Table of Contents
Advertisement
802.11i/WPA and WEP. The function of the encryption is to ensure the security
level of cable-bound LANs also in Wireless LANs.
Use encryption on the data transferred in the WLAN. Activate the strong-
est possible encryption available to you ((802.11i with AES, WPA or WEP)
and enter the appropriate keys or passphrases into the access point and
the WLAN clients.
Regularly change the WEP keys in your access points. The passphrases for
802.11i or WPA do not have to be changed regularly as new keys are gen-
erated for each connection anyway. This is not the only reason that the
encryption with 802.11i/AES or WPA/TKIP is so much more secure than
the now aged WEP method.
If the data is of a high security nature, you can further improve the encryp-
tion by additionally authenticating the client with the 802.1x method or
activate an additional encryption of the WLAN connection as used for VPN
tunnels ('IPSec over WLAN'). In special cases, a combination of these two
mechanisms is possible.
Further details to WLAN security and the used encoding methods can
be found in the LCOS reference manual.
5.1.5
802.1x / EAP
The international industry standard IEEE 802.1x and the Extensible Authenti-
cation Protocol (EAP) enables the realization of reliable and secure access
controls for base stations. The access data is centrally administered on a
RADIUS server then, and can be retrieved by the base station if required.
Moreover, this technology makes enables a secured dispatch and a regular
automatic change of WEP keys. In this way IEEE 802.1x improves the protec-
tion efforts of WEP.
In Windows XP the IEEE-802.1x technology is already integrated by default.
For other operating systems 802.1x client software is available.
The drivers for the LANCOM AirLancer wireless cards already feature an inte-
grated 802.1x client.
5.1.6
IPSec over WLAN
By means of IPSec over WLAN a radio network can be optimally secured in
addition to the already introduced securing mechanisms. In order to run IPSec
over WLAN you need an external VPN gateway and the LANCOM Advanced
VPN Client, which runs under the operating systems Windows 2000, Windows
LANCOM WLC-4006 - LANCOM WLC-4025
Chapter 5: Security settings
83
Advertisement
Table of Contents
