Wireless Aps; Wireless Network Adapters - Extreme Networks Summit WM Technical Reference Manual

Windows Recommendations and Best Practices
To install user certificates, use auto-enrollment - This requires the use of a Windows Server 2003,
●
Enterprise Edition, or Windows Server 2003, Datacenter Edition, Certificate Services server as an
enterprise CA at the issuer CA level.
Otherwise, to install user certificates, use a CAPICOM script - Alternately, use a CAPICOM script to
●
install both computer and user certificates.
Because certificate revocation checking can prevent wireless access due to the unavailability or
●
expiration of CRLs for each certificate in the certificate chain, design your PKI for high availability of
CRLs. For instance, configure multiple CRL distribution points for each CA in the certificate
hierarchy and configure publication schedules so that the most current CRL is always available

Wireless APs

When choosing and deploying wireless APs, use the following best practices:
Use wireless APs that support WPA2 or WPA. If you must use wireless APs that support only WEP,
●
ensure that they support 802.1X, 128-bit WEP, and the use of both multicast/global and unicast
session encryption keys.
Change the administration configuration of the wireless AP, such as administrator-level user names
●
and passwords, from its default configuration.
If you are installing wireless APs in the plenum area, the space between the ceiling tiles and the
●
ceiling, you must obtain plenum-rated wireless APs to comply with fire safety codes.
To minimize cross talk on the 802.11b wireless frequencies in the S-Band ISM frequency range,
●
overlapping coverage areas should have a five-channel separation. For example, in the United States,
use channels 1, 6, and 11.
If you are using SNMP to manage or configure wireless APs, change the default SNMP community
●
name. If possible, use wireless APs that support SNMPv2.

Wireless Network Adapters

When choosing and deploying wireless network adapters, use the following best practices:
Use wireless network adapters whose drivers support Windows XP Wireless Auto Configuration.
●
Use wireless network adapters that support WPA2 or WPA. If you must use wireless network
●
adapters that support only WEP, ensure that they support 128-bit WEP encryption keys and both
multicast/global and unicast session keys.
Avoid installing wireless configuration tools that are provided with the wireless network adapter
●
and use Windows XP Wireless Auto Configuration.
For easier deployment, use wireless network adapters that have Plug and Play drivers already
●
included with Windows XP or are available through Windows Update
(http://www.windowsupdate.com).
60
Summit WM Technical Reference Guide, Software Version 5.1