User manual

www.cooperbussmann.com/wirelessresources
Cooper Bussmann 245U-E Wireless Ethernet Modem & Device Server User Manual
29Rev Version 2.19
Figure 28 Network
The Network Configuration page allows configuration of parameters related to the wired and wireless Ethernet
interfaces. In general, IP address selection will be dependent upon the connected wired Ethernet device(s). Before
connecting to an existing LAN consult the network administrator.
Default configuration of the module will be “Client” and “Bridge.” When in Bridged mode, the module’s wired and
wireless IP address will be the same, meaning only one IP address is required. If the device mode is changed to
“Router,” the page will display two IP addresses, one for Ethernet and one for wireless. For more information on
bridging networks see “3.18 Routing.”
If the module has been configured for VLAN, the page will show the device mode as “VLAN Bridge” and the
Ethernet IP and netmask will no longer be editable. See “3.23 VLAN” for details on VLAN configuration.
A system of 245U-Es must have at least one access point (configured as a master) and have one or more clients.
All 245U-Es must have the same system address (ESSID). For further information and examples on wireless
network topologies refer to “1.0 Network Topology.”
The 245U-E supports several different radio encryption schemes. If utilizing any form of encryption, all modules in
the system that communicate with each other will need the same encryption method and encryption keys.
The available encryption methods are as follows:
• WEP (Wired Equivalent Privacy) encryption is the weakest encryption method, defined by the original
IEEE802.11 standard and uses a 40-bit or 104-bit key with a 24-bit initialization vector to give a 64-bit and
128-bit WEP encryption level. WEP is not considered an effective security scheme, and should only be used
if it is necessary to inter-operate with other equipment which does not support more modern encryption
methods.
• WPA (Wi-Fi Protected Access) is a subset of the IEEE802.11i Security Enhancements specification.
• WPA2 (Wi-Fi Protected Access 2) replaced WPA and provides significant security improvements over this
method. In particular, it introduces CCMP, a new AES-based encryption mode with strong security.
• WPA/WPA2-PSK (Legacy Support) enables the modem to communicate to all WPA methods including TKIP,
AES and WPA2 AES. Generally only used if the network has older devices that does not support the higher
level encryption methods. Enabling this option will lower the security level of the network down to the weakest
configured encryption level (WPA TKIP).
• WPA-Enterprise (802.1x) removes the need to manage the pre-shared key (PSK) by using an external server
to provide client authentication. Clients that are not authorized will be prevented from accessing the network.
Once a client has provided the correct authentication credentials, access is permitted and data encryption
keys are established, similar to WPA-PSK. Fine-grain (user level) access control can be achieved using this
method.