- Thomson Wireless Residential ADSL Gateway User's Guide

E-DOC-CTC-20051017-0147 v2.0

Chapter 4

SpeedTouch™ Web Interface

5 Configure your wireless client(s) with the same settings.

WPA-PSK The SpeedTouch™ supports WPA-PSK, which offers three advantages over WEP:

 Authentication via a 4-way handshake to check whether the Pre-Shared Keys

(PSKs) are identical.

 Stronger encryption types:

 Temporal Key Integrity Protocol (TKIP) (default): Instead of using a

fixed WEP key, TKIP uses in pairs temporary session keys which are

derived from the PSK during the 4-way handshake. For each packet

it uses a different key. TKIP also provides a message integrity check

(MIC) and a rekeying mechanism (in seconds).

 Advanced Encryption Standard (AES): State-of-the-art encryption;

can only be used if all wireless devices in your WLAN support AES.

 Message Integrity Check (MIC). Which is a strong mathematical function in

which the recipient and transmitter each compute and compare the MIC. If

they don't match it is assumed that a third person has been trying to read the

data.

Proceed as follows to enable WPA-PSK:

1 Select Use WPA-PSK Encryption.

2 In the WPA-PSK Encryption Key box, type a pass phrase (also known as Pre-

shared key) of your choice. The pass phrase must consist of 8 to 63 ASCII

characters or 64 HEX digits.

3 In the WPA-PSK Version list, click the desired WPA-PSK version.

4 Click Apply to immediately apply your changes.

5 Configure your wireless client(s) with the same settings.

Access control on the

SpeedTouch™

The following modes are available:

 New stations are allowed (automatically):

All New stations can access the SpeedTouch™ WLAN.

 New stations are allowed (via registration):

Only allowed stations in the Access Control List (ACL) have access. You can

add new stations via registration.

For more information, see “ Allowing new wireless” on page 87

 New stations are not allowed:

Only allowed stations in the Access Control List (ACL) have access.

Depending on the WPA-PSK version you choose, one of the following

WPA-PSK encryption will be set automatically:

 WPA: TKIP

 WPA2: AES

 WPA+WPA2: TKIP+AES

AES is not yet implemented in most clients but it is in the

SpeedTouch™ because it will be the future security standard.