802.11I And Wpa - LevelOne WAB-2000 User Manual

WAB–2000 Wireless Access Point
Utilities exist for scanning for networks and logging all the networks
it runs into—including the real SSIDs, the access point's MAC address,
the best signal-to-noise ratio encountered, and the time the user crossed
into the network's space. These utilities can be used to determine whether
your network is unsecured. Note that, if WEP is enabled, that same WEP
key must also be set on each wireless device that is to become part of the
wireless network, and, if "shared key" is accepted, then each wireless de-
vice must also be coded for "shared key". To use WEP encryption, iden-
tify the level of encryption, the Default WEP key and designate the WEP
keys as shown on the screen.

802.11i and WPA

Wi-Fi Protected Access or WPA was designed to enable use of wire-
less legacy systems employing WEP while improving security. WPA uses
improved data encryption through the temporal key integrity protocol
(TKIP) which scrambles keys using a hashing algorithm and, by adding
an integrity-checking feature, ensures that the keys haven't been tam-
pered with. In addition, user authentication is enabled using the exten-
sible authentication protocol (EAP).
If you wish to use WPA on the WAB–2000, enable either WPA Pre-
shared Key Settings or WPA 802.1x Settings.
If you are a SOHO user, selecting pre-shared key means that you
don't have the expense of installing a Radius Server. Simply input up to
63 character / numeric / hexadecimals in the Passphrase field. If your
clients use WPA-TKIP, select TKIP as encryption type. If your clients use
WPA-AES, select AES-CCMP.
Enable pre-authentication to allow a client to authenticate in advance
with the AP before the client is associated with it. Allowing the AP to
pre-authenticate a client decreases the transition time when a client roams
between APs.
Re-keying time is the frequency in which new encryption keys are
generated and distributed to the client. The more frequent re-keying, the
better the security. For highest security, select the lowest re-keying inter-
val.
As an alternative, for business applications who have installed Radius
Servers, select WPA 802.1x and input the Primary and Backup Radius
Server settings. Use of Radius Server for key management and authenti-
cation requires that you have installed a separate certification system and
each client must have been issued an authentication certificate.
Once you have selected the options you will use, click Apply.
32
Chapter 3: Access Point Configuration
29000156-001 A