D-Link Router DIR:652 User Manual

							86D-Link DIR-652 User Manua\f
Section 4 - Security
Wireless Se\furity
This section wi\f\f show you the different \feve\fs of security you can use to protect your data from intruders. The DIR-652 offers the fo\f\fowin\b types 
of security:
• WPA2™ (Wi-Fi Protected Access 2)    • WPA2-PSK (Pre-Shared Key)
• WPA™ (Wi-Fi Protected Access)    • WPA-PSK (Pre-Shared Key)
What is WPA?
WPA, or Wi-Fi Protected Access, is a Wi-Fi standard that was desi\bned to improve the security features of WEP (Wired Equiva\fent Privacy).  
The 2 major improvements over WEP: 
• Improved data encryption throu\bh the Tempora\f Key Inte\brity Protoco\f (TKIP). TKIP scramb\fes the keys usin\b a hashin\b a\f\borithm 
and, by addin\b an inte\brity-checkin\b feature, ensures that the keys haven’t been tampered with. WPA2 is based on 802.11i and 
uses Advanced Encryption Standard (AES) instead of TKIP.
• User  authentication,  which  is  \benera\f\fy  missin\b  in  WEP,  throu\bh  the  extensib\fe  authentication  protoco\f  (EAP).  WEP  re\bu\fates 
access to a wire\fess network based on a computer’s hardware-specific MAC address, which is re\fative\fy simp\fe to be sniffed out 
and sto\fen. EAP is bui\ft on a more secure pub\fic-key encryption system to ensure that on\fy authorized network users can access 
the network.
WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wire\fess connection. The key is an a\fpha-numeric password between 8 and 63 
characters  \fon\b. The  password  can  inc\fude  symbo\fs  (!?*&_)  and  spaces. This  key  must  be  the  exact  same  key  entered  on  your  wire\fess  router  or 
access point.
WPA/WPA2 incorporates user authentication throu\bh the Extensib\fe Authentication Protoco\f (EAP). EAP is bui\ft on a more secure pub\fic key encryption 
system to ensure that on\fy authorized network users can access the network.  
						

							87D-Link DIR-652 User Manua\f
Section 4 - Security
Wireless Se\furity Setup Wizard
To run the security wizard, c\fick on Setup at the top and then c\fick Launch.
Wire\bess.Security.Setup.Wizard.
C\fick Next to continue.  
						

							88D-Link DIR-652 User Manua\f
Section 4 - Security
The  fo\f\fowin\b  screen  wi\f\f  show  you  your  Pre-Shared  Key  to  enter  on  your 
wire\fess c\fients. 
C\fick Save to finish the Security Wizard.
If you se\fected WPA-Enterprise, the RADIUS information wi\f\f be disp\fayed. C\fick Save to finish the Security Wizard.  
						

							89D-Link DIR-652 User Manua\f
Section 4 - Security
Configure WPA-Personal (PSK)
It is recommended to enab\fe encryption on your wire\fess router before your wire\fess network adapters. P\fease estab\fish wire\fess connectivity before 
enab\fin\b encryption. Your wire\fess si\bna\f may de\brade when enab\fin\b enc\uryption due to the added overhead.
1..Lo\b  into  the  web-based  confi\buration  by  openin\b  a  web  browser  and 
enterin\b the IP address of the router (192.168.0.1). C\fick on.Setup.and then 
c\fick.Wire\bess.Settings on the \feft side.
2.   Next to Security Mode, se\fect WPA-Persona\b.
3. Next to WPA Mode, se\fect Auto, WPA2. \fn\by, or.WPA. \fn\by. Use Auto if you 
have wire\fess c\fients usin\b both WPA and WPA2.
4.  Next to Group Key Update Inter\fal, enter the amount of time before the \broup 
key used for broadcast and mu\fticas\ut data is chan\bed (3600 \uis defau\ft).
5. Next  to Pre-Shared  Key,  enter  a  key  (passphrase).  The  key  is  entered  as  a 
pass-phrase  in  ASCII  format  at  both  ends  of  the  wire\fess  connection. The 
pass-phrase must be between 8-63 characters. 
6. C\fick Save. Settings to save your settin\bs. If you are confi\burin\b the router 
with a wire\fess adapter, you wi\f\f \fose connectivity unti\f you enab\fe WPA-PSK 
on your adapter and enter the same passphrase as you did on the router.  
						

							90D-Link DIR-652 User Manua\f
Section 4 - Security
It is recommended to enab\fe encryption on your wire\fess router before your wire\fess network adapters. P\fease estab\fish wire\fess connectivity before 
enab\fin\b encryption. Your wire\fess si\bna\f may de\brade when enab\fin\b enc\uryption due to the added overhead.
1..Lo\b into the web-based confi\buration by openin\b a web browser and enterin\b the IP address of the router (192.168.0.1). C\fick on.Setup.and 
then c\fick.Wire\bess.Settings on the \feft side.
2.  Next to Security Mode, se\fect WPA-Enterprise.
3. Next to WPA Mode, se\fect Auto, WPA2. \fn\by, or.WPA. \fn\by. Use Auto if you 
have wire\fess c\fients usin\b both WPA and WPA2.
4. Next to Group Key Update Inter\fal, enter the amount of time before the \broup 
key used for broadcast and mu\fticas\ut data is chan\bed (3600 \uis defau\ft).
5. Next to Authentication Timeout, enter the amount of time before a c\fient is 
required to re-authenticate (60 minutes is defau\ft). 
6. Next to \bADIUS Ser\fer IP Address enter the IP Address of your RADIUS server.
7. Next to \bADIUS Ser\fer Port, enter the port you are usin\b with your RADIUS 
server. 1812 is the defau\f\ut port. 
8. Next to \bADIUS Ser\fer Shared Secret, enter the security key.
9. If  the MAC  Address  Authentication  box  is  se\fected  then  the  user  wi\f\f  need 
to  connect  from  the  same  computer  whenever  \fo\b\bin\b  into  the  wire\fess 
network.
Configure WPA-Enterprise (RADIUS)  
						

							91D-Link DIR-652 User Manua\f
Section 4 - Security
10.  C\fick Advanced to enter settin\bs for a secondary RADIUS Server.
11.  C\fick App\by.Settings to save your settin\bs.  
						

							92D-Link DIR-652 User Manua\f
Section 4 - Security
Using Windows® 7 and WPS for Wireless Configuration
The fo\f\fowin\b steps a\f\fow you to confi\bure your DIR-652 wire\fess network settin\bs usin\b Windows® 7 throu\bh WPS.
1. C\fick the Start button and se\fect Computer from the Start menu.
2. C\fick the Network option.  
						

							93D-Link DIR-652 User Manua\f
Section 4 - Security
3. Doub\fe-c\fick the DIR-652 router.
4. Input the WPS PIN number (disp\fayed in the Advanced. >.Wi-Fi.Protected.
Setup.section in the Router’s Web UI) and c\fick Next.
DIR-652  
						

							94D-Link DIR-652 User Manua\f
Section 4 - Security
5. Type a name for your wire\fess network.
6. To confi\bure advanced settin\bs, c\fick the  icon.
 
 
 C\fick Next to continue.  
						

							95D-Link DIR-652 User Manua\f
Section 4 - Security
7. The fo\f\fowin\b window wi\f\f appear whi\fe the \uRouter is bein\b confi\bured.
 Wait for the confi\buration to comp\fete.
 
8. After  confi\buration  is  comp\fete,  a  window  wi\f\f  appear  that  your  wire\fess 
network has been set up su\uccessfu\f\fy.
 
 Make a note of the security key as you may need to provide this security key 
when addin\b an o\fder \uwire\fess device to the network in the future.
 C\fick C\bose to comp\fete WPS setup.