Security - SMC Networks EliteConnect SMC2555W-AG2 User Manual

6
System Configuration
CLI Commands for the 802.11g Wireless Interface – From the global configuration
mode, enter the interface wireless g command to access the 802.11g radio
interface. The 802.11g radio can be forced to an 802.11g-only, 802.11b-only, or
mixed 802.11b/g operating mode using the radio-mode command. You should set
the desired operating mode before configuring channel settings (the default is mixed
802.11b/g operation). Select a radio channel or set selection to Auto using the
channel command. Set any other radio settings as required before enabling the
VAP interface (with the no shutdown command). To view the current 802.11g radio
settings for the VAP interface, use the show interface wireless g [0~7] command
as shown on 7-95.
Enterprise AP(config)#interface wireless g
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#radio-mode g
Enterprise AP(if-wireless g)#channel auto
Enterprise AP(if-wireless a)#transmit-power full
Enterprise AP(if-wireless a)#super-g
Enterprise AP(if-wireless g)#preamble short
Enterprise AP(if-wireless g)#

Security

The access point is configured by default as an "open system," which broadcasts a
beacon signal including the configured SSID. Wireless clients with an SSID setting
of "any" can read the SSID from the beacon and automatically set their SSID to
allow immediate connection to the nearest access point.
To improve wireless network security, you have to implement two main functions:
• Authentication: It must be verified that clients attempting to connect to the network
are authorized users.
• Traffic Encryption: Data passing between the access point and clients must be
protected from interception and eavesdropping.
For a more secure network, the access point can implement one or a combination of
the following security mechanisms:
• Wired Equivalent Privacy (WEP)page 6-69
• IEEE 802.1Xpage 5-15
• Wireless MAC address filteringpage 6-13
• Wi-Fi Protected Access (WPA or WPA2)page 6-78
Both WEP and WPA security settings are configurable separately for each virtual
access point (VAP) interface. MAC address filtering, and RADIUS server settings
are global and apply to all VAP interfaces.
The security mechanisms that may be employed depend on the level of security
required, the network and management resources available, and the software
support provided on wireless clients.
6-68
7-88
7-99
7-98
7-98
7-106
7-100