Authentication Method - Ruckus Wireless ZoneDirector 1100 User Manual

Managing a Wireless Local Area Network
Creating a WLAN
CAUTION:
Wireless Performance tool may not function properly. For example, SpeedFlex may be inac-
cessible to users at http://{zonedirector-ip-address}/perf or SpeedFlex may
prompt you to install the SpeedFlex application on the target client, even when it is already
installed. Before using SpeedFlex, verify that both Guest Usage and Wireless Client Isolation
options are disabled. For more information on SpeedFlex, refer to
Network Throughput with SpeedFlex"

Authentication Method

Authentication Method defines the method by which users are authenticated prior to gaining
access to the WLAN. The level of security should be determined by the purpose of the WLAN
you are creating.
• Open [Default]: No authentication mechanism is applied to connections. If WPA or WPA2
encryption is used, this implies WPA-PSK authentication.
• Shared: If you click Shared, only WEP encryption will be available, and the WEP Key option
appears. The Shared authentication type requires creation of a WEP key that is shared by
all users. **Note that because WEP encryption is easily circumvented, Shared authentica-
tion provides little security and should not be used.
• 802.1X/EAP: Uses 802.1X authentication against a user database.
• MAC Address: Uses the device's MAC address for both the user name and password.
• 802.1X EAP + MAC Address: Allows the use of both authentication methods on the same
WLAN. See
Encryption Options
Encryption choices include WPA, WPA2, WPA-Mixed, WEP and none. WPA and WPA2 are both
encryption methods certified by the WiFi Alliance and are the recommended encryption
methods. The Wi-Fi Alliance will be mandating the removal of WEP due to its security
vulnerabilities, and Ruckus Wireless recommends against using WEP if possible.
Method
• WPA: Standard Wi-Fi Protected Access with either TKIP or AES encryption.
• WPA2: Enhanced WPA encryption that complies with the 802.11i security standard.
• WPA-Mixed: Allows mixed networks of WPA and WPA2 compliant devices. Use this setting
if your network has a mixture of older clients that only support WPA and TKIP, and newer
client devices that support WPA2 and AES. **Note that selection of WPA-Mixed disables
the ability to use Zero-IT for this WLAN.
• WEP-64: Provides a lower level of encryption, and is less secure, using 40-bit WEP encryp-
tion.
• WEP-128: Provides a higher level of encryption than WEP-64, using a 104-bit key for WEP
encryption. However, WEP is inherently less secure than WPA.
When Guest Usage or Wireless Client Isolation (below) is enabled, the SpeedFlex
"Using 802.1X EAP + MAC Address Authentication"
on page 276.
"Measuring Wireless
on page 98.
116