Security Settings - Canon Wireless LAN Board-B2 User Manual

Security Settings

This section describes the procedure for specifying the security settings by
selecting the encryption and authentication method to match the access point using
the control panel of the machine.
2
Selecting the Encryption and Authentication Method
This section describes the procedure for selecting the encryption and
authentication method using the control panel of the machine.
The encryption and authentication method can also be set to 'Off'. However, this will
make it easy for third parties to intercept transmitted data. For security purposes, it
is recommended you set one of the following encryption and authentication
methods when using wireless LAN communications.
■ WPA/WPA2+802.1X/EAP
Security can be further improved by combining WPA with 802.1X authentication using a
RADIUS server. WPA and WPA2 are encryption technologies that address the
weaknesses of Static WEP for increased security. As the WEP key used in Static WEP is
fixed, there is the possibility that it can be decoded. However with WPA, the TKIP
(Temporal Key Integrity Protocol) or AES-CCMP (Advanced Encryption Standard-Counter
Mode with Cipher Block Chaining Message Authentication Code Protocol) provide a
function for automatically updating the encryption key.
To select WPA/WPA2+802.1X/EAP, it is necessary to use the Remote UI to install a root
CA certificate (see "Installing a Root CA Certificate," on p. 2-13). In addition, if you set
EAP-TLS as the EAP type, a wireless LAN card certificate and wireless LAN card private
key must be installed. (See "Installing a Wireless LAN Card Certificate," on p. 2-16 and
"Installing a Wireless LAN Card Private Key," on p. 2-18.)
■ 802.1X/EAP+WEP
Performs 802.1X authentication using a RADIUS server. Dynamic WEP regularly updates
the WEP key automatically to make it even harder to decode the WEP key.
To select 802.1X/EAP+WEP, it is necessary to use the Remote UI to install a root CA
certificate (see "Installing a Root CA Certificate," on p. 2-13). In addition, if you set
EAP-TLS as the EAP type, a wireless LAN card certificate and wireless LAN card private
key must be installed as required. (See "Installing a Wireless LAN Card Certificate,"
on p. 2-16 and "Installing a Wireless LAN Card Private Key," on p. 2-18.)
2-10
Security Settings