Table of Contents
Advertisement
System Configuration
The security mechanisms that may be employed depend on the
level of security required, the network and management
resources available, and the software support provided on
wireless clients. A summary of wireless security considerations is
listed in the following table.
Security
Mechanism
WEP
WEP with
802.1x
MAC Address
Filtering
WPA
Enterprise
Mode
WPA PSK
Mode
Note: Although a WEP static key is not needed for WEP over 802.1x,
WPA over 802.1x, and WPA PSK modes, you must enable WEP
encryption through the web or CLI in order to enable all types of
encryption in the access point.
5-48
Client
Support
Built-in support on all
802.11b and 802.11g
devices
Requires 802.1x client
support in system or by
add-in software
(native support provided
in Windows XP)
Uses the MAC address
of client network card
Requires WPA-enabled
system and network
card driver
(native support provided
in Windows XP)
Requires WPA-enabled
system and network
card driver
(native support provided
in Windows XP)
Implementation Considerations
• Provides only weak security
• Requires manual key management
• Provides dynamic key rotation for
improved WEP security
• Requires configured RADIUS server
• 802.1x EAP type may require
management of digital certificates for
clients and server
• Provides only weak user
authentication
• Management of authorized MAC
addresses
• Can be combined with other methods
for improved security
• Optionally configured RADIUS server
• Provides robust security in WPA-only
mode
• Offers support for legacy WEP clients,
but with increased security risk
• Requires configured RADIUS server
• 802.1x EAP type may require
management of digital certificates for
clients and server
• Provides good security in small
networks
• Requires manual management of
pre-shared key
Advertisement
Table of Contents
