Table of Contents
Advertisement
7190_en_02
Figure 3-42
Setting WEP encryption
The basic encryption levels of WEP with 64-bit or 128-bit key lengths have become
standard. They ensure compatibility with all standard-compliant client adapters available
on the market. Since the WEP standard has been completely compromised, WEP only
offers protection from inquisitive and unauthorized persons. Once a sufficient amount of
encrypted data has been written it is very easy for hackers to penetrate WLANs only
protected with WEP using suitable software tools.
Authentication type: When "Automatic" is selected, the device selects the authentication
mode itself. "Open System" mode is the default authentication type.
In "Shared Key" mode, an extended handshake mechanism is used during login, however
this does not increase security.
Key encoding: Key encoding in either ASCII or HEX can be used. With ASCII, 7-bit
encoding is used, with HEX, it is 16-bit encoding.
WPA/PSK
In "WPA/PSK" mode, a keyword is used in combination with a special encryption method.
The keyword (pre-shared key, PSK) should have a minimum of eight and a maximum of
63 characters. Words should not be selected, instead combinations of letters and numbers
should be used.
NOTE: In PROFIsafe applications, the PSK must be at least 20 characters long.
Encryption algorithm: This option can be used to specify whether all encryption methods
should be supported or only one specific method. Please note that standard WPA 2 must
be supported by all devices in order to ensure communication.
WPA/RADIUS
In "WPA/RADIUS" mode, the access point uses an available RADIUS server for the
authentication of user accounts. The IP address of the RADIUS server must be entered in
the IP address field.
The TCP port, on which the RADIUS server is operated, must also be entered under "TCP
port". As a rule, the RADIUS server runs on TCP port 1812.
The RADIUS keyword is used to identify and authenticate the access point at the RADIUS
server.
If two RADIUS servers are used, another configuration can be entered under "Secondary"
as an alternative. The entry under "Secondary" is only used if the primary RADIUS server
cannot be reached.
Startup and functions
3-45
PHOENIX CONTACT
Advertisement
Table of Contents
