ZyXEL Communications EMG2926-Q10A User Manual page 69

The types of encryption you can choose depend on the type of user authentication. (See
for information about this.)
Table 17 Types of Encryption for Each Type of Authentication
NO AUTHENTICATION
Weakest No Security
Static WEP
WPA-PSK
Strongest WPA2-PSK
For example, if the wireless network has a RADIUS server, you can choose WPA or WPA2. If users
do not log in to the wireless network, you can choose no encryption, Static WEP, WPA-PSK, or
WPA2-PSK.
Usually, you should set up the strongest encryption that every wireless client in the wireless
network supports. For example, suppose the AP does not have a local user database, and you do
not have a RADIUS server. Therefore, there is no user authentication. Suppose the wireless network
has two wireless clients. Device A only supports WEP, and device B supports WEP and WPA.
Therefore, you should set up Static WEP in the wireless network.
Note: It is recommended that wireless networks use WPA-PSK, WPA, or stronger
encryption. IEEE 802.1x and WEP encryption are better than none at all, but it is
still possible for unauthorized devices to figure out the original information pretty
quickly.
Note: It is not possible to use WPA-PSK, WPA or stronger encryption with a local user
database. In this case, it is better to set up stronger encryption with no
authentication than to set up weaker encryption with the local user database.
When you select WPA2 or WPA2-PSK in your EMG2926-Q10A, you can also select an option
(WPA/WPA-PSK Compatible) to support WPA/WPA-PSK as well. In this case, if some wireless
clients support WPA and some support WPA2, you should set up WPA2-PSK or WPA2 (depending
on the type of wireless network login) and select the WPA/WPA-PSK Compatible option in the
EMG2926-Q10A.
Many types of encryption use a key to protect the information in the wireless network. The longer
the key, the stronger the encryption. Every wireless client in the wireless network must have the
same key.
Guest WLAN
Guest WLAN allows you to set up a wireless network where users can access to Internet via the
EMG2926-Q10A (Z), but not other networks connected to the Z. In the following figure, a guest
user can access the Internet from the guest wireless network A via Z but not the home or company
network N.
Note: The home or company network N and Guest WLAN network are independent
networks.
Chapter 9 Wireless LAN
RADIUS SERVER
WPA
WPA2
EMG2926-Q10A User's Guide
69
page 68