User’s Guide for the WG602 v3 54 Mbps Wireless Access Point

Temporal Key Integrity Protocol (TKIP)

WPA uses TKIP to provide important data encryption enhancements including a per-packet key mixing function, a message integrity check (MIC) named Michael, an extended initialization vector (IV) with sequencing rules, and a re-keying mechanism. TKIP also provides for the following:

The verification of the security configuration after the encryption keys are determined.

The synchronized changing of the unicast encryption key for each frame.

The determination of a unique starting unicast encryption key for each preshared key authentication.

Michael

With 802.11 and WEP, data integrity is provided by a 32-bit integrity check value (ICV) that is appended to the 802.11 payload and encrypted with WEP. Although the ICV is encrypted, you can use cryptanalysis to change bits in the encrypted payload and update the encrypted ICV without being detected by the receiver.

With WPA, a method known as Michael specifies a new algorithm that calculates an 8-byte message integrity code (MIC) using the calculation facilities available on existing wireless devices. The MIC is placed between the data portion of the IEEE 802.11 frame and the 4-byte ICV. The MIC field is encrypted together with the frame data and the ICV.

Michael also provides replay protection. A new frame counter in the IEEE 802.11 frame is used to prevent replay attacks.

AES Support

One of the encryption methods supported by WPA beside TKIP is the advanced encryption standard (AES), although AES support will not be required initially for Wi-Fi certification. This is viewed as the optimal choice for security conscience organizations, but the problem with AES is that it requires a fundamental redesign of the NIC’s hardware in both the station and the access point. TKIP was a pragmatic compromise that allows organizations to deploy better security while AES capable equipment is being designed, manufactured, and incrementally deployed.

Wireless Networking Basics

B-15

202-10060-01, September 2004

Page 75
Image 75
NETGEAR WG602NA manual Temporal Key Integrity Protocol Tkip

WG602NA specifications

The NETGEAR WG602NA is a wireless access point that has garnered attention for its robust performance and reliability in various networking environments. Designed primarily for home and small office use, this device offers users an efficient way to expand their network's coverage, providing both flexibility and convenience in connectivity.

One of the standout features of the WG602NA is its adherence to the IEEE 802.11g standard, which allows it to deliver wireless connectivity speeds of up to 54 Mbps. This speed makes it suitable for a variety of online activities, including web browsing, streaming videos, and online gaming. The device also supports backward compatibility with 802.11b devices, ensuring that older devices can still connect seamlessly.

The WG602NA utilizes advanced wireless security protocols to protect users' data. It supports Wired Equivalent Privacy (WEP) for basic encryption, as well as Wi-Fi Protected Access (WPA and WPA2) for more robust security measures. This ensures that your network remains secure from unauthorized access and data breaches.

In terms of connectivity, the WG602NA offers a straightforward setup process that is user-friendly, even for those with minimal technological knowledge. The device features a simple web interface that guides users through the configuration process, allowing them to customize settings according to their needs. It also includes a variety of options for network configuration, such as DHCP and static IP addressing, which can accommodate different network setups.

For those looking to set up multiple access points, the WG602NA can be configured to operate in bridge mode, enabling seamless roaming across larger areas without losing connectivity. This feature is particularly beneficial in larger homes or office settings where consistent signal strength is essential.

The compact design of the WG602NA makes it an unobtrusive addition to any setting, and it is equipped with a power over Ethernet (PoE) option, allowing it to be powered through an Ethernet cable. This flexibility facilitates easier installations as there is no need for searching for an electrical outlet nearby.

Overall, the NETGEAR WG602NA is a reliable access point that combines speed, security, and ease of use. Its features make it an excellent choice for individuals or small businesses seeking to enhance their wireless network capabilities, ensuring consistent and secure connectivity for all connected devices.