Security Profiles - NETGEAR ProSafe WG102-500 Reference Manual

WG102-500, WGAP150 ProSafe™ 802.11g Wireless Access Point
• WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP
Shared Key authentication and WEP data encryption block all but the most determined
eavesdropper. This data encryption mode has been superseded by WPA-PSK and
WPA2-PSK. For information about how to configure static and dynamic WEP, see
"Configuring Static WEP" on page 40
WEP)" on page
• WPA and WPA-PSK (TKIP). Wi-Fi Protected Access (WPA) data encryption provides
strong data security with Temporal Key Integrity Protocol (TKIP) encryption. The very
strong authentication along with dynamic per frame rekeying of WPA make it virtually
impossible to compromise. WPA uses RADIUS-based 802.1x authentication; WPA-PSK
uses a pre-shared key (PSK) for authentication. For information about how to configure
WPA, see "Configuring WPA and WPA-PSK (TKIP)" on page
• WPA2 and WPA2-PSK (AES). Wi-Fi Protected Access version 2 (WPA2) data encryption
provides strong data security with Advanced Encryption Standard (AES) encryption. The
very strong authentication along with dynamic per frame rekeying of WPA2 make it
virtually impossible to compromise. WPA2 uses RADIUS-based 802.1x authentication;
WPA2-PSK uses a pre-shared key (PSK) for authentication. For information about how to
configure WPA2, see
• WPA+WPA2 and WPA-PSK+WPA2-PSK Mixed Modes. These modes support data
encryption either with both WPA and WPA2 clients or with both WPA-PSK and
WPA2-PSK clients and provide the most reliable security. For information about how to
configure WPA+WPA2 and WPA-PSK+WPA2-PSK, see
WPA-PSK+WPA2-PSK Mixed Modes" on page

Security Profiles

Security profiles let you configure unique security settings for each SSID. The wireless
access point supports up to 16 BSSIDs that you can configure in the individual Edit Wireless
Network screens that are accessible from the Wireless Networks screen (see
Editing Security Profiles" on page
To set up a security profile you select its network authentication type, data encryption,
wireless client security separation, and VLAN ID:
• Network Authentication
The wireless access point is set by default as an open system with no authentication.
When you configure network authentication, bear in mind that not all wireless adapters
support WPA or WPA2. Windows XP, Windows 2000 with Service Pack 3, and Windows
Vista do include the client software that supports WPA. However, client software is
required on the client. Consult the product documentation for your wireless adapter and
WPA or WPA2 client software for instructions on configuring WPA2 settings.
For information about the types of network authentication that the wireless access point
supports, see "Creating and Editing Security Profiles" on page
• Data Encryption
Select the data encryption that you want to use. The available options depend on the
and
41.
"Configuring WPA2 and WPA2-PSK (AES)" on page
37).
"Configuring Legacy 802.1X (or Dynamic
41.
"Configuring WPA+WPA2 and
44.
37.
43.
"Creating and
| 35