Siemens SCALANCE W788-1PRO Operating Instructions Manual page 165

Configuration Using Web Based Management and the Command Line Interface
● WPA2-PSK
WPA2-PSK is based on the WPA2 standard, WPA authentication, however,
operates without a
stored on every client
and access point and this is used for authentication and further encryption
AES or TKIP is used as the encryption method, AES represents the standard
method.
● WPA2
WPA2 (Wi-Fi Protected Access 2) is a further development of WPA and
implements
the additional encryption protocol CCMP that allows fast roaming in mobile ad
hoc networks with its preauthentication. A client can log on in advance and
several access points so that t
A RADIUS server is used to authenticate the client with an access point. The
cli ent logs on at a RADIUS server based on a certificate (EAP-TLS) or a
combination of user name and password (EAP-PEAP or EAP-TTLS / internal
authentication m
identifies itself to the client using a certificate. Following successful
authentication, the client and RADIUS server generate key material that is
used for data encryption. AES or TKIP is used as the encryption method, AES
represents the standard method.
● WPA-Auto-PSK
Setting with which an access p
WPA2-PSK type of authentication. This is necessary when the access point
communicates with d
PSK. The same enc
● WPA-Auto
Setting with which an
of auth
differen
method mu
Encry ption
Encryption protects the
can only disable encryp
All other security methods include both authentication and encryption.
Operating Instructions SCALANCE W78x
C79000-G8976-C184-07
RADIUS server. Instead of this, a key (pass phrase) is
the functions of the IEEE 802.11i security standard. WPA2 uses
ethod MSCHAPv2). As an option, the RADIUS server then
ifferent clients, some using WPA-PSK and others WPA2-
ryption method must be set on the clients.
access point can process both the WPA and WPA2 type
entication. This is nece
t clients, some using W
st be se t on the clients.
transferr ed data from eavesdropping and corruption. You
tion if you have
he normal authentication can be omitted.
oint can process both the WPA-PSK as well as
ssary when th e access point co
PA and othe rs WPA2. The sam
selected Open Sys
.
mmunicate s with
e encryptio n
tem for authentication.
165