How do I configure the Wireless Primary Network?

 The Primary Network option allows you to configure a variety of wireless security settings.

  1. Login into the device as described in the “How do I log into the modem’s Web User Interface?” FAQ.
  2. On the main menu select Wireless and then click on Primary Network from the left side menu
  • Primary Network – Enabled by default.  Click at the drop down box to disable it.
  • Network Name (SSID) – Defines a unique SSID for the cable modem or uses the default.
  • Closed Network – Disabled by default to allow broadcast of the Primary Network Name (SSID).  When enabled, it hides the selected SSID it is not visible to wireless clients unless manually set up on the client.
  • AP Isolate – Prevents wireless client stations from communicating with each other when enabled.
  • WPA – Enables or disables the Wi-Fi Protected Access (WPA) security protocol. WPA is a subset of the IEEE 802.11i standard. Key differences between WPA and WEP are user authentication and improved data encryption. Setting WPA alone with a pre-shared key requires a RADIUS or TACACS server for authentication. This method is mostly used in large enterprise implementations.
  • WPA-PSK – Enabled by default.  Enables or disables WPA Pre-Shared Key (WPA-PSK). If you do not have an external RADIUS server, use WPA-PSK, which requires a single (identical) password entered into wireless gateway and wireless client. As long as the passwords match, a client is granted access to the wireless LAN. This is the default residential subscriber setting and uses TKIP encryption.
  • WPS2 – Enables or disables WPA2. This advanced protocol is certified through Wi-Fi Alliance's WPA2 program and implements the mandatory elements of 802.11i. In particular, it has an AES-based algorithm (CCMP) that is considered fully secure. Setting WPA2 alone with a pre-shared key requires a RADIUS or TACACS server for authentication. This method is mostly used in large enterprise implementations.
  • WPA2-PSK – Enabled by default.  Enables or disables WPA2-PSK. If you do not have an external RADIUS server, use WPA2-PSK, which requires a single (identical) password entered into wireless gateway and wireless client. As long as the passwords match, a client is granted access to the wireless LAN. This is the recommended residential subscriber option. It is more secure than WPA-PSK and uses AES encryption.
  • WPA/WPA2 Encryption – Sets WPA/WPA2 encryption to AES or TKIP+AES. The default is TKIP+AES.
  • WPA Pre-Shared Key – Displays (checked) or hides (unchecked) the WPA key. The encryption mechanisms for WPA and WPA-PSK are the same, except that WPA-PSK uses a simple common password instead of user-specific credentials. The default value is based the model number plus the last 6 characters of the cable modem’s MAC address (with letters in upper case).  Example:  DVW3201B9822E3
  • Show Key – Displays the pre-shared key when checked. The pre-shared key for the DDW365 is the 13 characters of the modem’s serial number.
  • RADIUS Server – Defines the IP address of the RADIUS server, if used.
  • RADIUS Port – Defines a RADIUS port number when WPA or 802.1x network authentication is selected.
  • RADIUS Key – Defines the RADIUS Key when WPA or 802.1x network authentication is selected.
  • Group Key Rotation Interval – Allows the device to generate the best possible random group key and update all the key-management capable stations periodically.
  • WPA/WPA2 Re-auth Interval – Sends a new group key to all clients at the specified interval for a wireless router (if using WPA-PSK key management) or RADIUS server (if using WPA key management). The rekeying process is the WPA equivalent of automatically changing the WEP key for a wireless access point and all stations in the WLAN on a periodic basis. Setting the WPA Group Key Update Timer is also supported in WPA-PSK mode.
  • WEP Encryption – Enables or disables WEP encryption. If you do not have wireless clients that can use WPA or WPA2, you can use WEP key encrypting. A higher bit key offers better security. WEP encryption scrambles the data transmitted between the wireless stations and the DDW365 to keep network communications private. It encrypts unicast and multicast communications in a network. Both the wireless stations and the DDW365 must use the same WEP key. Data Encryption can be set to WEP 128- bit, 64-bit, or Disable.
  • Shared Key Authentication – Defines Shared Key Authentication as optional or required. Shared Key is an authentication method used by wireless LANs, which follow the IEEE 802.11 standard. Wireless devices authenticate each other by using a secret key that is kept by both devices.
  • 802.1x Authentication – Enables or disables 802.1x to authenticate wireless clients.
  • Network Key 1-4 – Pre-defines up to 4 keys for 64-bit or 128-bit (64-bit keys require 10 hexadecimal digits) (128-bit key require 26 hexadecimal digits).
  • Current Network Key – Selects one of the four pre-defined keys as the current network key.
  • Passphrase – Sets the WEP encryption key by entering a word or group of printable characters in the Passphrase box and clicking Generate WEP keys. These characters are case sensitive.
  • Generate WEP Keys – Forces the device to generate 4 WEP keys automatically.
  • Apply – Saves changes.

Automatic Security Configuration – Sets up WPS (Wi-Fi Protected Setup) for devices connecting to the wireless network.

  • WPS/Disabled – Enables or disables WPS option. When enabled, the following fields are available.
  • WPS Config State – Defines if the WPS has been configured or not.
  • Device Name – Defines a name for this wireless cable modem for WPS.  Default is UbeeAP.

WPS Setup AP

  • UUID – Defines the universal unique identifier (UUID) for this access point.
  • PIN – Defines the Personal Identification Number for this access point.

WPS Add Client

  • Add a client – Activates wireless protected setup (WPS) security on the device.  To add a client:

            1. Click Add a client. The WPS Add Client screen is displayed.

            2. Click PUSH on the WPS Add Client screen. The WPS button is activated on the device, indicated by a flashing white light         on top of the unit.

            3. Press the WPS button on the device.

  • Client PIN – Defines a PIN number for client access.
  • Authorized Client MAC – Defines the MAC address of the authorized client.