D-Link Router DIR-857 User Manual

							86
D-Link DIR-857 User Manual
Section 4 - Security
Wireless Security
This section will show you the different levels of security you can use to protect your data from intruders. The DIR-857 offers the following types 
of security:
• WPA2
™ (Wi-Fi Protected Access 2)     • WPA2-PSK (Pre-Shared Key)
• WPA
™ (Wi-Fi Protected Access)    • WPA-PSK (Pre-Shared Key)
What is WPA?
WPA, or Wi-Fi Protected Access, is a Wi-Fi standard that was designed to improve the security features of WEP (Wired Equivalent Privacy).  
The 2 major improvements over WEP: 
• Improved data encryption through the Temporal Key Integrity Protocol (TKIP). TKIP scrambles the keys using a hashing algorithm 
and, by adding an integrity-checking feature, ensures that the keys haven’t been tampered with. WPA2 is based on 802.11i and 
uses Advanced Encryption Standard (AES) instead of TKIP.
•  User  authentication,  which  is  generally  missing  in  WEP,  through  the  extensible  authentication  protocol  (EAP).  WEP  regulates 
access to a wireless network based on a computer’s hardware-specific MAC address, which is relatively simple to be sniffed out 
and stolen. EAP is built on a more secure public-key encryption system to ensure that only authorized network users can access 
the network.
WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wireless connection. The key is an alpha-numeric password between 8 and 63 
characters  long. The  password  can  include  symbols  (!?*&_)  and  spaces. This  key  must  be  the  exact  same  key  entered  on  your  wireless  router  or 
access point.
WPA/WPA2 incorporates user authentication through the Extensible Authentication Protocol (EAP). EAP is built on a more secure public key encryption 
system to ensure that only authorized network users can access the network.  
						

							87
D-Link DIR-857 User Manual
Section 4 - Security
Wi-PnP Wireless Setup
Wi-PnP allows you to copy your wireless settings from your router to a USB flash drive and use to automatically configure the wireless settings on 
your Windows® computers. Follow the steps below:
1. Plug in USB Flash Drive in USB port on the back of the router.
2. Press and hold the WPS button (located on the front of the router) for 5 seconds. The power LED will blink.
3. Wait 10 seconds and unplug the USB Flash Drive from the router.
4. Plug the USB Flash Drive in a Windows-Based computer. 
5. The window below will automatically appear. Double-click Connect to a wireless network.  
						

							88
D-Link DIR-857 User Manual
Section 4 - Security
7. Click OK to finish adding your computer to your wireless network.
6. Click Yes to add the current computer to your wireless network.
Repeat step 4-7 to add additional computers to your wireless network.  
						

							89
D-Link DIR-857 User Manual
Section 4 - Security
Wireless Security Setup Wizard
To run the security wizard, click on Setup at the top and then click  Launch 
Wireless Security Setup Wizard.
Click Next to continue.  
						

							90
D-Link DIR-857 User Manual
Section 4 - Security
The  following  screen  will  show  you  your  Pre-Shared  Key  to  enter  on  your 
wireless clients. 
Click Save to finish the Security Wizard.
If you selected WPA-Enterprise, the RADIUS information will be displayed. Click Save to finish the Security Wizard.  
						

							91
D-Link DIR-857 User Manual
Section 4 - Security
Configure WPA-Personal (PSK)
It is recommended to enable encryption on your wireless router before your wireless network adapters. Please establish wireless connectivity before 
enabling encryption. Your wireless signal may degrade when enabling encryption due to the added overhead.
1.  Log  into  the  web-based  configuration  by  opening  a  web  browser  and 
entering the IP address of the router (192.168.0.1). Click on Setup  and then 
click Wireless Settings on the left side.
2.   Next to Security Mode, select WPA-Personal.
3.  Next to  WPA Mode, select  Auto, WPA2 Only, or WPA Only. Use  Auto if you 
have wireless clients using both WPA and WPA2.
4.   Next to  Group Key Update Interval , enter the amount of time before the group 
key used for broadcast and multicast data is changed (3600 is default).
5.  Next  to  Pre-Shared  Key ,  enter  a  key  (passphrase).  The  key  is  entered  as  a 
pass-phrase  in  ASCII  format  at  both  ends  of  the  wireless  connection. The 
pass-phrase must be between 8-63 characters. 
6.  Click  Save Settings to save your settings. If you are configuring the router 
with a wireless adapter, you will lose connectivity until you enable WPA-PSK 
on your adapter and enter the same passphrase as you did on the router.  
						

							92
D-Link DIR-857 User Manual
Section 4 - Security
It is recommended to enable encryption on your wireless router before your wireless network adapters. Please establish wireless connectivity before 
enabling encryption. Your wireless signal may degrade when enabling encryption due to the added overhead.
1.  Log into the web-based configuration by opening a web browser and entering the IP address of the router (192.168.0.1). Click on Setup  and 
then click Wireless Settings on the left side.
2.  Next to Security Mode, select WPA-Enterprise.
3.  Next to  WPA Mode, select  Auto, WPA2 Only, or WPA Only. Use  Auto if you 
have wireless clients using both WPA and WPA2.
4.  Next to  Group Key Update Interval , enter the amount of time before the group 
key used for broadcast and multicast data is changed (3600 is default).
5.  Next to  Authentication Timeout, enter the amount of time before a client is 
required to re-authenticate (60 minutes is default). 
6.  Next to  RADIUS Server IP Address enter the IP Address of your RADIUS server.
7.  Next to  RADIUS Server Port, enter the port you are using with your RADIUS 
server. 1812 is the default port. 
8.  Next to RADIUS Server Shared Secret, enter the security key.
9.  If  the  MAC  Address  Authentication  box  is  selected  then  the  user  will  need 
to  connect  from  the  same  computer  whenever  logging  into  the  wireless 
network.
Configure WPA-Enterprise (RADIUS)  
						

							93
D-Link DIR-857 User Manual
Section 4 - Security
10.   Click Advanced to enter settings for a secondary RADIUS Server.
11.   Click Apply Settings to save your settings.  
						

							94
D-Link DIR-857 User Manual
Section 4 - Security
Using Windows® 7 and WPS for Wireless Configuration
The following steps allow you to configure your DIR-857 wireless network settings using Windows® 7 through WPS.
1.  Click the Start button and select Computer from the Start menu.
2. Click the Network option.  
						

							95
D-Link DIR-857 User Manual
Section 4 - Security
3.  Double-click the DIR-857 router.
4.  Input the WPS PIN number (displayed in the  Advanced > Wi-Fi Protected 
Setup section in the Router’s Web UI) and click Next.
DIR-857