NETGEAR WAX628 User Manual page 72

Insight Managed WiFi 6 AX5400 Access Point Model WAX628
and clients that do not. For clients that do not support the WiFi open enhanced
feature, traffic is not encrypted.
If you clear the Allow Devices to Connect with Open check box, the WiFi
network can only accept clients that support the WiFi enhanced open feature.
• WPA2 Personal: This option, which is the same as WPA2-PSK, is the default
setting and uses AES encryption. This type of security enables only WiFi devices
that support WPA2 to join the VAP.
WPA2 provides a more secure connection than WPA but some legacy WiFi devices
do not detect WPA2 and support only WPA. If your network includes such older
devices, select WPA2/WPA Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
• WPA2/WPA Personal: This option, which is the same as WPA2-PSK/WPA-PSK,
enables WiFi devices that support either WPA2 or WPA to join the VAP. This
option uses AES and TKIP encryption.
WPA-PSK (which uses TKIP) is less secure than WPA2-PSK (which uses AES) and
limits the speed of WiFi devices to 54 Mbps.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
• WPA2 Enterprise: This enterprise-level security uses RADIUS for centralized
Authentication, Authorization, and Accounting (AAA) management. For WPA2
Enterprise security to function, you must set up RADIUS servers (see Set up RADIUS
servers on page 128).
From the Encryption menu, select the data encryption mode:
- TKIP + AES: This type of data encryption enables WiFi devices that support
either WPA or WPA2 to join the access point's WiFi network. This is the default
mode.
- AES: This type of data encryption provides a secure connection but some
older WiFi devices do not detect WPA2 and support only WPA. Therefore, if
your network includes such older devices, select TKIP + AES encryption.
When you select WPA2 Enterprise authentication, the Dynamic VLAN radio
buttons display:
- Enable: The RADIUS server can assign a VLAN ID to clients. If the RADIUS
server does not do so, the clients are automatically assigned the VLAN ID that
you configured for the SSID.
- Disable: The clients are assigned the VLAN ID that you configured for the
SSID. This is the default setting.
Manage the Basic WiFi Features
for a WiFi network
72 User Manual