3Com 3CRWEASYA73 User Manual page 99

Security Client Support
Mechanism
WPA over 802.1X Requires WPA-enabled system
Mode and network card driver
(native support provided in
Windows XP)
WPA PSK Mode Requires WPA-enabled system
and network card driver
(native support provided in
Windows XP)
WPA2 with Requires WPA-enabled system
802.1X and network card driver (native
support provided in Windows
XP)
WPA2 PSK Mode Requires WPA-enabled system
and network card driver (native
support provided in Windows
XP)
NOTE: You must enable data encryption through the web in order to enable all
types of encryption (WEP, TKIP, or AES) in the access point.
The access point can simultaneously support clients using various different
security mechanisms. The configuration for these security combinations are
outlined in the following table. Note that MAC address authentication can be
configured independently to work with all security mechanisms and is indicated
separately in the table. Required RADIUS server support is also listed.
Table 5 Security Considerations
Client Security
Combination
No encryption and no Authentication: Open System
authentication Encryption: Disable
802.1x: Disable
Static WEP only (with Enter 1 to 4 WEP keys
or without shared Select a WEP transmit key for the interface
key authentication)
Authentication: Shared Key or Open System
Encryption: Enable
802.1x: Disable
Implementation Considerations
• Provides robust security in WPA-only mode
(i.e., WPA clients only)
• Offers support for legacy WEP clients, but with
increased security risk (i.e., WEP authentication
keys disabled)
• Requires configured RADIUS server
• 802.1X EAP type may require management of
digital certificates for clients and server
• Provides good security in small networks
• Requires manual management of pre-shared key
• Provides the strongest security in WPA2-only
mode
• Provides robust security in mixed mode for WPA
and WPA2 clients
• Offers fast roaming for time-sensitive client
applications
• Requires configured RADIUS server
• 802.1X EAP type may require management of
digital certificates for clients and server
• Clients may require hardware upgrade to be
WPA2 compliant
• Provides robust security in small networks
• Requires manual management of pre-shared key
• Clients may require hardware upgrade to be
WPA2 compliant
Configuration Summary a
5-51
Security
MAC RADIUS
b Server
Authentication
Local, RADIUS, or Yes 3
Disabled
Local, RADIUS, or Yes c
Disabled