Netgear Extender WPN824EXT User Manual

							RangeMax WiFi Range Extender WPN824EXT User Manual 
Introduction1-9
v1.0, April 2008
Advanced Wireless SettingsChapter 2, “Implementing Appropriate Wireless Security
Wireless Repeating 
Function“Wireless Repeating Function” on page 4-1
NTP Client“NTP Client” on page 4-5
QoS Setup“QoS Setup” on page 4-6
Web Support KnowledgeBase“Technical Support and Documentation” on page ii
Documentation“Technical Support and Documentation” on page ii
Table 1-1.  WiFi Range Extender Main Menu (continued)
WiFi Range Extender Main MenuTopic in Manual 
						

							RangeMax WiFi Range Extender WPN824EXT User Manual 
1-10Introduction
v1.0, April 2008 
						

							2-1
v1.0, April 2008
Chapter 2
Implementing Appropriate Wireless Security
Unlike wired network data, your wireless data transmissions can be received well beyond your 
walls by anyone with a compatible adapter. For this reason, use the security features of your 
wireless equipment. The WiFi range extender provides highly effective security features, which 
are covered in detail in this chapter.
Enhancing the Security of Your Network
Deploy the security features appropriate to your needs.
There are several ways you can enhance the secur ity of your wireless network.
•Restrict access based on MAC address. You can restrict access to only trusted computers so 
that unknown computers cannot wirelessly connect to the WPN824EXT. MAC address 
filtering adds an obstacle against unwanted access to your network, but the data broadcast over 
the wireless link is fully exposed. 
Figure 2-1
Note: Indoors, computers can connect over 802.11b/g wireless networks at ranges of up 
to 300 feet. Such distances can allow for others outside of your immediate area to 
access your network.
Wireless Data
Security Options
Range: Up to 300 foot radius
1.Open. Easy but no security
2.MAC Access List. No data security
3.WEP. Security but vulnerable
4.WPA or WPA-PSK. Very strong security 
						

							RangeMax WiFi Range Extender WPN824EXT User Manual 
2-2 Implementing Appropriate Wireless Security
v1.0, April 2008
•Turn off the broadcast of the wireless network name (SSID). If you disable broadcast of the 
SSID, only devices that have the correct SSID can connect. This nullifies the wireless network 
“discovery” feature of some products such as Windows XP, but the data is still fully exposed 
to a determined snoop using specialized test equipment like wireless sniffers.
•WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP Shared 
Key authentication and WEP data encryption block all but the most determined eavesdropper. 
•WPA-PSK. Wi-Fi Protected Access–Pre-Shared Key (WPA-PSK) data encryption provides 
strong data security. WPA-PSK blocks eavesdropping. Because this is a new standard, wireless 
device driver and software availability might be limited. 
Wireless Settings Record
Before customizing your wireless settings, NETGEAR recommends that you print this section and 
record the following information. If you are working with an existing wireless network, the person 
who set up or is responsible for the network can provide this information. Otherwise, you will 
choose the settings for your wireless network. Either way, record the settings for your wireless 
network in the spaces below.
•Wireless network name (SSID). ______________________________
 The SSID identifies 
the wireless network. You can use up to 32 alphanumeric characters. The SSID is case-
sensitive. The SSID in the wireless adapter card must match the SSID of the WiFi range 
extender. In some configuration utilities (such as in Windows XP), the term “wireless network 
name” is used instead of SSID. 
•If WEP authentication is used. Circle one: Open System, Shared Key, or Auto. 
–WEP encryption key size. Choose one: 64-bit or 128-bit. Again, the encryption key size 
must be the same for the wireless adapters and the WiFi range extender.
–Data encryption (WEP) keys. There are two methods for creating WEP data encryption 
keys. Whichever method you use, record the key values in the spaces below.
•Passphrase method. ______________________________
 These characters are case-
sensitive. Enter a word or group of printable characters, and click the Generate Keys 
button. Not all wireless devices support the passphrase method.
Note: If you select Shared Key, the other devices in the network will not connect 
unless they are set to Shared Key as well and are configured with the correct 
key. 
						

							RangeMax WiFi Range Extender WPN824EXT User Manual 
Implementing Appropriate Wireless Security 2-3
v1.0, April 2008
•Manual method. These values are not case-sensitive. For 64-bit WEP, enter 10 hex 
digits (any combination of 0–9 or a–f). For 128-bit WEP, enter 26 hex digits.
Key 1: ___________________________________
 
Key 2: ___________________________________
 
Key 3: ___________________________________
 
Key 4: ___________________________________
 
•If WPA-PSK authentication is used. 
–Passphrase. ______________________________
 These characters are case-sensitive. 
Enter a word or group of printable characters. When you use WPA-PSK, the other devices 
in the network will not connect unless they are set to WPA-PSK as well and are configured 
with the correct passphrase. 
Use the procedures described in this chapter to configure the WiFi range extender. Store this 
information in a safe place.
Setting Up and Testing Basic Wireless Connectivity
Follow these instructions to set up and test basic wireless connectivity. Once you have established 
basic wireless connectivity, you can enable security settings appropriate to your needs.
1.Log in to the WiFi range extender (see “Logging In” on page 1-5).
Note: If you use a wireless computer to configure WPA settings, you will be disconnected 
when you click Apply. Reconfigure your wireless adapter to match the new settings 
or access the WiFi range extender from a wired computer to make any further 
changes. 
						

							RangeMax WiFi Range Extender WPN824EXT User Manual 
2-4 Implementing Appropriate Wireless Security
v1.0, April 2008
2.Select Wireless Settings in the main menu of the WiFi range extender. The Wireless Settings 
screen displays. 
3.Choose a suitable descriptive name for the wireless network name (SSID). In the Wireless 
Network Name (SSID) field, enter a value of up to 32 alphanumeric characters. The default 
SSID is NETGEAR_EXT.
4.Set the country/region. Select the region in which the wireless interface will operate. It might 
not be legal to operate the WiFi range extender in a country or region other than the one shown 
here. See online help for more details. To change the country/region, select from the drop-
down list. The region selection feature might not be available in the localized version of the 
firmware that you have.
5.Set the channel/frequency. This field determines which operating frequency is used. It should 
not be necessary to change the wireless channel unless you notice interference problems with 
another nearby wireless network. For more information about the wireless channel 
frequencies, click the link to the online document “Wireless Networking Basics” in 
Appendix B.
Figure 2-2
Note: The SSID is case-sensitive; NETGEAR is not the same as nETgear. Also, the 
SSID of any wireless access adapters must match the SSID you configure in 
the RangeMax WiFi Range Extender WPN824EXT. If they do not match, you 
will not get a wireless connection to the WPN824EXT. 
						

							RangeMax WiFi Range Extender WPN824EXT User Manual 
Implementing Appropriate Wireless Security 2-5
v1.0, April 2008
6.Set the operating mode. Select the wireless operating mode you want. The default is Auto 108 
Mbps. You can change this to b only, g only, or 802.11b/g mixed.
7.For initial configuration and test, leave the security setting as set when you installed the WiFi 
range extender. Once your computers have basic wireless connectivity, you can configure the 
advanced wireless security functions, as described in “Configuring Advanced Wireless 
Settings” on page 2-7.
8.Click Apply to save your changes.
9.Configure and test your computers for wireless connectivity.
Program the wireless adapter of your computers to have the same SSID and channel that you 
configured in the WPN824EXT. Check that they have a wireless link and are able to obtain an 
IP address by DHCP from the WPN824EXT.
Selecting a Wireless Security Option
To select a wireless security option:
1.Log in to the WiFi range extender (see “Logging In” on page 1-5).
2.Select Wireless Settings in the main menu.
3.Select a security type. If the information is required, Passphrase, Authentication Type, 
Encryption Strength, or Security Encryption (WEP) Key fields appear after you select a 
security type, as described in Table 2-1 on page 2-6.
Note: If you are configuring the WPN824EXT from a wireless computer and you 
change the WPN824EXT’s SSID, channel, or security settings, you will lose 
your wireless connection when you click on Apply. You must then change the 
wireless settings of your computer to match the WPN824EXT’s new settings.
Note: For more information on wireless security, click the link to the online 
document “Wireless Networking Basics” in Appendix B, or the WiFi range 
extender help screens. 
						

							RangeMax WiFi Range Extender WPN824EXT User Manual 
2-6 Implementing Appropriate Wireless Security
v1.0, April 2008
4.Click Apply, or click Cancel to return to the original settings.
Table 2-1. Wireless Security Options
Security TypeDescription
NoneNo wireless security. Recommended only for troubleshooting wireless 
connectivity.
WEP. WEP (Wired 
Equivalent Privacy) .WEP offers the following options:
• Open System
With Open Network authentication and 64 or 128 bit WEP data 
encryption, the WPN824EXT does perform data encryption but does 
not perform any authentication. Anyone can join the network. This 
setting provides very little practical wireless security.
• Shared Key
With Shared Key authentication, a wireless device must know the 
WEP key in order to join the network. Select the encryption strength 
(64 or 128 bit data encryption). Manually enter the key values, or enter 
a word or group of printable characters in the Passphrase field. 
Manually entered keys are not case-sensitive, but passphrase 
characters are case-sensitive. 
Note: Not all wireless adapter configuration utilities support 
passphrase key generation.
• Automatic
The WiFi range extender automatically detects whether Open System 
or Shared Key is used.
WPA-PSK (TKIP). Wi-Fi 
Protected Access with Pre-
Shared Key, use WPA-PSK 
standard encryption with 
TKIP encryption type.
WPA2-PSK (AES). Wi-Fi 
Protected Access version 2 
with Pre-Shared Key, use 
WPA2-PSK standard 
encryption with the AES 
encryption type.WPA–Pre-Shared Key does perform authentication. WPA-PSK uses TKIP 
(Temporal Key Integrity Protocol) data encryption, and WPA2-PSK uses 
AES (Advanced Encryption Standard) data encryption. Both methods 
dynamically change the encryption keys making them nearly impossible 
to circumvent.
Enter a word or group of printable characters in the Password Phrase 
field. These characters are case-sensitive.
Note: Not all wireless adapter configuration utilities support WPA-PSK 
and WPA2-PSK. Furthermore, client software is required on the client. 
Windows XP Service Pack 2 and Windows XP Service Pack 1 with WPA 
patch do include the client software that supports WPA. However, the 
wireless adapter hardware and driver must also support WPA.
WPA-PSK (TKIP) + WPA2-
PSK (AES). Mixed mode.Allows clients using either WPA-PSK (TKIP) or WPA2-PSK (AES) (this 
provides the most reliable security, and is easiest to implement, but it 
might not be compatible with older adapters). 
						

							RangeMax WiFi Range Extender WPN824EXT User Manual 
Implementing Appropriate Wireless Security 2-7
v1.0, April 2008
Configuring Advanced Wireless Settings
To configure the advanced wireless settings of your WiFi range extender:
1.Select Wireless Settings under Advanced on the main menu. The Advanced Wireless Settings 
screen displays.
2.Enable or fill in the following fields, as appropriate:
•Enable Wireless Extender Radio. If selected, attached wireless clients will be able to 
access the Internet. If not selected, attached wireless clients will not be able to access the 
Internet. The Wireless status light on the front of the wireless extender will also display 
the current status of the WiFi range extender (on, off) to let you know if it is disabled or 
enabled.
•Enable SSID Broadcast. If selected, the WiFi range extender’s SSID will broadcast its 
name (SSID) to all attached wireless clients. Attached wireless clients that have no SSID 
(or a null value) can then adopt the correct SSID for connections to the extender. If you 
disable broadcast of the SSID, only devices that have the correct SSID can connect. 
Disabling SSID broadcast nullifies the wireless network discovery feature of some 
products such as Windows XP.
•CTS/RTS Threshold (1–2347). This setting is reserved for wireless testing and advanced 
configuration only. For best performance, leave this at the default setting (2347). 
Figure 2-3 
						

							RangeMax WiFi Range Extender WPN824EXT User Manual 
2-8 Implementing Appropriate Wireless Security
v1.0, April 2008
•Fragmentation Length (256–2346). The maximum packet size used for fragmentation. 
Packets larger than the size entered in this field will be fragmented. The Fragment 
Threshold value must be larger than the RTS Threshold value. For best performance, leave 
this at the default setting (2346). 
•Disable Advanced 108Mbps Features. If this checkbox is selected, the WiFi range 
extender will not perform data compression, packet bursting, and large frame support. For 
the best performance, leave this at the default setting. 
•Enable eXtended Range(XR) Feature. This technology, eXtended Range(XR), requires 
no additional configuration and provides significantly longer range over 802.11 by 
maintaining connectivity when signals encounter barriers. For the best performance, leave 
this check box selected, the default setting.
•Wireless Card Access List. By default, any wireless computer that is configured with the 
correct SSID will be allowed access to your wireless network. For increased security, you 
can restrict access to the wireless network to allow only specific computers based on their 
MAC addresses. The Wireless Card Access Setup screen displays a list of wireless 
computers that are allowed to connect to the WiFi range extender based on their MAC 
addresses. These wireless computers must also have the correct SSID and WEP settings 
configured on the Wireless Settings screen to access the wireless network.
3.Click Apply to save your settings.
To turn access control on:
1.Click Setup Access List. The Wireless Card Access List screen displays.
2.Select the Turn Access Control On check box to restrict wireless computers by their MAC 
addresses.
3.Click Apply to save your settings.
Figure 2-4