correctly, check your Internet connection (DSL/Cable modem etc.) to make sure that it is working correctly.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Appendix A Specifications This appendix provides technical specifications for the ME103 802.11b ProSafe Wireless Access Point. Specifications for the ME103 Parameter ME103 802.11b ProSafe Wireless Access Point 802.11b Data Rates 1, 2, 5.5, & 11 Mbps (Auto-rate capable) 802.11b Operating Frequencies 2.412 ~ 2.462 GHz (US) 2.457 ~ 2.462 GHz (Spain) 2.412 ~ 2.484 GHz (Japan) 2.457 ~ 2.472 GHz (France) 2.412 ~ 2.
Reference Manual for the ME103 802.
Appendix B Wireless Networking Basics This chapter provides an overview of wireless networking and security. Wireless Networking Overview The ME103 Access Point conforms to the Institute of Electrical and Electronics Engineers (IEEE) 802.11b standard for wireless LANs (WLANs). On an 802.11b wireless link, data is encoded using direct-sequence spread-spectrum (DSSS) technology and is transmitted in the unlicensed radio spectrum at 2.5GHz.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Ad Hoc Mode (Peer-to-Peer Workgroup) In an ad hoc network, computers are brought together as needed; thus, there is no structure or fixed points to the network - each node can generally communicate with any other node. There is no Access Point involved in this configuration.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 802.11 Authentication The 802.11 standard defines several services that govern how two 802.11 devices communicate. The following events must occur before an 802.11 Station can communicate with an Ethernet network through an access point such as the one built in to the ME103: 1. Turn on the wireless station. 2. The station listens for messages from any access points that are in range. 3.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 802.11b Authentication Open System Steps 1) Authentication request sent to AP Access Point 2) AP authenticates IN TER N ET Cable/DSL ProSafeWirelessVPN Security Firewall PWR W LA N ACT FVM318 100 Enable LNK/ACT 1 Client attempting to connect MODEL LO CA L LNK TEST 2 3 4 5 6 7 8 Cable or DLS modem 3) Client connects to network Figure 6-1: 802.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 802.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Note: Some 802.11 access points also support Use WEP for Authentication Only (Shared Key Authentication without data encryption). However, the ME103 does not offer this option. Key Size The IEEE 802.11 standard supports two types of WEP encryption: 40-bit and 128-bit. The 64-bit WEP data encryption method, allows for a five-character (40-bit) input.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point WEP Configuration Options The WEP settings must match on all 802.11 devices that are within the same wireless network as identified by the SSID. In general, if your mobile clients will roam between access points, then all of the 802.11 access points and all of the 802.11 client adapters on the network must have the same WEP settings.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point The radio frequency channels used are listed in Table B-1: Table B-1. 802.11b Radio Frequency Channels Channel Center Frequency Frequency Spread 1 2412 MHz 2399.5 MHz - 2424.5 MHz 2 2417 MHz 2404.5 MHz - 2429.5 MHz 3 2422 MHz 2409.5 MHz - 2434.5 MHz 4 2427 MHz 2414.5 MHz - 2439.5 MHz 5 2432 MHz 2419.5 MHz - 2444.5 MHz 6 2437 MHz 2424.5 MHz - 2449.5 MHz 7 2442 MHz 2429.5 MHz - 2454.5 MHz 8 2447 MHz 2434.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Understanding 802.1x Port Based Network Access Control 802.1x is well on its way to becoming an industry standard, and provides an effective wireless LAN security solution. Windows XP implements 802.1x natively, and the ME103 802.11b ProSafe Wireless Access Point supports 802.1x. The 802.11i committee is specifying the use of 802.1x to eventually become part of the 802.11 standard. With 802.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 1 2 3 4 6 5 7 1. The client sends an EAP-start message. This begins a series of message exchanges to authenticate the client. 2. The access point replies with an EAP-request identity message. 3. The client sends an EAP-response packet containing the identity to the authentication server. 4. The authentication server uses a specific authentication algorithm to verify the client's identity.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Initial 802.1x communications begin with an unauthenticated supplicant (i.e., client device) attempting to connect with an authenticator (i.e., 802.11 access point). The access point responds by enabling a port for passing only EAP packets from the client to an authentication server located on the wired side of the access point.
Reference Manual for the ME103 802.
Appendix C Network, Routing, Firewall, and Cabling Basics This chapter provides an overview of IP networks, routing, and wireless networking. As you read this document, you may be directed to various RFC documents for further information. An RFC is a Request For Comment (RFC) published by the Internet Engineering Task Force (IETF), an open organization that defines the architecture and operation of the Internet. The RFC documents outline and define the standard protocols and procedures for the Internet.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point What is a Router? A router is a device that forwards traffic between networks based on network layer information in the data and on routing tables maintained by the router. In these routing tables, a router builds up a logical picture of the overall network by gathering and exchanging information with other routers in the network. Using this information, the router chooses the best path for forwarding network traffic.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Class A Network Node Class B Network Node Class C Network Node 7261 Figure 6-3: Three Main Address Classes The five address classes are: • Class A Class A addresses can have up to 16,777,214 hosts on a single network. They use an eight-bit network number and a 24-bit node number. Class A addresses are in this range: 1.x.x.x to 126.x.x.x. • Class B Class B addresses can have up to 65,354 hosts on a network.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point This addressing structure allows IP addresses to uniquely identify each physical network and each node on each physical network. For each unique value of the network portion of the address, the base address of the range (host address of all zeros) is known as the network address and is not usually assigned to a host.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Subnet addressing allows us to split one IP network address into smaller multiple physical networks known as subnetworks. Some of the node numbers are used as a subnet number instead. A Class B address gives us 16 bits of node numbers translating to 64,000 nodes. Most organizations do not use 64,000 nodes, so there are free bits that can be reassigned. Subnet addressing makes use of those bits that are free, as shown below.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point The following table lists the additional subnet mask bits in dotted-decimal notation. To use the table, write down the original class netmask and replace the 0 value octets with the dotted-decimal value of the additional subnet bits. For example, to partition your Class C network with subnet mask 255.255.255.0 into 16 subnets (4 bits), the new subnet mask becomes 255.255.255.240. Table 6-1.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point • So that hosts recognize local IP broadcast packets When a device broadcasts to its segment neighbors, it uses a destination address of the local network address with all ones for the host address. In order for this scheme to work, all devices on the segment must agree on which bits comprise the host address.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point The following figure illustrates a single IP address operation. Private IP addresses assigned by user IP addresses assigned by ISP 192.168.0.2 192.168.0.3 192.168.0.1 172.21.15.105 Internet 192.168.0.4 192.168.0.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point The ME103 Access Point also functions as a DHCP client when connecting to the ISP. The firewall can automatically obtain an IP address, subnet mask, DNS server addresses, and a gateway address if the ISP provides this information by DHCP. Domain Name Server Many of the resources on the Internet can be addressed by simple descriptive names such as www.NETGEAR.com.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point MAC Addresses and ARP An IP address alone cannot be used to deliver data from one LAN device to another. To send data between LAN devices, you must convert the IP address of the destination device to its media access control address (MAC address). Each device on an Ethernet network has a unique MAC address, which is a 48-bit number assigned to each device by the manufacturer.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point What is a Firewall? A firewall is a device that protects one network from another, while allowing communication between the two. A firewall incorporates the functions of the NAT router, while adding features for dealing with a hacker intrusion or attack. Several known types of intrusion or attack can be recognized when they occur.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Ethernet Cabling Although Ethernet networks originally used thick or thin coaxial cable, most installations currently use unshielded twisted pair (UTP) cabling. The UTP cable contains eight conductors, arranged in four twisted pairs, and terminated with an RJ45 type connector. A normal straight-through UTP Ethernet cable follows the EIA568B standard wiring and pinout as described in Table 6-1. Table 6-1.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point The ME103 Access Point incorporates Auto UplinkTM technology (also called MDI/MDIX). The Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a normal connection (e.g. connecting to a PC) or an uplink connection (e.g. connecting to a router, switch, or hub). That port will then configure itself to the correct configuration.
Reference Manual for the ME103 802.
Appendix D Preparing Your PCs for Network Access This appendix describes how to prepare your PCs to connect to the Internet through the ME103 802.11b ProSafe Wireless Access Point. For adding file and print sharing to your network, please consult the Windows help information included with the version of Windows installed on each computer on your network.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 1. On the Windows taskbar, click the Start button, point to Settings, and then click Control Panel. 2. Double-click the Network icon. The Network window opens, which displays a list of installed components: You must have an Ethernet adapter or an ME103, the TCP/IP protocol, and the Client for Microsoft Networks.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point a. b. c. d. 3. Click the Add button. Select Client, and then click Add. Select Microsoft. Select File and Print Sharing for Microsoft Networks, and then click OK. Restart your PC for the changes to take effect. Enabling DHCP to Automatically Configure TCP/IP Settings After the TCP/IP protocol components are installed, each PC must be assigned specific information about itself and resources that are available on its network.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Verify the following settings as shown: • Client for Microsoft Network exists • Ethernet adapter is present • TCP/IP is present • Primary Network Logon is set to Windows logon Click on the Properties button. The following TCP/IP Properties window will display.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point By default, the IP Address tab is open on this window. • Verify the following: Obtain an IP address automatically is selected. If not selected, click in the radio button to the left of it to select it. This setting is required to enable the DHCP server to automatically assign an IP address. • Click OK to continue. Restart the PC. Repeat these steps for each PC with this version of Windows on your network.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point 2. Type winipcfg, and then click OK. The IP Configuration window opens, which lists (among other things), your IP address, subnet mask, and default gateway. 3. From the drop-down box, select your Ethernet adapter.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point DHCP Configuration of TCP/IP in Windows XP You will find there are many similarities in the procedures for different Windows systems when using DHCP to configure TCP/IP. The following steps will walk you through the configuration process for each of these versions of Windows. In Windows XP and 2000 systems, locate your Network Neighborhood icon. • Select Control Panel from the Windows XP Start Menu.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Now you should be at the Local Area Network Connection Status window. This box displays the connection status, duration, speed, and activity statistics. Administrator logon access rights are needed to use this window. • Click the Properties button to view details about the connection. The TCP/IP details are presented on the Support tab page. • Select Internet Protocol, and click Properties to view the configuration information.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Verify that Obtain an IP address automatically radio button is selected and that the Obtain DNS server address automatically radio button is selected. • Click the OK button. This completes the DHCP configuration in Windows XP. Repeat these steps for each PC with this version of Windows on your network.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point The Local Area Connection Properties dialog box appears. Verify that you have the correct Ethernet card selected in the Connect using: box and that the following two items are displayed and selected in the box of “Components checked are used by this connection:” • • Client for Microsoft Networks and Internet Protocol (TCP/IP) Click OK.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Verifying TCP/IP Properties for Windows XP or 2000 To check your PC’s TCP/IP configuration: 1. On the Windows taskbar, click the Start button, and then click Run. The Run window opens. 2. Type cmd and then click OK. A command window opens 3.
Reference Manual for the ME103 802.
Glossary Use the list below to find definitions for technical terms used in this manual. 10BASE-T IEEE 802.3 specification for 10 Mbps Ethernet over twisted pair wiring. 100BASE-Tx IEEE 802.3 specification for 100 Mbps Ethernet over twisted pair wiring. 802.1x 802.1x defines port-based, network access control used to provide authenticated network access and automated data encryption key management. The IEEE 802.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point also Reverse ARP (RARP) which can be used by a host to discover its IP address. In this case, the host broadcasts its physical address and a RARP server replies with the host's IP address. Auto Uplink Auto UplinkTM technology (also called MDI/MDIX) eliminates the need to worry about crossover vs. straight-through Ethernet cables. Auto UplinkTM will accommodate either type of cable to make the right connection.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point Because domain names are alphabetic, they're easier to remember. The Internet however, is really based on IP addresses. Every time you use a domain name, therefore, a DNS service must translate the name into the corresponding IP address. For example, the domain name www.example.com might translate to 198.105.232.4. The DNS system is, in fact, its own network.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point IP Address A four-byte number uniquely defining each host on the Internet, usually written in dotted-decimal notation with periods separating the bytes (for example, 134.177.244.57). Ranges of addresses are assigned by Internic, an organization formed for this purpose. ISP Internet service provider. Internet Protocol The main internetworking protocol used in the Internet.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point NetBIOS Network Basic Input Output System. An application programming interface (API) for sharing services and information on local-area networks (LANs). Provides for communication between stations of a network where each station is given a name. These names are alphanumeric names, 16 characters in length.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point This is typically the configuration parameter for a wireless PC card. It corresponds to the ESSID in the wireless Access Point and to the wireless network name. See also Wireless Network Name and ESSID. Subnet Mask Combined with the IP address, the IP Subnet Mask allows a device to know which other addresses are local to it, and which must be reached through a gateway or router.
Reference Manual for the ME103 802.11b ProSafe Wireless Access Point WINS WINS. Windows Internet Naming Service is a server process for resolving Windows-based computer names to IP addresses. Wireless Network Name (SSID) Wireless Network Name (SSID) is the name assigned to a wireless network. This is the same as the SSID or ESSID configuration parameter.
Reference Manual for the ME103 802.
Index Numerics 802.
MDI/MDI-X wiring B-12, D-4 Scope of Document 1-v Shared Key authentication B-2 N SNMP 2-2 netmask translation table B-6 SSID 3-12, 3-15, 4-2, B-2 Network Address Translation B-7 Station List 4-6 stateful packet inspection B-11 subnet addressing B-4 O subnet mask B-5 Open System authentication B-2 T P Passphrase 3-13, 3-14, 3-18 pinout, Ethernet cable B-12 Placement 3-1 port forwarding behind NAT B-8 protocols Address Resolution B-10 DHCP B-8 R TCP/IP properties verifying for Windows C-5 troubl
