Siemens SE551 66

Security settings

Setting security functions for the wireless network

In the next step you can set the encryption and authentication methods for your wireless network.

Wireless networks are even more strongly exposed to the risk of eavesdropping than wired networks. With conventional network adapters an intruder only needs a device with a WLAN adapter (e.g. a Notebook or a PDA (Personal Digital Assistant)) with an appropriately configured network card in order to eavesdrop on every communication made via a nearby wireless LAN.

The Gigaset SE551 WLAN dsl/cable makes use of effective encryption methods to prevent unauthorised eavesdropping as far as possible.

You can use the following security mechanisms:

uWPA2-PSK or WPA2-PSK / WPA-PSK (see below)

uWEP encryption (Wired Equivalent Privacy, see page 66)

We recommend using WPA2-PSK if it is supported by all components in your wireless network.

You will find further options for setting data encryption and authentication in the Advanced Settings menu (see page 101).

64

Contents

Page Page Contents The user interface Basic Setup Wizard Security settings Configuring the Advanced Settings Administration and status information Status information Installing the printer port for network printers Appendix Safety precautions The Gigaset SE551 WLAN dsl/cable Page Wired local network (Ethernet) Internet Wireless local network (WLAN) We generally differentiate between two types of wireless network: uInfrastructure mode u Ad-hocmode You can use the Gigaset SE551 WLAN dsl/cable to connect uwirelessly networked PCs to the Internet and Linking wireless networks with the Internet cable modem Linking a wireless network (WLAN) to an Ethernet (LAN) Access Point Ethernet All PCs can access the Internet via the Gigaset SE551 WLAN dsl/cable Please remember: uInternet access As with many DSL providers the Internet is accessed via the PPPoE Client –Shared Internet access uSecurity functions uOffering your own services on the Internet First install an Ethernet network card or a wireless Network adapter SSID ConnectionPoint one First Steps Front panel LED displays LED State First Steps Back panel Element Description Warning Updated firmware will not be affected Then the feet may well mark the furniture surface Position the Gigaset SE551 WLAN dsl/cable so that it cannot fall If you wish to mount the Gigaset SE551 WLAN dsl/cable on the wall, use To the DSL or cable modem To the PC Wireless Radio network Wired LAN1 LAN4 Half duplex Full duplex To the mains power supply Only use the router with the mains adapter (12V 1A DC) that is supplied Connect the mains adapter cable to the 12V DC ìPlug the mains adapter into a mains socket Configuring the local network Configuring the network General Properties Wireless networks Use Windows to configure the settings You will be prompted to select a connection method ìSelect Other Method and confirm with Next You will now see a screen listing various connection methods ìIn the next window select your network adapter and click on Next Skip the message Selecting a computer name and workgroup Computer description Checking the network settings and completing the installation procedure Back ìAnswer the question Do you want to restart your computer now? with Yes TCP/IP settings ìClick on Start – Settings – Control Panel ìSelect Network Connections Page ìSelect Internet protocol (TCP/IP) and click on Properties Deactivating the HTTP proxy HTTP Proxy Internet Explorer Open Internet Explorer and click on End Configuring the popup blocker ìSelect Allow popups from this screen Web features Block popup windows Synchronising TCP/IP settings with the Gigaset SE551 WLAN dsl/cable Start Programs Accesso- ries Command prompt Installing network services ìDouble-clickon the Network and dial-upconnections icon Add network components Networking services Network identification Computer name Workgroup Installing the TCP/IP protocol LAN connection Install Add ìIn the Network protocol list, select Internet protocol (TCP/IP) Local Area Connection Properties Page Page ìOpen Internet Explorer. Click on Tools – Internet Options ìClick on LAN settings ìIn the Settings window click on the Web features tab Synchronising the TCP/IP settings with the Gigaset SE551 WLAN dsl/cable On the Windows Desktop, click on Accessories ipconfig /release ìEnter exit and press the ENTER key Setting up a PC as the Client for Microsoft Networks Network Configuration Net- work Client for Microsoft Net- works Clien Identification TCP/IP > Siemens Gigaset PC Card Making TCP/IP settings TCP/IP Obtain an IP address automatically Cancel Yes Gateway Installed gateways Page ìSelect Disable DNS ìClick OK again to close the Internet Options window Configuring the local network Synchronising the TCP/IP settings with the Gigaset SE551 WLAN dsl/cable Run WINIPCFG Release ìOpen Command prompt. To do this, click on Start – Programs – Command prompt ìEnter the command ping 2.Has TCP/IP been properly configured on your PC The user interface You will now see the start screen Traffic Control Start screen functions On the start screen you can select the language for the user interface The user interface The configuration program offers you the following functions: Basic Setup Wizard from page Security Setup Wizard Language The user interface pages contain the following elements: Log Off button button Log Off Help Basic Setup Wizard Page Service provider Other ìSelect how Internet sessions are to be established via Connection mode: Always on Idle time before disconnect Connect on demand Connect manually < Back Finish Security Setup Wizard I would like to run the Security Setup Wizard now Security settings Current password New password Confirm new password all SSID broadcast Page WPA2 / WPA with Pre-sharedkey (PSK) WPA2 PSK PSK Pre-shared WEP encryption Key length Input type Passphrase Manual key entry ìSelect the Key type, Hex or ASCII Hex With a ìConfirm the key by entering it again in the Confirm key field MAC address filter Entering MAC addresses manually Selecting from the list of logged-inPCs Known wireless clients uYou can completely reset the Gigaset SE551 WLAN dsl/cable (see page 17) ìClick on Finish to conclude the wizard The settings will now be active on your Gigaset SE551 WLAN dsl/cable Configuring the Advanced Settings Via the Internet menu you can umake DNS server settings (page 75) uconfigure time and volume control for using the Internet (see page 77) provide your own services on the Internet (NAT u define QoS properties (priorities for data transfer) (see page 95) Page Internet Connection ìIn the Advanced Settings – Internet menu, select Internet Connection Port Forwarding ìSelect UPnP Ports DNS server ìIn the Advanced Settings – Internet menu, select DNS Servers Use custom DNS servers Preferred DNS server Alternate DNS server MAC address ìIn the Advanced Settings – Internet menu, select MAC Address Use default device MAC address Use MAC address of this PC Use custom MAC address Traffic Control Traffic Control ìIn the Advanced Settings – Internet menu, select Traffic Control Traffic Control Reset traffic counters Global time limit ìEnter the total amount of time available per month in hours Global volume limit ìEnter the total volume of data available per month in megabytes (MB) Individual limits You can: uprotect your network against hacker attacks (see below) block individual PCs' access to selected services or Internet sites ìIn the Advanced Settings – Internet menu, select Firewall ìSelect the required option Attack detection ìIn the Advanced Settings – Internet – Firewall menu, select Attack Detection ìSelect the security level for the firewall Medium The level Custom E-mailnotification of a hacker attack Notification interval E-mail address to notify User-definedsettings Stateful Packet Inspection Traffic All Setting up access control to the Internet Access Control Schedule Rules ìSelect Access Control in the Advanced Settings – Internet – Firewall menu Access Rules Schedule rule Edit Access rule type Apply to all clients Filtering mode –Select the Services you wish to allow or block Protocol Port 80,90-140,180 Schedule Rules Access Rules ìIn the Access Control field under Schedule Rules, click on Edit field under , click on Page one Where configuration is concerned, this means: You have to define a Never expires Local Network Lease time Port Triggering Address Translation (NAT) Port Triggering Enabled Local protocol Local port Public protocol ìApply the settings by clicking OK Port Forwarding To set up port forwarding for a service, select Port Forwarding ìSelect the protocol of the service you are providing from the Protocol list Local IP address ìClick on Add ìClick on Delete if you wish to delete the data in the relevant line again Opening the firewall for selected PCs (Exposed Host) To set up a PC as Exposed Host, select ìEnter the Local IP address of the PC that is to be enabled as Exposed Host ìEnter a name for the PC in the Comment field ìActivate the entry by selecting the option ìClick on the Delete button to delete the entry from the list Apply the settings by clicking OK Dynamic DNS Advanced Set- tings Domain name QoS (Quality of Service) QoS ìIn the Advanced Settings – Internet menu, select the entry QoS Differentiated services In the field next to ìSelect Advanced Settings – Local Network Defining the private IP address for the Gigaset SE551 WLAN dsl/cable Subnet mask Configuring the DHCP server DHCP Server ìTo activate the DHCP server, select On If the DHCP server is active, you can define a Lease time activate the Gigaset SE551 WLAN dsl/cable's wireless module (see below) u set Encryption for wireless transmissions (see page 101), and u restrict access to the Gigaset SE551 WLAN dsl/cable's LAN (see page 101) Wireless Network ìSelect the On option for Wireless Network (default setting) ConnectionPoint ìSelect the Off option to deactivate SSID broadcast Transmission mode IEEE 802.11g only IEEE 802.11b/g (mixed) Super G (108 Mbit/s) Super G Select the mode for using Super G (108 Mbit/s) Static Dynamic If you do not wish to use Disabled Setting wireless security ìIn the Wireless Network menu, select Encryption WPA2-PSKand WPA2-PSK / WPA-PSK WPA with Pre-sharedkey (WPA-PSK) WPA2-PSK WPA2-PSK Security WPA and WPA2 with authentication server WPA2 WPA2 / WPA Enter the IP address of the RADIUS server in the RADIUS server IP address WEP ìSelect the Authentication type: Shared Open Default key Key important Allowed clients ìIn the Wireless Network menu, select Allowed Clients Entering PCs manually: Enter the required PCs with Click on the Add button to add the entry to the list Known wireless clients Repeater function (WDS) In the Wireless Network menu, select Repeater (WDS) Wireless distribution system SSID Channel Safely Remove Hardware File server ìIn the Advanced Settings menu, select File Server ìSelect the On option for the File Server Host name Server Domain / workgroup Device Partitions list and sharing directories Partitions Delete All Shares Setting up or editing a share ìEnter a name for the share Browse You can now set access protection for the directory ìFirst, select the On option for Security Web Server ìIn the Advanced Settings menu, select Web Server Partition HTTP ìActivate the HTTP service for your Web server You can change the \gigaset_http FTP ìActivate the FTP service for your Web server \gigaset_ftp \gigaset_http For Printer server ìActivate your device's integrated printer server ìClick OK to accept the changes Administration and status information Time zone Date format Time format Internet Time System time Last synchronization with time server Use custom time servers Preferred time server Setting Idle time before log off: ìIn the Administration menu, select Remote Management Remote Management Allowed connections: Remote Management for one particular PC: Authorized client http://X.X.X.X:8080 uIn the Administration menu, select Save & Restore Saving configuration data ìFor Task, select the option Save configuration Save Restoring the back-up ìFor Task, select the option Restore configuration A window will appear prompting you to confirm the procedure ìClick on OK. The configuration will now be updated Resetting to the factory settings ìIn the Administration menu, select Firmware Update Current firmware version Firmware update file Status Device System Log Log level Critical Status information uConnection status uIP address Local network uDHCP Server Wireless network uSystem password not changed uIdentification of your wireless network visible or not changed uEncryption for your wireless network not activated uAccess to your wireless network not restricted to allowed clients uFirewall for your Internet connection turned off uAddress translation for your Internet connection turned off uOne or more of your local clients directly exposed to the Internet uRemote management enabled Disconnect uConnection mode uMAC address uDefault gateway uPreferred DNS server uAlternate DNS server uDownstream rate uGlobal traffic limits –Time Total Available –Volume uSubnet mask uDHCP clients uChannel uWireless clients Uptime uRepeater (WDS) –WDS links uSystem uptime uBootcode version uWireless driver version uHardware version uSerial number Installing the printer port for network printers Printers and Faxes Add printer Local printer Plug and Play printer Create a new port Standard TCP/IP Port Printer Name or IP Address Port Name Gigaset_Druckerport Additional Port Information Required Network Print Server (1 port) Add Printer wizard Printer Select a Printer Port Gigaset_Druckerport (Standard TCP/IP Port) Printer Port Driver Details Connection Settings ìGo through Start – Settings – Printer and click on New Printer Local Printer Gigaset_Druckerport Appendix Time and Volume Contingent Page Interfaces 1 modem 4 LAN 1 USB USB 2.0, for printer server or file server Software www.siemens.com/gigasetcustomercare Service Centres United Kingdom Ireland Please have your proof of purchase ready when calling –he device is opened (this is classed as third party intervention) –Repairs or other work is done by persons not authorised by Siemens –Components on the printed circuit board are manipulated –The software is manipulated –Devices fitted with accessories not authorised by Siemens Page Glossary DHCP Dynamic Host Configuration Protocol DHCP Server See DHCP DMZ DoS attack Denial of Service Digital Subscriber Line Dynamic IP address See also Static IP address Firewall See also NAT Flat rate Full duplex Gateway IGMP Internet Group Management Protocol Protocols Among the most important Internet services are: uelectronic mail (email) IP address Subnet mask ipconfig Static IP address Dynamic IP address Mbps Million bits per second Specification of the transmission speed in a network MER MAC Encapsulated Routing Port Forwarding Port See also: Virtual server PPPoA Point-to-PointProtocol over ATM Repeater Roaming Router Server SIP Service Set Identifier Static IP address Subnet A subnet divides a network into smaller units Subnet mask TCP/IP UDP User Datagram Protocol TCP Broadcast WEP Wired Equivalent Privacy Wireless LAN WPA WPA-PSK Index (Windows XP) local network IP addresses configuration configuring front panel Half duplex Hexadecimal key testing settings MAC address cloning MAC table connecting networks Protocol) full duplex in Ethernet LAN WAN in wireless LAN LAN socket WDS