Reference Manual for the 54 Mbps Wireless Router WGR614 v6
NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA

202-10099-01 April 2005

202-10099-01, April 2005
2005 by NETGEAR, Inc. All rights reserved. April 2005. Trademarks NETGEAR is a trademark of Netgear, Inc. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein. Federal Communications Commission (FCC) Compliance Notice: Radio Frequency Notice This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help.
EN Declaration of Conformance This is to certify that the 54 Mbps Wireless Router WGR614 v6 is shielded against the generation of radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by the application of EN Class B (CISPR 22). Besttigung des Herstellers/Importeurs Es wird hiermit besttigt, da das 54 Mbps Wireless Router WGR614 v6 gem der im BMPT-AmtsblVfg 243/1991 und Vfg 46/1992 aufgefhrten Bestimmungen entstrt ist. Das vorschriftsmige Betreiben einiger Gerte (z.B. Testsender) kann jedoch gewissen Beschrnkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung. Das Bundesamt fr Zulassungen in der Telekommunikation wurde davon unterrichtet, da dieses Gert auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfllung der Vorschriften hin zu berprfen. Certificate of the Manufacturer/Importer It is hereby certified that the 54 Mbps Wireless Router WGR614 v6 has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating instructions. Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market and has been granted the right to test the series for compliance with the regulations.
Voluntary Control Council for Interference (VCCI) Statement This equipment is in the second category (information equipment to be used in a residential area or an adjacent area thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling. Customer Support Refer to the Support Information Card that shipped with your 54 Mbps Wireless Router WGR614 v6. World Wide Web NETGEAR maintains a World Wide Web home page that you can access at the universal resource locator (URL) http://www.netgear.com. A direct connection to the Internet and a Web browser such as Internet Explorer or Netscape are required.
Product and Publication Details
Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: WGR614 v6 April 2005 router 54 Mbps Wireless Router WGR614 v6 Home English 202-10099-01

1. 2. 3. 4. 5.

Go through the settings and make sure you've selected the correct options and typed everything correctly. Contact your ISP to verify the configuration information. Read the Troubleshooting section in the Router Installation Guide. On the Router GearBox CD, read the Troubleshooting Guide or the Troubleshooting section in the Reference Manual. Contact NETGEAR Technical Support.

Wireless Settings

To change the Internet settings, click Wireless Settings on the left menu bar. One of the following screens appears: Wireless Settings: No security Wireless Settings: WEP security Wireless Settings: WPA-PSK security
Figure 3-6: Wireless Settings screens
NOTE: To ensure proper agency compliance and compatibility between similar products in your area; the operating channel & region must be set correctly. Placement of the Router to Optimize Wireless Connectivity: The operating distance or range of your wireless connection can vary significantly based on the physical placement of the router. For best results, place your router: Near the center of the area in which your PCs will operate In an elevated location such as a high shelf Away from potential sources of interference, such as PCs, microwaves, and cordless phones With the Antenna tight and in the upright position Away from large metal surfaces
Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the router. Name (SSID): Enter a value of up to 32 alphanumeric characters. The same Name (SSID) must be assigned to all wireless devices in your network. The default SSID is NETGEAR, but NETGEAR strongly recommends that you change your network's Name (SSID) to a different value. This value is also case-sensitive. For example, NETGEAR is not the same as NETGEAr. Region: Select your region from the drop-down list. This field displays the region of operation for which the wireless interface is intended. It may not be legal to operate the router in a region other than the region shown here. If your country or region is not listed, please check with your local government agency or check our web site for more information on which channels to use. Channel: This field determines which operating frequency will be used. It should not be necessary to change the wireless channel unless you notice interference problems with another nearby access point. Mode: Select the desired wireless mode. The options are: g & b: Both 802.11g and 802.11b wireless stations can be used. g only: Only 802.11g wireless stations can be used. b only: All 802.11b wireless stations can be used. 802.11g wireless stations can still be used if they can operate in 802.11b mode.

FEATURE Wireless Access Point Wireless Access List (MAC Filtering) SSID broadcast SSID 11b/g RF Channel Mode Authentication Type WEP
DEFAULT FACTORY SETTINGS Enabled All wireless stations allowed Enabled NETGEAR 11 g and b Open System Disabled
How to Bypass the Configuration Assistant
When the wireless router is in the factory default state, type http://www.routerlogin.net/basicsetting.htm in the address field of your browser, then click Enter. When the wireless router is in the factory default state, a user name and password are not required.
The browser will then display the WGR614 v6 settings home page shown in Figure 3-4. If you do not click Logout, the wireless router will wait 5 minutes after there is no activity before it automatically logs you out.
NETGEAR Product Registration, Support, and Documentation
Register your product at http://www.NETGEAR.com/register. Registration is required before you can use our telephone support service. Product updates and Web support are always available by going to: http://kbserver.netgear.com/products/WGR614v6.asp. Documentation is available on the CD and at http://kbserver.netgear.com/documentation/WGR614v6.asp. When the wireless router is connected to the Internet, click the Knowledge Base or the Documentation link under the Web Support menu to view support information or the documentation for the wireless router.
Chapter 4 Content Filtering
This chapter describes how to use the content filtering features of the 54 Mbps Wireless Router WGR614 v6 to protect your network. These features can be found by clicking on the Content Filtering heading in the Main Menu of the browser interface.
Content Filtering Overview
The 54 Mbps Wireless Router WGR614 v6 provides you with Web content filtering options, plus browsing activity reporting and instant alerts via e-mail. Parents and network administrators can establish restricted access policies based on time of day, Web addresses and Web address keywords. You can also block Internet access by applications and services, such as chat or games. To configure these features of your router, click on the subheadings under the Content Filtering heading in the Main Menu of the browser interface. The subheadings are described below:
Content Filtering 202-10099-01, April 2005

Figure 5-6: Router Upgrade menu

To upload new firmware:

Download and unzip (if the downloaded file is a.zip file) the new software file from NETGEAR.
In the Router Upgrade menu, click the Browse button and browse to the location of the upgrade file 3. Click Upload. Note: When uploading software to the WGR614 v6 router, it is important not to interrupt the Web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, it may corrupt the software. When the upload is complete, your router will automatically restart. The upgrade process will typically take about one minute. In some cases, you may need to reconfigure the router after upgrading.
Changing the Administrator Password
Note: Before changing the router password, use the router backup utility to save your configuration settings. If after changing the password, you forget the new password you assigned, you will have to reset the router back to the factory defaults to be able to log in using the default password of password. This means you will have to restore all the router configuration settings. If you ever have to reset the router back to the factory defaults, you can restore your settings from the backup. The default password for the routers Web Configuration Manager is password. NETGEAR recommends that you change this password to a more secure password.
5-8 202-10099-01, April 2005
From the Main Menu of the browser interface, under the Maintenance heading, select Set Password to bring up the menu shown below.
Figure 5-7: Set Password menu
To change the password, first enter the old password, then enter the new password twice. Click Apply.
5-10 202-10099-01, April 2005
Chapter 6 Advanced Configuration of the Router
This chapter describes how to configure the advanced features of your 54 Mbps Wireless Router WGR614 v6. These features can be found under the Advanced heading in the Main Menu of the browser interface.
Note: If you are unfamiliar with networking and routing, refer to Appendix B, Network, Routing, Firewall, and Basics, to become more familiar with the terms and procedures used in this chapter.
Configuring Port Triggering
Port Triggering is an advanced feature that can be used to easily enable gaming and other internet applications. Port Forwarding is typically used to enable similar functionality, but it is static and has some limitations. Note: If you use applications such as multi-player gaming, peer-to-peer connections, real time communications such as instant messaging, or remote assistance (a feature in Windows XP), you should also enable UPnP according to the instructions at Using Universal Plug and Play (UPnP) on page 6-18. Port Triggering opens an incoming port temporarily and does not require the server on the internet to track your IP address if it is changed by DHCP, for example. Port Triggering monitors outbound traffic. When the router detects traffic on the specified outbound port, it remembers the IP address of the computer that sent the data and triggers the incoming port. Incoming traffic on the triggered port is then forwarded to the triggering computer. Using the Port Triggering page, you can make local computers or servers available to the Internet for different services (for example, FTP or HTTP), to play Internet games (like Quake III), or to use Internet applications (like CUseeMe). Port Forwarding is designed for FTP, Web Server or other server based services. Once port forwarding is set up, request from Internet will be forwarded to the proper server. On the contrary,

Advanced Configuration of the Router 202-10099-01, April 2005
port triggering will only allow request from Internet after a designated port is 'triggered'. Port triggering applies to chat and Internet games.
Figure 6-1: Port Triggering Menu
Note: If Disable Port Triggering box is checked after configuring port triggering, port triggering will be disabled but any port triggering configuration information you added to the router will be retained even though it will not be used. Port Triggering Timeout Enter a value up to 9999 minutes. The Port Triggering Timeout value controls the inactivity timer for the designated inbound port(s). The inbound port(s) will be closed when the inactivity timer expires. For Internet Games or Applications Before starting, you'll need to know which service, application or game you'll be configuring. Also, you'll need to have the outbound port (triggering port) address for this game or application.
Follow these steps to set up a computer to play Internet games or use Internet applications:

Click Add.

Figure 6-2: Add Port Trigger Menu 2. 3.
Enter a service name in the Service Name box. Under Service User, selecting Any (default) will allow this service to be used by everyone in your network. Otherwise, select Single address and enter the IP address of one computer to restrict the service to a particular computer. Select the Service Type. Enter the outbound port number in Triggering Port box. Enter the inbound connection port information such as Connection Type, Starting Port and Ending Port boxes. This information can be obtained from the game or applications manual or support Web site. Click Apply to save your changes.

4. 5. 6.

Configuring Port Forwarding to Local Servers
Although the router causes your entire local network to appear as a single machine to the Internet, you can make a local server (for example, a Web server or game server) visible and available to the Internet. This is done using the Port Forwarding menu. From the Main Menu of the browser
Advanced Configuration of the Router 202-10099-01, April 2005 6-3
interface, under Advanced, click on Port Forwarding to view the port forwarding menu, shown below.

Using Address Reservation
When you specify a reserved IP address for a computer on the LAN, that computer will always receive the same IP address each time it access the routers DHCP server. Reserved IP addresses should be assigned to servers that require permanent IP settings. To reserve an IP address:

Click the Add button.

Figure 6-7: Address Reservation menu 2. 3.
In the IP Address box, type the IP address to assign to the computer or server. (choose an IP address from the routers LAN subnet, such as 192.168.1.X) Type the MAC Address of the computer or server. (Tip: If the computer is already present on your network, you can copy its MAC address from the Attached Devices menu and paste it here.) Click Apply to enter the reserved address into the table.
Note: The reserved address will not be assigned until the next time the computer contacts the router's DHCP server. Reboot the computer or access its IP configuration and force a DHCP release and renew. To edit or delete a reserved address entry:
Click the button next to the reserved address you want to edit or delete. Click Edit or Delete.
Using a Dynamic DNS Service
If your network has a permanently assigned IP address, you can register a domain name and have that name linked with your IP address by public Domain Name Servers (DNS). However, if your Internet account uses a dynamically assigned IP address, you will not know in advance what your IP address will be, and the address can change frequently. In this case, you can use a commercial dynamic DNS service, who will allow you to register your domain to their IP address, and will forward traffic directed at your domain to your frequently-changing IP address.
Note: If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), the dynamic DNS service will not work because private addresses will not be routed on the Internet.
The router contains a client that can connect to many popular dynamic DNS services. You can select one of these services and obtain an account with them. Then, whenever your ISP-assigned IP address changes, your router will automatically contact your dynamic DNS service provider, log in to your account, and register your new IP address. From the Main Menu of the browser interface, under Advanced, click on Dynamic DNS.

The five address classes are: Class A Class A addresses can have up to 16,777,214 hosts on a single network. They use an eight-bit network number and a 24-bit node number. Class A addresses are in this range:

1.x.x.x to 126.x.x.x.

Class B Class B addresses can have up to 65,354 hosts on a network. A Class B address uses a 16-bit network number and a 16-bit node number. Class B addresses are in this range:
128.1.x.x to 191.254.x.x.
Class C Class C addresses can have 254 hosts on a network. Class C addresses use 24 bits for the network address and eight bits for the node. They are in this range:
192.0.1.x to 223.255.254.x.
Class D Class D addresses are used for multicasts (messages sent to many hosts). Class D addresses are in this range:
224.0.0.0 to 239.255.255.255.
Class E Class E addresses are for experimental use.
Network, Routing, Firewall, and Basics 202-10099-01, April 2005
This addressing structure allows IP addresses to uniquely identify each physical network and each node on each physical network. For each unique value of the network portion of the address, the base address of the range (host address of all zeros) is known as the network address and is not usually assigned to a host. Also, the top address of the range (host address of all ones) is not assigned, but is used as the broadcast address for simultaneously sending a packet to all hosts with the same network address.

Netmask

In each of the address classes previously described, the size of the two parts (network address and host address) is implied by the class. This partitioning scheme can also be expressed by a netmask associated with the IP address. A netmask is a 32-bit quantity that, when logically combined (using an AND operator) with an IP address, yields the network address. For instance, the netmasks for Class A, B, and C addresses are 255.0.0.0, 255.255.0.0, and 255.255.255.0, respectively. For example, the address 192.168.170.237 is a Class C IP address whose network portion is the upper 24 bits. When combined (using an AND operator) with the Class C netmask, as shown here, only the network portion of the address remains:

(192.168.170.237)

combined with:

(255.255.255.0)

Equals:

(192.168.170.0)

As a shorter alternative to dotted-decimal notation, the netmask may also be expressed in terms of the number of ones from the left. This number is appended to the IP address, following a backward slash (/), as /n. In the example, the address could be written as 192.168.170.237/24, indicating that the netmask is 24 ones followed by 8 zeros.

Subnet Addressing

By looking at the addressing structures, you can see that even with a Class C address, there are a large number of hosts per network. Such a structure is an inefficient use of addresses if each end of a routed link requires a different network number. It is unlikely that the smaller office LANs would have that many devices. You can resolve this problem by using a technique known as subnet addressing.

Inside Twisted Pair Cables
For two devices to communicate, the transmitter of each device must be connected to the receiver of the other device. The crossover function is usually implemented internally as part of the circuitry in the device. Computers and workstation adapter cards are usually media-dependent interface ports, called MDI or uplink ports. Most repeaters and switch ports are configured as media-dependent interfaces with built-in crossover ports, called MDI-X or normal ports. Auto Uplink technology automatically senses which connection, MDI or MDI-X, is needed and makes the right connection. Figure B-4 illustrates straight-through twisted pair cable.
Figure B-4: Straight-Through Twisted-Pair Cable
Figure B-5 illustrates crossover twisted pair cable.
Figure B-5: Crossover Twisted-Pair Cable
Figure B-6: Category 5 UTP Cable with Male RJ-45 Plug at Each End
Note: Flat silver satin telephone cable may have the same RJ-45 plug. However, using telephone cable results in excessive collisions, causing the attached port to be partitioned or disconnected from the network.
Uplink Switches, Crossover Cables, and MDI/MDIX Switching
In the wiring table above, the concept of transmit and receive are from the perspective of the computer, which is wired as Media Dependant Interface (MDI). In this wiring, the computer transmits on pins 1 and 2. At the hub, the perspective is reversed, and the hub receives on pins 1 and 2. This wiring is referred to as Media Dependant Interface - Crossover (MDI-X). When connecting a computer to a computer, or a hub port to another hub port, the transmit pair must be exchanged with the receive pair. This exchange is done by one of two mechanisms. Most hubs provide an Uplink switch which will exchange the pairs on one port, allowing that port to be connected to another hub using a normal Ethernet cable. The second method is to use a crossover cable, which is a special cable in which the transmit and receive pairs are exchanged at one of the two cable connectors. Crossover cables are often unmarked as such, and must be identified by comparing the two connectors. Since the cable connectors are clear plastic, it is easy to place them side by side and view the order of the wire colors on each. On a straight-through cable, the color order will be the same on both connectors. On a crossover cable, the orange and green pairs will be exchanged from one connector to the other.
The WGR614 v6 router incorporates Auto UplinkTM technology (also called MDI/MDIX). Each LOCAL Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a normal connection (e.g. connecting to a computer) or an uplink connection (e.g. connecting to a router, switch, or hub). That port will then configure itself to the correct configuration. This feature also eliminates the need to worry about crossover cables, as Auto UplinkTM will accommodate either type of cable to make the right connection.

Verifying the Readiness of Your Internet Account
For broadband access to the Internet, you need to contract with an Internet service provider (ISP) for a single-user Internet access account using a cable modem or DSL modem. This modem must be a separate physical box (not a card) and must provide an Ethernet port intended for connection to a Network Interface Card (NIC) in a computer. Your router does not support a USB-connected broadband modem. For a single-user Internet account, your ISP supplies TCP/IP configuration information for one computer. With a typical account, much of the configuration information is dynamically assigned when your PC is first booted up while connected to the ISP, and you will not need to know that dynamic information. In order to share the Internet connection among several computers, your router takes the place of the single PC, and you need to configure it with the TCP/IP information that the single PC would normally use. When the routers Internet port is connected to the broadband modem, the router appears to be a single PC to the ISP. The router then allows the PCs on the local network to masquerade as the single PC to access the Internet through the broadband modem. The method used by the router to accomplish this is called Network Address Translation (NAT) or IP masquerading.
Are Login Protocols Used?
Some ISPs require a special login protocol, in which you must enter a login name and password in order to access the Internet. If you normally log in to your Internet account by running a program such as WinPOET or EnterNet, then your account uses PPP over Ethernet (PPPoE). When you configure your router, you will need to enter your login name and password in the routers configuration menus. After your network and router are configured, the router will perform the login task when needed, and you will no longer need to run the login program from your PC. It is not necessary to uninstall the login program.
What Is Your Configuration Information?
More and more, ISPs are dynamically assigning configuration information. However, if your ISP does not dynamically assign configuration information but instead used fixed configurations, your ISP should have given you the following basic information for your account:
C-20 202-10099-01, April 2005
An IP address and subnet mask A gateway IP address, which is the address of the ISPs router One or more domain name server (DNS) IP addresses Host name and domain suffix For example, your accounts full server names may look like this:

mail.xxx.yyy.com

In this example, the domain suffix is xxx.yyy.com. If any of these items are dynamically supplied by the ISP, your router automatically acquires them. If an ISP technician configured your PC during the installation of the broadband modem, or if you configured it using instructions provided by your ISP, you need to copy the configuration information from your PCs Network TCP/IP Properties window or Macintosh TCP/IP Control Panel before reconfiguring your PC for use with the router. These procedures are described next.

2. 3. 4. 5. 6. 7.

If an IP address and subnet mask are shown, write down the information. If an IP address appears under Router address, write down the address. This is the ISPs gateway address. If any Name Server addresses are shown, write down the addresses. These are your ISPs DNS addresses. If any information appears in the Search domains information box, write it down. Change the Configure setting to Using DHCP Server. Close the TCP/IP Control Panel.
C-22 202-10099-01, April 2005

Restarting the Network

Once youve set up your computers to work with the router, you must reset the network for the devices to be able to communicate correctly. Restart any computer that is connected to the firewall. After configuring all of your computers for TCP/IP networking and restarting them, and connecting them to the local network of your WGR614 v6 router, you are ready to access and configure the router.
C-24 202-10099-01, April 2005
Appendix D Wireless Networking Basics
This chapter provides an overview of Wireless networking.
Wireless Networking Overview
The WGR614 v6 router conforms to the Institute of Electrical and Electronics Engineers (IEEE) 802.11b and 802.11g standards for wireless LANs (WLANs). On an 802.11b or g wireless link, data is encoded using direct-sequence spread-spectrum (DSSS) technology and is transmitted in the unlicensed radio spectrum at 2.5GHz. The maximum data rate for the 802.11b wireless link is 11 Mbps, but it will automatically back down from 11 Mbps to 5.5, 2, and 1 Mbps when the radio signal is weak or when interference is detected. The 802.11g auto rate sensing rates are 1, 2, 5.5, 6, 9, 12, 18, 24, 36, 48, and 54 Mbps. The 802.11 standard is also called Wireless Ethernet or Wi-Fi by the Wireless Ethernet Compatibility Alliance (WECA, see http://www.wi-fi.net), an industry standard group promoting interoperability among 802.11 devices. The 802.11 standard offers two methods for configuring a wireless network - ad hoc and infrastructure.

Infrastructure Mode

With a wireless Access Point, you can operate the wireless LAN in the infrastructure mode. This mode provides wireless connectivity to multiple wireless network devices within a fixed range or area of coverage, interacting with wireless nodes via an antenna. In the infrastructure mode, the wireless access point converts airwave data into wired Ethernet data, acting as a bridge between the wired LAN and wireless clients. Connecting multiple Access Points via a wired Ethernet backbone can further extend the wireless network coverage. As a mobile computing device moves out of the range of one access point, it moves into the range of another. As a result, wireless clients can freely roam from one Access Point domain to another and still maintain seamless network connection.

Initial 802.1x communications begin with an unauthenticated supplicant (client device) attempting to connect with an authenticator (802.11 access point). The client sends an EAP-start message. This begins a series of message exchanges to authenticate the client. The access point replies with an EAP-request identity message.
The client sends an EAP-response packet containing the identity to the authentication server. The access point responds by enabling a port for passing only EAP packets from the client to an authentication server located on the wired side of the access point. The access point blocks all other traffic, such as HTTP, DHCP, and POP3 packets, until the access point can verify the client's identity using an authentication server (for example, RADIUS). The authentication server uses a specific authentication algorithm to verify the client's identity. This could be through the use of digital certificates or some other EAP authentication type. The authentication server will either send an accept or reject message to the access point. The access point sends an EAP-success packet (or reject packet) to the client. If the authentication server accepts the client, then the access point will transition the client's port to an authorized state and forward additional traffic.

4. 5. 6. 7.

The important part to know at this point is that the software supporting the specific EAP type resides on the authentication server and within the operating system or application supplicant software on the client devices. The access point acts as a pass through for 802.1x messages, which means that you can specify any EAP type without needing to upgrade an 802.1x-compliant access point. As a result, you can update the EAP authentication type to such devices as token cards (Smart Cards), Kerberos, one-time passwords, certificates, and public key authentication, or as newer types become available and your requirements for security change. WPA/WPA2 Data Encryption Key Management With 802.1x, the rekeying of unicast encryption keys is optional. Additionally, 802.11 and 802.1x provide no mechanism to change the global encryption key used for multicast and broadcast traffic. With WPA/WPA2, rekeying of both unicast and global encryption keys is required. For the unicast encryption key, the Temporal Key Integrity Protocol (TKIP) changes the key for every frame, and the change is synchronized between the wireless client and the wireless access point (AP). For the global encryption key, WPA includes a facility (the Information Element) for the wireless AP to advertise the changed key to the connected wireless clients. If configured to implement dynamic key exchange, the 802.1x authentication server can return session keys to the access point along with the accept message. The access point uses the session keys to build, sign and encrypt an EAP key message that is sent to the client immediately after sending the success message. The client can then use contents of the key message to define applicable encryption keys. In typical 802.1x implementations, the client can automatically change encryption keys as often as necessary to minimize the possibility of eavesdroppers having enough time to crack the key in current use.

Wi-Fi Protected Access in "Mixed Mode" Deployment
In a large network with many clients, a likely scenario is that access points will be upgraded before all the Wi-Fi clients. Some access points may operate in a "mixed mode", which supports both clients running Wi-Fi Protected Access and clients running original WEP security. While useful for transition, the net effect of supporting both types of client devices is that security will operate at the less secure level (WEP), common to all the devices. Therefore, organizations will benefit by accelerating the move to Wi-Fi Protected Access for all Wi-Fi clients and access points.
An IEEE 802.16 Task Group that provides a specification for fixed broadband wireless access systems employing a point-to-multipoint (PMP) architecture. Task Group 1 of IEEE 802.16 developed a point-to-multipoint broadband wireless access standard for systems in the frequency range 10-66 GHz. The standard covers both the Media Access Control (MAC) and the physical (PHY) layers. Ratification is expected in second half of 2004.
Wireless Multimedia (WMM)
WMM (Wireless Multimedia) is a subset of the 802.11e standard. WMM allows wireless traffic to have a range of priorities, depending on the kind of data. Time-dependent information, like video, audio, or voice will have a higher priority than normal traffic. For WMM to function correctly, wireless clients must also support WMM.

Wireless Networking

Wireless Networking refers to the infrastructure enabling the transmission of wireless signals. A network ties things together and enables resource sharing.

WLAN (Wireless LAN)

Also referred to as LAN. A type of local-area network that uses wireless or high-frequency radio waves rather than wires to communicate between nodes.
-14 202-10099-01, April 2005