Table of Contents
Advertisement
◆
◆
◆
◆
WEP provides a basic level of security, preventing unauthorized access to
W
E
IRED
QUIVALENT
the network, and encrypting data transmitted between wireless clients and
P
(WEP)
RIVACY
the access point. WEP uses static shared keys (fixed-length hexadecimal or
alphanumeric strings) that are manually distributed to all clients that want
to use the network.
WEP is the security protocol initially specified in the IEEE 802.11 standard
for wireless communications. Unfortunately, WEP has been found to be
seriously flawed and cannot be recommended for a high level of network
security. For more robust wireless security, the access point provides Wi-Fi
Protected Access (WPA) for improved data encryption and user
authentication.
WPA-WPA2 Mixed: Clients using WPA or WPA2 are accepted for
■
authentication.
WPA-WPA2-PSK-mixed: Clients using WPA or WPA2 with a Pre-
■
shared Key are accepted for authentication.
Encryption Method — Selects an encryption method for the global
key used for multicast and broadcast traffic, which is supported by all
wireless clients.
WEP: WEP is used as the multicast encryption cipher. You should
■
select WEP only when both WPA and WEP clients are supported.
TKIP: TKIP is used as the multicast encryption cipher.
■
AES-CCMP: AES-CCMP is used as the multicast encryption cipher.
■
AES-CCMP is the standard encryption cipher required for WPA2.
802.1X — The access point supports 802.1X authentication only for
clients initiating the 802.1X authentication process (i.e., the access
point does not initiate 802.1X authentication). For clients initiating
802.1X, only those successfully authenticated are allowed to access the
network. For those clients not initiating 802.1X, access to the network
is allowed after successful wireless association with the access point.
The 802.1X mode allows access for clients not using WPA or WPA2
security.
Pre-Authentication — When using WPA2 over 802.1X, pre-
authentication can be enabled, which allows clients to roam to a new
access point and be quickly associated without performing full 802.1X
authentication. (Default: Disabled)
802.1x Reauthentication Time — The time period after which a
connected client must be re-authenticated. During the re-
authentication process of verifying the client's credentials on the
RADIUS server, the client remains connected the network. Only if re-
authentication fails is network access blocked. (Range: 0-65535
seconds; Default: 0 means disabled)
– 97 –
| Wireless Settings
C
8
HAPTER
Virtual Access Points (VAPs)
Advertisement
Table of Contents
