NETGEAR WGE111 user manual WPA Data Encryption Key Management

Page 76

User Manual for the NETGEAR 54 Mbps Wireless PC Card WG511

3.The client sends an EAP-response packet containing the identity to the authentication server. The access point responds by enabling a port for passing only EAP packets from the client to an authentication server located on the wired side of the access point. The access point blocks all other traffic, such as HTTP, DHCP, and POP3 packets, until the access point can verify the client's identity using an authentication server (for example, RADIUS).

4.The authentication server uses a specific authentication algorithm to verify the client's identity. This could be through the use of digital certificates or some other EAP authentication type.

5.The authentication server will either send an accept or reject message to the access point.

6.The access point sends an EAP-success packet (or reject packet) to the client.

7.If the authentication server accepts the client, then the access point will transition the client's port to an authorized state and forward additional traffic.

The important part to know at this point is that the software supporting the specific EAP type resides on the authentication server and within the operating system or application “supplicant” software on the client devices. The access point acts as a “pass through” for 802.1x messages, which means that you can specify any EAP type without needing to upgrade an 802.1x-compliant access point. As a result, you can update the EAP authentication type to such devices as token cards (Smart Cards), Kerberos, one-time passwords, certificates, and public key authentication, or as newer types become available and your requirements for security change.

WPA Data Encryption Key Management

With 802.1x, the rekeying of unicast encryption keys is optional. Additionally, 802.11 and 802.1x provide no mechanism to change the global encryption key used for multicast and broadcast traffic. With WPA, rekeying of both unicast and global encryption keys is required.

For the unicast encryption key, the Temporal Key Integrity Protocol (TKIP) changes the key for every frame, and the change is synchronized between the wireless client and the wireless access point (AP). For the global encryption key, WPA includes a facility (the Information Element) for the wireless AP to advertise the changed key to the connected wireless clients.

If configured to implement dynamic key exchange, the 802.1x authentication server can return session keys to the access point along with the accept message. The access point uses the session keys to build, sign and encrypt an EAP key message that is sent to the client immediately after sending the success message. The client can then use contents of the key message to define applicable encryption keys. In typical 802.1x implementations, the client can automatically change encryption keys as often as necessary to minimize the possibility of eavesdroppers having enough time to crack the key in current use.

C-14

Wireless Networking Basics

Image 76
Contents NETGEAR, Inc Technical Support Iii Vcci Statement Contents Chapter Web Configuration Glossary Contents Chapter About This Manual Audience, Conventions, ScopeHow to Use this Manual Html version of this manualHow to Print this Manual About This Manual About the Netgear WGE111 Wireless Game Adapter Chapter IntroductionKey Features and Related Netgear Products What’s in the Box?Introduction Status Indicators and Ports of the WGE111 LED DescriptionsReset Push Button Reset ButtonIntroduction Chapter Basic Setup Preparing to Install Your WGE111 Wireless Game AdapterPlacement and Range Guidelines System RequirementsMode Switch Position Your System Operating ModesWhat you do Personal Computer Plug-and-Go Scenario Planning the WGE111 Wireless Game Adapter Configuration Planning for TCP/IP ConfigurationDynamic IP using Dhcp Fixed IPAuthentication Scheme Selection Understanding WEP Authentication and EncryptionSubnet mask Encryption Strength Choices Using the Netgear Smart Wizard Configuration Assistant Understanding WPA-PSK Encryption SecurityPower Ethernet Select the wireless network Basic Setup Select the TCP/IP Settings Basic Setup Chapter Web Configuration Configuring the Wireless Game Adapter Using TCP/IPConnecting to the Wireless Game Adapter Viewing the Wireless Game Adapter StatusWireless Settings Status screenIP Settings Configuring the Adapter for Infrastructure Mode AccessDevice Information Infrastructure mode configuration screen Data RateUsing WEP Security Encryption Wireless SecurityAuthentication Type Network Name SsidConfiguring the Wireless Game Adapter for Ad-Hoc Mode Using WPA-PSK Security EncryptionManual Entry Mode Automatic Key Generation PassphraseAd-Hoc mode configuration screen Viewing the Wireless Networks Available Configuring the IP SettingsIP Settings configuration screen Changing the WGE111 Wireless Game Adapter Password Upgrading the FirmwareRestoring the Factory Defaults Restore Factory Defaults screenChapter Troubleshooting Go to Troubleshooting the TCP/IP Settings Using Ping onSymptom Cause Solution Basic TipsWireless router or access point, wait, and then See Using the Netgear Smart Wizard Frequently Asked Questions Cannot configure the WGE111 from a browserTroubleshooting the TCP/IP Settings Using Ping Troubleshooting the Web Configuration InterfaceRestoring the Default Configuration and Password Troubleshooting Appendix a Technical Specifications Technical Specifications Appendix B Understanding IP Addresses IP Addresses and the InternetThree Main Address Classes Netmask Subnet Addressing Example of Subnetting a Class B AddressNetmask Notation Translation Table for One Octet Private IP Addresses Address Resolution Protocol IP Configuration by DhcpUnderstanding IP Addresses Wireless Networking Overview Appendix C Wireless Networking BasicsInfrastructure Mode Ad Hoc Mode Peer-to-Peer Workgroup Authentication and WEPNetwork Name Extended Service Set Identification Essid Authentication Open System Authentication802.11b Authentication Open System Steps 802.11b Authentication Shared Key Steps Do Not Use WEPWEP Configuration Options Key SizeWireless Channels WPA Wireless Security Radio frequency channels used are listed in the table belowHow Does WPA Compare to WEP? What are the Key Features of WPA Security? How Does WPA Compare to Ieee 802.11i?Wireless Networking Basics Figure C-3 WPA Overview Access point replies with an EAP-request identity message WPA Data Encryption Key Management Temporal Key Integrity Protocol Tkip Is WPA Perfect? Product Support for WPAChanges to Wireless Access Points WPA two-phase authenticationChanges to Wireless Network Adapters New WPA information elementChanges to Wireless Client Programs List of Glossary Terms 1000BASE-T802.1Q 802.3Dhcp Internet service provider NIC Wins Glossary Index NumericsRFC

WGE111 specifications

The NETGEAR WGE111 is a wireless gaming adapter designed to enhance the gaming experience for console players, allowing them to connect their gaming console to a wireless network effortlessly. This device caters particularly to gamers who wish to enjoy the benefits of wireless connectivity without compromising on performance or speed.

One of the primary features of the WGE111 is its support for the IEEE 802.11g standard, providing data transfer rates of up to 54 Mbps. This speed is essential for online gaming, where lag can significantly impact performance. The adapter ensures a stable and reliable connection, reducing latency and allowing gamers to immerse themselves fully in their favorite titles.

The device is compatible with a wide range of gaming consoles, including PlayStation 2, Xbox, and Nintendo Wii, making it a flexible solution for gaming setups. The WGE111 is equipped with a straightforward Ethernet port, enabling easy connectivity with consoles that lack built-in Wi-Fi capabilities.

Reliability is a notable characteristic of the WGE111, thanks in part to its advanced wireless technologies. With features like WEP and WPA/WPA2 encryption, the adapter ensures that the user’s network remains secure from unauthorized access. Additionally, the WGE111 has a strong range and can maintain a solid connection even in larger homes, providing flexibility in device placement.

Installation of the WGE111 is user-friendly, with a simple plug-and-play setup. This allows gamers to quickly connect their consoles to the router without extensive configuration or technical expertise. The device also includes LED indicators that provide real-time feedback on connection status, simplifying troubleshooting and network management.

Another advantage of the NETGEAR WGE111 is its compact and lightweight design, making it portable and easy to relocate. Whether transitioning between different rooms or even taking it to a friend's house, players can enjoy the convenience of wireless gaming without being tethered to a physical connection.

In summary, the NETGEAR WGE111 wireless gaming adapter is an excellent choice for gamers looking to enhance their online experience. With its high-speed connectivity, compatibility with multiple consoles, robust security features, and ease of setup, the WGE111 stands out as a viable option for anyone looking to enjoy wireless gaming without sacrificing performance.