ZyXEL Communications ZyWall USG20-VPN User Manual page 481

Table 194 Configuration > Object > AP Profile > SSID > Security Profile > Add/Edit Security Profile
LABEL DESCRIPTION
Primary / Select this to have the USG use the specified RADIUS server.
Secondary Radius
Server Activate
Radius Server IP Enter the IP address of the RADIUS server to be used for authentication.
Address
Radius Server Port Enter the port number of the RADIUS server to be used for authentication.
Radius Server Enter the shared secret password of the RADIUS server to be used for authentication.
Secret
MAC Authentication Select this to use an external server or the USG's local database to authenticate wireless
clients by their MAC addresses. Users cannot get an IP address if the MAC
authentication fails.
An external server can use the wireless client's account (username/password) or Calling
Station ID for MAC authentication. Configure the ones the external server uses.
Delimiter Select the separator the external server uses for the two-character pairs within account
(Account)
MAC addresses.
Case (Account) Select the case (upper or lower) the external server requires for letters in the account
MAC addresses.
Delimiter RADIUS servers can require the MAC address in the Calling Station ID RADIUS attribute.
(Calling Station
ID)
Select the separator the external server uses for the pairs in calling station MAC
addresses.
Case (Calling Select the case (upper or lower) the external server requires for letters in the calling
Station ID)
station MAC addresses.
802.1X Select this to enable 802.1x secure authentication.
Auth. Method This field is available only when you set the RADIUS server type to Internal.
Select an authentication method if you have created any in the Configuration >
Object > Auth. Method screen.
ReAuthenticatio Enter the interval (in seconds) between authentication requests. Enter a 0 for unlimited
n Timer
requests.
The following fields are available if you set Security Mode to wep.
Idle Timeout Enter the idle interval (in seconds) that a client can be idle before authentication is
discontinued.
Authentication Type Select a WEP authentication method. Choices are Open or Share key.
Key Length Select the bit-length of the encryption key to be used in WEP connections.
If you select WEP-64:
•
or
•
If you select WEP-128:
•
or
•
Key 1~4 Based on your Key Length selection, enter the appropriate length hexadecimal or
ASCII key.
Chapter 29 Object
Enter 10 hexadecimal digits in the range of "A-F", "a-f" and "0-9" (for example,
0x11AA22BB33) for each Key used.
Enter 5 ASCII characters (case sensitive) ranging from "a-z", "A-Z" and "0-9" (for
example, MyKey) for each Key used.
Enter 26 hexadecimal digits in the range of "A-F", "a-f" and "0-9" (for example,
0x00112233445566778899AABBCC) for each Key used.
Enter 13 ASCII characters (case sensitive) ranging from "a-z", "A-Z" and "0-9" (for
example, MyKey12345678) for each Key used.
USG20(W)-VPN Series User's Guide
481