Home » ZyXEL Manuals » Wireless » ZyXEL VMG4380 » Manual Viewer

ZyXEL VMG4380 User Guide - Page 341

WPA2-PSK Application Example

Add to My Manuals
Save this manual to your list of manuals

Page 341 highlights

Appendix D Wireless LANs 4 The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. Figure 201 WPA(2) with RADIUS Application Example WPA(2)-PSK Application Example A WPA(2)-PSK application looks as follows. 1 First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols). 2 The AP checks each wireless client's password and allows it to join the network only if the password matches. 3 The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data exchanged between them. Figure 202 WPA(2)-PSK Authentication VMG4380-B10A / VMG4325-B10A User's Guide 341

Section	Page
VMG4380-B10A / VMG4325- B10A	1
Contents Overview	3
Table of Contents	5
User’s Guide	15
Introducing the Device	17
1.1 Overview	17
1.2 Ways to Manage the Device	17
1.3 Good Habits for Managing the Device	17
1.4 Applications for the Device	18
1.4.1 Internet Access	18
1.4.2 HomePNA	19
1.4.3 Device’s USB Support	20
1.5 LEDs (Lights)	21
1.6 The RESET Button	22
1.7 Wireless Access	23
1.7.1 Using the WLAN/WPS Button	23
The Web Configurator	25
2.1 Overview	25
2.1.1 Accessing the Web Configurator	25
2.2 Web Configurator Layout	28
2.2.1 Title Bar	28
2.2.2 Main Window	29
2.2.3 Navigation Panel	29
Quick Start	33
3.1 Overview	33
3.2 Quick Start Setup	33
Tutorials	35
4.1 Overview	35
4.2 Setting Up an ADSL PPPoE Connection	35
4.3 Setting Up a Secure Wireless Network	38
4.3.1 Configuring the Wireless Network Settings	38
4.3.2 Using WPS	40
4.3.3 Without WPS	43
4.4 Setting Up Multiple Wireless Groups	44
4.5 Configuring Static Route for Routing to Another Network	47
4.6 Configuring QoS Queue and Class Setup	50
4.7 Access the Device Using DDNS	53
4.7.1 Registering a DDNS Account on www.dyndns.org	53
4.7.2 Configuring DDNS on Your Device	54
4.7.3 Testing the DDNS Setting	54
4.8 Configuring the MAC Address Filter	55
4.9 Access Your Shared Files From a Computer	56
4.10 Using the Media Server Feature	57
4.10.1 Configuring the Device	57
4.10.2 Using Windows Media Player	57
4.10.3 Using a Digital Media Adapter	60
4.11 Using the Print Server Feature	62
Technical Reference	69
Network Map and Status Screens	71
5.1 Overview	71
5.2 The Network Map Screen	71
5.3 The Status Screen	72
Broadband	75
6.1 Overview	75
6.1.1 What You Can Do in this Chapter	75
6.1.2 What You Need to Know	76
6.1.3 Before You Begin	79
6.2 The Broadband Screen	79
6.2.1 Add/Edit Internet Connection	81
6.3 The 3G Backup Screen	89
6.4 The Advanced Screen	93
6.4.1 DSL Bonding	93
6.5 The 8021x Screen	95
6.5.1 Edit 802.1x Settings	96
6.6 Technical Reference	97
Wireless	101
7.1 Overview	101
7.1.1 What You Can Do in this Chapter	101
7.1.2 What You Need to Know	102
7.2 The General Screen	102
7.2.1 No Security	105
7.2.2 Basic (WEP Encryption)	105
7.2.3 More Secure (WPA(2)-PSK)	107
7.2.4 WPA(2) Authentication	108
7.3 The More AP Screen	109
7.3.1 Edit More AP	110
7.4 MAC Authentication	111
7.5 The WPS Screen	112
7.6 The WMM Screen	114
7.7 The WDS Screen	115
7.7.1 WDS Scan	116
7.8 The Others Screen	117
7.9 The Channel Status Screen	119
7.10 Technical Reference	119
7.10.1 Wireless Network Overview	119
7.10.2 Additional Wireless Terms	121
7.10.3 Wireless Security Overview	121
7.10.4 Signal Problems	123
7.10.5 BSS	124
7.10.6 MBSSID	124
7.10.7 Preamble Type	125
7.10.8 Wireless Distribution System (WDS)	125
7.10.9 WiFi Protected Setup (WPS)	125
Home Networking	133
8.1 Overview	133
8.1.1 What You Can Do in this Chapter	133
8.1.2 What You Need To Know	134
8.1.3 Before You Begin	135
8.2 The LAN Setup Screen	135
8.3 The Static DHCP Screen	138
8.4 The UPnP Screen	140
8.5 Installing UPnP in Windows Example	141
8.6 Using UPnP in Windows XP Example	143
8.7 The Additional Subnet Screen	149
8.8 The STB Vendor ID Screen	150
8.9 The 5th Ethernet Port Screen	150
8.10 The LAN VLAN Screen	151
8.11 Technical Reference	152
8.11.1 LANs, WANs and the Device	152
8.11.2 DHCP Setup	152
8.11.3 DNS Server Addresses	153
8.11.4 LAN TCP/IP	153
Routing	155
9.1 Overview	155
9.1.1 What You Can Do in this Chapter	155
9.2 The Routing Screen	156
9.2.1 Add/Edit Static Route	157
9.3 The Policy Forwarding Screen	157
9.3.1 Add/Edit Policy Forwarding	159
9.4 The RIP Screen	159
Quality of Service (QoS)	161
10.1 Overview	161
10.1.1 What You Can Do in this Chapter	161
10.2 What You Need to Know	162
10.3 The Quality of Service General Screen	163
10.4 The Queue Setup Screen	164
10.4.1 Adding a QoS Queue	166
10.5 The Class Setup Screen	166
10.5.1 Add/Edit QoS Class	168
10.6 The QoS Policer Setup Screen	171
10.6.1 Add/Edit a QoS Policer	172
10.7 The QoS Monitor Screen	173
10.8 Technical Reference	174
Network Address Translation (NAT)	179
11.1 Overview	179
11.1.1 What You Can Do in this Chapter	179
11.1.2 What You Need To Know	179
11.2 The Port Forwarding Screen	180
11.2.1 Add/Edit Port Forwarding	182
11.3 The Applications Screen	183
11.3.1 Add New Application	184
11.4 The Port Triggering Screen	184
11.4.1 Add/Edit Port Triggering Rule	186
11.5 The DMZ Screen	187
11.6 The ALG Screen	188
11.7 The Address Mapping Screen	188
11.7.1 Add/Edit Address Mapping Rule	189
11.8 Technical Reference	190
11.8.1 NAT Definitions	190
11.8.2 What NAT Does	191
11.8.3 How NAT Works	192
11.8.4 NAT Application	193
Dynamic DNS Setup	195
12.1 Overview	195
12.1.1 What You Can Do in this Chapter	195
12.1.2 What You Need To Know	196
12.2 The DNS Entry Screen	196
12.2.1 Add/Edit DNS Entry	197
12.3 The Dynamic DNS Screen	197
Interface Group	199
13.1 Overview	199
13.1.1 What You Can Do in this Chapter	199
13.2 The Interface Group Screen	199
13.2.1 Interface Group Configuration	200
13.2.2 Interface Grouping Criteria	202
USB Service	205
14.1 Overview	205
14.1.1 What You Can Do in this Chapter	205
14.1.2 What You Need To Know	205
14.2 The File Sharing Screen	206
14.2.1 Before You Begin	207
14.3 The Media Server Screen	208
14.4 The Printer Server Screen	209
14.4.1 Before You Begin	209
Firewall	211
15.1 Overview	211
15.1.1 What You Can Do in this Chapter	211
15.1.2 What You Need to Know	212
15.2 The Firewall Screen	213
15.3 The Service Screen	213
15.3.1 Add/Edit a Service	214
15.4 The Access Control Screen	215
15.4.1 Add/Edit an ACL Rule	217
15.5 The DoS Screen	218
MAC Filter	221
16.1 Overview	221
16.2 The MAC Filter Screen	221
Parental Control	223
17.1 Overview	223
17.2 The Parental Control Screen	223
17.2.1 Add/Edit a Parental Control Rule	224
Scheduler Rules	227
18.1 Overview	227
18.2 The Scheduler Rules Screen	227
18.2.1 Add/Edit a Schedule	228
Certificates	229
19.1 Overview	229
19.1.1 What You Can Do in this Chapter	229
19.2 What You Need to Know	229
19.3 The Local Certificates Screen	230
19.3.1 Create Certificate Request	231
19.3.2 Load Signed Certificate	232
19.4 The Trusted CA Screen	233
19.4.1 View Trusted CA Certificate	234
19.4.2 Import Trusted CA Certificate	235
Log	237
20.1 Overview	237
20.1.1 What You Can Do in this Chapter	237
20.1.2 What You Need To Know	237
20.2 The System Log Screen	238
20.3 The Security Log Screen	239
Traffic Status	241
21.1 Overview	241
21.1.1 What You Can Do in this Chapter	241
21.2 The WAN Status Screen	241
21.3 The LAN Status Screen	243
ARP Table	245
22.1 Overview	245
22.1.1 How ARP Works	245
22.2 ARP Table Screen	245
Routing Table	247
23.1 Overview	247
23.2 The Routing Table Screen	247
IGMP Status	249
24.1 Overview	249
24.2 The IGMP Group Status Screen	249
xDSL Statistics	251
25.1 The xDSL Statistics Screen	251
User Account	255
26.1 Overview	255
26.2 The User Account Screen	255
Remote Management	257
27.1 Overview	257
27.2 The Remote MGMT Screen	257
TR-069 Client	259
28.1 Overview	259
28.2 The TR-069 Client Screen	259
TR-064	261
29.1 Overview	261
29.2 The TR-064 Screen	261
Time Settings	263
30.1 Overview	263
30.2 The Time Screen	263
E-mail Notification	267
31.1 Overview	267
31.2 The Email Notification Screen	267
31.2.1 Email Notification Edit	268
Logs Setting	269
32.1 Overview	269
32.2 The Log Settings Screen	269
32.2.1 Example E-mail Log	270
Firmware Upgrade	273
33.1 Overview	273
33.2 The Firmware Screen	273
Configuration	275
34.1 Overview	275
34.2 The Configuration Screen	275
34.3 The Reboot Screen	277
Diagnostic	278
35.1 Overview	278
35.1.1 What You Can Do in this Chapter	278
35.2 What You Need to Know	278
35.3 Ping & TraceRoute & NsLookup	279
35.4 802.1ag	280
35.5 OAM Ping Test	281
Troubleshooting	283
36.1 Power, Hardware Connections, and LEDs	283
36.2 Device Access and Login	284
36.3 Internet Access	286
36.4 Wireless Internet Access	287
36.5 USB Device Connection	288
36.6 UPnP	288
Setting up Your Computer’s IP Address	291
IP Addresses and Subnetting	313
Pop-up Windows, JavaScripts and Java Permissions	321
Wireless LANs	331
IPv6	345
Services	353
Legal Information	357

Match case Limit results 1 per page

Appendix D Wireless LANs

VMG4380-B10A / VMG4325-B10A User’s Guide

341

The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and

management system, using the PMK to dynamically generate unique data encryption keys. The

keys are used to encrypt every data packet that is wirelessly communicated between the AP and

the wireless clients.

Figure 201

WPA(2) with RADIUS Application Example

WPA(2)-PSK Application Example

A WPA(2)-PSK application looks as follows.

First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must

consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and

symbols).

The AP checks each wireless client's password and allows it to join the network only if the password

matches.

The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not

sent over the network, but is derived from the PSK and the SSID.

The AP and wireless clients use the TKIP or AES encryption process, the PMK and information

exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data

exchanged between them.

Figure 202

WPA(2)-PSK Authentication