Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA Phone 1-888-NETGEAR 202-10008-03 July 2005 July 2005 v3.
Technical Support Please register to obtain technical support. Please retain your proof of purchase and warranty information. To register your product, get product support or obtain product information and product documentation, go to http://www.NETGEAR.com. If you do not have access to the World Wide Web, you may register your product by filling out the registration card and mailing it to NETGEAR customer service. You will find technical support information at: http://www.NETGEAR.
Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice NETGEAR ProSafe Wireless Access Point Tested to Comply with FCC Standards FOR HOME OR OFFICE USE FCC ID: PY3WG302 This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: 1. This device may not cause harmful interference. 2. This device must accept any interference received, including interference that may cause undesired operation.
FCC Statement DECLARATION OF CONFORMITY We Netgear, 4500 Great America Parkway Santa Clara, CA 95054, USA Tel: +1 408 907 8000 declare under our sole responsibility that the product(s) WG302 (Model Designation) 802.11g ProSafe Wireless Access Point (Product Name) complies with Part 15 of FCC Rules.
• Reorient or locate the receiving antenna. • Increase the separation between the equipment and receiver. • Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. • Consult the dealer or an experienced radio/TV technician for help.
for the system according to the Canadian regulations. For further information, contact your local Industry Canada office. Product and Publication Details Model Number: WG302 Publication Date: July 2005 Product Family: wireless access point Product Name: NETGEAR ProSafe Wireless Access Point 802.11g WG302 Home or Business Product: Business Language: English Publication Part Number: 202-10008-03 vi July 2005 v3.
Contents Chapter 1 About This Manual Audience, Scope, Conventions, and Formats ................................................................1-1 How to Use This Manual ................................................................................................1-2 How to Print this Manual .................................................................................................1-3 Chapter 2 Introduction About the NETGEAR ProSafe Wireless Access Point 802.11g WG302 ........................
How to Configure WPA with Radius .......................................................................3-22 How to Configure WPA-PSK ..................................................................................3-25 How to Configure WPA2 with Radius .....................................................................3-26 How to Configure WPA2-PSK ................................................................................3-28 How to Configure WPA and WPA2 with Radius ..............................
How to Configure a WG302 as a Point-to-Point Bridge ...........................................5-9 How to Configure Multi-Point Wireless Bridging ....................................................5-10 How to Configure Wireless Repeating ................................................................... 5-11 Chapter 6 Troubleshooting No lights are lit on the access point. ...............................................................................6-1 The Wireless LAN activity light does not light up. .
Is WPA/WPA2 Perfect? ......................................................................................... B-16 Product Support for WPA/WPA2 ........................................................................... B-16 Supporting a Mixture of WPA, WPA2, and WEP Wireless Clients is Discouraged B-16 Changes to Wireless Access Points ............................................................... B-17 Changes to Wireless Network Adapters .........................................................
Chapter 1 About This Manual This chapter describes the intended audience, scope, conventions, and formats of this manual. Audience, Scope, Conventions, and Formats This reference manual assumes that the reader has basic to intermediate computer and Internet skills. However, basic computer network, Internet, firewall, and VPN technologies tutorial information is provided in the Appendices and on the Netgear website. This guide uses the following typographical conventions: Table 1-1.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 How to Use This Manual The HTML version of this manual includes the following: • Buttons, at a time and , for browsing forwards or backwards through the manual one page • A button that displays the table of contents and an button. Double-click on a link in the table of contents or index to navigate directly to where the topic is described in the manual. • A product model.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 How to Print this Manual To print this manual you can choose one of the following several options, according to your needs. • Printing a Page in the HTML View. Each page in the HTML version of the manual is dedicated to a major topic. Use the Print button on the browser toolbar to print the page contents. • Printing a Chapter. Use the PDF of This Chapter link at the top left of any page.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 1-4 About This Manual July 2005 v3.
Chapter 2 Introduction This chapter introduces the NETGEAR NETGEAR ProSafe Wireless Access Point 802.11g WG302. Minimal prerequisites for installation are presented in “System Requirements” on page 2-5. About the NETGEAR ProSafe Wireless Access Point 802.11g WG302 The NETGEAR ProSafe Wireless Access Point 802.11g WG302 is the basic building block of a wireless LAN infrastructure.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Key Features The WG302 Access Point is easy-to-use and provides solid wireless and networking support. Supported Standards and Conventions The following standards and conventions are supported: • Standards Compliant. The Wireless Access Point complies with the IEEE 802.11g for Wireless LANs. • WEP support. Support for WEP is included. 64-bit, 128-bit, and 152-bit keys are supported. • Full WPA and WPA2 support.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 – • • • • • • • • • • • • • Wireless Repeater. In this half-duplex mode, the WG302 only communicates with another repeater-mode wireless station. You must enter the MAC address of both adjacent repeater-mode wireless stations in the fields provided. WEP should be used to protect this communication. Wireless Multimedia (WMM) support. WMM is a subset of the 802.11e standard.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 AutoCell is completely automatic: It is a continuous communication system that relies on a lightweight protocol to monitor changes on the wireless domain while keeping overhead very low.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 The wireless access point incorporates Auto UplinkTM technology. The Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a ‘normal’ connection such as to a computer or an ‘uplink’ connection such as to a switch or hub. That port will then configure itself to the correct configuration.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 What’s In the Box? The product package should contain the following items: • • • • • • NETGEAR ProSafe Wireless Access Point 802.11g WG302 Power adapter and cord (12 V dc, 1.2 A) Straight through Category 5 Ethernet cable WG302 802.11g ProSafe Wireless Access Point Installation Guide Resource CD for the NETGEAR WG302 ProSafe 802.11g Wireless Access Point which includes this manual.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 The following table explains the LED indicators: LED DESCRIPTION PWR Power Indicator Off No power. On Power is on. TEST Self Test Indicator Blink 100 Indicates self test, loading software, or system fault (if continues). Note: This LED may blink for a minute before going off. Ethernet LAN Speed Indicator Off Green On LINK/ACT LAN Off Green On Green Blink Amber 0n Amber Blink 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 • Left and Right Detachable Antenna The WG302 provides two detachable antenna. • Restore to Factory Defaults Button The restore to default button located between the Ethernet RJ-45 connector and the power socket restores the WG302 to the factory default settings. • Serial Console Port Male DB-9 serial port for serial DTE connections.
Chapter 3 Basic Installation and Configuration This chapter describes how to set up your NETGEAR ProSafe Wireless Access Point 802.11g WG302 for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b or 802.11g wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN. Note: Indoors, computers can connect over 802.11g wireless networks at ranges of several hundred feet or more.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the WG302. For complete performance specifications, see Appendix A, “Specifications”. For best results, place your wireless access point: • • • • • • Near the center of the area in which your PCs will operate.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Default Factory Settings When you first receive your WG302, the default factory settings will be set as shown below. You can restore these defaults with the Factory Default Restore switch on the rear panel — see “WG302 front panel” on page 2-6.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Understanding WG302 Wireless Security Options Your wireless data transmissions can be received well beyond your walls by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The WG302 Access Point provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 • • Use WPA, WPA-PSK, WPA2, or WPA2-PSK. Wi-Fi Protected Access (WPA and WPA2) data encryption provides data security. The very strong authentication along with dynamic per frame rekeying of WPA make it virtually impossible to compromise. Because this is a new standard, wireless device driver and software availability may be limited. Use AutoCell Enhanced RF Security ‘Stealth Mode.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 2 CONFIGURE LAN AND WIRELESS ACCESS a. Configure the WG302 Ethernet port for LAN access. • Connect to the WG302 by opening your browser and entering http://192.168.0.228 in the address field. A login window like the one shown below opens: Figure 3-2: Login window • When prompted, enter admin for the user name and password for the password, both in lower case letters. 3-6 Basic Installation and Configuration July 2005 v3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 • The Web browser will then display the WG302 settings page. Figure 3-3: Login result: WG302 home page Basic Installation and Configuration 3-7 July 2005 v3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 • – When the wireless access point is connected to the Internet, click the Knowledge Base or the Documentation link under the Web Support menu to view support information or the documentation for the wireless access point. – If you do not click Logout, the wireless access point will wait 5 minutes after there is no activity before it automatically logs you out. Click the Basic Settings link to view the Basic Settings menu.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 b. Click the Wireless Settings link in the Setup section of the main menu to view the Wireless Settings menu. Figure 3-5: Basic Wireless Settings menu c. Configure the wireless interface for wireless access. See the online help or the Understanding Basic Wireless Settings topic of this Reference Manual for full instructions. Note: You must set the Regulatory Domain.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Note: By default, WG302 is set to with the DHCP client disabled. If your network uses dynamic IP addresses, you will need to change this setting. d. Connect the power adapter to the wireless access point and plug the power adapter in to a power outlet. The PWR, LAN, and Wireless LAN lights and should light up. 4 VERIFY WIRELESS CONNECTIVITY Using a computer with an 802.11b or 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 How to Log In to the WG302 Using Its Default IP Address 192.168.0.228 is the default IP address of your access point. The WG302 is set by default with the DHCP client disabled. Note: The computer you are using to connect to the WG302 should be configured with an IP address that starts with 192.168.0.x and a Subnet Mask of 255.255.255.0. 2. Open a Web browser such as Internet Explorer or Netscape Navigator. 3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Figure 3-7: IP Settings menu • Access Point Name (NetBIOS) Enter a new name for the wireless access point and click Apply to save your changes. • The IP Address The wireless access point is shipped preconfigured with its DHCP client disabled and with the following private static IP addresses: – IP Address — 192.168.0.228 – IP Subnet Mask — 255.255.255.0 – Gateway — 0.0.0.0 – Primary and Secondary DNS Servers — 0.0.0.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 • Spanning Tree Protocol Spanning Tree Protocol in enabled by default for the wireless access point. This provides network traffic optimization in settings with multiple WG302 Access Points. • Time Zone Select the time zone location for your setting. Note: You must have an Internet connection to get the current time.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 • Turn Radio On. On by default, you can also turn off the radio to disable access through this device. This can be helpful for configuration, network tuning, or troubleshooting activities. • Wireless Network Name (SSID). The SSID is also known as the wireless network name. Enter a value of up to 32 alphanumeric characters.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 – • 11b Only - All 802.11b wireless stations can be used. 802.11g wireless stations can still be used if they can operate in 802.11b mode. Channel. This field identifies which operating frequency will be used. It should not be necessary to change the wireless channel unless you notice interference problems or setting up the WG302 near another access point.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Understanding WEP/WPA Security Options The table below identifies the various WEP/WPA security options. A full explanation of these standards is available in Appendix B, “Wireless Networking Basics”. Figure 3-9: Wireless Security Settings The WEP/WPA settings are explained as follows: • Network Authentication: Specifies the Authentication type used. The default is Open System.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 – – – WPA-PSK and WPA2-PSK: This selection allows clients to use either WPA (with TKIP) or WPA2 (with AES). If selected, encryption must be TKIP + AES. The WPA passphrase (Network key) must also be entered. WPA2 with Radius: WPA2 is a later version of WPA. Only select this if all clients support WPA2. If selected, you must use AES encryption, and configure the Radius Server Settings Screen.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Before You Change the SSID and WEP Settings For a new wireless network, print this form and fill in the parameters. For an existing wireless network, get the settings from the person who set up or is responsible for the network. Be sure to set the Regulatory Domain correctly as the first step. Store this information in a safe place.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 How to Set Up and Test Basic Wireless Connectivity Follow the instructions below to set up and test basic wireless connectivity. Once you have established basic wireless connectivity, you can enable security settings appropriate to your needs. Log in to the WG302 using its default address of http://192.168.0.228 or at whatever IP address the unit is currently configured.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 How to Restrict Wireless Access by MAC Address To restrict access based on MAC addresses, follow these steps: 1. Log in to the WG302 using its default address of http://192.168.0.228 or at whatever IP address the unit is currently configured. Use the default user name of admin and default password of password, or whatever LAN address and password you have set up.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 4. Choose to use the local MAC address database stored on the access point, or use the RADIUS MAC address database stored on a RADIUS server. If you choose the RADIUS MAC Address Database, you must configure the RADIUS Server Settings first. 5. Then, either select from the list of available wireless cards the WG302 has found in your area, or enter the MAC address and device name for a device you plan to use.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Select encryption strength. 5. You can manually or automatically program the four data encryption keys. These values must be identical on all PCs and Access Points in your network. • Automatic - enter a word or group of printable characters in the Passphrase box and click the Generate button. The four key boxes will be automatically populated with key values.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 2. Click Radius Server Settings in the Security menu. Figure 3-12: Radius Server Settings 3. Enter the Radius settings. • Authentication/Access Control Radius Server Configuration: This configuration is required for authentication using Radius. IP Address, Port No. and Shared Secret is required for communication with Radius Server.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 • Shared Secret: This is shared between the Wireless Access Point and the Radius Server while authenticating the supplicant. • Re-authentication Time: The time interval in seconds after which the supplicant will be authenticated again with the Radius Server. The default is 3600 seconds. • Global-key Re-Key Time: Check on this option to enable Re-keying of Global Key.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 6. Choose WPA with Radius from the list. 7. Click Apply to save your settings. How to Configure WPA-PSK Note: Not all wireless adapters support WPA. Furthermore, client software is required on the client. Windows XP and Windows 2000 with Service Pack 3 do include the client software that supports WPA. Nevertheless, the wireless adapter hardware and driver must also support WPA.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 How to Configure WPA2 with Radius Note: Not all wireless adapters support WPA2. Furthermore, client software is required on the client. Make sure your client card supports WPA2. Consult the product document for your wireless adapter and WPA2 client software for instructions on configuring WPA2 settings. To configure WPA2, follow these steps: 1. Log in at the default LAN address of http://192.168.0.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 3. 4. Enter the Radius settings. • Authentication/Access Control Radius Server Configuration: This configuration is required for authentication using Radius. IP Address, Port No. and Shared Secret is required for communication with Radius Server. A Secondary Radius Server can be configured which is used on failure on Primary Radius Server • IP Address: The IP address of the Radius Server. The default is 0.0.0.0.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 5. Click WEP/WPA Settings in the Security menu. Figure 3-16: WEP/WPA Settings menu 6. Choose WPA2 with Radius from the list. 7. Click Apply to save your settings. How to Configure WPA2-PSK Note: Not all wireless adapters support WPA2. Furthermore, client software is required on the client. Make sure your client card supports WPA2.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 2. Click WEP/WPA Settings in the Security menu of the WG302. Figure 3-17: WEP/WPA Settings menu 3. Choose WPA2-PSK from the list. 4. Enter the pre-shared key passphrase. 5. Click Apply to save your settings. How to Configure WPA and WPA2 with Radius Note: Not all wireless adapters support WPA. Furthermore, client software is required on the client.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 To configure WPA and WPA2, follow these steps: 1. Log in at the default LAN address of http://192.168.0.229 with the default user name of admin and default password of password, or using whatever LAN address and password you have set up. 2. Click Radius Server Settings in the Security menu. Figure 3-18: Radius Server Settings menu 3-30 Basic Installation and Configuration July 2005 v3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 3. 4. Enter the Radius settings. • Authentication/Access Control Radius Server Configuration: This configuration is required for authentication using Radius. IP Address, Port No. and Shared Secret is required for communication with Radius Server. A Secondary Radius Server can be configured which is used on failure on Primary Radius Server • IP Address: The IP address of the Radius Server. The default is 0.0.0.0.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 5. Click WEP/WPA Settings in the Security menu. Figure 3-19: WEP/WPA Settings menu 6. Choose WAP and WPA2 with Radius from the list. 7. Click Apply to save your settings. How to Configure WPA2-PSK and WPA2-PSK Note: Not all wireless adapters support WPA. Furthermore, client software is required on the client. Windows XP and Windows 2000 with Service Pack 3 do include the client software that supports WPA.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 2. Click WEP/WPA Settings in the Security menu of the WG302. Figure 3-20: WEP/WPA Settings menu 3. Choose WPA-PSK and WPA2-PSK from the list. 4. Enter the pre-shared key passphrase. 5. Click Apply to save your settings. Basic Installation and Configuration 3-33 July 2005 v3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 3-34 Basic Installation and Configuration July 2005 v3.
Chapter 4 Management This chapter describes how to use the management features of your NETGEAR ProSafe Wireless Access Point 802.11g WG302. These features can be found by clicking on the Maintenance heading in the Main Menu of the browser interface. Remote Management Access the Remote Management screen by clicking on Remote Management under Management on the main menu. Figure 4-1: Remote Management screen Enter the Remote Management information.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 • Private Community Name: The community string to allow the SNMP manager to read and write the wireless access point's MIB objects. The default is private. • IP address to Receive Traps: The IP address of the SNMP manager to receive traps sent from the wireless access point. The default is 0.0.0.0. Using the Secure Telnet Interface The WG302 includes a secure Telnet command line interface (CLI).
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 3. Press the return key, and the screen below should appear. Figure 4-2: Secure Telnet Client The login name is admin and password is the default password. After successful login, the screen should show the (Access Point Name)> prompt. In this example, the prompt is netgear74F35E. Enter help to display the CLI command help.. CLI Commands The CLI commands are listed in Appendix C, “Command Line Reference.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Using Syslog and Activity Log Information The Information contains the activity log link you can use for setting up a syslog server and viewing activity log information. From the main menu of the browser interface, under the Information heading, click the Station List link to view the list, shown below: Figure 4-3: Syslog and Activity Log information Enable the SysLog option if you have a SysLog server on your LAN.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Viewing General, Log, Station, and Statistical Information The General information screen provides a summary of the current WG302 configuration settings. From the main Menu of the browser interface, click General to view the System Status screen, shown below. Figure 4-4: Wireless Access Point Status screen Management 4-5 July 2005 v3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 This screen shows the following parameters: Table 4-1. General Information Fields Field Description Access Point Information Access Point Name (NetBIOS name) The default name may be changed if desired. MAC Address Displays the Media Access Control address (MAC address) of the wireless access point’s Ethernet port. Country/Region Displays the domain or region for which the wireless access point is licensed for use.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Statistics The Information - Statistics screen provides various LAN and WLAN statistics. Figure 4-5: Wireless Access Point Status screen Table 4-1. Statistics Fields Field Wired Ethernet Packets Bytes Wireless Unicast Packets Broadcast Packets Multicast Packets Total Packets Total Bytes Refresh button Description Received/Transmitted The number of packets sent since the WG302 was restarted.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Viewing a List of Available Wireless Stations The Available Wireless Station List contains a table of all IP devices associated with the wireless access point in the wireless network defined by the Wireless Network Name (SSID). From the main menu of the browser interface, under the Information heading, click the Available Wireless Station List link to view the list, shown below.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Detecting a Rogue Access Point For enhanced security, you can scan the wireless network to detect rogue access points. Detecting Rogue AP’s involves scanning the wireless environment on all available channels looking for unidentified AP’s. In particular, unidentified AP’s that are using the SSID of a legitimate network can present a serious security threat.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Upgrading the Wireless Access Point Software . Note: When uploading software to the WG302 Access Point, it is important not to interrupt the Web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, the upload may fail, corrupt the software, and render the WG302 completely inoperable.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Configuration File Management The WG302 Access Point settings are stored in the wireless access point in a configuration file. This file can be saved (backed up) to a user’s computer, retrieved (restored) from the user’s computer, or cleared to factory default settings. From the main menu Management heading, click the Backup/Restore Settings link to bring up the menu shown below.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 To restore your settings from a saved configuration file, enter the full path to the file on your computer or click the Browse button to locate the file. When you have located it, click the Retrieve button to upload the file. After completing the upload, the WG302 will reboot automatically.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 From the main menu of the browser interface, under the Management heading, click Change Password to bring up the menu shown below. Figure 4-8: Set Password menu To change the password, first enter the old password, and then enter the new password twice. Click Apply to save your change. Management 4-13 July 2005 v3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 4-14 Management July 2005 v3.
Chapter 5 Advanced Configuration This chapter describes how to configure the advanced features of your NETGEAR ProSafe Wireless Access Point 802.11g WG302: • • • IP Settings: Use the AP as a DHCP server for wireless clients. Wireless Settings: Set up AutoCell and configure advanced wireless LAN parameters. Access Point Settings: Enable wireless bridging and repeating. These features can be found under the Advanced heading in the main menu.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Understanding Advanced Wireless Settings The advanced wireless settings menu enables configuration of the following: • AutoCell RF management • Wi-Fi multimedia (WMM) setup • Hotspot settings • Advanced wireless parameters These options are discussed below. AutoCell RF Management AutoCell provides advanced RF wireless management features that improve performance and enhance security. Table 5-1.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Configuration Figure 5-2: Advanced Wireless Settings screen AutoCell Setup options There are two AutoCell configuration setting choices: • Enable/disable Auto RF Management: Enabled by default • Enable/disable Enhanced RF Security (‘Stealth Mode’): Disabled by default Auto RF Management Note: Channel selection and power management is automatically adjusted by AutoCell when the Auto RF Management option is enabled.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 AutoCell AP/Client Interaction AutoCell's self-organizing micro cells provide performance benefits and an additional level of privacy for enterprises. • Automatic Transmit Power Control. An AutoCell-enabled client’s RF transmit power level is automatically coordinated with an AutoCell-enabled AP.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Additional AutoCell View Management Options Figure 5-3: AutoCell View wireless network AutoCell View is an available management tool that provides sophisticated views of your wireless network and enables managing the wireless communications easily from a simple console. Wi-Fi Multimedia (WMM) Setup WMM is a subset of the 802.11e standard. WMM allows wireless traffic to have a range of priorities, depending on the kind of data.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Configuring Wireless LAN Parameters The default advanced wireless LAN parameter settings usually work well. If you want the AP to operate in Super-G mode, use this feature. Figure 5-4: Advanced Wireless Settings screen The table below describes the advanced wireless parameters. Table 5-1. Advanced Wireless LAN Settings Fields Field Description Enable SuperG Mode Click Enable to enable SuperG Mode.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Hotspot Settings You can allow all HTTP (TCP, port 80) requests to be captured and re-directed to the URL you specify. Figure 5-5: Hotspot Settings screen Enable HTTP Redirect: Enable this if you want all HTTP (TCP, port 80) requests to be captured and re-directed to the URL you specify. URL: Enter the URL of the Web Server you wish HTTP requests to be redirected to. Advanced Configuration 5-7 July 2005 v3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Enabling Wireless Bridging and Repeating The NETGEAR ProSafe Wireless Access Point 802.11g WG302 lets you build large bridged wireless networks.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 How to Configure a WG302 as a Point-to-Point Bridge AP1 ETH ER N ET AP in Point-to-Point Bridge Mode AP2 5 -1 2 V DC R ESET ETH ER N ET 5 -1 2 V DC R ESET AP in Point-to-Point Bridge Mode Hub or Switch Router LAN Segment 2 LAN Segment 1 Figure 5-7: Point-to-Point Bridge Configure the WG302 (AP1) on LAN Segment 1 in Point-to-Point Bridge mode. 2. Configure the WG302 (AP2) on LAN Segment 2 in Point-to-Point Bridge mode.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 How to Configure Multi-Point Wireless Bridging AP3 AP1 ETH ER N ET ETH ER N ET AP in Point-to-Point Bridge Mode 5 -1 2 V DC 5 -1 2 V DC R ESET AP in Point-to-Point Bridge Mode R ESET AP2 Hub or Switch ETH ER N ET Router 192.168.0.1 LAN Segment 1 5 -1 2 V DC R ESET 'Master' AP in Point-to-Multi-Point Bridge Mode Hub or Switch LAN Segment 3 LAN Segment 2 Figure 5-8: Multi-Point bridging 1. 2.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 3. • All WG302 Access Points use the same SSID, Channel, authentication mode, if any, and encryption in use. • All Point-to-Point APs must have AP2’s MAC address in its Remote AP MAC address field. Verify connectivity across the LANs. • A computer on any LAN segment should be able to connect to the Internet or share files and printers with any other PCs or servers connected to any of the three LAN segments.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 – 2. 3. Configure the WG302 (AP3) in Repeater mode with the Remote MAC Address of AP2. Verify the following parameters for all access points: • Verify that the LAN network configuration the WG302 Access Points are configured to operate in the same LAN network address range as the LAN devices • All APs must be on the same LAN. That is, all the APs LAN IP address must be in the same network.
Chapter 6 Troubleshooting This chapter provides information about troubleshooting your NETGEAR ProSafe Wireless Access Point 802.11g WG302. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. • Is the WG302 on? • Have I connected the wireless access point correctly? Go to “Installing the WG302 Access Point” on page 3-5. • I cannot remember the wireless access point’s configuration password.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 The Wireless LAN activity light does not light up. The access point’s antennae are not working. • If the Wireless LAN activity light stays off, disconnect the adapter from its power source and then plug it in again. • Make sure the antennas are tightly connected to the WG302. • Contact NETGEAR technical support if the Wireless LAN activity light remains off. The LAN light is not lit. There is a hardware connection problem.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 I cannot connect to the WG302 to configure it. Check these items: • The WG302 is properly installed, LAN connections are OK, and it is powered on. Check that the LAN port LED is green to verify that the Ethernet connection is OK. • The default configuration of the WG302 is for a static IP address of 192.168.0.228 and a Mask of 255.255.255.0 with DHCP disabled. Make sure your network configuration settings are correct.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Using the Reset Button to Restore Factory Default Settings The Reset button (see “WG302 rear panel” on page 2-7) has two functions: • Reboot. When pressed and released quickly, the WG302 will reboot (restart). • Reset to Factory Defaults. This button can also be used to clear ALL data and restore ALL settings to the factory default values. To clear all data and restore the factory default values: 1.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Appendix A Specifications This appendix provides technical specifications for the NETGEAR ProSafe Wireless Access Point 802.11g WG302. Specifications for the WG302 Parameter NETGEAR ProSafe Wireless Access Point 802.11g WG302 802.11g Data Rates 1, 2, 5.5, 11, 12, 18, 24, 36, 38, 54, & 108 Mbps (Auto-rate capable) 802.11g Operating Frequencies 2.412 ~ 2.462 GHz (US) 2.457 ~ 2.462 GHz (Spain) 2.412 ~ 2.484 GHz (Japan) 2.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 A-2 Specifications July 2005 v3.
Appendix B Wireless Networking Basics This chapter provides an overview of Wireless networking. Wireless Networking Overview The WG302 Access Point conforms to the Institute of Electrical and Electronics Engineers (IEEE) 802.11b and 802.11g standards for wireless LANs (WLANs). On an 802.11b or g wireless link, data is encoded using direct-sequence spread-spectrum (DSSS) technology and is transmitted in the unlicensed radio spectrum at 2.5GHz. The maximum data rate for the 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Ad Hoc Mode (Peer-to-Peer Workgroup) In an ad hoc network, computers are brought together as needed; thus, there is no structure or fixed points to the network - each node can generally communicate with any other node. There is no Access Point involved in this configuration.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 • Shared Key. With Shared Key authentication, only those PCs that possess the correct authentication key can join the network. By default, IEEE 802.11 wireless devices operate in an Open System network. Wired Equivalent Privacy (WEP) data encryption is used when the wireless devices are configured to operate in Shared Key authentication mode. 802.11 Authentication The 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 2. The access point authenticates the station. 3. The station associates with the access point and joins the network. This process is illustrated below. 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 This process is illustrated below. 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Key Size The IEEE 802.11 standard supports two types of WEP encryption: 40-bit and 128-bit. The 64-bit WEP data encryption method allows for a five-character (40-bit) input. Additionally, 24 factory-set bits are added to the forty-bit input to generate a 64-bit encryption key. The 24 factory-set bits are not user-configurable). This encryption key will be used to encrypt/decrypt all data transmitted via the wireless interface.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 WEP Configuration Options The WEP settings must match on all 802.11 devices that are within the same wireless network as identified by the SSID. In general, if your mobile clients will roam between access points, then all of the 802.11 access points and all of the 802.11 client adapters on the network must have the same WEP settings.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Table B-2: Channel 802.11b/g Radio Frequency Channels Center Frequency Frequency Spread 4 2427 MHz 2414.5 MHz - 2439.5 MHz 5 2432 MHz 2419.5 MHz - 2444.5 MHz 6 2437 MHz 2424.5 MHz - 2449.5 MHz 7 2442 MHz 2429.5 MHz - 2454.5 MHz 8 2447 MHz 2434.5 MHz - 2459.5 MHz 9 2452 MHz 2439.5 MHz - 2464.5 MHz 10 2457 MHz 2444.5 MHz - 2469.5 MHz 11 2462 MHz 2449.5 MHz - 2474.5 MHz 12 2467 MHz 2454.5 MHz - 2479.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 WPA and WPA2 offer the following benefits: • • • • Enhanced data privacy Robust key management Data origin authentication Data integrity protection The Wi-Fi Alliance is now performing interoperability certification testing on Wi-Fi Protected Access products. Starting August of 2003, all new Wi-Fi certified products have to support WPA. NETGEAR is implementing WPA and WPA2 on client and access point products. The 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 How Does WPA Compare to WPA2 (IEEE 802.11i)? WPA is forward compatible with the WPA2 security specification. WPA is a subset of WPA2 and used certain pieces of the early 802.11i draft, such as 802.1x and TKIP. The main pieces of WPA2 that are not included in WPA are secure IBSS (Ad-Hoc mode), secure fast handoff (for specialized 802.11 VoIP phones), as well as enhanced encryption protocols, such as AES-CCMP.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 The primary information conveyed in the Beacon frames is the authentication method and the cipher suite. Possible authentication methods include 802.1X and Pre-shared key. Pre-shared key is an authentication method that uses a statically configured pass phrase on both the stations and the access point.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 WPA/WPA2 Authentication: Enterprise-level User Authentication via 802.1x/EAP and RADIUS Wireless LAN WPA/WPA2 enabled wireless client with “supplicant” WPA/WPA2 enabled Access Point using pre-shared key or 802.1x Wired Network with Optional 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Client with a WPA/ WPA2-enabled wireless adapter and supplicant (Win XP, Funk, Meetinghouse) For example, a WPA/WPA2-enabled AP For example, a RADIUS server 1 2 3 4 6 5 7 Figure B-4: 802.1x Authentication Sequence The AP sends Beacon Frames with WPA/WPA2 information element to the stations in the service set. Information elements include the required authentication method (802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 3. The client sends an EAP-response packet containing the identity to the authentication server. The access point responds by enabling a port for passing only EAP packets from the client to an authentication server located on the wired side of the access point.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Temporal Key Integrity Protocol (TKIP) WPA uses TKIP to provide important data encryption enhancements including a per-packet key mixing function, a message integrity check (MIC) named Michael, an extended initialization vector (IV) with sequencing rules, and a re-keying mechanism. TKIP also provides for the following: • • • The verification of the security configuration after the encryption keys are determined.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Is WPA/WPA2 Perfect? WPA/WPA2 is not without its vulnerabilities. Specifically, it is susceptible to denial of service (DoS) attacks. If the access point receives two data packets that fail the message integrity code (MIC) within 60 seconds of each other, then the network is under an active attack, and as a result, the access point employs counter measures, which include disassociating each station using the access point.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Changes to Wireless Access Points Wireless access points must have their firmware updated to support the following: • • • • • The new WPA/WPA2 information element To advertise their support of WPA/WPA2, wireless APs send the beacon frame with a new 802.11 WPA/WPA2 information element that contains the wireless AP's security configuration (encryption algorithms and wireless security configuration information).
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Microsoft has worked with many wireless vendors to embed the WPA driver update in the wireless adapter driver. So, to update your Microsoft Windows wireless client, all you have to do is obtain the new WPA/WPA2-compatible driver and install the driver.
Appendix C Command Line Reference The NETGEAR ProSafe Wireless Access Point 802.11g WG302 (AP) can be configured either through the command line interface (CLI), a Web browser, or an MIB browser. The CLI allows viewing and modification of the configuration from a terminal or PC through a telnet connection.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 get set del keyword Description --- --- --- ---------------------- ------------------------------[X] password --system password [X] reboot --reboot system [X] exit --logout from CLI [X] quit --quit CLI Command Line Reference C-5 July 2005 v3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 C-6 Command Line Reference July 2005 v3.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Glossary Use the list below to find definitions for technical terms used in this manual. 802.11 Standard 802.11, or IEEE 802.11, is a type of radio technology used for wireless local area networks (WLANs). It is a standard that has been developed by the IEEE (Institute of Electrical and Electronic Engineers), http://standards.ieee.org.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 The purpose of 11d is to add features and restrictions to allow WLANs to operate within the rules of these countries. Equipment manufacturers do not want to produce a wide variety of country-specific products and users that travel do not want a bag full of country-specific WLAN PC cards. The outcome will be country-specific firmware solutions. 802.11e Standard 802.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Access Point (AP) A wireless LAN transceiver or "base station" that can connect a wired LAN to one or many wireless devices. Access points can also bridge to each other. There are various types of access points, also referred to as base stations, used in both wireless and wired networks. These include bridges, hubs, switches, routers and gateways.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 for cables or wires. Bluetooth is a frequency-hopping technology in the 2.4 GHz frequency spectrum, with a range of 30 feet and up to 11Mbps raw data throughput. Bridge A product that connects a local area network (LAN) to another local area network that uses the same protocol (for example, wireless, Ethernet or token ring). Wireless bridges are commonly used to link buildings in campuses.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 CSMA-CD (Carrier Sense Multiple Action/Collision Detection) A method of managing traffic and reducing noise on an Ethernet network. A network device transmits data after detecting that a channel is available. However, if two devices transmit data simultaneously, the sending devices detect a collision and retransmit after a random time delay.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 ESSID (more commonly referred to as SSID – Short Set Identifier) The identifying name of an 802.11 wireless network. When you specify your correct ESSID in your client setup you ensure that you connect to your wireless network rather than another network in range. (See SSID.) The ESSID can be called by different terms, such as Network Name, Preferred Network, SSID or Wireless LAN Service Area.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 IEEE (Institute of Electrical and Electronics Engineers) A membership organization (www.ieee.org) that includes engineers, scientists and students in electronics and allied fields. It has more than 300,000 members and is involved with setting standards for computers and communications. IEEE 802.11 A set of specifications for LANs from The Institute of Electrical and Electronics Engineers (IEEE).
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 MAC (Media Access Control) Every wireless 802.11 device has its own specific MAC address hard-coded into it. This unique identifier can be used to provide security for wireless networks. When a network uses a MAC table, only the 802.11 radios that have had their MAC addresses added to that network's MAC table will be able to get onto the network.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 NIC (Network Interface Card) A type of PC adapter card that either works without wires (Wi-Fi) or attaches to a network cable to provide two-way communication between the computer and network devices such as a hub or switch. Most office wired NICs operate at 10 Mbps (Ethernet), 100 Mbps (Fast Ethernet) or 10/100 Mbps dual speed. High-speed Gigabit and 10 Gigabit NIC cards are also available. See PC Card.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Range The distance away from your access point that your wireless network can reach. Most Wi-Fi systems will provide a range of a hundred feet or more. Depending on the environment and the type of antenna used, Wi-Fi signals can have a range of up to mile Residential gateway A wireless device that connects multiple PCs, peripherals and the Internet on a home network. Most Wi-Fi residential gateways provide DHCP and NAT as well.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Site survey The process whereby a wireless network installer inspects a location prior to putting in a wireless network. Site surveys are used to identify the radio- and client-use properties of a facility so that access points can be optimally placed.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 TCP/IP The underlying technology behind the Internet and communications between computers in a network. The first part, TCP, is the transport part, which matches the size of the messages on either end and guarantees that the correct message has been received. The IP part is the user's computer address on a network.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 As a recent development, the debate over the legality of warchalking is still going on. The practice stems from the U.S. Depression-era culture of wandering hobos who would make marks outside of homes to indicate to other wanderers whether the home was receptive to drifters or was inhospitable.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 does not offer. With this feature, WPA provides roughly comparable security to VPN tunneling with WEP, with the benefit of easier administration and use. This is similar to 802.1x support and requires a RADIUS server in order to implement. The Wi-Fi Alliance will call this, 'WPA-Enterprise.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 secure transmission and authentication is particularly important to users unknown to each other. The authentication capability defined in the specification enables a secure access control mechanism for the service providers and for mobile users not utilizing VPN connections.
Reference Manual for the NETGEAR ProSafe Wireless Access Point 802.11g WG302 Glossary 16 July 2005 v3.
