Online Registration

Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products.

Customer Support

Please have the following information ready when you contact customer support. Product model and serial number. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it.
TELEPHONE FAX WEB SITE REGULAR MAIL LOCATION CORPORATE HEADQUARTERS (WORLDWIDE) SALES E-MAIL FTP SITE www.zyxel.com ZyXEL Communications Corp. www.europe.zyxel.com 6 Innovation Road II Science Park ftp.zyxel.com Hsinchu 300 Taiwan ftp.europe.zyxel.com www.zyxel.co.cr ftp.zyxel.co.cr www.zyxel.cz ZyXEL Costa Rica Plaza Roble Escaz Etapa El Patio, Tercer Piso San Jos, Costa Rica ZyXEL Communications Czech s.r.o. Modransk 01 Praha 4 - Modrany Cesk Republika ZyXEL Communications A/S Columbusvej 2860 Soeborg Denmark ZyXEL Communications Oy Malminkaari Helsinki Finland ZyXEL France 1 rue des Vergers Bat. 1 / C 69760 Limonest France ZyXEL Deutschland GmbH. Adenauerstr. 20/A2 D-52146 Wuerselen Germany ZyXEL Hungary 48, Zoldlomb Str. H-1025, Budapest Hungary ZyXEL Kazakhstan 43, Dostyk ave.,Office 414 Dostyk Business Centre 050010, Almaty Republic of Kazakhstan ZyXEL Communications Inc. 1130 N. Miller St. Anaheim CA 92806-2001 U.S.A. support@zyxel.com.tw +886-3-578-3942 sales@zyxel.com.tw soporte@zyxel.co.cr COSTA RICA sales@zyxel.co.cr info@cz.zyxel.com CZECH REPUBLIC info@cz.zyxel.com +886-3-578-2439 +506-2017878 +506-2015098 +420-241-091-350 +420-241-091-359

METHOD SUPPORT E-MAIL

support@zyxel.dk DENMARK sales@zyxel.dk support@zyxel.fi FINLAND sales@zyxel.fi info@zyxel.fr FRANCE
+45-39-55-07-00 +45-39-55-07-07 +358-9-4780-8411 +358-9-+33-4-72-52-97-97 +33-4-72-52-19-20

www.zyxel.dk

www.zyxel.fi

www.zyxel.fr

support@zyxel.de GERMANY sales@zyxel.de support@zyxel.hu HUNGARY info@zyxel.hu http://zyxel.kz/support KAZAKHSTAN sales@zyxel.kz
+49-2405-690969 +49-2405-6909-99 +36-1-3361649 +36-1-3259100 +7-3272-590-698 +7-3272-590-689

www.zyxel.de

www.zyxel.hu

www.zyxel.kz

support@zyxel.com NORTH AMERICA sales@zyxel.com
1-800-255-4101 +1-714-632-0882 +1-714-632-0858
www.us.zyxel.com ftp.us.zyxel.com
METHOD SUPPORT E-MAIL LOCATION SALES E-MAIL support@zyxel.no NORWAY sales@zyxel.no info@pl.zyxel.com POLAND http://zyxel.ru/support RUSSIA sales@zyxel.ru support@zyxel.es SPAIN sales@zyxel.es support@zyxel.se sales@zyxel.se
TELEPHONE FAX +47-22-80-61-80 +47-22-80-61-81 +48 (22) +48 (22) +7-095-542-89-29 +7-095-542-89-25 +34-902-195-420 +34-913-005-345 +46-31-744-7700 +46-31-744-7701

WEB SITE REGULAR MAIL FTP SITE www.zyxel.no ZyXEL Communications A/S Nils Hansens vei Oslo Norway ZyXEL Communications ul. Okrzei 1A 03-715 Warszawa Poland ZyXEL Russia Ostrovityanova 37a Str. Moscow, 117279 Russia ZyXEL Communications Arte, planta 28033 Madrid Spain ZyXEL Communications A/S Sjporten 4, 41764 Gteborg Sweden ZyXEL Ukraine 13, Pimonenko Str. Kiev, 04050 Ukraine ZyXEL Communications UK Ltd.,11 The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK)

www.pl.zyxel.com

www.zyxel.ru

www.zyxel.es

SWEDEN

www.zyxel.se

support@ua.zyxel.com +380-44-247-69-78 UKRAINE sales@ua.zyxel.com support@zyxel.co.uk UNITED KINGDOM sales@zyxel.co.uk +380-44-494-49-32 +44-(UK only) +44-1344 303034

www.ua.zyxel.com

www.zyxel.co.uk ftp.zyxel.co.uk
+ is the (prefix) number you enter to make an international telephone call.

Table of Contents

Copyright.... 3 Certifications... 4 ZyXEL Limited Warranty... 6 Customer Support.... 7 Table of Contents.... 9 List of Figures.... 11 List of Tables.... 13 Preface.... 15 Chapter 1 Getting Started... 17
1.1 About Your G-302 v3...17 1.1.1 Application Overview...17 1.1.1.1 Infrastructure...17 1.1.1.2 Ad-Hoc....18 1.2 G-302 v3 Hardware and Utility Installation..19 1.3 Configuration Methods...19 1.4 Windows XP Users Only...19 1.5 Accessing the ZyXEL Utility...20 1.6 ZyXEL Utility Screen Summary...20 1.7 Connecting to a Wireless LAN...21 1.7.1 Site Survey....21
Chapter 2 Wireless LAN Network... 25
2.1 Wireless LAN Overview...25 2.1.1 SSID....25 2.1.2 Channel....25 2.1.3 Transmission Rate...25 2.2 Wireless LAN Security Overview...25 2.2.1 Data Encryption with WEP...26 2.2.2 IEEE 802.1x....26 2.2.2.1 EAP Authentication...26 2.2.3 WPA and WPA2...27
ZyXEL G-302 v3 Users Guide 2.2.3.1 Encryption...27 2.2.3.2 User Authentication..27 2.2.4 WPA(2)-PSK Application Example...27 2.2.5 WPA(2) with RADIUS Application Example...28 2.3 Authentication Type....29 2.4 Preamble Type...29
Chapter 3 ZyXEL Utility Configuration.... 31
3.1 The Link Info Screen....31 3.1.1 Trend Chart....32 3.2 The Site Survey Screen...33 3.2.1 Connecting to a WLAN Network..34 3.2.2 Security Settings....34 3.2.2.1 WEP Encryption...35 3.2.2.2 WPA/WPA2...36 3.2.2.3 WPA-PSK/WPA2-PSK...37 3.2.3 Confirm Save Screen...38 3.3 The Profile Screen...38 3.3.1 Adding a New Profile...40 3.4 The Adapter Screen...44
Chapter 4 Maintenance.... 45
4.1 The About Screen...45 4.2 Uninstalling the ZyXEL Utility...45 4.3 Upgrading the ZyXEL Utility...46
Chapter 5 Troubleshooting... 47
5.1 Problems Starting the ZyXEL Utility..47 5.2 Problem with the Link Quality....47 5.3 Problems Communicating With Other Computers..48

Appendix A Product Specifications... 49 Appendix B Management with Wireless Zero Configuration.. 51 Appendix C Wireless Security.... 63 Index.... 69

List of Figures

Figure 1 Application: Infrastructure... 18 Figure 2 Application: Ad-Hoc... 18 Figure 3 Enable WZC... 19 Figure 4 Enable ZyXEL Utility... 19 Figure 5 ZyXEL Utility: System Tray Icon.. 20 Figure 6 Menu Summary.... 20 Figure 7 ZyXEL Utility: Site Survey... 22 Figure 8 ZyXEL Utility: Security Settings.. 22 Figure 9 ZyXEL Utility: Link Info... 23 Figure 10 WPA(2)-PSK Authentication... 28 Figure 11 WPA(2) with RADIUS Application Example.. 29 Figure 12 Link Info... 31 Figure 13 Link Info: Trend Chart... 32 Figure 14 Site Survey.... 33 Figure 15 Security Settings: WEP.. 35 Figure 16 Security Settings: WPA/WPA2... 36 Figure 17 Security Settings: WPA-PSK/WPA2-PSK... 37 Figure 18 Confirm Save Screen... 38 Figure 19 Profile Screen.... 39 Figure 20 Profile: Add New Profile.. 40 Figure 21 Profile: Wireless Setting: Select a Channel.. 41 Figure 22 Profile: Security Setting: Encryption Type.. 42 Figure 23 Profile: Security Setting... 43 Figure 24 Profile: Confirm New Settings... 43 Figure 25 Profile: Activate the Profile... 43 Figure 26 Adapter Screen... 44 Figure 27 About.... 45 Figure 28 Uninstall: Confirm... 46 Figure 29 Uninstall: Finish... 46 Figure 30 Windows XP SP2: WZC Not Available.. 51 Figure 31 Windows XP SP2: System Tray Icon... 52 Figure 32 Windows XP SP2: Wireless Network Connection Status.. 52 Figure 33 Windows XP SP1: Wireless Network Connection Status.. 53 Figure 34 Windows XP SP2: Wireless Network Connection.. 53 Figure 35 Windows XP SP1: Wireless Network Connection Properties. 54 Figure 36 Windows XP SP2: Wireless Network Connection: WEP or WPA-PSK. 55 Figure 37 Windows XP SP2: Wireless Network Connection: No Security. 55 Figure 38 Windows XP: Wireless (network) properties: Association. 56
ZyXEL G-302 v3 Users Guide Figure 39 Windows XP: Wireless (network) properties: Authentication.. 57 Figure 40 Windows XP: Protected EAP Properties.. 58 Figure 41 Windows XP: Smart Card or other Certificate Properties.. 59 Figure 42 Windows XP SP2: Wireless Networks: Preferred Networks. 61 Figure 43 Windows XP SP1: Wireless Networks: Preferred Networks. 61 Figure 44 WPA-PSK Authentication... 67 Figure 45 WPA(2) with RADIUS Application Example.. 67

List of Tables

Table 1 ZyXEL Utility: System Tray Icon... 20 Table 2 ZyXEL Utility: Menu Screen Summary... 21 Table 3 Link Info.... 31 Table 4 Link Info: Trend Chart... 33 Table 5 Site Survey.... 33 Table 6 Security Settings: WEP... 35 Table 7 Security Settings: WPA/WPA2... 36 Table 8 Security Settings: WPA-PSK/WPA2-PSK.. 37 Table 9 Confirm Save Screen... 38 Table 10 Profile Screen.... 39 Table 11 Profile: Add New Profile... 40 Table 12 Profile: Wireless Setting: Select a Channel.. 42 Table 13 Adapter.... 44 Table 14 About.... 45 Table 15 Troubleshooting Starting ZyXEL Utility... 47 Table 16 Troubleshooting Link Quality... 47 Table 17 Troubleshooting Communication Problem... 48 Table 18 Product Specifications... 49 Table 19 Windows XP SP2: System Tray Icon.. 52 Table 20 Windows XP SP2: Wireless Network Connection.. 54 Table 21 Windows XP: Wireless Networks... 55 Table 22 Windows XP: Wireless (network) properties: Association.. 56 Table 23 Windows XP: Wireless (network) properties: Authentication. 57 Table 24 Windows XP: Protected EAP Properties.. 59 Table 25 Windows XP: Smart Card or other Certificate Properties.. 60 Table 26 Comparison of EAP Authentication Types... 64 Table 27 Wireless Security Relational Matrix... 68

Preface

Congratulations on your purchase of the ZyXEL G-302 v3 802.11g Wireless PCI Adapter. Your G-302 v3 is easy to install and configure.

About This User's Guide

This manual is designed to guide you through the configuration of your G-302 v3 for its various applications.

Related Documentation

Supporting Disk Refer to the included CD for support documents. Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. They contain hardware installation/connection information. ZyXEL Glossary and Web Site Please refer to www.zyxel.com for an online glossary of networking terms and additional support documentation.

User Guide Feedback

Help us help you. E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you.

Syntax Conventions

Enter means for you to type one or more characters. Select or Choose means for you to use one predefined choice. Mouse action sequences are denoted using a comma. For example, In Windows, click Start, Settings and then Control Panel means first click the Start button, then point your mouse pointer to Settings and then click Control Panel. e.g., is a shorthand for for instance, and i.e., means that is or in other words. The ZyXEL G-302 v3 802.11g Wireless PCI Adapter may be referred to as the G-302 v3 in this users guide.

Graphics Icons Key

Access Point Computer Notebook Computer

Server

Internet Cloud

Wireless Signal

CHAPTER 1

Getting Started

This chapter introduces the G-302 v3 and prepares you to use the ZyXEL utility.

1.1 About Your G-302 v3

The G-302 v3 is an IEEE 802.11b/g compliant wireless LAN adapter. The following lists the main features of your G-302 v3. See the product specifications in the appendix for detailed features. Automatic rate selection. Security: WEP (Wired Equivalent Privacy), WPA-PSK, WPA (Wi-Fi Protected Access), WPA2-PSK and WPA2 Note: You can use WPA and WPA2 with the G-302 v3 only in Microsoft Windows XP or Windows 2000. A built-in antenna Driver and utility support for Windows 98 Second Edition, Windows ME, Windows 2000 and Windows XP.
1.1.1 Application Overview
This section describes some network applications for the G-302 v3.

1.1.1.1 Infrastructure

To connect to a network via an Access Point (AP), set the G-302 v3 network type to Infrastructure. Through the AP, you can access the Internet or the wired network behind the AP.
Chapter 1 Getting Started
ZyXEL G-302 v3 Users Guide Figure 1 Application: Infrastructure

1.1.1.2 Ad-Hoc

Profile Adapter

1.7 Connecting to a Wireless LAN
The following sections show you how to associate with a network using the ZyXEL utility. You can either manually connect to a network or configure a profile to have the G-302 v3 automatically connect to a specific network. Otherwise, configure nothing and leave the G302 v3 to automatically scan for and connect to any other available network without security. See the next chapters for detailed field descriptions.

1.7.1 Site Survey

After you install the ZyXEL utility and then insert the G-302 v3, follow the steps below to connect to a network using the Site Survey screen. 1 Make sure a wireless network is available and within range. 2 Open the ZyXEL utility and click the Site Survey tab to open the screen as shown next. 3 Click Scan to search for available wireless networks.
ZyXEL G-302 v3 Users Guide Figure 7 ZyXEL Utility: Site Survey
4 To join a network, either click an entry in the table and then click Connect. 5 If the wireless security is activated for the selected wireless network, the Security Settings screen displays. This screen varies according to the networks encryption method. Configure the same security settings as the associated network. Note: If the selected network is unavailable or security settings are not correct, the G302 v3 cannot connect to a network.
Figure 8 ZyXEL Utility: Security Settings
6 Verify that you have successfully connected to the selected network and check the network information in the Link Info screen. If the G-302 v3 is not connected to a network, the fields in this screen are blank.
ZyXEL G-302 v3 Users Guide Figure 9 ZyXEL Utility: Link Info

CHAPTER 2

Wireless LAN Network
This chapter provides background information on wireless LAN network.
2.1 Wireless LAN Overview
This section describes the wireless LAN network terms and applications.

2.1.1 SSID

The SSID (Service Set Identity) is a unique name shared among all wireless devices in a wireless network. Wireless devices must have the same SSID to communicate with each other.

2.1.2 Channel

A radio frequency used by a wireless device is called a channel.

2.1.3 Transmission Rate

When the communication quality drops below a certain level, the G-302 v3 automatically switches to a lower transmission (data) rate. Transmission at lower data speeds is usually more reliable. When the communication quality improves again, the G-302 v3 gradually increases the transmission (data) rate again until it reaches the highest available transmission rate. Note: Actual speeds attained also depend on the distance from the AP, noise, etc.
2.2 Wireless LAN Security Overview
Wireless LAN security is vital to your network to protect wireless communications. Configure the wireless LAN security using the Profile Security Settings screen. If you do not enable any wireless security on your G-302 v3, the G-302 v3s wireless communications are accessible to any wireless networking device that is in the coverage area.
Chapter 2 Wireless LAN Network
2.2.1 Data Encryption with WEP
WEP (Wired Equivalent Privacy) encryption scrambles all data packets transmitted between the G-302 v3 and the AP or other wireless stations to keep network communications private. Both the wireless stations and the access points must use the same WEP key for data encryption and decryption. There are two ways to create WEP keys in your G-302 v3. Automatic WEP key generation based on a password phrase called a passphrase. The passphrase is case sensitive. You must use the same passphrase for all WLAN adapters with this feature in the same WLAN. For WLAN adapters without the passphrase feature, you can still take advantage of this feature by writing down the four automatically generated WEP keys from the Security Settings screen of the ZyXEL utility and entering them manually as the WEP keys in the other WLAN adapter(s). Enter the WEP keys manually. Your G-302 v3 allows you to configure up to four 64-bit or 128-bit WEP keys and only one key is used as the default key at any one time.

2.2.2 IEEE 802.1x

The IEEE 802.1x standard outlines enhanced security methods for both the authentication of wireless stations and encryption key management. Authentication can be done using an external RADIUS server.
2.2.2.1 EAP Authentication
EAP (Extensible Authentication Protocol) is an authentication protocol that runs on top of the IEEE 802.1x transport mechanism in order to support multiple types of user authentication. By using EAP to interact with an EAP-compatible RADIUS server, an access point helps a wireless station and a RADIUS server perform authentication. The type of authentication you use depends on the RADIUS server and an intermediary AP(s) that supports IEEE 802.1x. The G-302 v3 supports EAP-TLS, EAP-TTLS and EAP-PEAP. Refer to Appendix C on page 63 for descriptions. For EAP-TLS authentication type, you must first have a wired connection to the network and obtain the certificate(s) from a certificate authority (CA). A certificate (also called digital IDs) can be used to authenticate users and a CA issues certificates and guarantees the identity of each certificate owner.

Chapter 3 ZyXEL Utility Configuration
ZyXEL G-302 v3 Users Guide Table 3 Link Info (continued)

LABEL DESCRIPTION

Transmission Rate This field displays the current transmission rate of the G-302 v3 in megabits per second (Mbps). Security Channel Statistics Transmit Rate Receive Rate Authentication Network Mode Total Transmit Total Receive Link Quality Trend Chart Signal Strength Link Quality This field displays the current data transmission rate in kilobits per second (Kbps). This field displays the current data receiving rate in kilobits per second (Kbps). This field displays the authentication method of the G-302 v3. This field displays the network standard (802.11b or 802.11g) of the wireless device. This field displays the total number of data frames transmitted. This field displays the total number of data frames received. This field displays the quality of the signal of the G-302 v3. Click this button to display the real-time statistics of the data rate in kilobits per second (Kbps). The status bar shows the strength of the signal. The status bar shows the quality of the signal. This field displays whether data encryption is activated (WEP, WPA, WPA2, WPAPSK or WPA2-PSK) or inactive (DISABLE). This field displays the radio channel the G-302 v3 is currently using.

3.1.1 Trend Chart

Click Trend Chart in the Link Info screen to display a screen as shown below. Use this screen to view real-time data traffic statistics.
Figure 13 Link Info: Trend Chart
Table 4 Link Info: Trend Chart
LABEL Transmit Receive DESCRIPTION This field displays the current data transmission rate in kilobits per second (Kbps). This field displays the current data receiving rate in kilobits per second (Kbps).
3.2 The Site Survey Screen
Use the Site Survey screen to scan for and connect to a wireless network automatically.

Figure 14 Site Survey

Table 5 Site Survey
LABEL Available Network List , , or DESCRIPTION Click a column heading to sort the entries. denotes that the wireless device is in infrastructure mode and the wireless security is activated. denotes that the wireless device is in infrastructure mode but the wireless security is deactivated. denotes that the wireless device is in Ad-Hoc mode and the wireless security is activated. denotes that the wireless device is in Ad-Hoc mode but the wireless security is deactivated. This field displays the SSID (Service Set IDentifier) of each wireless device.

Figure 22 Profile: Security Setting: Encryption Type
4 The screen varies depending on the encryption method you select in the previous screen. The settings must be exactly the same on the APs or other peer wireless computers as they are on the G-302 v3. Refer to Section 3.2.2 on page 34 for detailed information on wireless security configuration.
ZyXEL G-302 v3 Users Guide Figure 23 Profile: Security Setting
5 This read-only screen shows a summary of the new profile settings. Verify that the settings are correct. Click Save to save and go to the next screen. Click Back to return to the previous screen. Otherwise, click Exit to go back to the Profile screen without saving.
Figure 24 Profile: Confirm New Settings
6 To use this network profile, click the Activate Now button. Otherwise, click the Activate Later button. Note: Once you activate a profile, the ZyXEL utility will use that profile the next time it is started.
Figure 25 Profile: Activate the Profile

3.4 The Adapter Screen

To set the advanced features on the G-302 v3, click the Adapter tab.

Figure 26 Adapter Screen

Table 13 Adapter
LABEL Adapter Setting Wireless Mode Select 802.11b Only to have the G-302 v3 connect to an IEEE 802.11b wireless device. Select 802.11b/g Mixed to have the G-302 v3 connect to either an IEEE 802.11g or IEEE 802.11b wireless device Select a preamble type. Choices are Long, Short and Auto.The default setting is Auto. Refer to Section 2.4 on page 29 for more information. Click Save to save the changes back to the G-302 v3. DESCRIPTION

Preamble Mode

CHAPTER 4

Maintenance

This chapter describes how to uninstall or upgrade the ZyXEL utility.

4.1 The About Screen

The About screen displays related version numbers of the G-302 v3. To display the screen as shown below, click the about ( ) button.

Figure 27 About

The following table describes the read-only fields in this screen.

Table 14 About

LABEL Driver Version Utility Version DESCRIPTION This field displays the version number of the G-302 v3 driver. This field displays the version number of the ZyXEL utility.
4.2 Uninstalling the ZyXEL Utility
Follow the steps below to remove (or uninstall) the ZyXEL utility from your computer. 1 Click Start, Programs, ZyXEL G-302 v3 Utility, Uninstall ZyXEL G-302 v3 Utility. 2 When prompted, click OK or Yes to remove the driver and the utility software.

Data Rate

Modulation
Output Power RX Sensitivity SOFTWARE SPECIFICATIONS Device Drivers
Microsoft Windows 98 Second Edition, Windows ME, Windows 2000, Windows XP
Appendix A Product Specifications
ZyXEL G-302 v3 Users Guide Table 18 Product Specifications (continued)
ZyXEL Utility Security ZyXEL Wireless Configuration Tool 64/128/256-bit WEP WPA/WPA-PSK/WPA2/WPA2-PSK IEEE 802.1x

APPENDIX B

Management with Wireless Zero Configuration
This appendix shows you how to manage your ZyXEL wireless LAN adapter using the Windows XP wireless zero configuration tool. Be sure you have the Windows XP service pack 2 installed on your computer. Otherwise, you should at least have the Windows XP service pack 1 already on your computer and download the support patch for WPA from the Microsoft web site. Windows XP SP2 screen shots are shown unless otherwise specified. Click the help icon ( ) in most screens, move the cursor to the item that you want the information about and click to view the help.
Activating Wireless Zero Configuration
Make sure the Use Windows to configure my wireless network settings check box is selected in the Wireless Network Connection Properties screen. Refer to Appendix B on page 53. If you see the following screen, refer to article 871122 on the Microsoft web site for information on starting WZC.
Figure 30 Windows XP SP2: WZC Not Available
Appendix B Management with Wireless Zero Configuration
Connecting to a Wireless Network
1 Double-click the network icon for wireless connections in the system tray to open the Wireless Network Connection Status screen.
Figure 31 Windows XP SP2: System Tray Icon
The type of the wireless network icon in Windows XP SP2 indicates the status of the ZyXEL wireless LAN adapter. Refer to the following table for details.
Table 19 Windows XP SP2: System Tray Icon
ICON DESCRIPTION The ZyXEL wireless LAN adapter is connected to a wireless network. The ZyXEL wireless LAN adapter is in the process of connecting to a wireless network. The connection to a wireless network is limited because the network did not assign a network address to the computer. The ZyXEL wireless LAN adapter is not connected to a wireless network.
2 Windows XP SP2: In the Wireless Network Connection Status screen, click View Wireless Networks to open the Wireless Network Connection screen.

ICON DESCRIPTION This denotes the wireless network is an available wireless network. This denotes the ZyXEL wireless LAN adapter is associated to the wireless network. This denotes the wireless network is not available.

Security Settings

When you configure the ZyXEL wireless LAN adapter to connect to a secure network but the security settings are not yet enabled on the ZyXEL wireless LAN adapter, you will see different screens according to the authentication and encryption methods used by the selected network.

Association

Select a network in the Preferred networks list and click Properties to view or configure security.
Figure 38 Windows XP: Wireless (network) properties: Association
Table 22 Windows XP: Wireless (network) properties: Association
LABEL Network name (SSID) Network Authentication Data Encryption Network Key DESCRIPTION This field displays the SSID (Service Set IDentifier) of each wireless network. This field automatically shows the authentication method (Share, Open, WPA or WPA-PSK) used by the selected network. This field automatically shows the encryption type (TKIP, WEP or Disable) used by the selected network. Enter the pre-shared key or WEP key. The values for the keys must be set up exactly the same on all wireless devices in the same wireless LAN. Enter the key again for confirmation. Select a default WEP key to use for data encryption. This field is available only when the network use WEP encryption method and the The key is provided for me automatically check box is not selected. If this check box is selected, the wireless AP assigns the ZyXEL wireless LAN adapter a key.
Confirm network key Key index (advanced) The key is provided for me automatically
ZyXEL G-302 v3 Users Guide Table 22 Windows XP: Wireless (network) properties: Association (continued)
If this check box is selected, you are connecting to another computer directly. This is a computer-tocomputer (ad hoc) network; wireless access points are not used OK Cancel Click OK to save your changes. Click Cancel to leave this screen without saving any changes you may have made.

Authentication

Click the Authentication tab in the Wireless (network) properties screen to display the screen shown next. The fields on this screen are grayed out when the network is in Ad-Hoc mode or data encryption is disabled.
Figure 39 Windows XP: Wireless (network) properties: Authentication
Table 23 Windows XP: Wireless (network) properties: Authentication
LABEL Enable IEEE 802.1x authentication for this network EAP Type Properties DESCRIPTION This field displays whether the IEEE 802.1x authentication is active. If the network authentication is set to Open in the previous screen, you can choose to disable or enable this feature. Select the type of EAP authentication. Options are Protected EAP (PEAP) and Smart Card or other Certificate. Click this button to open the properties screen and configure certificates. The screen varies depending on what you select in the EAP type field.

ZyXEL G-302 v3 Users Guide Table 23 Windows XP: Wireless (network) properties: Authentication (continued)
LABEL Authenticate as computer when computer information is available Authenticate as guest when user or computer information is unavailable OK Cancel DESCRIPTION Select this check box to have the computer send its information to the network for authentication when a user is not logged on.
Select this check box to have the computer access to the network as a guest when a user is not logged on or computer information is not available.
Click OK to save your changes. Click Cancel to leave this screen without saving any changes you may have made.
Authentication Properties
Select an EAP authentication type in the Wireless (network) properties: Authentication screen and click the Properties button to display the following screen.
Protected EAP Properties Figure 40 Windows XP: Protected EAP Properties
Table 24 Windows XP: Protected EAP Properties
LABEL Validate server certificate Connect to these servers Trusted Root Certification Authorities: DESCRIPTION Select the check box to verify the certificate of the authentication server. Select the check box and specify a domain in the field below to have your computer connect to a server which resides only within this domain. Select a trusted certification authority from the list below.
Note: You must first have a wired connection to a network and obtain the certificate(s) from a certificate authority (CA). Consult your network administrator for more information.
Select this check box to verify a new authentication server or trusted CA without prompting. This field is available only if you installed the Windows XP server pack 2.
Do not prompt user to authorize new server or trusted certification authorities. Select Authentication Method: Enable Fast Reconnect OK Cancel
Select an authentication method from the drop-down list box and click Configure to do settings. Select the check box to automatically reconnect to the network (without reauthentication) if the wireless connection goes down. Click OK to save your changes. Click Cancel to leave this screen without saving any changes you may have made.
Smart Card or other Certificate Properties Figure 41 Windows XP: Smart Card or other Certificate Properties
Table 25 Windows XP: Smart Card or other Certificate Properties
Use my smart card Select this check box to use the smart card for authentication. Use a certificate on this computer Validate server certificate Connect to these servers Trusted Root Certification Authorities: Select this check box to use a certificate on your computer for authentication. Select the check box to check the certificate of the authentication server. Select the check box and specify a domain in the field below to have your computer connect to a server which resides only within this domain. Select a trusted certification authority from the list below.

The Message Integrity Check (MIC) is designed to prevent an attacker from capturing data packets, altering them and resending them. The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC. If they do not match, it is assumed that the data has been tampered with and the packet is dropped. By generating unique data encryption keys for every data packet and by creating an integrity checking mechanism (MIC), with TKIP and AES it is more difficult to decrypt data on a Wi-Fi network than WEP and difficult for an intruder to break into the network. The encryption mechanisms used for WPA(2) and WPA(2)-PSK are the same. The only difference between the two is that WPA(2)-PSK uses a simple common password, instead of user-specific credentials. The common-password approach makes WPA(2)-PSK susceptible to brute-force password-guessing attacks but its still an improvement over WEP as it employs a consistent, single, alphanumeric password to derive a PMK which is used to generate unique temporal encryption keys. This prevent all wireless devices sharing the same encryption keys. (a weakness of WEP)

User Authentication

WPA and WPA2 apply IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless stations using an external RADIUS database. WPA2 reduces the number of key exchange messages from six to four (CCMP 4-way handshake) and shortens the time required to connect to a network. Other WPA2 authentication features that are different from WPA include key caching and pre-authentication. These two features are optional and may not be supported in all wireless devices. Key caching allows a wireless client to store the PMK it derived through a sucessful authentication with an AP. The wireless client uses the PMK when it tries to connect to the same AP and does not need to go with the authentication process again. Pre-authentication enables fast roaming by allowing the wireless client (already connecting to an AP) to perform IEEE 802.1x authentication with another AP before connecting to it.
WPA(2)-PSK Application Example
A WPA(2)s-PSK application looks as follows. 1 First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and symbols). 2 The AP checks each client's password and (only) allows it to join the network if it matches its password. 3 The AP and wireless clients use the pre-shared key to generate a common PMK. 4 The AP and wireless clients use the TKIP or AES encryption process to encrypt data exchanged between them.
ZyXEL G-302 v3 Users Guide Figure 44 WPA-PSK Authentication
WPA(2) with RADIUS Application Example
You need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared secret. A WPA(2) application example with an external RADIUS server looks as follows. "A" is the RADIUS server. "DS" is the distribution system. 1 The AP passes the wireless client's authentication request to the RADIUS server. 2 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. 3 The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the pair-wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.