Key Source - Colubris Networks WCB-200 Admin Manual

WCB-200 Admin Guide
• 802.1x: This option enables support for 802.1x with or without WEP. Must be used with a
RADIUS server.
• WPA: This option enables support for WPA with TKIP, supporting either a RADIUS server or a
pre-shared key (PSK).
• WPA2: This option enables support for WPA2 with AES/CCMP, supporting either a RADIUS
server or a pre-shared key (PSK).

Key source

PSK
Only available if Wireless protection is set to WPA or WPA2.
• Key: The WCB-200 uses the key you specify in the Key field to generate the TKIP or
AES/CCMP keys that encrypt the wireless data stream. Since this is a static key, it is not as
secure as the RADIUS option. Specify a key that is between 8 and 63 alphanumeric characters
in length. It is recommended that the preshared key be at least 20 characters long, and be a
mix of letters and numbers. The double quote character (") should not be used.
RADIUS
The WCB-200 obtains the Microsoft Point-to-Point Encryption (MPPE) keys from a RADIUS server
(via the remote AP). This is a dynamic key that changes each time the WCB-200 logs in and is
authenticated by the AP. The MPPE key is used to generate the WEP, TKIP or AES/CCMP keys
that encrypt the wireless data stream.
• EAP method: Select the Extensible Authentication Protocol (EAP) authentication method the
WCB-200 will use when connecting to the AP.
• PEAP version 0 / PEAP version 1: These two options have the same configuration settings.
PEAP version 0 only supports MS-CHAP V2 as the inner EAP protocol. PEAP version 1
only supports EAP-GTC (generic token card) as an inner EAP protocol. Both require the
use of a RADIUS server by the remote AP.
• Username: Specify the username assigned to the WCB-200 on the remote AP's
RADIUS server.
• Password: Specify the password assigned to the WCB-200 on the remote AP's
RADIUS server.
• Anonymous: Specify the outer authentication username for the TLS tunnel.
• TLS: Requires that a TLS certificate is installed on the WCB-200 and that the remote AP
provides support for authentication via a RADIUS server.
• TLS identity: Specify the name that was used when creating the TLS certificate.
• TLS certificate: Select the Transport Layer Security certificate to send to the AP for
authentication. (The certificate must first be installed on the Security > 802.1X
certificates page before you can select it.)
• TTLS: This option requires that the remote AP provides support for authentication via a
RADIUS server. Only supports MS-CHAP V2 as the inner EAP protocol.
• Username: Specify the username assigned to the WCB-200 on the remote AP's
RADIUS server.
30 4 Working with the WCB-200