Nortel 120 Using Manual page 93

Wireless security considerations
Security mechanism
WPA2 with 802.1X
WPA2 PSK Mode
The access point can simultaneously support clients using various different
security mechanisms. The configuration for these security combinations are
outlined in the following table. Note that MAC address authentication can
be configured independently to work with all security mechanisms and is
indicated separately in the table. Required RADIUS server support is also
listed.
Security combinations
Security combinations
Client security
combination
No encryption and
no authentication
Copyright © 2006, Nortel Networks
.
Client support
Requires WPA-enabled
system and network card
driver
Requires WPA-enabled
system and network card
driver
Note: You must enable data encryption through the Web interface to
enable all types of encryption (WEP, TKIP, or AES) in the access point.
Configuration summary
Interface Detail Settings:
Authentication: Open
System
Encryption: Disable
802.1x: Disable
Using the Nortel Business Access Point 120
NN47921-301 01.01 Standard
1.0 August 2006
1 MAC authentication
Local, RADIUS, or Disabled
BAP120
WebUI navigation 93
Implementation
considerations
• Provides the strongest
security in WPA2-only mode
• Provides robust security in
mixed mode for WPA and
WPA2 clients
• Offers fast roaming
for time-sensitive client
applications
• Requires configured RADIUS
server
• 802.1X EAP type can
require management of digital
certificates for clients and
server
• Clients can require hardware
upgrade to be WPA2 compliant
• Provides robust security in
small networks
• Requires manual
management of preshared
key
• Clients can require hardware
upgrade to be WPA2 compliant
2 RADIUSserv
er
No
Nortel Networks Confidential