MotorolaWorldwide
Search
Service ProvidersBusinessConsumers

Secure Configuration of the Netopia 3300 Enterprise Series Wireless Router for WEP Encryption

NQG_113

Description

Netopia has just introduced a new line of Wireless Gateways utilizing 802.11x technology for complete interoperability and Wi-Fi compliance. Netopia 3-D Reach is superior to today's conventional wireless implementations by incorporating a wireless subsystem specifically designed for enhanced wireless range, coverage and performance.

The purpose of this Quick Guide is to outline the configuration of the Wireless LAN networking properties of the Netopia 3300 Enterprise Series Wireless Router. The security aspect of this Quick Guide is focused on WEP (Wired Equivalent Privacy) Encryption.

This document assumes a properly working DSL internet connection.

Click Here! if you have the 3347W Residential version gateway.

Parameters

Below is a list of hardware and firmware loads that this Technical Note is based upon:

Hardware Type Firmware/Version
Netopia 3347W-ENT ADSL Gateway 8.2 R1 and later
Netopia 3387W-ENT Cable/DSL Router 8.2 R1 and later
Netopia 3347NWG-ENT ADSL Gateway 8.2 R1 and later

Before you start

  • For the initial wireless configuration, make certain your computer is connected directly to the router's 10/100 BaseT Ethernet port.
  • Out of the box, the Netopia router is a DHCP server. Make sure the computer's TCP/IP properties are set to obtain an IP address automatically from the router.
  • Be sure to remove any Gateway IP's you have installed and disable DNS.
  • Once you have obtained an IP address from the Netopia, you are ready to telnet into the router.

PLEASE NOTE: The IP Addressing in this document is for illustrative purposes only. The public IP's provided by your ISP will be different and unique to your internet account. With Network Address Translation enabled, any private network addressing scheme can be used that is consistent with your LAN settings.

Configuration for 8.2 Enterprise Firmware

  1. Telnet into the Netopia router at 192.168.1.1. (if unchanged from factory def.)
  2. If you did not obtain an address from the router dynamically, assign the workstation an address of 192.168.1.[x], [x] being any number between 2 and 254, and a subnet mask of 255.255.255.0. The gateway IP is 192.168.1.1, the default IP address of the Netopia LAN interface.
  3. Netopia Enterprise firmware does not have a default username and password preconfigured in the router. A router login should be configured to guard against unauthorized entry to the router.
  4. PLEASE NOTE: Certain configuration levels are controlled by the Superuser.
    Click Here for Superuser configuration information.
  5. From the Main Menu, enter System Configuration...
  6. Enter Wireless Setup...

  7. In the default mode seen here, Wireless LAN is enabled.
  8. The default SSID can be used or changed.
    • Each router comes with a unique SSID (Network ID).
    • You can rename this with any alphanumeric string up to 32 characters.
  9. The default channel is 6 and can also be changed. This refers to radio frequency ranges within the 2.4 Ghz range. Enter to select a different channel.
  10. Enter on Closed System... You can select Closed mode for better security as described below.

    • In Open Mode this SSID will be broadcast as an available wireless network to any compatible WiFi Device within broadcast reach.
    • In Closed Mode it will be necessary to enter the SSID value into the client card configuration to permit access to the available network.
    • In Closed Mode the Netopia wireless network is hidden from the scanning features of other wireless-enabled computers. The only clients allowed to access your network are those configured with the same SSID value.
    • Closed System mode is recommended for increased security from unauthorized access or unwanted detection of a wireless "hotspot".

  11. Enable WEP... can be left Off, or enabled by hitting Enter and making a selection. A higher level of privacy is recommended.
  12. Leave Default Key... set to 1. (WEP modes only)
  13. Enter a Passphrase to generate your Encryption Key and Enter (if you have enabled WEP - Automatic).
  14. If you selected WEP - Manual, you will need to enter the encryption key that matches that in your wireless network card.

  15. Enter on Key 1 and change to (128b): for enhanced security, if desired. Enter. The key value that is generated must be entered precisely into the security key of the Wireless Network Card of the PC.
    • In the example above, the Security Key has been generated off of the Passphrase Netopia-WiFi.
    • Please Note that key generators are vendor-specific, and the hex key generated by the Netopia may be different from that produced by your wireless network card.
    • Once you have automatically generated an encryption key, that value should be transposed into the corresponding field of the other device(s).
  16. The encryption key must match and be entered into the same slot (in this example, slot #1) of the wireless client. It is recommended that you cut and paste longer encryption strings to ensure accuracy.
  17. After making these changes, escape back to the Main Menu.
  18. Enter Utilities and Diagnostics... and select Restart System...
  19. Select Continue and hit enter. Confirm this action and the router will reboot. Your wireless configuration will now take effect.

Configuration for 8.3.1 Enterprise Firmware

Firmware version 8.3.1 introduced an additional security feature in the Netopia router, Wireless Mac Authentication. This lets you decide which piece of "hardware" has access to your Wireless network.

  1. Enter Wireless MAC Authentication...

  2. Set Enable MAC Authentication: to Yes (use the tab key).
  3. Select and Enter on Add MAC Address...
  4. Tab to toggle Wireless MAC Allowed: to Yes.

    • Enter the Wireless MAC Address: you wish to provide access into your network. This "hardware number" would be found on the wireless network card, and must be entered precisely and in the correct format.
    • Conversely, you can also specifically deny access to a listed device by setting Wireless MAC Allowed: to No.
    • Enter on ADD WIRELESS MAC NOW
  5. Enter on Display/Change MAC Addresses... to view (or edit) the allowed (or denied) devices.

  6. Up to 32 authorized entries (Allowed or Blocked) can be added to the MAC Address list.
  7. Wireless Mac Authentication can be used with or without WEP Encryption.
  8. After making these changes, escape back to the Main Menu.
  9. Enter Utilities and Diagnostics... and select Restart System...
  10. Select Continue and hit enter. Confirm this action and the router will reboot. Your wireless configuration will now take effect.

Conclusion

Your Netopia router is now configured for both a wired and wireless LAN environment. The 4 Port 10/100 Ethernet switch incorporated into the 3300 ENT Wireless series router allows instant connectivity to your existing ethernet LAN, either directly plugged into the router's hub or to an external hub. The 3D Reach Wireless LAN will provide network access to 802.11b compliant devices on your network as well. Please consult the documentation provided with the wireless LAN card for individual manufacturers instructions and requirements.


www.motorola.com  |  Terms of Use  |  Privacy Statement   |  Media Center  |  Site Map  |  Contact Us
© 2009 Netopia, Inc., a Motorola Company. All rights reserved.