SMC Networks Router SMCWBR14-G2 User Manual

SECURITY
4-45
WEP
WEP is the basic mechanism to transmit your data securely over a wireless 
network. Matching encryption keys must be set up on your Barricade and 
and each of your wireless client devices.
Parameter Description
WEP Mode Select 64-bit or 128-bit key to use for encryption.
Key Entry Method Select hexadecimal (Hex) or ASCII for the key entry 
method.
Key  Provisioning Select Static if there is only one fixed key for encryption. If 
you want to select Dynamic, you need to enable 802.1X...

CONFIGURING THE BAR RICADE
4-46
You may automatically generate encryption keys or manually enter the 
keys. To generate the key automatically with passphrase, check the 
Passphrase box, and enter a string of characters. Select the default key 
from the drop-down menu. Click APPLY.
Note:The passphrase can consist of up to 63 alphanumeric characters.
Hexadecimal Keys
A hexadecimal key is a mixture of numbers and letters from A-F and 0-9. 
64-bit keys are 10 digits long and can be divided into five...

SECURITY
4-47
WPA/WPA2
WPA/WPA2 is a security enhancement that strongly increases the level of 
data protection and access control for existing wireless LAN. Matching 
authentication and encryption methods must be set up on your Barricade 
and wireless client devices to use WPA/WPA2. To use WPA, your wireless 
network cards must be equipped with software that supports WPA. A 
security patch from Microsoft is available for free download (for XP only).
Parameter Description
Cipher Suite The security...

CONFIGURING THE BAR RICADE
4-48
WPA
WPA addresses all known vulnerabilities in WEP, the original, less secure 
40 or 104-bit encryption scheme in the IEEE 802.11 standard. WPA also 
provides user authentication, since WEP lacks any means of 
authentication. Designed to secure present and future versions of IEEE 
802.11 devices, WPA is a subset of the IEEE 802.11i specification.
WPA replaces WEP with a strong new encryption technology called 
Temporal Key Integrity Protocol (TKIP) with Message Integrity...

SECURITY
4-49
802.1X
If 802.1X is used in your network, then you should enable this function for 
the Barricade. This screen allows you to set the 802.1X parameters. 802.1X 
is a method of authenticating a client wireless connection. Enter the 
parameters below to connect the Barricade to the Authentication Server.
Parameter Description
802.1X Authentication Enable or disable the authentication function.
Session Idle Timeout This is the time (in seconds) that a session will sit inactive 
before...

CONFIGURING THE BAR RICADE
4-50
The use of IEEE 802.1X offers an effective framework for authenticating 
and controlling user traffic to a protected network, as well as dynamically 
varying encryption keys. 802.1X ties EAP (Extensible Authentication 
Protocol) to both the wired and wireless LAN media and supports 
multiple authentication methods, such as token cards, Kerberos, one-time 
passwords, certificates, and public key authentication.
Click Save Settings to proceed, or Cancel to change your...

ADVANCED SETTINGS
4-51
Advanced Settings
To configure the advanced settings such as NAT, Maintenance, System 
settings and UPnP, click Advanced Settings.
Note:Changing some of the device settings in the Advanced Settings 
mode may cause the Barricade to become unresponsive.
The Barricade’s advanced management interface contains 6 main menu 
items as described in the following table.
Menu Description
NAT Shares a single ISP account with multiple users, sets up virtual 
servers.
Maintenance Allows you to...

CONFIGURING THE BAR RICADE
4-52
NAT
The first menu item in the Advanced Settings section is Network Address 
Translation (NAT). This process allows all of the computers on your home 
network to use one IP address. Using the NAT capability of the Barricade, 
you can access the Internet from any computer on your home network 
without having to purchase more IP addresses from your ISP.
To use the NAT feature, check the Enable radio button and click Save 
Settings. 

ADVANCED SETTINGS
4-53
Address Mapping
Network Address Translation (NAT) allows IP addresses used in a private 
local network to be mapped to one or more addresses used in the public, 
global Internet. This feature limits the number of public IP addresses 
required from the ISP and also maintains the privacy and security of the 
local network. We allow one public IP address to be mapped to a pool of 
local addresses.
Click Save Settings to proceed, or Cancel to change your settings. 

CONFIGURING THE BAR RICADE
4-54
Virtual Server
Using this feature, you can put PCs with public IPs and PCs with private 
IPs in the same LAN area.
If you configure the Barricade as a virtual server, remote users accessing 
services such as web or FTP at your local site via public IP addresses can 
be automatically redirected to local servers configured with private IP 
addresses. In other words, depending on the requested service (TCP/UDP 
port number), the Barricade redirects the external service...