Home » ZyXEL Manuals » Bridges & Routers » ZyXEL NBG-418N v2 » Manual Viewer

ZyXEL NBG-418N v2 User Guide - Page 62

Wireless Security Overview, 6.3.2 MBSSID, 6.3.3 MAC Address Filter

Add to My Manuals
Save this manual to your list of manuals

Page 62 highlights

Chapter 6 Wireless LAN • If two wireless networks overlap, they should use different channels. Like radio stations or television channels, each wireless network uses a specific channel, or frequency, to send and receive information. • Every wireless client in the same wireless network must use security compatible with the AP. Security stops unauthorized devices from using the wireless network. It can also protect the information that is sent in the wireless network. 6.3.1 Wireless Security Overview The following sections introduce different types of wireless security you can set up in the wireless network. 6.3.2 MBSSID Traditionally, you need to use different APs to configure different Basic Service Sets (BSSs). As well as the cost of buying extra APs, there is also the possibility of channel interference. The NBG-418N v2's MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to provide several BSSs simultaneously. You can then assign varying QoS priorities and/or security modes to different SSIDs. Wireless devices can use different BSSIDs to associate with the same AP. 6.3.2.1 Notes on Multiple BSSs • A maximum of eight BSSs are allowed on one AP simultaneously. • You must use different keys for different BSSs. If two wireless devices have different BSSIDs (they are in different BSSs), but have the same keys, they may hear each other's communications (but not communicate with each other). • MBSSID should not replace but rather be used in conjunction with 802.1x security. 6.3.3 MAC Address Filter Every wireless client has a unique identification number, called a MAC address.1 A MAC address is usually written using twelve hexadecimal characters2; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate User's Guide or other documentation. You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to use the wireless network. If a wireless client is allowed to use the wireless network, it still has to have the correct settings (SSID, channel, and security). If a wireless client is not allowed to use the wireless network, it does not matter if it has the correct settings. This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized wireless client. Then, they can use that MAC address to use the wireless network. 1. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. 2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. NBG-418N v2 User's Guide 62

Section	Page
NBG-418N v2	1
Contents Overview	3
Table of Contents	4
User’s Guide	10
Introduction	12
1.1 Overview	12
1.2 Securing the NBG-418N v2	13
1.3 LEDs	14
1.4 The WPS/RESET Button	14
1.4.1 Using the WPS/RESET Button	15
1.5 Wall Mounting	15
The Web Configurator	17
2.1 Overview	17
2.2 Accessing the Web Configurator	17
2.3 Resetting the NBG-418N v2	19
Connection Wizard	20
3.1 Wizard Setup	20
3.2 Connection Wizard: STEP 1: WAN Connection Type	21
3.2.1 PPPoE Connection	22
3.2.2 Dynamic IP Connection	23
3.2.3 Static IP Connection	24
3.3 Connection Wizard: STEP 2: Wireless LAN	25
3.4 Connection Wizard: STEP 3: Internet Configuration	27
3.5 Connection Wizard Complete	27
Modes	29
4.1 Overview	29
4.2 Setting your NBG-418N v2 to Router Mode	30
4.2.1 Status Screen (Router Mode)	31
4.2.2 Router Mode Navigation Panel	35
4.3 Setting your NBG-418N v2 to AP Mode	36
4.3.1 Status Screen (AP Mode)	37
4.3.2 AP Navigation Panel	38
4.4 Setting your NBG-418N v2 to Universal Repeater Mode	39
4.4.1 Status Screen (Universal Repeater Mode)	40
4.4.2 Universal Repeater Navigation Panel	42
Tutorials	44
5.1 Overview	44
5.2 How to Connect to the Internet from an AP	44
5.3 Configure Wireless Security Using WPS on both your NBG-418N v2 and Wireless Client	44
5.3.1 Push Button Configuration (PBC)	45
5.3.2 PIN Configuration	46
5.4 Enable and Configure Wireless Security without WPS on your NBG-418N v2	48
5.4.1 Configure Your Wireless Client	49
5.5 Using Multiple SSIDs on the NBG-418N v2	51
5.5.1 Configuring Security Settings of Multiple SSIDs	52
5.6 Installing UPnP in Windows 7 Example	55
5.7 Using Bandwidth Management on the NBG-418N v2	55
Technical Reference	58
Wireless LAN	60
6.1 Overview	60
6.2 What You Can Do	61
6.3 What You Should Know	61
6.3.1 Wireless Security Overview	62
6.3.2 MBSSID	62
6.3.3 MAC Address Filter	62
6.3.4 Encryption	63
6.3.5 WPS	63
6.4 General Wireless LAN Screen	63
6.4.1 No Security	65
6.4.2 WEP Encryption	66
6.4.3 WPA-PSK/WPA2-PSK	67
6.5 MAC Filter	68
6.6 Wireless LAN Advanced Screen	69
6.7 WPS Screen	70
6.8 WPS Station Screen	71
6.9 Scheduling Screen	71
6.10 MBSSID Screen	72
6.11 AP Select Screen	74
WAN	76
7.1 Overview	76
7.2 What You Need To Know	76
7.2.1 Configuring Your Internet Connection	76
7.3 Internet Connection Screen	77
7.3.1 Ethernet Encapsulation	77
7.3.2 PPPoE Encapsulation	79
7.4 Advanced Screen	81
7.5 IPv6 Screen	82
LAN	92
8.1 Overview	92
8.2 What You Need To Know	92
8.2.1 IP Address and Subnet Mask	93
8.2.2 DNS Server Address Assignment	93
8.2.3 IP Pool Setup	94
8.2.4 LAN TCP/IP	94
8.3 LAN IP Screen	94
DHCP Server	96
9.1 Overview	96
9.2 What You Can Do	96
9.3 What You Need To Know	96
9.4 General Screen	96
9.5 Advanced Screen	97
9.6 Client List Screen	98
Network Address Translation	100
10.1 Overview	100
10.2 What You Can Do	101
10.2.1 What You Need To Know	101
10.3 General NAT Screen	102
10.4 NAT Application Screen	103
10.5 Port Triggering Screen	105
10.6 Technical Reference	106
10.6.1 NAT Port Forwarding: Services and Port Numbers	106
10.6.2 NAT Port Forwarding Example	106
10.6.3 Trigger Port Forwarding	107
10.6.4 Trigger Port Forwarding Example	107
10.6.5 Two Points To Remember About Trigger Ports	108
Dynamic DNS	109
11.1 Overview	109
11.2 Dynamic DNS Screen	109
Firewall	111
12.1 Overview	111
12.2 What You Can Do	111
12.3 What You Need To Know	112
12.3.1 About the NBG-418N v2 Firewall	112
12.3.2 VPN Pass Through Features	112
12.4 General Firewall Screen	112
12.5 Services Screen	113
Remote Management	115
13.1 Overview	115
13.1.1 Remote Management Limitations	116
13.1.2 Remote Management and NAT	116
13.1.3 System Timeout	116
13.2 WWW Screen	116
Universal Plug-and-Play (UPnP)	118
14.1 Overview	118
14.2 What You Need to Know	118
14.3 Configuring UPnP	119
14.4 Installing UPnP in Windows 7 Example	119
14.4.1 Using UPnP in Windows XP Example	121
14.4.2 Web Configurator Easy Access	123
Bandwidth MGMT	126
15.1 Overview	126
15.2 What You Can Do	126
15.3 What You Need To Know	126
15.4 Bandwidth MGMT Screen	126
15.5 Advanced Screen	127
System	129
16.1 Overview	129
16.2 What You Can Do	129
16.3 System General Screen	129
16.4 Time Setting Screen	130
Logs	132
17.1 Overview	132
17.2 What You Need to Know	132
17.3 View Log Screen	132
Tools	134
18.1 Overview	134
18.2 What You Can Do	134
18.3 Firmware Upload Screen	134
18.4 Configuration Screen	136
18.4.1 Backup Configuration	136
18.4.2 Restore Configuration	137
18.4.3 Back to Factory Defaults	138
18.5 Restart Screen	138
Sys OP Mode	139
19.1 Overview	139
19.2 General Screen	139
Language	141
20.1 Language Screen	141
Troubleshooting	142
21.1 Power, Hardware Connections, and LEDs	142
21.2 NBG-418N v2 Access and Login	143
21.3 Internet Access	144
21.4 Resetting the NBG-418N v2 to Its Factory Defaults	145
21.5 Wireless Problems	146
IP Addresses and Subnetting	148
Pop-up Windows, JavaScripts and Java Permissions	158
Setting Up Your Computer’s IP Address	167
Wireless LANs	195
Common Services	209
Legal Information	212
Customer Support	218

Match case Limit results 1 per page

Chapter 6 Wireless LAN

NBG-418N v2 User’s Guide

•

If two wireless networks overlap, they should use different channels.

Like radio stations or television channels, each wireless network uses a specific channel, or

frequency, to send and receive information.

•

Every wireless client in the same wireless network must use security compatible with the AP.

Security stops unauthorized devices from using the wireless network. It can also protect the

information that is sent in the wireless network.

6.3.1

Wireless Security Overview

The following sections introduce different types of wireless security you can set up in the wireless

network.

6.3.2

MBSSID

Traditionally, you need to use different APs to configure different Basic Service Sets (BSSs). As well

as the cost of buying extra APs, there is also the possibility of channel interference. The NBG-418N

v2’s MBSSID (Multiple Basic Service Set IDentifier) function allows you to use one access point to

provide several BSSs simultaneously. You can then assign varying QoS priorities and/or security

modes to different SSIDs.

Wireless devices can use different BSSIDs to associate with the same AP.

6.3.2.1

Notes on Multiple BSSs

•

A maximum of eight BSSs are allowed on one AP simultaneously.

•

You must use different keys for different BSSs. If two wireless devices have different BSSIDs

(they are in different BSSs), but have the same keys, they may hear each other’s

communications (but not communicate with each other).

•

MBSSID should not replace but rather be used in conjunction with 802.1x security.

6.3.3

MAC Address Filter

Every wireless client has a unique identification number, called a MAC address.

A MAC address is

usually written using twelve hexadecimal characters

; for example, 00A0C5000002 or

00:A0:C5:00:00:02. To get the MAC address for each wireless client, see the appropriate User’s

Guide or other documentation.

You can use the MAC address filter to tell the AP which wireless clients are allowed or not allowed to

use the wireless network. If a wireless client is allowed to use the wireless network, it still has to

have the correct settings (SSID, channel, and security). If a wireless client is not allowed to use the

wireless network, it does not matter if it has the correct settings.

This type of security does not protect the information that is sent in the wireless network.

Furthermore, there are ways for unauthorized devices to get the MAC address of an authorized

wireless client. Then, they can use that MAC address to use the wireless network.

Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds

of wireless devices might not have MAC addresses.

Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F.