D-Link Router DIR-605L User Manual

							47
D-Link DIR-605L User Manua\f
Section 3 - Confi\buration
Help
C\fick the desired hyper\fink to \bet more information about how to use the Router.
DIR-605L  
						

							48
D-Link DIR-605L User Manua\f
Section 4 - Security
Wireless Securi\fy
This section wi\f\f show you the different \feve\fs of security you can use to protect your data from intruders. The 
DIR-605L offers the fo\f\fowin\b types of security:
• WPA2 (Wi-Fi Protected Access 2)     • WPA2-PSK (Pre-Shared Key)
• WPA (Wi-Fi Protected Access)      • WPA-PSK (Pre-Shared Key)
• WEP (Wired Equiva\fent Privacy)
Wha\f is WEP?
WEP stands for Wired Equiva\fent Privacy. It is based on the IEEE 802.11 standard and uses the RC4 encryption a\f\borithm. WEP 
provides security by encryptin\b data over your wire\fess network so that it is protected as it is transmitted from one wire\fess 
device to another.
To \bain access to a WEP network, you must know the key. The key is a strin\b of characters that you create. When usin\b WEP, 
you must determine the \feve\f of encryption. The type of encryption determines the key \fen\bth. 128-bit encryption requires a 
\fon\ber key than 64-bit encryption. Keys are defined by enterin\b in a strin\b in HEX (hexadecima\f - usin\b characters 0-9, A-F) or 
ASCII (American Standard Code for Information Interchan\be – a\fphanumeric characters) format. ASCII format is provided so 
you can enter a strin\b that is easier to remember. The ASCII strin\b is converted to HEX for use over the network. Four keys can 
be defined so that you can chan\be keys easi\fy.  
						

							49
D-Link DIR-605L User Manua\f
Section 4 - Security
Configure WEP
It  is  recommended  to  enab\fe  encryption  on  your  wire\fess  router  before  your  wire\fess  network  adapters.  P\fease  estab\fish 
wire\fess  connectivity  before  enab\fin\b  encryption. Your  wire\fess  si\bna\f  may  de\brade  when  enab\fin\b  encryption  due  to  the 
added overhead.
1.  Lo\b into the web-based confi\buration by openin\b a web browser and enterin\b the IP address of the router (192.168.0.1).  
C\fick on Wireless Se\fup on the \feft side.
2. Next to Securi\fy Mode, se\fect E\bable WEP Wireless Security (basic).
3.  Next to  Au\fhen\fica\fion , se\fect either Shared Key or Ope\b . Shared Key 
is recommended as it provides \breater security when WEP is enab\fed.
4. Se\fect either  64Bit or 128Bit encryption from the drop-down menu 
next to WEP Encryp\fion. 
5. Next to  Defaul\f Key Type, se\fect  WEP Key 1 and enter a WEP key that 
you create. Make sure you enter this key exact\fy on a\f\f your wire\fess 
devices. You may enter up to four different keys either usin\b  Hex or 
ASCII.  Hex is recommended (\fetters A-F and numbers 0-9 are va\fid). In 
ASCII a\f\f numbers and \fett\uers are va\fid.
6. C\fick  Save Se\f\fings to save your settin\bs. If you are confi\burin\b the 
router with a wire\fess adapter, you wi\f\f \fose connectivity unti\f you 
enab\fe WEP on your adapter and enter the same WEP key as you did on the router.  
						

							50
D-Link DIR-605L User Manua\f
Section 4 - Security
Wha\f is WPA?
WPA, or Wi-Fi Protected Access, is a Wi-Fi standard that was desi\bned to improve the security features of WEP (Wired Equiva\fent 
Privacy).  
The two major improvements over WEP: 
• Improved data encryption throu\bh the Tempora\f Key Inte\brity Protoco\f (TKIP). TKIP scramb\fes the keys usin\b a hashin\b a\f\borithm and, by addin\b an inte\brity-checkin\b feature, ensures that the keys haven’t been tampered 
with. WPA2 is based on 802\u.11i and uses Advanced Encryption Standard (AES) instead of TKIP.
• User authentication, which is \benera\f\fy missin\b in WEP, throu\bh the extensib\fe authentication protoco\f (EAP).  WEP  re\bu\fates  access  to  a  wire\fess  network  based  on  a  computer’s  hardware-specific  MAC  address,  which  is 
re\fative\fy  simp\fe  to  be  sniffed  out  and  sto\fen.  EAP  is  bui\ft  on  a  more  secure  pub\fic-key  encryption  system  to 
ensure that on\fy authorized network users can access the network.
WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wire\fess connection. The key is an a\fpha-numeric password 
between 8 and 63 characters \fon\b. The password can inc\fude symbo\fs (!?*&_) and spaces. This key must be the exact same key 
entered on your wire\fess router or access point.
WPA/WPA2  incorporates  user  authentication  throu\bh  the  Extensib\fe  Authentication  Protoco\f  (EAP).  EAP  is  bui\ft  on  a  more 
secure pub\fic key encryption system to ensure that on\fy authorized network users can access the network.  
						

							51
D-Link DIR-605L User Manua\f
Section 4 - Security
Configure WPA-PSK and WPA2-PSK
It  is  recommended  to  enab\fe  encryption  on  your  wire\fess  Router  before  your  wire\fess  network  adapters.  P\fease  estab\fish 
wire\fess  connectivity  before  enab\fin\b  encryption. Your  wire\fess  si\bna\f  may  de\brade  when  enab\fin\b  encryption  due  to  the 
added overhead.
1.  Lo\b into the web-based confi\buration by openin\b a web browser and 
enterin\b the IP address of the router (192.168.0.1). C\fick on Wireless 
Se\fup on the \feft side.
2.   Next  to  Securi\fy  Mode ,  se\fect E\bable  WPA  O\bly  Wireless  Security 
(e\bha\bced) or E\bable WPA2 O\bly Wireless Security (e\bha\bced).
3. Next to Cipher Mode, se\fect TKIP, AES, or Both.
4. Next to PSK/EAP, se\fect PSK.
5.  Next to Ne\fwor\b Key, enter a key (passphrase). The key is an a\fpha-
numeric password 
between 8 and 63 characters \fon\b. The password can 
inc\fude symbo\fs (!?*\u&_) and spaces. Make sure you enter 
this key exact\fy the same on a\f\f o\uther wire\fess c\fients.
6. C\fick  Save Se\f\fings to save your settin\bs. If you are confi\burin\b the 
Router  with  a  wire\fess  adapter,  you  wi\f\f  \fose  connectivity  unti\f  you 
enab\fe WPA-PSK or WPA2-PSK on your adapter and enter the same passphrase as you did on the Router.  
						

							52
D-Link DIR-605L User Manua\f
Section 4 - Security
Configure WPA/WPA2-PSK
It  is  recommended  to  enab\fe  encryption  on  your  wire\fess  Router  before  your  wire\fess  network  adapters.  P\fease  estab\fish 
wire\fess  connectivity  before  enab\fin\b  encryption. Your  wire\fess  si\bna\f  may  de\brade  when  enab\fin\b  encryption  due  to  the 
added overhead.
1.  Lo\b into the web-based confi\buration by openin\b a web browser and 
enterin\b the IP address of the router (192.168.0.1). C\fick on Wireless 
Se\fup on the \feft side.
2.   Next  to  Securi\fy  Mode ,  se\fect E\bable  WPA/WPA2  Wireless  Security 
(e\bha\bced).
3. Next to Cipher Mode, se\fect TKIP, AES, or Both.
4. Next to PSK/EAP, se\fect PSK.
5.  Next to Ne\fwor\b Key, enter a key (passphrase). The key is an a\fpha-n\uumeric password
between 8 and 63 characters \fon\b. The password can inc\fude symbo\u\fs (!?*&_) and spac\ues. 
Make sure you enter this key exact\fy the same on a\f\f o\uther wire\fess c\fients.
6. C\fick  Save Se\f\fings to save your settin\bs. If you are confi\burin\b the Router with a wire\fess adapter, you wi\f\f \fose connectivity 
unti\f you enab\fe WPA/WPA2-PSK on your adapter and enter the same passphrase as you did on the Router.  
						

							53
D-Link DIR-605L User Manua\f
Section 4 - Security
Configure WPA, WPA2, and WPA/WPA2 (RADIUS)
It  is  recommended  to  enab\fe  encryption  on  your  wire\fess  router  before  your  wire\fess  network  adapters.  P\fease  estab\fish 
wire\fess  connectivity  before  enab\fin\b  encryption. Your  wire\fess  si\bna\f  may  de\brade  when  enab\fin\b  encryption  due  to  the 
added overhead.
1.  Lo\b into the web-based confi\buration by openin\b a web browser and enterin\b the IP address of the router (192.168.0.1).  
C\fick on Wireless Se\f\fings on the \feft side.
2. Next to  Securi\fy Mode, se\fect  E\bable WPA O\bly Wireless Security (e\bha\bced),  E\bable WPA2 O\bly Wireless Security (e\bha\bced), 
or E\bable WPA/WPA2 Wireless Security (e\bha\bced).
3. Next to Cipher Type, se\fect TKIP, AES, or Auto.
4. Next to PSK/EAP, se\fect EAP.
5.  Next  to  RADIUS  Server  1  enter  the  IP  Address  of  your 
RADIUS server.
6.  Next  to  Por\f,  enter  the  port  you  are  usin\b  with  your 
RADIUS server. 1812 is the defau\ft port.
7.  Next to Shared Secre\f, enter the security key.
8.  If you have a secondary RADIUS server, enter its IP address, 
port, and secret key.
9.  C\fick Save Se\f\fings to save your settin\bs.  
						

							54
D-Link DIR-605L User Manua\f
Section 5 - Connectin\b to a Wire\fess Network
Connec\f \fo a Wireless Ne\fwor\b
Using Windows® XP
Windows® XP users may use the bui\ft-in wire\fess uti\fity (Zero Confi\buration Uti\fity). The fo\f\fowin\b instructions are for Service 
Pack  2  users.  If  you  are  usin\b  another  company’s  uti\fity  or Windows
®  2000,  p\fease  refer  to  the  user  manua\f  of  your  wire\fess 
adapter for he\fp with connectin\b to a wire\fess network. Most uti\fities wi\f\f have a “site survey” option simi\far to the Windows
® 
XP uti\fity as seen be\fow.
Ri\bht-c\fick  on  the  wire\fess  computer  icon  in  your  system  tray 
(\fower-ri\bht  corner  next  to  the  time).  Se\fect  View  Available 
Wireless Ne\fwor\bs.
If you receive the  Wireless Ne\fwor\bs De\fec\fed bubb\fe, c\fick on 
the center of the bubb\fe to access the uti\fity.
          or
The uti\fity wi\f\f disp\fay any avai\fab\fe wire\fess networks in your area. 
C\fick on a network (disp\fayed usin\b the SSID) and c\fick the  Connec\f 
button.
If you \bet a \bood si\bna\f but cannot access the Internet, check you 
TCP/IP settin\bs for your wire\fess adapter. Refer to the  Ne\fwor\bing 
Basics section in this manua\f f\uor more information.  
						

							55
D-Link DIR-605L User Manua\f
Section 5 - Connectin\b to a Wire\fess Network
Configure WEP
It is recommended to enab\fe WEP on your wire\fess router or access point before confi\burin\b your wire\fess adapter. If you are 
joinin\b an existin\b network, you wi\f\f need to know the WEP key bein\b used.
2.  Hi\bh\fi\bht  the  wire\fess  network  (SSID)  you  wou\fd  \fike  to 
connect to and c\fick Connec\f.
1. Open  the  Windows®  XP  Wire\fess  Uti\fity  by  ri\bht-c\fickin\b 
o n   t h e   w i r e \f e s s   c o m p u t e r   i c o n   i n   y o u r   s y s t e m   t r a y   
(\fower-ri\bht corner of screen). Se\fect  View Available Wireless 
Ne\fwor\bs.   
						

							56
D-Link DIR-605L User Manua\f
Section 5 - Connectin\b to a Wire\fess Network
3.  The  Wireless Ne\fwor\b Connec\fion  box wi\f\f appear. Enter the same WEP 
key that is on your router and c\fick Connec\f.
It  may  take  20-30  seconds  to  connect  to  the  wire\fess  network.  If  the 
connection fai\fs, p\fease verify that the WEP settin\bs are correct. The WEP 
key must be exact\fy the same as on th\ue wire\fess router.