Netopia 6161210-00-01 User manual

Netopia®3-D Reach Utility
April 2007
Netopia®3-D Reach Wireless Adapters
User Guide

2
Copyright
Copyright © 2007 Netopia, Inc.
Netopia and the Netopia logo are registered trademarks belonging to Netopia, Inc., registered U.S. Patent and Trademark Office.
Broadband Without Boundaries and 3-D Reach are trademarks belonging to Netopia, Inc. All other trademarks are the property of
their respective owners. All rights reserved.
Netopia, Inc. Part Number: 6161210-00-01

1
Table of Contents
Table of Contents
Copyright . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Netopia 3D Reach Utility Installation . . . . . . . . . . . . . . . . . . . . . 3
For Microsoft Windows 98SE, ME, 2000. . . . . . . . . . . . . . . . . . . . . . . . 3
For Microsoft Windows XP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Macintosh Mac OS X 10.2 and higher and Linux drivers . . . . . . . . . . . 3
Start the Netopia 3D REACH Utility . . . . . . . . . . . . . . . . . . . . . . 4
Site Survey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
ADD/EDIT Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Encryption Setting WEP/TKIP/AES . . . . . . . . . . . . . . . . . . . . . 10
802.1x Setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
CA Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Link Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Advanced . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Country Channel List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
About . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Example: Adding a profile in the site survey page . . . . . . . . . . 26
Example: Adding a profile in the Profile page . . . . . . . . . . . . . . 31
Configure connection with WEP ON . . . . . . . . . . . . . . . . . . . . 39
Configure connection with WPA-PSK . . . . . . . . . . . . . . . . . . . . 43
Configure connection with WPA by 802.1x setting . . . . . . . . . . 47
Excursuses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

Table of Contents
2

3
Netopia 3D Reach Utility Installation
Netopia 3D Reach Utility Installation
For Microsoft Windows 98SE, ME, 2000
1. Insert the CD. The Setup utility will run automatically and load the driver for the Netopia
3D Reach Wireless PC Card.
When the installation is complete, a new Wireless communication icon will appear in
your system tray in the Windows toolbar.
2. Click the Wireless icon to start the Netopia WLAN Utility. See “Start the Netopia 3D
REACH Utility” on page 4.
For Microsoft Windows XP
1. Insert the CD. The Setup utility will run automatically and load the driver for the Netopia
3D Reach Wireless PC Card.
When the installation is complete, a new Wireless communication icon will appear in
your system tray in the Windows toolbar.
2. Click the Wireless icon to start the Windows Zero Configuration Utility. Refer to
Microsoft for documentation on the utility.
Macintosh Mac OS X 10.2 and higher and Linux drivers
The Netopia 3-D Reach Utility only supports Windows 98, 2K, ME, and XP. Additional driver
support for other Operating Systems may be downloaded from the Ralink Support website
at www.ralink.com.tw . These drivers have not been tested and are not supported by
Netopia.

4
Start the Netopia 3D REACH Utility
When you start the Netopia 3D REACH Utility and select “Use Netopia 3D REACH as Con-
figuration utility” for the first time, the system will connect to the Access Point with best
signal strength and matching security setting. When you start the Netopia 3D REACH Util-
ity, it will issue a scan command to the wireless adapter. After two seconds, the list will be
updated with the results of the BSS list scan. The list includes the most commonly-used
fields, such as SSID, signal percentage, current channel, encryption status, authentication
mode, and network type. The green handshake icon indicates the connected BSS or IBSS
network, as shown in figure 2-1.
Figure 2-1 First page shown when starting the Netopia 3D REACH Utility
While the Netopia 3D REACH Utility is running, there is also a small Netopia 3D REACH Util-
ity icon appearing within the Windows taskbar as shown in figure 2-2. You can double click
it to display the main menu, if you chose to close the Netopia 3D REACH Utility menu ear-
lier. You can also right-click on it and select the option Exit to exit the Netopia 3D REACH
Utility.

5
Start the Netopia 3D REACH Utility
[Windows XP users only, Note:] When the Netopia 3D REACH Utility exits from the system,
it will restore WZC to its initial state before starting Netopia 3D REACH Utility, for example,
if WZC is stopped before the Netopia 3D REACH Utility started. WZC will stay stopped after
the Netopia 3D REACH Utility terminated. If WZC is running before the Netopia 3D REACH
Utility is started, it will be re-enabled after the Netopia 3D REACH Utility exited.
Figure 2-2 Netopia 3D REACH Utility icon
In addition, the small icon will change color to reflect the current wireless network connec-
tion status. The status is indicated as follows:
: Indicates Connected and Signal Strength is Excellent/Good.
: Indicates Connected and Signal Strength is Fair/Poor
: Indicates Not Connected yet.
: Indicates Wireless card or driver not ready.

6
Site Survey
Under the Site Survey tab, the system displays the information of surrounding Access
Points from the results of the last scan. List information includes SSID, BSSID, Signal,
Channel, Encryption Algorithm, and Network Type as shown in Figure 3-1.
Figure 3-1 Detail information of site survey page
Definition of each field
1. SSID: Name of BSS or IBSS network.
2. BSSID: MAC address of Access Point or randomly generated from IBSS.
3. Signal: Received signal strength of specified network.
4. Channel: Channel in use.
5. Encryption: Encryption algorithm used within the BSS or IBSS. Valid value includes WEP,
TKIP, AES, and Open.

7
Site Survey
6. Authentication: Authentication mode used within the network, including Open, WEP-Key,
WPA-PSK and WPA.
7. Network Type: Network type in use, Infrastructure for BSS, Ad-Hoc for IBSS network.
Connected network:
1. When the Netopia 3D REACH Utility is running, it will automatically select the best
Access Point to which to connect.
2. If you want to connect to another Access Point, you can double click on the desired
Access Point to make the connection.
3. If the desired network has encryption other than “Open”, the Netopia 3D REACH Utility
will display the security page and let you input the appropriate information to make the
connection. Refer to section 4 on how to fill in the security information.
This icon indicates the connection is successful.
Indicates the connection status; the connected network's SSID will show up here.
The numbers of SSID found in your surrounding wireless network.
Issue a rescan command to the wireless device to update information on the surround-
ing wireless network.
Command to connect to the selected wireless network.
Add the selected Access Point to the Profile setting. It will display the Profile page and
save your setting to the profile setting.

8
ADD/EDIT Profile
1. System Configuration as shown in figure 3-2.
Figure 3-2_Profile system configuration
Profile Name: You can enter a name for this profile.
SSID: You can input the intended SSID name or use the pull down menu to select from
the available Access Points.
Power Save Mode: You can choose CAM (Constantly Awake Mode) or Power Saving
Mode.
Network Type: There are two types, infrastructure and 802.11 ad-hoc mode. Under ad-
hoc mode, you can also choose the preamble type. The available preamble type includes
short and long. Also, the channel field will be available for setup in ad-hoc mode.

9
ADD/EDIT Profile
RTS Threshold: You can adjust the RTS threshold number by sliding the bar or key
directly to a value. The default value is 2347.
Fragment Threshold: You can adjust the Fragment threshold number by sliding the bar
or key directly to a value. The default value is 2346.
Channel: Only available for setting under ad-hoc mode. You can choose the channel fre-
quency for your ad-hoc network.
2. Authentication and Security settings are shown in figure 3-3. Detailed operations are
explained in section 4.
Figure 3-3 Profile Authentication and Security

10
Encryption Setting WEP/TKIP/AES
Authentication and Security settings, shown in figure 4-1.
Figure 4-1 Authentication and Security setting
Authentication Type: Three types of authentication modes are supported by the Neto-
pia 3D REACH Utility: Open, Shared, WPA-PSK and WPA system.
Encryption Type: For Open and Shared authentication mode, the selections of encryp-
tion type are None and WEP. For WPA and WPA-PSK authentication mode, the encryption
types that are supported are TKIP and AES.
WPA Preshared Key: This is the shared key between the Access Point and the STA. For
WPA-PSK authentication mode, this field must be filled in with between 8 and 32 charac-
ters.

11
Encryption Setting WEP/TKIP/AES
WEP Key: Only valid when using WEP encryption algorithm. The key must match the
Access Point's key. There are several formats to enter the keys.
1. Hexadecimal`40bits: 10 Hex characters.
2. Hexadecimal`128bits: 32Hex characters.
3. ASCII`40bits: 5 ASCII characters.
4. ASCII`128bits: 13 ASCII characters.
**See the examples in “Configure connection with WEP ON” on page 39, “Configure con-
nection with WPA-PSK” on page 43, and “Configure connection with WPA by 802.1x set-
ting” on page 47**

12
802.1x Setting
802.1x is an authentication protocol for a “WPA” certificate to an authentication server.
Shown as figure 14-14
Authentication type:
1. PEAP: Protect Extensible Authentication Protocol. PEAP transport securely authenti-
cates data by using tunneling between PEAP clients and an authentication server. PEAP
can authenticate wireless LAN clients using only server-side certificates, thus simplify-
ing the implementation and administration of a secure wireless LAN.
2. TLS/Smart Card: Transport Layer Security. Provides for certificate-based and mutual
authentication of the client and the network. It relies on client-side and server-side cer-
tificates to perform authentication and can be used to dynamically generate user-based
and session-based WEP keys to secure subsequent communications between the
WLAN client and the access point.

13
802.1x Setting
3. TTLS: Tunneled Transport Layer Security. This security method provides for certificate-
based, mutual authentication of the client and network through an encrypted channel.
Unlike EAP-TLS, EAP-TTLS requires only server-side certificates.
4. LEAP: Light Extensible Authentication Protocol. It is an EAP authentication type used pri-
marily in Cisco Aironet WLANs. It encrypts data transmissions using dynamically gener-
ated WEP keys, and supports mutual authentication.
5. MD5-Challenge: Message Digest Challenge. Challenge is an EAP authentication type
that provides base-level EAP support. It provides for only one-way authentication - there
is no mutual authentication of wireless client and the network.
Identity and Password: Identity and password for the server.
Use Client Certificate: Client Certificate for server authentication.
Protocol: Tunnel protocol, List information include “EAP-MSCHAP “, “EAP-MSCHAP v2”,
“CAHAP “and “MD5 “.
Tunnel Identity: Identity for a tunnel.
Tunnel Password: Password for a tunnel.

14
CA Server
Depending on the EAP in use, only the server or both the server and client may be authen-
ticated and require a certificate. Server certificates identify a server, usually an authentica-
tion or RADIUS server to clients. Most EAPs require a certificate issued by a root authority
or a trusted commercial Certificate Authority. Shown as the figure below.
Certificate issuer: Choose the server that issues certificates.
Allow intermediate certificates: Must be in the server certificate chain between the
server certificate and the server specified in the Certificate issuer field.
Server name: Enter an authentication server root.

15
Profile
Profile
You can save your favorite wireless setting among your home, office, and other public
hotspots in a Profile. You can save multiple profiles, and activate the correct one at your
preference. Figure 5-1 shows the Profile page setting.
Figure 5-1 Profile page
Definition of each field:
1. Profile: Name of profile, default preset to PROF* (* indicates 1, 2, 3, etc.).
2. SSID: Access Point's or Ad-hoc's name.
3. Channel: Channel in use.
4. Authentication: Authentication mode.
5. Encryption: Security algorithm in use.
6. Network Type: Network's type, including Infrastructure and Ad-Hoc.

16
Connection status
Indicates connection is successful on current activated profile.
Indicates connection failed on current activated profile.
Add a new profile.
Delete an existing profile.
Edit a Profile.
Activate selected profile.

17
Link Status
Link Status
Figure 6-1 is the Link Status page; it displays detailed information about the current con-
nection.
Figure 6-1 Link Status information
Status: Current connection status. If there is no connection, it will show Disconnected.
Otherwise, the connected SSID and BSSID will be shown here.
Extra Info: Display link status and current channel in use.
Link Speed: Display current transmit rate and receive rate.
Throughput: Displays throughput (Tx: transmits and Rx: receives) in units of Kbits/sec.

18
Signal Strength: Reception signal strength; you can choose to display as a percentage
or dBm format.
Displays wireless card's TCP/IP and physical address information.