Siemens SX763 47

Security Setup Wizard

Setting up security functions for the wireless network

In the next step you can set up the encryption and authentication methods for your wireless network.

Wireless networks are even more susceptible to eavesdropping than wired networks. With conventional network adapters, an intruder only needs a device with a WLAN adapter (e.g. a notebook or a PDA [Personal Digital Assistant]) with an appropriately configured network card in order to eavesdrop on every communication made via a nearby wireless LAN.

The Gigaset SX763 WLAN dsl makes use of effective encryption methods to prevent unauthorised eavesdropping as far as possible.

You can use the following security mechanisms:

uWPA2-PSK or WPA2-PSK/WPA-PSK (page 48)

uWEP encryption (Wired Equivalent Privacy, see page 48)

We recommend that you use WPA2-PSK if it is supported by all components in your wireless network.

You will find further options for setting up data encryption and authentication in the Advanced Settings menu (page 79).

47

Contents

Page Page Contents Security Setup Wizard Configuring Advanced Settings Call guide Administration Status information Installing the printer port for network printers Appendix The Gigaset SX763 WLAN dsl Local Network Wired local area network (Ethernet) Internet Wireless local area network (WLAN) We generally differentiate between two types of wireless network: uInfrastructure mode u Ad-hocmode You can use the Gigaset SX763 WLAN dsl to connect uwirelessly networked PCs to the Internet and Page Linking a wireless network to an Ethernet ((( WLAN (wireless) (wired) All PCs can access the Internet via the Gigaset SX763 WLAN dsl Please remember: Extending the wireless network coverage with a repeater WLAN Gigaset WLAN Repeater Fixed network active Internet connection uInternet access uSetting up a local area network uConnecting phones and Internet telephony The Gigaset SX763 WLAN dsl permits uSecurity functions uOffering your own services on the Internet First steps Note: – an Ethernet port (10Base-Tor 100Base-TX) uTo access the Internet you require –a DSL port (splitter) –the access data for your Internet service provider First install an Ethernet network card or a wireless SSID ConnectionPoint one Front panel Ports on the rear panel Element Description Warning Phone1/2 Sockets for connecting two phones, fax or answering machine Reset button The underside of the Gigaset SX763 WLAN dsl houses the reset button Reset button Connecting to the splitter data port Using the integrated ADSL modem black Using an external modem LAN4/WAN Connecting to the phone port Analogue phone port green Connecting to the phone Phone Adapter with TAE socket Connecting to the PC one Wireless Wired LAN1 LAN4 yellow Connecting to the mains power supply PWR Checking the operating state LED State The relevant port is configured Phone 1 Phone being conducted. The receiver of the phone connected to the port has been lifted identical ConnectionPoint ìIf necessary, set up the network for each newly connected PC (page 30) Connect the network cards of each additional PC to a free LAN port ìReboot the additional PCs The user interface ìClick OK Start screen functions You can make the following settings on the start screen: uSelect the language for the user interface (page 35) Connect The configuration program comprises the following functions: Basic Setup Wizard to the Internet. You can set up data for your region, make Security Setup Wizard protect your network, we strongly recommend that you Language Connect on demand Connect manually not Always on Button Log Off Help Buttons and icons used by the wizards Next < Back Basic Setup Wizard Basic Setup Wizard Select the required option and/or the time zone for your location ISP Advanced Settings Select your Service provider Other MTU Line mode Encapsulation QoS class VPI / VCI pass-through Using UPnP (Universal Plug and Play) VoIP account and SIP listen port Proxy server port Registrar server port Voice codecs Security Setup Wizard ìEnter the old password in the Current password field Enter the new password in the New password Confirm new password all SSID broadcast Page WPA2/WPA with pre-sharedkey (PSK) WPA-PSK Rekey interval WPA2-PSK WPA2-PSK Key length Input type Passphrase Manual key entry Key type Hex ASCII Confirm key ìNext to the MAC address filter, select On to activate the MAC filter Entering MAC addresses manually ìEnter the name of the PC ìClick the Add button to add the entry to the list Selecting from the list of logged-inPCs uYou can completely reset the Gigaset SX763 WLAN dsl (page 21) ìClick Finish to end the wizard The settings will now be activated on the Gigaset SX763 WLAN dsl Configuring Advanced Settings Page Internet selection ìSelect Internet from the Advanced Settings menu Connection type ADSL Configure multiple connection services ìFor an ADSL connection, make the following settings: Delete ìFor an Ethernet connection, make the following settings: VLAN tag Priority Internet Connection Internet Connection Access concentrator name IP address type Show Additional Settings ìIn the Advanced Settings – Internet menu, select Internet Connection ìSelect On to activate PPPoE pass-through UPnP DNS server Use custom DNS servers Preferred DNS server Alternate DNS server MAC Address Carry out the following steps: ìSpecify which MAC address is to be used for the Internet connection: Use default device MAC address Use MAC address of this PC Use custom MAC address ìIn the Advanced Settings – Internet menu, select Firewall Attack Detection Attack Detection ìIn the Advanced Settings – Internet – Firewall menu, select Attack Detection Medium High Low Access Rules Schedule rule Access rule type Apply to all clients Specify IP address : The rule applies to a PC you have selected via the IP address or MAC address ìEnter a name for the Comment for the access rule ìDefine the Access level You can choose Where configuration is concerned, this means: You have to define a NAT uOpen the firewall for selected PCs (page 69) Never expires Port Forwarding Port Forwarding Address Translation (NAT) Enabled Public port 80,90-140,180 Local port Local IP address Opening the firewall for selected PCs (Exposed Host) Exposed Host – Internet – Address Translation (NAT) menu Routing Policy-based routing Policy type Specify interface For each route, choose the Connection service A default route is used for all non-listedclients ìClick Delete to delete an entry ìClick OK to save and apply the changes Domain name ìSelect Advanced Settings – Local Network Defining the private IP address for the Gigaset SX763 WLAN dsl Configuring the DHCP server Obtain an IP address automat- ically First issued IP address Last issued IP address Default gateway Assigning static IP addresses to individual PCs Wireless Network uSet up the channel and SSID (page 77) Specify transmission mode and range settings for the wireless network WDS Wireless Network ìSelect On for the Wireless Network (default setting) You can now make the settings for the wireless network Channel Automatic Off Transmission mode IEEE 802.11g only Sending power ìSelect the required sending power for your device Super G (108 Mbit/s) Super G Dynamic Security settings in the wireless network WPA also supports the use of an authentication server ìIn the Wireless Network menu, select Encryption & Authentication The following security mechanisms are currently available: uWPA2-PSKand WPA2-PSK/WPA-PSK (page 80) WPA2-PSKand WPA2-PSK / WPA-PSK WPA with pre-sharedkey (WPA-PSK) WPA2-PSK Security Enter a key in the WPA and WPA2 with authentication server WPA2 WPA2 / WPA ìSelect the required option in the Security field Enter the IP address of the RADIUS server in the WEP ìSelect the Authentication type: Shared Open Enter up to four keys in fields Key ìSelect one of the four keys as the Default key Page Permitted clients In the Advanced Settings – Wireless Network menu, select Allowed Clients Access control is based on the MAC addresss of the PC network adapters ìActivate access control by selecting On in the MAC address filter field Entering PCs manually: The menu comprises the following entries: VoIP settings: Enter the basic data from your service provider here Dialing Plans Important information: You cannot make calls if there is a power failure VoIP settings ìIn the Advanced Settings – Telephony menu, select VoIP ìSelect On if you wish to use Internet telephony (default setting) If you have already configured Internet telephony in the SIP domain Fixed gain control (input/output) Setting up or modifying a VoIP account If you wish to add or modify data, click the Show Additional Settings button Displayed name Authorization user name SIP realm Proxy server address Phone connectors ìClick Edit to adapt the settings for an entry (page 91) SIP Proxy Server SIP client accounts User name Extension number ìClick Edit to adjust the settings for an entry (page 91) Configuring extensions Additional phone numbers Incoming calls for the selected phone number are signalled Receive calls for all numbers You can configure Divert calls Dialing Plans ìArea code ìPredial area code for local calls through VoIP ìWait for dial tone on fixed line Preselection Preselection number ìGo to the Advanced Settings – USB menu File Server ìIn the Advanced Settings – USB menu, select File Server Local FTP service ftp://192.168.2.1 Remote FTP service \gigaset_ftp Port For Access (read only) Anonymous Print Server Call guide #51# *#*51# *##51# Toggling telephone calls Conference call between three participants Call answering and forwarding *21 *21*[number]# internal *61 *61*[number]# internal number if #61# *67 If you additionally enter This shortcut key allows the WLAN *52# Enable function of your Gigaset SX763 WLAN Administration Time zone If you have already configured the basic settings, you can change these here ìSelect the required option or choose the Time zone for your location Select the required format for entering the date and time from the Date format ìEnter the old System Password in the Current password field Enter a new system password in the Note all admin uIn the Advanced Settings – Administration menu, select Save & Restore Backing up configuration data Task Save configuration Save Restoring factory settings and click . A window will appear prompting you to confirm the procedure In the Administration menu, select Reboot Click OK to reboot the device Current firmware version Firmware update file Browse Warning: Do not Device Log level Critical Debugging Warning Status information uVoIP accounts Shows the status and the data of the VoIP accounts Device uSystem time The system time of the device uAddress translation for your Internet connection turned off uOne or more of your local clients directly exposed to the Internet uConnection service uConnection mode uMAC address uPPPoE pass-through uADSL Line –Status –Line mode –Maximum line rate uDHCP clients Host name uChannel uWireless clients Uptime uSIP client accounts uPhone calls uSystem uptime uBootcode version uConfiguration file version uSerial number uSystem Log Installing the printer port for network printers Start Printers and Faxes Add a printer Next Local printer Create a new port Standard TCP/IP Port Printer Name or IP Address Port Name Gigaset_printerport Additional Port Information Required user-defined Printer name or IP address LPR Queue name Add Printer Wizard ìIf you do not wish to install a printer until later, click Cancel Start Settings Printers In this case, however, you should click the selection menu in the ìGo through Start – Settings – Printers and click Add Printer Gigaset_printerport Appendix Properties ì Select Connect on demand or Always on Appendix ping Page Operating information: uUSB port uLAN ports uTelephone ports Windows XP Configuring a popup blocker ìRight-clickthe browser information bar ìSelect Allow popups from this screen ìConfirm the dialogue window by clicking OK via the Interfaces Wireless properties Operating environment LED displays Compliance with security conditions and regulations Software Browser-basedconfiguration environment NAT, PPPoE, PPPoA Firewall, prevention of hacker attacks MAC address filtering Log file WEP encryption WPA encryption WPA2 encryption IEEE 802.1x Integrated SIP client http://www.siemens.com/gigasetopensource Warranty regarding further use of the Open Source Software Technical support, if any, will only be provided for unmodified software Open Source Software Used Glossary Broadcast BSSID Basic Service Set ID Client server DNS Domain Name System DNS server See DNS Domain name DynDNS Dynamic DNS IP addresses Dynamic IP addresses Encryption Half duplex See also: Full duplex HTTP proxy Hub See also: Switch, Bridge, Router, Gateway These are some of the main Internet services: uElectronic mail (e-mail) uThe World Wide Web (WWW) u File transfer (FTP) u Discussion forums (Usenet / Newsgroups) Internet service provider IP pool range ISP (Internet Service Provider) Internet service provider LAN Local network NAT Network Address Translation Private IP addresses Public IP addresses Virtual server Port forwarding Port See also: Virtual server PPPoA Point-to-PointProtocol over ATM Rekey interval Remote management Repeater Roaming Router SMTP Simple Mail Transfer Protocol SNMP Simple Network Management Protocol Service Set Identifier TCP Transmission Control Protocol See also: UDP TCP/IP UDP Virtual server VLAN Virtual Local Area Network VPI WDS Wireless LAN WPA WPA-PSK WPA Pre-sharedKey eXtended Range Index IP addresses configuring updating VoIP settings port forwarding port triggering 64 bit (ASCII) configuration Page function keys ad-hocmode encryption