Table of Contents
Advertisement
Pass Phrase option to facilitate the creation of the Pre-Shared Key (so a user can enter
an easy-to-remember phrase rather than a string of characters).
802.11i (also known as WPA v2): The AP authenticates clients according to the 802.11i
•
draft standard, using 802.1x authentication, an AES cipher, and re-keying.
802.11i-PSK (also known as WPA v2 PSK): The AP uses an AES cipher, and
•
authenticates clients based on a Pre-Shared Key. The Pre-Shared Key must be 256 bits
long, which is either 64 hexadecimal digits. The AP also supports a PSK Pass Phrase
option to facilitate the creation of the Pre-Shared Key (so a user can enter an
easy-to-remember phrase rather than a string of characters).
Authentication Protocol Hierarchy
There is a hierarchy of authentication protocols defined for the AP.
The hierarchy is as follows, from Highest to lowest:
1. 802.1x authentication
2. MAC Access Control via RADIUS Authentication
3. MAC Access Control through individual APs' MAC Access Control Lists
If you have both 802.1x and MAC authentication enabled, the 802.1x results will take effect.
This is required in order to propagate the WEP keys to the clients in such cases. Once you
disable 802.1x on the AP, you will see the effects of MAC authentication.
VLAN Overview
Virtual Local Area Networks (VLANs) are logical groupings of network hosts. Defined by
software settings, other VLAN members or resources appear (to clients) to be on the same
physical segment, no matter where they are attached on the logical LAN or WAN segment.
They simplify traffic flow between clients and their frequently-used or restricted resources.
VLANs now extend as far as the reach of the access point signal. Clients can be segmented
into wireless sub-networks via SSID and VLAN assignment. A Client can access the network by
connecting to an AP configured to support its assigned SSID/VLAN.
AP devices are fully VLAN-ready; however, by default VLAN support is disabled. Before
enabling VLAN support, certain network settings should be configured, and network resources
such as a VLAN-aware switch, a RADIUS server, and possibly a DHCP server should be
available.
Once enabled, VLANs are used to conveniently, efficiently, and easily manage your network in
the following ways:
Manage adds, moves, and changes from a single point of contact
•
Define and monitor groups
•
Security Configuration
Issue 1 September 2004
135
Advertisement
Table of Contents
