Configure Wireless LAN Access

The Packet Tracer exercise in this section covers how to configure a Linksys WRT300N wireless access point, including how to change or hide the SSID, enable security and enable MAC. Packet Tracer supports only a limited set of LinksysWRT300N configuration skills. To practice all the mentioned skills complete the lab :

Fig.1 – Wireless LAN configuration topology

TASKS:

1 - Connect to wireless router WRT300N via browser using Laptop1(login/pass - admin/admin)

2 - Change SSID name to "bvi"

3 - Enable WEP wireless security using key consisting of 10 Hex digits - "12345abcde"

4 - Connect Laptop1 and Laptop2 to wireless network "bvi" using WEP key. Ping server 10.0.0.2

5 - Change wireless security on WRT300N to WPA2 PSK AES and set passphrase to - "ciscocisco"

6 - Connect Smartphone1 and Smartphone2 to wireless network "bvi" using WPA2 PSK passphrase. Ping server 10.0.0.2

7 - Connect Laptop1 and Laptop2 to wireless network "bvi" using WPA2 PSK passphrase. Ping server 10.0.0.2

8 - Enable Wireless MAC filter, allow wireless for Laptop1 and Laptop2. Ping server 10.0.0.2 from Laptop1 or Laptop2 and also from Smartphone1 or Smartphone2.

9 - Change MAC filter to allow all devices except Laptop1. Ping server 10.0.0.2 from Laptop1 an also from Laptop2 or Smartphone1 or Smartphone2.

10 - Disable SSID broadcast and check visibility from Laptop1.

1 - Connect to wireless router WRT300N via browser using Laptop1(login/pass - admin/admin)

DHCP server is enabled on predefined scenario and security hasn’t been set yet. There is possibility to connect to WRT300N router wirelessly via any device in the range. For this purpose it can be used Laptop1’s desktop application – Web Browser. Type the default gateway address in the URL field (Address of inner router’s interface in LAN – 192.168.0.1). When prompted for a username and password, type admin for bot hand click OK.

Fig.2 – Location of Web Browser application on Laptop1

Fig.3 – Login prompt on router’s address

2 - Change SSID name to "bvi"

In the web browser window displaying the Linksys web page, click the Wireless tab. The Basic Wireless Settings subtab is displayed by default. In the Network Name (SSID) field, rename the network from Default to bvi. Click the Save Settings button at the bottom of the Wireless tab. You loose connectivity to default network. After changing SSID Laptop1 must be reconnect to new SSID bvi. Close the web browser and click Laptop1’s Wireless. The Linksys Wireless Network Monitor v1.0 opens. Click the Connect tab. If necessary, click Refresh to send a probe for wireless access points. The bvi network should be displayed under Wireless Network Name. Click this entry and then click Connect.

Fig.4 – Changing SSID

3 - Enable WEP wireless security using key consisting of 10 Hex digits - "12345abcde"

In the web browser window displaying the Linksys web page, click the Wireless tab. Then click the Wireless Security subtab. From the Security Mode drop-down list, choose WEP. Using the default Encryption setting of 40/64-Bit, set the Key 1 field to 12345abcde . Click the Save Settings button at the bottom of the Wireless tab. Again, you loose connectivity to bvi.

Fig.5 – WEP security mode settings

4 - Connect Laptop1 and Laptop2 to wireless network "bvi" using WEP key. Ping server 10.0.0.2

Close the web browser and click Laptop1’s and Laptop2’s PC Wireless. Click the Connect tab. If necessary, click Refresh to send a probe for wireless access points. The bvi network should display under Wireless Network Name. Click this entry and then click Connect. Enter the WEP Key 1 and click Connect. You should now be able to reconnect to WRT300N using the web browser.

Fig.6 – PC wireless application

Fig.7 – PC wireless adapter settings

Fig.8 – Connecting to bvi network with WEP key 1

Fig.9 – Ping the Server located outside LAN – 10.0.0.2

5 - Change wireless security on WRT300N to WPA2 PSK AES and set passphrase to - "ciscocisco"

In the web browser window displaying the Linksys web page, click the Wireless tab. Then click the Wireless Security subtab. From the Security Mode drop-down list, choose WPA2 Personal. Using the default Encryption setting of AES, set the Passphrase field to ciscocisco . Click the Save Settings button at the bottom of the Wireless tab. Again, you loose connectivity to bvi.

Fig.10 – WPA2 security mode settings

6 - Connect Smartphone1 and Smartphone2 to wireless network "bvi" using WPA2 PSK passphrase. Ping server 10.0.0.2

Connection can be set in Config tab of Smartphone device. It is necessary choose WPA2-PSK option and set passphrase to ciscocisco. Also don’t forget to set proper SSID to bvi. Ping the server 10.0.0.2 for testing connection.

Fig.11 – Connecting Smartphone to bvi network with WPA2-PSK security.

7 - Connect Laptop1 and Laptop2 to wireless network "bvi" using WPA2 PSK passphras. Ping server 10.0.0.2

Using the same procedure mentioned in 4th task is necessary to set WPA2 PSK passphrase to connect Laptop1 and Laptop2 to bvi network with WPA2 security.

8 - Enable Wireless MAC filter, allow wireless for Laptop1 and Laptop2. Ping server 10.0.0.2 from Laptop1 or Laptop2 and also from Smartphone1 or Smartphone2.

Click on Wireless tab and on Wireless MAC Filter subtab. Set the Wireless MAC Filter to Enabled state. Set Access Resolution to Permit PCs listed below to access wireless network. Fulfill the MAC01 and MAC02 field with Laptop1 and Laptop2 MAC addresses. Ping the server 10.0.0.2 from Laptop1, Laptop2, Smartphone1 and Smartphone2. It can be seen the only Laptop1 and Laptop2 have connection. Now check the topology of network to see visualized wireless connection between clients and wireless router.

Fig.12 – Mac Filter settings with Permit list

Fig.13 – Network topology after enabling the Filter with permit list of Laptop1 and Laptop2 MAC addresses

9 - Change MAC filter to allow all devices except Laptop1. Ping server 10.0.0.2 from Laptop1 an also from Laptop2 or Smartphone1 or Smartphone2.

Click on Wireless tab and on Wireless MAC Filter subtab. Set the Wireless MAC Filter to Enabled state. Set Access Resolution to Prevent PCs listed below from accessing wireless network. Fulfill the MAC01 and MAC02 field with Laptop1 MAC address. Ping the server 10.0.0.2 from Laptop1, Laptop2, Smartphone1 and Smartphone2. It can be seen the Laptop1 couldn’t connect to WRT300N. Now check the topology of network to see visualized wireless connection between clients and wireless router.

Fig.14 – Mac Filter settings with Prevent list

Fig.15 – Network topology after enabling the Filter with preventt list of Laptop1 MAC address.

10 - Disable SSID broadcast and check visibility from Laptop1.

Click on Wireless tab and on Basic Wireless Settings subtab. Set the SSID Broadcats to Disabled state. Check the visibility of network bvi from Laptop1.

Fig.16 – Disable the SSID broadcast

Fig.17 – Checking visibility of bvi network from Laptop1.

LINKSYS WRT300N MANUAL - http://homedownloads.cisco.com/downloads/userguide/1224638363654/WRT300N_ug.pdf