ZyXEL Communications ARMOR G1 User Manual page 104

Chapter 10 Wireless LAN
User Authentication
You can make every user log in to the wireless network before they can use it. This is called user
authentication. However, every wireless client in the wireless network has to support IEEE 802.1x to do
this.
For wireless networks, there are two typical places to store the user names and passwords for each user.
• In the AP: this feature is called a local user database or a local database.
• In a RADIUS server: this is a server used in businesses more than in homes.
If your AP does not provide a local user database and if you do not have a RADIUS server, you cannot
set up user names and passwords for your users.
Unauthorized devices can still see the information that is sent in the wireless network, even if they cannot
use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user
name and password. Then, they can use that user name and password to use the wireless network.
Local user databases also have an additional limitation that is explained in the next section.
Encryption
Wireless networks can use encryption to protect the information that is sent in the wireless network.
Encryption is like a secret code. If you do not know the secret code, you cannot understand the
message.
The WPA-PSK (WiFi Protected Access-Pre-Shared Key) security mode provides both improved data
encryption and user authentication over WEP. Using a pre-shared key, both the Zyxel Device and the
connecting client share a common password in order to validate the connection. This type of
encryption, while robust, is not as strong as WPA, WPA2 or even WPA2-PSK. The WPA2-PSK security mode
is a more robust version of the WPA encryption standard. It offers slightly better security, although the use
of PSK makes it less robust than it could be. The WPA3-SAE (Simultaneous Authentication of Equals
handshake) is the newer security mode that protects against dictionary attacks by implementing a new
key exchange protocol.
Guest WLAN
Guest WLAN allows you to set up a wireless network where users can access to Internet via the NBG6818
(Z), but not other networks connected to it. In the following figure, a guest user can access the Internet
from the guest wireless network A via Z but not the home or company network N.
Note: The home or company network N and Guest WLAN network are independent networks.
Note: Only Standard Mode supports guest WLAN.
NBG6818 User's Guide
104