WEP Encryption    |    Wireless - Enterprise Series IEWG_113
Netopia has just introduced a new line of Wireless Gateways utilizing 802.11x technology for complete interoperability and Wi-Fi compliance. Netopia 3-D Reach is superior to today's conventional wireless implementations by incorporating a wireless subsystem specifically designed for enhanced wireless range, coverage and performance.

Please Note: The purpose of this Quick Guide is to outline the configuration of the Wireless LAN networking properties of the Netopia 3300 Enterprise Series Wireless Router. The security aspect of this Quick Guide is focused on WEP (Wired Equivalent Privacy) Encryption.

WEP, or Wired Equivalent Privacy, lets you configure the router to generate encryption keys to protect the transmission of data on the wireless network. When used in conjunction with the wireless network clients, or network cards, you can secure the computers which have access to your internet connection via your local area network (LAN) and those which can see and access LAN resources.
This document assumes a properly working DSL internet connection.

Click Here! for basic configuration of the Netopia Wireless Internet Gateway
(without any wireless security).
Click Here! if you'd like to use MAC Authentication for additional network security.
MAC Authentication can be used in conjunction with WEP Encryption.

Firmware Reference v8.2 R1 and later -- Netopia 3347W-ENT / 3387W-ENT

Before You Start
Please Note: The IP Addressing in this document is for illustrative purposes only. The public IP's provided by your ISP will be different and unique to your internet account. With Network Address Translation enabled, any private network addressing scheme can be used that is consistent with your LAN settings.

  • For the initial wireless configuration, make certain your computer is connected directly to the router's 10/100 BaseT Ethernet port.
  • Out of the box, the Netopia router is a DHCP server. Make sure the computer's TCP/IP properties are set to obtain an IP address automatically from the router.
  • Be sure to remove any Gateway IP's you have installed and disable DNS.
  • Once you have obtained an IP address from the Netopia, you are ready to telnet into the router.
  • Netopia Enterprise firmware does not have a default username and password preconfigured in the router. A router login should be configured to guard against unauthourized entry to the router.

    The Netopia Enterprise Series Interface (Firmware Version 8.2 R1 and later)

Configuration for 8.2 Enterprise with WEP Encryption
  1. From the Main Menu, enter System Configuration...
  2. Enter Wireless Setup...
  3. In the default mode seen here, Wireless LAN is enabled.
  4. The default SSID can be used or changed.

    • Each router comes with a unique SSID (Network ID).
    • You can rename this with any alphanumeric string up to 32 characters.

  5. The default channel is 6 and can also be changed. This refers to radio frequency ranges within the 2.4 Ghz range. Enter to select a different channel.
  6. Enter on Closed System... You can select Closed mode for better security as described below.
    1. In Open Mode this SSID will be broadcast as an available wireless network to any compatible WiFi Device within broadcast reach.
    2. In Closed Mode it will be necessary to enter the SSID value into the client card configuration to permit access to the available network.
    3. In Closed Mode the Netopia wireless network is hidden from the scanning features of other wireless-enabled computers. The only clients allowed to access your network are those configured with the same SSID value.
    4. Closed System mode is recommended for increased security from unauthorized access or unwanted detection of a wireless "hotspot".

  7. Enable WEP... can be left Off, or enabled by hitting Enter and making a selection. A higher level of privacy is recommended.
  8. Leave Default Key... set to 1. (WEP modes only)
  9. Enter a Passphrase to generate your Encryption Key and Enter (if you have enabled WEP - Automatic).
  10. If you selected WEP - Manual, you will need to enter the encryption key that matches that in your wireless network card.
  11. Enter on Key 1 and change to (128b): for enhanced security, if desired. Enter. The key value that is generated must be entered precisely into the security key of the Wireless Network Card of the PC.
    1. In the example above, the Security Key has been generated off of the Passphrase Netopia-WiFi.
    2. Please Note that key generators are vendor-specific, and the hex key generated by the Netopia may be different from that produced by your wireless network card.
    3. Once you have automatically generated an encryption key, that value should be transposed into the corresponding field of the other device(s).

  12. The encryption key must match and be entered into the same slot (in this example, slot #1) of the wireless client. It is recommended that you cut and paste longer encryption strings to ensure accuracy.

Configuration for 8.3.1 Enterprise Firmware
Firmware version 8.3.1 introduced an additional security feature in the Netopia router, Wireless Mac Authentication. This lets you decide which piece of "hardware" has access to your Wireless network.

  1. Enter Wireless MAC Authentication...

  2. Set Enable MAC Authentication: to Yes (use the tab key).
  3. Select and Enter on Add MAC Address...
  4. Tab to toggle Wireless MAC Allowed: to Yes.
    1. Enter the Wireless MAC Address: you wish to provide access into your network. This "hardware number" would be found on the wireless network card, and must be entered precisely and in the correct format.
    2. Conversely, you can also specifically deny access to a listed device by setting Wireless MAC Allowed: to No.
    3. Enter on ADD WIRELESS MAC NOW

  5. Enter on Display/Change MAC Addresses... to view (or edit) the allowed (or denied) devices.
  6. Up to 32 authorized entries (Allowed or Blocked) can be added to the MAC Address list.
  7. Wireless Mac Authentication can be used with or without WEP Encryption.
  8. After making these changes, escape back to the Main Menu.
  9. Enter Utilities and Diagnostics... and select Restart System...
  10. Select Continue and hit enter. Confirm this action and the router will reboot. Your wireless configuration will now take effect.

Conclusion
Your Netopia router is now configured for both a wired and wireless LAN environment. The 4 Port 10/100 Ethernet switch incorporated into the 3300 ENT Wireless series router allows instant connectivity to your existing ethernet LAN, either directly plugged into the router's hub or to an external hub. The 3D Reach Wireless LAN will provide network access to 802.11b compliant devices on your network as well. Please consult the documentation provided with the wireless LAN card for individual manufacturers instructions and requirements.


Related Links
Getting Started; Telnet and Console Access
TCP/IP Setup for Macintosh


© 2007 Netopia, Inc., a Motorola Company. All rights reserved.