SMC Networks EliteConnect SMC2891W-AG User Manual page 124

6
System Configuration
Security
Mechanism
WPA PSK Mode
WPA2 with 802.1X Requires WPA-enabled system
WPA2 PSK Mode Requires WPA-enabled system
Note: You must enable data encryption through the web or CLI in order to enable all
types of encryption (WEP, TKIP, or AES) in the access point.
The access point can simultaneously support clients using various different security
mechanisms. The configuration for these security combinations are outlined in the
following table. Note that MAC address authentication can be configured
independently to work with all security mechanisms and is indicated separately in
the table. Required RADIUS server support is also listed.
Client Security
Combination
No encryption and no
authentication
Static WEP only (with
or without shared key
authentication)
6-72
Table 6-2. Wireless Security Considerations
Client Support
Requires WPA-enabled system
and network card driver
(native support provided in
Windows XP)
and network card driver (native
support provided in Windows
XP)
and network card driver (native
support provided in Windows
XP)
Table 6-3. Security Combinations
Configuration Summary
Interface Detail Settings:
Authentication: Open System
Encryption: Disable
802.1x: Disable
Enter 1 to 4 WEP keys
Select a WEP transmit key for the interface
Interface Detail Settings:
Authentication: Shared Key or Open System
Encryption: Enable
802.1x: Disable
Implementation Considerations
• Provides good security in small networks
• Requires manual management of pre-shared key
• Provides the strongest security in WPA2-only
mode
• Provides robust security in mixed mode for WPA
and WPA2 clients
• Offers fast roaming for time-sensitive client
applications
• Requires configured RADIUS server
• 802.1X EAP type may require management of
digital certificates for clients and server
• Clients may require hardware upgrade to be WPA2
compliant
• Provides robust security in small networks
• Requires manual management of pre-shared key
• Clients may require hardware upgrade to be WPA2
compliant
a
Local, RADIUS,
or Disabled
Local, RADIUS,
or Disabled
MAC RADIUS
Server
b
Authentication
3
Yes
c
Yes