2-8 November 2005

Chapter 3 Basic Installation and Configuration
This chapter describes how to set up your NETGEAR WG102 ProSafe 802.11g Wireless Access Point for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b or 802.11g wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN.
Note: Indoors, computers can connect over 802.11g wireless networks at ranges of several hundred feet or more. This distance can allow for others outside your area to access your network. It is important to take appropriate steps to secure your network from unauthorized access. The WG102 Access Point provides highly effective security features which are covered in detail in Appendix , Understanding Security Profiles. Deploy the security features appropriate to your needs.
You need to prepare these three things before you can establish a connection through your wireless access point: A location for the WG102 that conforms to the Observing Placement and Range Guidelines below. The wireless access point connected to your LAN through a device such as a hub, switch, router, or Cable/DSL gateway. One or more computers with properly configured 802.11b or 802.11g wireless adapters.
Observing Placement and Range Guidelines
The operating distance or range of your wireless connection can vary significantly based on the physical placement of the wireless access point. The latency, data throughput performance, and notebook power consumption of wireless adapters also vary depending on your configuration choices.
Basic Installation and Configuration November 2005
Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the WG102. For complete performance specifications, see Appendix A, Specifications.
For best results, place your wireless access point: Near the center of the area in which your PCs will operate. In an elevated location such as a high shelf where the wirelessly connected PCs have line-of-sight access (even if through walls). Away from sources of interference, such as PCs, microwaves, and 2.4 GHz cordless phones. Away from large metal surfaces. Putting the antenna in a vertical position provides best side-to-side coverage. Putting the antenna in a horizontal position provides best up-and-down coverage. If using multiple access points, it is better if adjacent access points use different radio frequency Channels to reduce interference. The recommended Channel spacing between adjacent access points is 5 Channels (for example, use Channels 1 and 6, or 6 and 11).

The time it takes to establish a wireless connection can vary depending on both your security settings and placement.

Cabling Requirements

The WG102 Access Point connects to your LAN via twisted-pair Category 5 Ethernet cable with RJ-45 connectors.

3-2 November 2005

Basic Installation and Configuration

Default Factory Settings

When you first receive your WG102, the default factory settings will be set as shown below. You can restore these defaults with the Factory Default Restore switch on the rear panel see WG102 front panel on page 2-6.
FEATURE User Name (case sensitive) Password (case sensitive) Operating Mode Access Point Name Built-in DHCP client IP Configuration FACTORY DEFAULT SETTINGS admin password Access Point netgearxxxxxx where xxxxxx are the last six digits of the wireless access point's MAC address DHCP client disabled, it uses the default IP address IP Address: 192.168.0.229 Subnet Mask: 255.255.255.0 Gateway: 0.0.0.0
Network Name (SSID) Broadcast Network Name (SSID) 802.11g Radio Frequency Channel Super-G Mode WEP/WPA MAC Access Control AutoCell RF Management AutoCell Enhanced RF Security AutoCell Rogue Device Detection Restricting connectivity based on MAC Access Control List Time Zone Time Zone Adjust for Daylight Saving TIme SNMP VLAN (802.1Q) WMM Support

NETGEAR-0

Enabled Managed automatically by AutoCell (default), if AutoCell is disables, channel 11 is the default Disabled Disabled Disabled Enabled Disabled Disabled Disabled GMT Disabled Disabled Disabled Disabled
Understanding WG102 Wireless Security Options
Your wireless data transmissions can be received well beyond your walls by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The WG102 Access Point provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs.
Figure 3-1: WG102 wireless data security options
There are several ways you can enhance the security of your wireless network: Use Multiple BSSIDs combined with VLANs. You can configure combinations of VLANS and BSSIDs with stronger or less restrictive access security according to your requirements. For example, visitors could be given wireless Internet access but be excluded from any access to your internal network. Restrict Access Based on MAC address. You can restrict access to only trusted PCs so that unknown PCs cannot wirelessly connect to the WG102. MAC address filtering adds an obstacle against unwanted access to your network, but the data broadcast over the wireless link is fully exposed. Turn Off the Broadcast of the Wireless Network Name (SSID). If you disable broadcast of the SSID, only devices that have the correct SSID can connect. This nullifies the wireless network discovery feature of some products such as Windows XP, but the data is still fully exposed to a determined snoop using specialized test equipment like wireless sniffers.

3-4 November 2005

Use WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP Shared Key authentication and WEP data encryption will block all but the most determined eavesdropper. Use WPA, WPA-PSK, WPA2, or WPA2-PSK. Wi-Fi Protected Access (WPA and WPA2) data encryption provides data security. The very strong authentication along with dynamic per frame rekeying of WPA make it virtually impossible to compromise. Because this is a new standard, wireless device driver and software availability may be limited. Use AutoCell Enhanced RF Security. In addition to standard encryption and security mechanisms such as WEP and WPA, the WG102 AutoCell feature provides self-organizing micro cells for an additional level of privacy for enterprises. In this mode, AutoCell shrinks the size of coverage to the minimum to reach clients but also shrinks the size of the beacons that access points use to announce their presence. This mode makes an enterprise wireless LAN nearly invisible to users outside an office building. AutoCell clients such as the NETGEAR WAG511 are highly-recommended for Enhanced RF Security. Furthermore, the AutoCell Rogue Device Detection feature lets you identify and block wireless devices in your that should never be given access to the wireless network.
Installing the WG102 Access Point
Before installing the NETGEAR WG102 ProSafe 802.11g Wireless Access Point, you should make sure that your Ethernet network is up and working. You will be connecting the access point to the Ethernet network so that computers with 802.11b or 802.11g wireless adapters will be able to communicate with computers on the Ethernet network. In order for this to work correctly, verify that you have met all of the system requirements, shown on page 2-5.
1 SET UP THE WG102 ACCESS POINT
Tip: Before mounting the WG102 in a high location, first set up and test the WG102 to verify wireless network connectivity.

a. b. c. d.

Prepare a computer with an Ethernet adapter. If this computer is already part of your network, record its TCP/IP configuration settings. Configure the computer with a static IP address of 192.168.0.210 and 255.255.255.0 for the Subnet Mask. Connect an Ethernet cable from the WG102 to the computer. Turn on your computer, connect the power adapter to the WG102 and verify the following: The PWR power light goes on.

The LAN light of the wireless access point is lit when connected to a powered on computer.

3-6 November 2005

2 CONFIGURE LAN AND WIRELESS ACCESS.
Configure the WG102 Ethernet port for LAN access. Connect to the WG102 by opening your browser and entering http://192.168.0.229 in the address field. A login window opens. When prompted, enter admin for the user name and password for the password, both in lower case letters.

Figure 3-2: Login window

The Web browser will then display the WG102 settings page.
Figure 3-3: Login result: WG102 home page
When the wireless access point is connected to the Internet, click the Documentation link under the Web Support menu to view the documentation for the wireless access point. If you do not click Logout, the wireless access point will wait 5 minutes after there is no activity before it automatically logs you out.

3-8 November 2005

Click the Basic Settings link to view the Basic Settings menu.
Figure 3-4: Basic Settings menu
Configure the settings appropriate for your network.
Click the Wireless Settings link in the Setup section of the main menu to view the Wireless Settings menu.
Figure 3-5: Basic Wireless Settings menu
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 c.
Configure the wireless interface for wireless access. See the online help or the Understanding Wireless Settings on page 3-13 topic of this Reference Manual for full instructions. Note: In the US, the Country/Region is preset according to regulatory requirements. In other areas, you can and must set the Country/Region. It may not be legal to operate the wireless access point in a region other than one of those identified in this field.
Now that you have finished the setup steps, you are ready to deploy the WG102 in your network. If needed, you can now reconfigure the computer you used in step 1 back to its original TCP/IP settings.
3 DEPLOY THE WG102 ACCESS POINT
Disconnect the WG102 and position it where you will deploy it. The best location is elevated, such as wall mounted or on the top of a cubicle, at the center of your wireless coverage area, and within line of sight of all the mobile devices. Lift the antenna on either side so that they are vertical. Note: Consult the antenna positioning and wireless mode configuration information in the Advanced Configuration chapter of the Reference Manual.

Channel. This field identifies which operating frequency will be used. It should not be necessary to change the wireless channel unless you notice interference problems or setting up the WG102 near another access point. See http://documentation.netgear.com/reference/enu/wireless/index.htm for more information on wireless channels.
Note: Channel selection is automatically adjusted by AutoCell when the Auto RF Management option is enabled. The default setting is for the AutoCell Auto RF Management option to be enabled.
Access points use a fixed channel. You can select the channel used. This allows you to choose a channel which provides the least interference and best performance. In the USA and Canada, 11 channels are available. If using multiple access points, it is better if adjacent access points use different channels to reduce interference. The recommended channel spacing between adjacent access points is 5 channels (for example, use channels 1 and 6, or 6 and 11).
In Infrastructure mode, wireless stations normally scan all channels, looking for an access point. If more than one access point can be used, the one with the strongest signal is used. This can only happen when the various access points are using the same SSID.
Data Rate. Shows the available transmit data rate of the wireless network. The default is Best. Output Power. Set the transmit signal strength of the access point. The options are full, half, quarter, eighth, and min. Decrease the transmit power if more than one AP is colocated using the same channel frequency. The default is Full.
Understanding Security Profiles
Security profiles let you configure unique security settings for each SSID. The WG102 now supports up to eight SSIDs.
Figure 3-9: Security Profiles Settings menu
To edit a security profile, select it from the list, and click Edit.
Understanding WEP/WPA Security Options
The table below identifies the various WEP/WPA security options. A full explanation of these standards is available at http://documentation.netgear.com/reference/enu/wireless/index.htm.
Basic Installation and Configuration November 2005 3-15
Figure 3-10: Security Profiles Configuration menu
The settings are explained as follows: Security Profile Name. The Security Profile Name is a descriptive name you assign to differentiate one profile from another. Wireless Network Name (SSID). The SSID is also known as the wireless network name. Enter a value of up to 32 alphanumeric characters. In a setting where there is more than one wireless network, different wireless network names provide a means for separating the traffic. Any device you want to participate in a particular wireless network will need to use the SSID. The WG102 default SSID is: NETGEAR-0 for the first profile, NETGEAR-1 for the second, and so on. A group of Wireless Stations and a single access point, all using the same ID (SSID), form a Basic Service Set (BSS). Using the same SSID is essential. Devices with different SSIDs are unable to communicate with each other. However, some access points allow connections from wireless stations which have their SSID set to any or whose SSID is blank (null). A group of wireless stations and multiple access points, all using the same ID (ESSID), form an Extended Service Set (ESS).

Upgrading the Wireless Access Point Software
Note: When uploading software to the WG102 Access Point, it is important not to interrupt the Web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, the upload may fail, corrupt the software, and render the WG102 completely inoperable. You cannot perform the firmware upgrade from a workstation connected to the WG102 via a wireless link. The firmware upgrade must be performed via a workstation connected to the WG102 via the Ethernet LAN interface. The software of the WG102 Access Point is stored in FLASH memory, and can be upgraded as new software is released by NETGEAR. Upgrade files can be downloaded from the NETGEAR Web site. If the upgrade file is compressed (.ZIP file), you must first extract the image (.IMG) file before sending it to the wireless access point. The upgrade file can be sent using your browser. Note: The Web browser used to upload new firmware into the WG102 must support HTTP uploads, such as Microsoft Internet Explorer 6.0 or above, or Netscape Navigator 4.78 or above.

1. 2. 3. 4.

Download the new software file from NETGEAR, save it to your hard disk, and unzip it. From the main menu Management section, click the Upgrade Firmware link to display the screen above. In the Upgrade Firmware menu, click the Browse button and browse to the location of the image (.IMG) upgrade file. Click Upload. When the upload completes, your wireless access point will automatically restart. The upgrade process typically takes about one minute.
In some cases, you may need to reconfigure the wireless access point after upgrading.
Configuration File Management
The WG102 Access Point settings are stored in the wireless access point in a configuration file. This file can be saved (backed up) to a users computer, retrieved (restored) from the users computer, or cleared to factory default settings.
4-6 November 2005 Management
From the main menu Management heading, click the Backup/Restore Settings link to bring up the menu shown below.
Figure 4-4: Settings Backup menu
The three options displayed are described in the following sections:
Saving and Retrieving the Configuration

Figure 4-8: Rogue AP Detection 1. 2. 3.
Click Rescan to discover the stations. Click Authorize to add any station to the Authorized Station List. Click Delete to remove an station from the list. Optionally, you can export or import lists of authorized stations.

4-12 November 2005

Chapter 5 Advanced Configuration
This chapter describes how to configure the advanced features of your NETGEAR WG102 ProSafe 802.11g Wireless Access Point: Hotspot Settings: Set up advanced wireless LAN parameters. Wireless Settings: Set up advanced wireless LAN parameters. Access Point Settings: Enable wireless bridging and repeating.
These features can be found under the Advanced heading in the main menu.

Hotspot Settings

If you want the AP to capture and re-direct all HTTP (TCP, port 80) requests, use this feature. For example, a hotel might want all wireless connections to go to its server to start a billing transaction.
Figure 5-1: Hotspot Settings screen
Enter the URL of the Web server where you wish to redirect HTTP requests.
Understanding Advanced Wireless Settings
The advanced wireless settings menu enables configuration of the following: AutoCell RF management

5-1 November 2005

Advanced Configuration
Advanced wireless parameters
These options are discussed below.

AutoCell Overview

AutoCell provides advanced RF wireless management features that improve performance and enhance security.
Table 5-1. What does AutoCell do?
Problem Erosion of privacy AutoCell Settings Optional setting allows Wi-Fi network to be nearly undetectable by neighbors and hackers as well as the block rogue wireless devices from connecting to your network. (Enhanced RF Security -- Default: Disable) (Rogue Device Detection -- Default: Disable) APs and clients load-balance traffic across under utilized APs. (Auto RF Management -- Default: Enable). Customers can put APs anywhere they want and in any density APs. (Auto RF Management -- Default: Enable) Clients and APs avoid interference from neighbors and other unexpected sources. (Auto RF Management -- Default: Enable).

Diminishing performance from multiple APs installed in one area. Complexity of installation

Increasing interference

AutoCell's self-organizing micro cells provide an additional level of privacy for enterprises. AutoCell clients are highly-recommended for Enhanced RF Security. AutoCell AP/Client Interaction AutoCell's self-organizing micro cells provide performance benefits and an additional level of privacy for enterprises. Automatic Transmit Power Control. An AutoCell-enabled clients RF transmit power level is automatically coordinated with an AutoCell-enabled AP. This creates client micro-cells and reduces co-channel interference with other clients and APs on the same frequency and improves overall throughput and performance. (Requires: AutoCell-enabled AP)
Advanced Configuration November 2005
Automatic Load-Balancing. An AutoCell-enabled client will seek out and associate to the lightest loaded AutoCell-enabled AP available. (Requires: AutoCell-enabled AP) Rapid Roaming. An AutoCell-enabled client will accurately and rapidly detect movement as distinguished from RF anomalies such as arbitrary and momentary changes in the surrounding RF domain. When it detects true movement, the client immediately seeks the best available AP at the highest data rate possible instead of waiting for the data rate to decline. (Does not Require AutoCell-enabled APs)
Additional AutoCell View Management Options
Figure 5-2: AutoCell View wireless network
AutoCell View is an available management tool that provides sophisticated views of your wireless network and enables managing the wireless communications easily from a simple console.
Understanding AutoCell Configuration Options
Figure 5-3: Advanced Wireless Settings screen AutoCell Setup options
There are three AutoCell configuration setting choices: Enable/disable Auto RF Management: Enabled by default Enable/disable Enhanced RF Security: Disabled by default Enable/disable Rogue Device Detection: Disabled by default

Auto RF Management

5-4 November 2005
In this mode, AutoCell APs and clients load-balance traffic across under utilized APs. This mode avoids interference from neighbors clients and APs and other unexpected sources.

Enhanced RF Security

Note: Broadcast Wireless Network Name (SSID) is automatically turned off when you select the AutoCell Enhanced RF Security option.
In this mode, AutoCell shrinks the size of coverage to the minimum to reach clients but also shrinks the size of the beacons that access points use to announce their presence. This mode makes an enterprise wireless LAN nearly invisible to users outside an office building.

Examples of wireless bridged configurations are: Point-to-Point Bridge In this mode, the WG102 will communicate with another bridge-mode wireless station. In addition, you have the option of enabling client associations with this WG102. You must enter the MAC address of the other bridge-mode wireless station in the field provided. Use WEP to protect this communication.

5-8 November 2005

Multi-Point Bridge Select this only if this WG102 is the master for a group of bridge-mode wireless stations. Then all traffic is sent to this master, rather than directly among each other. In addition, you have the option of enabling client associations with this WG102. For multi-point bridge mode, you must enter the MAC addresses of the other access points in the fields provided. The other bridge-mode wireless stations must be set to Point-to-Point Bridge mode, using the MAC address of this WG102 as the Remote MAC Address. Use WEP to protect this traffic.
Repeater with Wireless Client Association Selected repeater mode to send all traffic to the remote AP. For repeater mode, you must enter the MAC address of the remote parent access point, and optionally enter the address of the child access point. In repeater mode, you do not have the option of disabling client associations with this WG102. In repeater mode, you cannot configure a sequence of parent/child APs; you are limited to only one parent/child AP pair.
These features are discussed below.
How to Configure a WG102 as a Point-to-Point Bridge
Figure 5-6: Point-to-Point Bridge
Configure the WG102 (AP1) on LAN Segment 1 in Point-to-Point Bridge mode. 2. Configure the WG102 (AP2) on LAN Segment 2 in Point-to-Point Bridge mode.
AP1 must have AP2s MAC address in its Remote MAC Address field and AP2 must have AP1s MAC address in its Remote MAC Address field.
Configure and verify the following parameters for both access points: Verify that the LAN network configuration of the WG102 Access Points both are configured to operate in the same LAN network address range as the LAN devices Both use the same ESSID, Channel, authentication mode, if any, and security settings if security is in use.
Verify connectivity across the LAN 1 and LAN 2. A computer on either LAN segment should be able to connect to the Internet or share files and printers of any other PCs or servers connected to LAN Segment 1 or LAN Segment 2.

5-10 November 2005

How to Configure Multi-Point Wireless Bridging
Figure 5-7: Multi-Point bridging 1.
Configure the Operating Mode of the WG102 Access Points. Because it is in the central location, configure WG102 (AP1) on LAN Segment 1 in Point-to-Multi-Point Bridge mode. The MAC addresses of AP2 and AP3 are required in AP1. Configure WG102 (AP2) on LAN Segment 2 in Point-to-Point Bridge mode with the Remote MAC Address of AP1. Configure the WG102 (AP3) on LAN 3 in Point-to-Point Bridge mode with the Remote MAC Address of AP1.

802.11n Standard

A recently formed (Oct 2003) IEEE official task group referred to as: 802.11n or TGn for the 100 Mbps wireless physical layer standard protocol. Current published ratification date is December 2005. As of February 2004, no draft specification has been written - It is expected to use both the 2.4 and 5GHz frequencies.
AES (Advanced Encryption Standard)
A symmetric 128-bit block data encryption technique developed by Belgian cryptographers Joan Daemen and Vincent Rijmen. The U.S government adopted the algorithm as its encryption technique in October 2000, replacing the DES encryption it used. AES works at multiple network layers simultaneously. The National Institute of Standards and Technology (NIST) of the U.S. Department of Commerce selected the algorithm, called Rijndael (pronounced Rhine Dahl or Rain Doll), out of a group of five algorithms under consideration, including one called MARS from a large research team at IBM. AES is expected to replace WEP as a WLAN encryption method in 2003. Glossary November 2005

Access Point (AP)

A wireless LAN transceiver or base station that can connect a wired LAN to one or many wireless devices. Access points can also bridge to each other. There are various types of access points, also referred to as base stations, used in both wireless and wired networks. These include bridges, hubs, switches, routers and gateways. The differences between them are not always precise, because certain capabilities associated with one can also be added to another. For example, a router can do bridging, and a hub may also be a switch. But they are all involved in making sure data is transferred from one location to another. A bridge connects devices that all use the same kind of protocol. A router can connect networks that use differing protocols. It also reads the addresses included in the packets and routes them to the appropriate computer station, working with any other routers in the network to choose the best path to send the packets on. A wireless hub or access point adds a few capabilities such as roaming and provides a network connection to a variety of clients, but it does not allocate bandwidth. A switch is a hub that has extra intelligence: It can read the address of a packet and send it to the appropriate computer station. A wireless gateway is an access point that provides additional capabilities such as NAT routing, DHCP, firewalls, security, etc.

Firewall

A system that secures a network and prevents access by unauthorized users. Firewalls can be software, hardware or a combination of both. Firewalls can prevent unrestricted access into a network, as well as restrict data from flowing out of a network.

Gateway

In the wireless world, a gateway is an access point with additional software capabilities such as providing NAT and DHCP. Gateways may also provide VPN support, roaming, firewalls, various levels of security, etc.
Hot Spot (also referred to as Public Access Location)
A place where you can access Wi-Fi service. This can be for free or for a fee. HotSpots can be inside a coffee shop, airport lounge, train station, convention center, hotel or any other public meeting area. Corporations and campuses are also implementing HotSpots to provide wireless Internet access to their visitors and guests. In some parts of the world, HotSpots are known as CoolSpots.
A multiport device used to connect PCs to a network via Ethernet cabling or via Wi-Fi. Wired hubs can have numerous ports and can transmit data at speeds ranging from 10 Mbps to multigigabyte speeds per second. A hub transmits packets it receives to all the connected ports. A small wired hub may only connect 4 computers; a large hub can connect 48 or more. Wireless hubs can connect hundreds.

HZ (hertz)

The international unit for measuring frequency, equivalent to the older unit of cycles per second. One megahertz (MHz) is one million hertz. One gigahertz (GHz) is one billion hertz. The standard US electrical power frequency is 60 Hz, the AM broadcast radio frequency band is 5351605 kHz, the FM broadcast radio frequency band is 88108 MHz, and wireless 802.11b LANs operate at 2.4 GHz.
IEEE (Institute of Electrical and Electronics Engineers)
A membership organization (www.ieee.org) that includes engineers, scientists and students in electronics and allied fields. It has more than 300,000 members and is involved with setting standards for computers and communications.

IEEE 802.11

A set of specifications for LANs from The Institute of Electrical and Electronics Engineers (IEEE). Most wired networks conform to 802.3, the specification for CSMA/CD based Ethernet networks or 802.5, the specification for token ring networks. 802.11 defines the standard for wireless LANs encompassing three incompatible (non-interoperable) technologies: Frequency Hopping Spread Spectrum (FHSS), Direct Sequence Spread Spectrum (DSSS) and Infrared. WECAs (Wireless Ethernet Compatibility Alliance now Wi-Fi Alliance) focus is on 802.11b, an 11 Mbps high-rate DSSS standard for wireless networks.

Infrastructure mode

A client setting providing connectivity to an access point (AP). As compared to Ad-Hoc mode, whereby PCs communicate directly with each other, clients set in Infrastructure Mode all pass data through a central AP. The AP not only mediates wireless network traffic in the immediate neighborhood, but also provides communication with the wired network. See Ad-Hoc and AP.

IP (Internet Protocol) address
A 32-bit number that identifies each sender or receiver of information that is sent across the Internet. An IP address has two parts: an identifier of a particular network on the Internet and an identifier of the particular device (which can be a server or a workstation) within that network.

ISO Network Model

A network model developed by the International Standards Organization (ISO) that consists of seven different levels, or layers. By standardizing these layers, and the interfaces in between, different portions of a given protocol can be modified or changed as technologies advance or systems requirements are altered. The seven layers are: Physical Data Link Network Transport
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Session Presentation Application
The IEEE 802.11 Standard encompasses the physical layer (PHY) and the lower portion of the data link layer. The lower portion of the data link layer is often referred to as the Medium Access Controller (MAC) sublayer.
MAC (Media Access Control)
Every wireless 802.11 device has its own specific MAC address hard-coded into it. This unique identifier can be used to provide security for wireless networks. When a network uses a MAC table, only the 802.11 radios that have had their MAC addresses added to that network's MAC table will be able to get onto the network.

Mesh Networks

Also called mesh topology, mesh is a network topology in which devices are connected with many redundant interconnections between network nodes. In a full mesh topology every node has a connection to every other node in the network. Mesh networks may be wired or wireless.
In a wireless mesh example, each of the spheres below represent a mesh router. Corporate servers and printers may be shared by attaching to each mesh router. For wireless access to the mesh, an access point must be attached to any one of the mesh routers.
Multiple Input Multiple Output (MIMO)
MIMO refers to radio links with multiple antennas at the transmitter and the receiver side to improve the performance of the wireless link.

VPN (Virtual Private Network)
A type of technology designed to increase the security of information transferred over the Internet. VPN can work with either wired or wireless networks, as well as with dial-up connections over POTS. VPN creates a Glossary November 2005
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 private encrypted tunnel from the end user's computer, through the local wireless network, through the Internet, all the way to the corporate servers and database.

War Chalking

The act of making chalk marks on outdoor surfaces (walls, sidewalks, buildings, sign posts, trees) to indicate the existence of an open wireless network connection, usually offering an Internet connection so that others can benefit from the free wireless access. The open connections typically come from the access points of wireless networks located within buildings to serve enterprises. The chalk symbols indicate the type of access point that is available at that specific spot. There are three basic designs that are currently used: a pair of back-to-back semicircles, which denotes an open node; a closed circle, which denotes a closed node; a closed circle with a W inside, which denotes a node equipped with WEP. Warchalkers also draw identifiers above the symbols to indicate the password that can be used to access the node, which can easily be obtained with sniffer software. As a recent development, the debate over the legality of warchalking is still going on. The practice stems from the U.S. Depression-era culture of wandering hobos who would make marks outside of homes to indicate to other wanderers whether the home was receptive to drifters or was inhospitable.

War Driving

War driving is the act of locating and possibly exploiting connections to wireless local area networks while driving around a city or elsewhere. To do war driving, you need a vehicle, a computer (which can be a laptop), a wireless Ethernet card set to work in promiscuous mode, and some kind of an antenna which can be mounted on top of or positioned inside the car. Because a wireless LAN may have a range that extends beyond an office building, an outside user may be able to intrude into the network, obtain a free Internet connection, and possibly gain access to company records and other resources. Some people have made a sport out of war driving, in part to demonstrate the ease with which wireless LANs can be compromised. With an omnidirectional antenna and a geophysical positioning system (GPS), the war driver can systematically map the locations of 802.11b wireless access points.
WEP (Wired Equivalent Privacy)
Basic wireless security provided by Wi-Fi. In some instances, WEP may be all a home or small-business user needs to protect wireless data. WEP is available in 40-bit (also called 64-bit), or in 108-bit (also called 128-bit) encryption modes. As 108-bit encryption provides a longer algorithm that takes longer to decode, it can provide better security than basic 40-bit (64-bit) encryption.

A button that displays the table of contents and an index button. Double-click on a link in the table of contents or index to navigate directly to where the topic is described in the manual. A model. button to access the full NETGEAR, Inc. online knowledge base for the product
Links to PDF versions of the full manual and individual chapters.

How to Print this Manual

To print this manual you can choose one of the following several options, according to your needs. Printing a Page in the HTML View.

1-2 v1.0, November 2005

Each page in the HTML version of the manual is dedicated to a major topic. Use the Print button on the browser toolbar to print the page contents. Printing a Chapter. Use the PDF of This Chapter link at the top left of any page. Click the PDF of This Chapter link at the top right of any page in the chapter you want to print. The PDF version of the chapter you were viewing opens in a browser window. Your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at http://www.adobe.com. Click the print icon in the upper left of the window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature. Printing the Full Manual. Use the Complete PDF Manual link at the top left of any page. Click the Complete PDF Manual link at the top left of any page in the manual. The PDF version of the complete manual opens in a browser window. Click the print icon in the upper left of the window. Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature.

1-3 v1.0, November 2005

1-4 v1.0, November 2005

Chapter 2 Introduction

This chapter introduces the NETGEAR WG102 ProSafe 802.11g Wireless Access Point. Minimal requirements for installation are in System Requirements on page 2-5.
About the NETGEAR WG102 ProSafe 802.11g Wireless Access Point
The NETGEAR WG102 ProSafe 802.11g Wireless Access Point is the basic building block of a wireless LAN infrastructure. It provides connectivity between Ethernet wired networks and radio-equipped wireless notebook systems, desktop systems, print servers, and other devices. The WG102 antenna interacts with wireless network interface cards (NIC) in wireless devices within a fixed range or area of coverage. Typically, an access point inside a building works best with devices within a 300 foot radius. The NETGEAR WG102 ProSafe 802.11g Wireless Access Point can support a small group of users in a range of several hundred feet. Most access points are rated between 30-50 users simultaneously. The NETGEAR WG102 ProSafe 802.11g Wireless Access Point acts as a bridge between the wired LAN and wireless clients. Connecting multiple WG102 Access Points via a wired Ethernet backbone can further lengthen the wireless network coverage. As a mobile computing device moves out of the range of one access point, it moves into the range of another. As a result, wireless clients can freely roam from one Access Point to another and still maintain seamless connection to the network. The auto-sensing capability of the NETGEAR WG102 ProSafe 802.11g Wireless Access Point allows packet transmission at up to 108 Mbps, or at reduced speeds to compensate for distance or electromagnetic interference.

2-1 November 2005

Key Features
The WG102 Access Point is easy-to-use and provides solid wireless and networking support. Supported Standards and Conventions The following standards and conventions are supported: Standards Compliant. The Wireless Access Point complies with the IEEE 802.11g for Wireless LANs. WEP support. Support for WEP is included. 64-bit, 128-bit, and 152-bit keys are supported. Full WPA and WPA2 support. WPA and WPA2 enterprise class strong security with RADIUS and certificate authentication as well as dynamic encryption key generation. WPA-PSK and WPA2-PSK pre-shared key authentication without the overhead of RADIUS servers but with all of the strong security of WPA. DHCP Client Support. DHCP provides a dynamic IP address to PCs and other devices upon request. The WG102 can act as a client and obtain information from your DHPC server. Multiple BSSIDs. Support for multiple BSSIDs. When one AP is connected to a wired network and a set of wireless stations it is referred to as a Basic Service Set (BSS). The Basic Service Set Identifier (BSSID) is a 32-character unique identifier attached to the header of packets sent over a WLAN that differentiated one WLAN from another when a mobile device tries to connect to the network. SNMP Support. Support for Simple Network Management Protocol (SNMP) Management Information Base (MIB) management.
Key Features The WG102 provides solid functionality, including these features Multiple Operating Modes Wireless Access Point. Operates as a standard 802.11g. Point-to-Point Bridge. In this mode, the WG102 only communicates with another bridge-mode wireless station. You must enter the MAC address (physical address) of the other bridge-mode wireless station in the field provided. Wireless security should be used to protect this communication.

2-2 November 2005

Point-to-Multi-Point Bridge. Select this only if this WG102 is the Master for a group of bridge-mode wireless stations. The other bridge-mode wireless stations must be set to Point-to-Point Bridge mode, using this WG102's MAC address. They then send all traffic to this Master, rather than communicate directly with each other. Wireless security should be used to protect this traffic. Wireless Repeater. In this half-duplex mode, the WG102 only communicates with another repeater-mode wireless station. You must enter the MAC address of both adjacent repeater-mode wireless stations in the fields provided. Wireless security should be used to protect this communication.

AutoCell RF Management. AutoCell provides advanced automated RF management that improves performance and enhances security. Upgradeable Firmware. Firmware is stored in a flash memory and can be upgraded easily, using only your Web browser, and can be upgraded remotely. Access Control. The Access Control MAC address filtering feature can ensure that only trusted wireless stations can use the WG102 to gain access to your LAN. Security Profiles. When using multiple BSSIDs, you can configure unique security settings (encryption, MAC filtering, etc.) for each BSSID. Simple Configuration. If the default settings are unsuitable, they are easy to change. Hidden Mode. The SSID is not broadcast, assuring only clients configured with the correct SSID can connect. Configuration Backup. Configuration settings can be backed up to a file and restored. Power over Ethernet. Power can be supplied to the WG102 over the Ethernet port from any 802.3af compliant mid-span or end-span source such as the NETGEAR FSM7326P Managed Power over Ethernet Layer 3 managed switch. Autosensing Ethernet Connection with Auto Uplink Interface. Connects to 10/100 Mbps IEEE 802.3 Ethernet networks. LED Indicators. Power, test, LAN speed, LAN activity, and wireless activity are easily identified. VLAN Support. Short for virtual LAN, a network of computers that behave as if they are connected to the same network even though they may actually be physically located on different segments of a LAN. VLANs are configured through software rather than hardware, which makes them extremely flexible. VLANs are very useful for user/host management, bandwidth allocation and resource optimization.

2-3 November 2005

802.11g Standards-based Wireless Networking
The NETGEAR WG102 ProSafe 802.11g Wireless Access Point provides a bridge between Ethernet wired LANs and 802.11g compatible wireless LAN networks. The WG102 also supports the following wireless features: Distributed coordinated function (CSMA/CA, Back off procedure, ACK procedure, retransmission of unacknowledged frames) RTS/CTS handshake Beacon generation Packet fragmentation and reassembly Short or long preamble Roaming among access points on the same subnet

Autosensing Ethernet Connections with Auto Uplink
The WG102 can connect to a standard Ethernet network. The LAN interface is autosensing and capable of full-duplex or half-duplex operation. The wireless access point uses Auto UplinkTM technology. The Ethernet port automatically senses whether the Ethernet cable plugged into the port should have a normal connection such as to a computer or an uplink connection such as to a switch or hub. That port will then configure itself correctly. This feature eliminates any concerns about crossover cables, as Auto Uplink will accommodate either type of cable to make the right connection. Wireless Multimedia (WMM) Support WMM is a subset of the 802.11e standard. WMM allows wireless traffic to have a range of priorities, depending on the kind of data. Time-dependent information, like video or audio, has a higher priority than normal traffic. For WMM to function correctly, Wireless clients must also support WMM.
Compatible and Related NETGEAR Products
For a list of compatible products from other manufacturers, see the Wireless Ethernet Compatibility Alliance Web site (WECA), see http://www.wi-fi.net). The following NETGEAR products work with the WG102 Access Point: WAG511 ProSafe 108 Mbps Dual Band PC Card WAG311 ProSafe 108 Mbps Dual Band PCI Card

2-4 November 2005

WG311T 802.11g 108 Mbps Wireless PCI Card WG511T 802.11g 108 Mbps Wireless CardBus Adapter WG511 802.11g 54 Mbps Wireless CardBus Adapter WG111 801.11g 54 Mbps Wireless Bridge

System Requirements

Before installing the WG102, make sure your system meets these requirements: A 10/100 Mbps Local Area Network device such as a hub or switch. The Category 5 UTP straight through Ethernet cable with RJ-45 connector included in the package, or one like it A 100-240 V, 50-60 HZ AC power source. A Web browser for configuration such as Microsoft Internet Explorer 6.0 or above, or Netscape Navigator 4.78 or above. At least one computer with the TCP/IP protocol installed. 802.11g or 802.11b-compliant devices, such as the NETGEAR WG511 Wireless Adapter.

Whats In the Box?

The product package should contain the following items: NETGEAR WG102 ProSafe 802.11g Wireless Access Point. Power adapter and cord. Straight through Category 5 Ethernet cable. 802.11g ProSafe Wireless Access Point Installation Guide WG102. Resource CD for the NETGEAR WG102 ProSafe 802.11g Wireless Access Point. Installation Guide for the NETGEAR WG102 ProSafe 802.11g Wireless Access Point. Support Registration card.

2-5 November 2005

Contact your reseller or customer support in your area if there are any missing or damaged parts. See the Support Information Card for the telephone number of customer support in your area. You should keep the Support Information card, along with the original packing materials, and use the packing materials to repack the WG102 if you need to return it for repair. To qualify for product updates and product warranty registrations, we encourage you to register on the NETGEAR Web site at: http://www.NETGEAR.com.

Hardware Description

The NETGEAR WG102 ProSafe 802.11g Wireless Access Point front and rear hardware functions are described below.

Front Panel

Figure 2-1
Viewed from left to right, the WG102 has these four status LEDs: PWR, TEST, LAN, and WLAN.
LED PWR Description Power Indicator Off On TEST Self Test Indicator Blink Indicates self test, loading software, or system fault (if continues). Note: This LED may blink for a minute before going off. No power. If this LED does not come on with the power adapter and cord correctly installed, see Chapter 6, Troubleshooting. Power is on.

2-6 November 2005

LED LAN
Description Ethernet link indicator Off Amber On Amber Flashing Green On Green Flashing No connection detected on the Ethernet link 10 Mbps Ethernet link detected Data is being transmitted or received on the 10 Mbps Ethernet link 100 Mbps Fast Ethernet link detected. Data is being transmitted or received on the 100 Mbps Ethernet link No wireless link activity. Wireless link activity.
Wireless LAN Link Activity Indicator Off Green Blink

Rear Panel

Figure 2-2
Viewed from left to right, the back of the WG102 provides the following: 1. Detachable Antenna. 2. Ground. 3. Reset button. This restores the default factory settings. 4. RJ-45 Ethernet LAN/POE Port. Use the WG102 Ethernet RJ-45 port to connect to an Ethernet LAN through a device such as a hub, switch, router, or Power Over Ethernet (POE) switch. 5. Power socket. This connects to the WG102 power adapter.

2-7 November 2005

2-8 November 2005
Chapter 3 Basic Installation and Configuration
This chapter describes how to set up your NETGEAR WG102 ProSafe 802.11g Wireless Access Point for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b or 802.11g wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN. Note: Indoors, computers can connect over 802.11g wireless networks at ranges of several hundred feet or more. This distance can allow others outside your area to access your network. It is important to take steps to secure your network from unauthorized access. The WG102 Access Point provides highly effective security features, which are covered in detail in the in the Web document link Wireless Communications: in Appendix B. Deploy the security features appropriate to your needs. You need to prepare these three things before you can establish a connection through your wireless access point: A location for the WG102 that conforms to the guidelines in Wireless Equipment Placement and Range Guidelines on page 3-1 below. The wireless access point connected to your LAN through a device such as a hub, switch, router, or Cable/DSL gateway. One or more computers with configured 802.11b or 802.11g wireless adapters.

Note: You must have an Internet connection to get the current time.

3-11 v1.0, November 2005

Wireless Settings
To configure the wireless settings, click Wireless Settings in the Setup section of the WG102 main menu. The Wireless Settings menu appears, as shown below.

Figure 3-8

The Wireless Settings menu options are discussed below. Note: Channel selection and power management are automatically adjusted by the AutoCell Auto RF Management option. The Auto RF Management option is enabled by default. Country/Region. This is the region where the WG102 can be used. It may not be legal to operate the wireless features of the wireless access point in a region other than one of those identified in this field. For products sold in the United States, the default country domain is preset. Also, the channel is set to 11. For products sold outside the United States, unless a country domain is selected, the channel cannot be changed. Turn Radio On. On by default, you can also turn off the radio to disable access through this device. This can be helpful for configuration, network tuning, or troubleshooting activities. Operating Mode. Select the desired wireless operating mode. The options are: Auto (802.11g/802.11b): Both 802.11g and 802.11b wireless stations can be used. This is the default. 802.11g Only: Only 802.11g wireless stations can be used.

3-12 v1.0, November 2005

802.11b Only: All 802.11b wireless stations can be used. 802.11g wireless stations can still be used if they can operate in 802.11b mode.
Channel. This sets which operating frequency is used. You should not need to change the channel unless you notice interference problems, or are setting up the WG102 near another access point. Note: AutoCell automatically adjusts the channel selection when the Auto RF Management option is used. The AutoCell Auto RF Management option is enabled by default. Access points use a fixed channel. You can select the channel used. This lets you choose a channel that provides the least interference and best performance. In the USA and Canada, 11 channels are available. If using multiple access points, it is better if adjacent access points use different channels to reduce interference. The recommended channel spacing between adjacent access points is five channels (for example, use channels 1 and 6, or 6 and 11). In Infrastructure mode, wireless stations normally scan all channels, looking for an access point. If more than one access point can be used, the one with the strongest signal is used. This can only happen when the access points use the same SSID.
See http://documentation.netgear.com/reference/enu/wireless/index.htm for more information on wireless channels. Data Rate. Shows the available transmit data rate of the wireless network. The default is Best. Output Power. Set the transmit signal strength of the access point (AP). The options are full, half, quarter, eighth, and min. Decrease the transmit power if two or more APs are close together and using the same channel frequency. The default is Full.

3-13 v1.0, November 2005

Security Profiles
Security profiles let you configure unique security settings for each SSID. The WG102 supports up to eight SSIDs. The Security Profile Settings menu is shown to the right. To edit a security profile, select it from the list, and click Edit. The Security Profile Configuration page opens for that profile.
Selected Security Profile

Figure 3-9

The settings for Security Profile Configuration are explained below. Security Profile Name. Use a name that makes it easy to recognize the profile, and to tell profiles apart. Wireless Network Name (SSID). The SSID is also known as the wireless network name. The SSID separates network traffic from different wireless networks. To connect any wireless device to a wireless network, you need to use the SSID. The WG102 default SSID is: NETGEAR-0 for the first profile, NETGEAR-1 for the second, and so on. You can enter a value of up to 32 alphanumeric characters. Some concepts regarding the SSID are explained below: Using the same SSID is essential. Devices with different SSIDs cannot communicate with each other. However, some access points allow connections from wireless stations that have their SSID set to any or whose SSID is blank (null).

3-14 v1.0, November 2005

A Basic Service Set (BSS) is a group of wireless stations and a single access point, all using the same SSID. An Extended Service Set (ESS) is a group of wireless stations and multiple access points, all using the same ID (ESSID). Different access points within an ESS can use different channels. To reduce interference, adjacent access points should use different channels. Roaming is the ability of wireless stations to connect wirelessly when they physically move from one ESS to another. The wireless station automatically changes to the access point with the least interference or best performance. Note: The AutoCell Auto RF Management option enhances the roaming, interference, and channel selection of an extended wireless network.
Broadcast Wireless Network Name (SSID). This field lets you turn off the SSID broadcast. If you do so, then only stations that know the SSID can connect. Disabling the SSID broadcast somewhat hampers the wireless network discovery feature of some products. The default is to enable SSID broadcast. Note: Broadcast Wireless Network Name (SSID) is turned off if you enable the AutoCell Enhanced RF Security option (disabled by default).
Network Authentication The WG102 Access Point is set by default as an open system with no authentication. When setting up Network Authentication, bear in mind the following: If you are using Access Point mode, then all options are available. In other modes such as Repeater or Bridge, some options may be unavailable. Not all wireless adapters support WPA or WPA2. Windows XP and Windows 2000 with Service Pack 3 do include the client software that supports WPA. However, client software is required on the client. Consult the product documentation for your wireless adapter and WPA or WPA2 client software for instructions on configuring WPA2 settings.

See http://documentation.netgear.com/reference/enu/wireless/index.htm for a full explanation of each of these options, as defined by the IEEE 802.11 wireless communication standard.

3-22 v1.0, November 2005

Restricting Wireless Access by MAC Address
To restrict access based on MAC addresses, follow these steps: 1. Connect to the WG102. Log in at the default LAN address of http://192.168.0.229 with the user name of admin and default password of password, or using the LAN address and password that you set up. Note: When configuring the WG102 from a wireless computer whose MAC address is not in the access control list, if you select Turn Access Control On, you will lose your wireless connection when you click Apply. You must then access the wireless access point from a wired computer or from a wireless computer which is on the access control list to make any further changes. 2. From the Security menu, click the Access Control link to display the Access Control List menu shown below.

Figure 3-12

3. Select the Turn Access Control On check box.

3-23 v1.0, November 2005

4. Choose to use the local MAC address database stored on the access point, or use the RADIUS MAC address database stored on a RADIUS server. If you choose the RADIUS MAC Address Database, you must configure the RADIUS Server Settings first. If you choose Local MAC Address Database, either select from the list of available wireless cards the WG102 has found in your area, or enter the MAC address and device name for a device you plan to use. You can usually find the MAC address printed on the wireless adapter. Click Add to add the wireless device to the access list. Repeat these steps for each additional device you want to add to the list.
5. Be sure to click Apply to save your wireless access control list settings. Now, only devices on this list will be allowed to wirelessly connect to the WG102.

3-24 v1.0, November 2005

Chapter 4 Management
This chapter describes how to use the management features of your NETGEAR WG102 ProSafe 802.11g Wireless Access Point. To get to these features, connect to the WG102 as described in Logging in to the WG102 Using Its Default IP Address on page 3-9. Then click the Maintenance heading in the main menu.

Viewing the Activity Log

From the WG102 main menu, under the Information heading, click Activity Log.

Figure 4-1

4-1 v1.0, November 2005
You can use a SysLog server to view the Activity Log. If you have a SysLog server on your LAN, then enable the SysLog. If enabled, you must enter the IP address of your SysLog server and the port number that your SysLog server uses. SysLog Server IP address: The access point sends all the SysLog to the specified IP address if SysLog option is enabled. Default: 0.0.0.0 Port: The port number configured in the SysLog server on your LAN. The default is 514
The Activity Log Window displays the Access Point system activity. You can click Refresh to update the display. To save the log contents into a file on your PC, click Save As and save the file to a disk drive.
Viewing General Information
The General information is a summary of the WG102 configuration settings. From the WG102 main menu, click General to view the screen shown below.

Figure 4-2

4-2 v1.0, November 2005
Reference Manual for the NETGEAR ProSafe 802.11g Wireless Access Point WG102 Table 4-1.
Field Access Point Information Access Point Name (NetBIOS name) Country/Region The default name may be changed if desired. The domain or region for which the wireless access point is licensed for use. It may not be legal to operate this wireless access point in a region other than one of those identified in this field. The version of the firmware currently installed. The operating mode of the WG102: Access Point, Point-to-point bridge, Multi-point bridge or Repeater. Indicates if VLAN support is enabled. The default is disabled. Displays the VLAN ID. The IP address of the wireless access point. The subnet mask for the wireless access point. The default gateway for the wireless access point communication. If this is enabled, the current IP address was obtained from a DHCP server on your network. Disabled indicates a static IP configuration. The Media Access Control address (MAC address) of the wireless access points Ethernet port. The channel the wireless port uses. The default channel setting is 11. For the frequencies used on each channel, see http://documentation.netgear.com/reference/enu/wireless/index.htm. For each Security Profile, the following are displayed: Profile name, SSID, security option, VLAN ID, and enabled/disabled.

General Information Fields

Description

Firmware Version Access Point Mode VLAN (802.1Q) Management VLAN ID Current IP Settings IP Address Subnet Mask Default Gateway DHCP Client MAC Address Current Wireless Settings Channel/Frequency

4-3 v1.0, November 2005

Viewing Statistics
The Statistics screen provides LAN and WLAN statistics. From the WG102 main menu, click Statistics under the Information heading to view the screen shown below:

Figure 4-3

4-4 v1.0, November 2005
Viewing the Available Wireless Station List
The Available Wireless Station List contains a table of all IP devices associated with the wireless access point for the Wired Network Name (SSID). From the WG102 main menu, under the Information heading, click Available Wireless Station List to view the list. The fields in the list are explained below.

Figure 4-4 Table 4-1.

Field Wired Ethernet Packets Bytes For Each Wireless Security Profile Unicast Packets Broadcast Packets Multicast Packets Total Packets Total Bytes Refresh button
Available Wireless Station List
Description Received/Transmitted The number of packets sent since the WG102 was restarted. The number of bytes sent since the WG102 was restarted. Received/Transmitted The Unicast packets sent since the WG102 was restarted. The Broadcast packets sent since the WG102 was restarted. The Multicast packets sent since the WG102 was restarted. The Wireless packets sent since the WG102 was restarted. The Wireless bytes sent since the WG102 was restarted. Click the Refresh button to update the statistics on this screen.
For each device, the table shows the Station ID, MAC address, IP Address, and Status (whether the device is allowed to communicate with the wireless access point or not).

4-5 v1.0, November 2005

Note that if the wireless access point is rebooted, the table data is lost until the wireless access point rediscovers the devices. To force the wireless access point to look for associated devices, click the Refresh button. Note: A wireless network can include multiple wireless access points, all using the same network name (SSID). This extends the reach of the wireless network. Users can roam from one access point to another, providing seamless network connectivity. If this is the case, only the stations associated with this access point are shown in the Available Station List.
Upgrading the Wireless Access Point Firmware
Warning: When uploading firmware to the WG102 Access Point, do not interrupt the Web browser by closing the window, clicking a link, or loading a new page. If the browser is interrupted, the upload may fail, corrupt the firmware, and render the WG102 completely inoperable You cannot upgrade the firmware from a computer that is connected to the WG102 with a wireless link. You must use a computer that is connected to the WG102 with an Ethernet cable. The WG102 Access Point firmware is stored in FLASH memory, and can be upgraded as new firmware is released by NETGEAR. You can download the upgrade files from the NETGEAR Web site. If the upgrade file is compressed (.ZIP file), you must first extract the image (.IMG) file before you send it to the wireless access point. The upgrade file can be sent using your browser. Note: The Web browser used to upload new firmware into the WG102 must support HTTP uploads, such as Microsoft Internet Explorer 6.0 or above, or Netscape Navigator 4.78 or above. Follow the steps below to upgrade the firmware: 1. Download the file from NETGEAR, save it to your hard disk, and unzip it. 2. If you want to save your configuration settings, see Backing up and Restoring the Configuration on page 4-7. 3. From the main menu Management section, click the Upgrade Firmware link. 4. In the Upgrade Firmware menu, click the Browse button and browse to the location of the image (.IMG) upgrade file.

Configuring Advanced Wireless LAN Settings
The default advanced wireless LAN settings usually work well. If you want the AP to operate in Super-G mode, use this feature.
Figure 5-5 5-5 v1.0, November 2005
The advanced wireless settings normally do not need to be changed. Super-G Mode. Super-G Mode is a proprietary extension to the 802.11g standard, which can double the throughput to 108Mbps. Only compatible wireless stations can use this mode. The default is Disable. WMM support. WMM (Wireless Multimedia) is a subset of the 802.11e standard. WMM allows wireless traffic to have a range of priorities, depending on the kind of data. Timedependent information, like video or audio, have a higher priority than normal traffic. For WMM to work correctly, wireless clients must also support WMM. The default is Disable. RTS Threshold. Request to Send Threshold. The packet size that is used to determine if it should use the Carrier Sense Multiple Access with Collision Detection mechanism (CSMA/ CD) or the CSMA/CA mechanism for packet transmission. With CSMA/CD, the transmitting station sends the packet as soon as it has waited for the silence period. With CSMA/CA, the transmitting station sends out an RTS packet to the receiving station, and waits for the receiving station to send back a Clear to Send (CTS) packet before sending the packet data. The default is 2346. Fragmentation Length. This is the maximum packet size used for fragmentation. Packets larger than this size will be fragmented. The Fragment Threshold value must be larger than the RTS Threshold value. The default is 2346. Beacon Interval. The interval time (between 20ms and 1000ms) for each beacon transmission. The default is 100. DTIM Interval. The Delivery Traffic Indication Message (DTIM) specifies the data beacon rate between 1 and 255. The default is 1. Preamble Type. A long transmit preamble may provide a more reliable connection or slightly longer range. A short transmit preamble gives better performance. Auto automatically handles both long and short preambles. The default is Auto.
Wireless Bridging and Repeating
The WG102 Access Point lets you build large bridged wireless networks. Note: All bridge mode options are not available when AutoCell Auto RF Management is enabled (the default setting).

5-6 v1.0, November 2005

Examples of wireless bridged configurations are: Point-to-Point Bridge. The WG102 communicates with another bridge-mode wireless station. See Point-to-Point Bridge Configuration on page 5-8. Multi-Point Bridge. The WG102 is the master for a group of bridge-mode wireless stations. Then all traffic is sent to this master, rather than to other access points. See Multi-Point Bridge Configuration on page 5-9. Repeater with Wireless Client Association. Sends all traffic to the remote AP. See Repeater with Wireless Client Association on page 5-11.

NETGEAR WG102 ProSafe 802.11g Wireless Access Point Web-based configuration and status monitoring Limited by the amount of wireless network traffic generated by each node; typically 15 to 20 nodes. Power/Ethernet LAN/Wireless LAN/Test 12V DC, 1 A FCC Part 15 Class B, CE, C-TICK, Medical EMC EN60601 Operating temperature: 0 to 45 C Operating humidity: 5-95%, non-condensing 802.11b: 1 and 2 Mbps, Direct Sequence Spread Spectrum (DSSS) 802.11b: 5.5 and 11 Mbps, Complementary Code Keying (CCK) 802.11g: All rates, Orthogonal Frequency Division Multiplexing (OFDM) Limited by the amount of wireless network traffic generated by each node. Typically 30-70 nodes.
Maximum Computers Per Wireless Network: 802.11b and g Radio Data Rate 802.11b and g Operating Frequencies and Channels 802.11b and g Typical Maximum Transmit Power
1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54, and 108 Mbps (Auto-rate
capable) 2.412 ~ 2.462 GHz (North America), Channels 1-11 2.412 ~ 2.472 GHz (Europe including France and Spain, and Japan), Channels 1-13 802.11b mode, 1 to 11Mbps: +19 dBm* 802.11g mode, 6 to 24 Mbps: +18 dBm* 802.11g mode, 36/48/54 Mbps: +17/16/15 dBm* *Note: Maximum transmit power varies based on country or region selection to ensure local regulatory compliance.

A-1 v1.0, November 2005

Parameter 802.11b and g Typical Receive Sensitivity
NETGEAR WG102 ProSafe 802.11g Wireless Access Point 802.11b mode at 1Mbps: -95 dBm 802.11b mode at 2 Mbps: -93 dBm 802.11b mode at 5.5 Mbps: -91dBm 802.11b mode at 11 Mbps: -89 dBm 802.11g mode at 6 Mbps: -91 dBm 802.11g mode at 9 Mbps: -90 dBm 802.11g mode at 12 Mbps: -89 dBm 802.11g mode at 18 Mbps: -87 dBm 802.11g mode at 24 Mbps: -84 dBm 802.11g mode at 36 Mbps: -81 dBm 802.11g mode at 48 Mbps: -77 dBm 802.11g mode at 54 Mbps: -75 dBm 802.11g mode at 108 Mbps: -72 dBm

Antenna: 802.11 Security

One (1) external 5 dBi 2.4 GHz detachable antenna 40-bits (also called 64-bits), 128, and 152-bits WEP data encryption; WPA and WPA2

A-2 v1.0, November 2005

Appendix B Related Documents
This appendix provides links to reference documents you can use to gain a more complete understanding of the technologies used in your NETGEAR product.
Document Internet Networking and TCP/ IP Addressing: Wireless Communications: Preparing a Computer for Network Access: Virtual Private Networking (VPN): Glossary: Link
http://documentation.netgear.com/reference/enu/tcpip/index.htm http://documentation.netgear.com/reference/enu/wireless/index.htm http://documentation.netgear.com/reference/enu/wsdhcp/index.htm http://documentation.netgear.com/reference/enu/vpn/index.htm http://documentation.netgear.com/reference/enu/glossary/index.htm