Table 35 Comparison Of Eap Authentication Types; Dynamic Wep Key Exchange; Wpa And Wpa2 - ZyXEL Communications NWA570N User Manual

Dynamic WEP Key Exchange

The AP maps a unique key that is generated with the RADIUS server. This key expires when
the wireless connection times out, disconnects or reauthentication times out. A new WEP key
is generated each time reauthentication is performed.
If this feature is enabled, it is not necessary to configure a default encryption key in the
Wireless screen. You may still configure and store keys here, but they will not be used while
Dynamic WEP is enabled.
EAP-MD5 cannot be used with Dynamic WEP Key Exchange
For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use
dynamic keys for data encryption. They are often deployed in corporate environments, but for
public deployment, a simple user name and password pair is more practical. The following
table is a comparison of the features of authentication types.

Table 35 Comparison of EAP Authentication Types

Mutual Authentication
Certificate – Client
Certificate – Server
Dynamic Key Exchange
Credential Integrity
Deployment Difficulty
Client Identity Protection

WPA and WPA2

Wi-Fi Protected Access (WPA)
802.11i) is a wireless security standard that defines stronger encryption, authentication and
key management than WPA.
Key differences between WPA or WPA2 and WEP are improved data encryption and user
authentication.
If both an AP and the wireless clients support WPA2 and you have an external RADIUS
server, use WPA2 for stronger data encryption. If
you should use
password entered into each access point, wireless gateway and wireless client. As long as the
passwords match, a wireless client will be granted access to a WLAN.
If the AP or the wireless clients do not support WPA2, just use WPA or WPA-PSK depending
on whether you have an external RADIUS server or not.
Select WEP only when the AP and/or wireless clients do not support WPA or WPA2. WEP is
less secure than WPA or WPA2.
ZyXEL NWA570N User's Guide
EAP-MD5
No
No
No
No
None
Easy
No
is a subset of the IEEE 802.11i standard. WPA2 (IEEE
WPA2-PSK (WPA2-Pre-Shared Key)
Appendix C Wireless LANs
EAP-TLS EAP-TTLS
Yes Yes
Yes Optional
Yes Yes
Yes Yes
Strong Strong
Hard Moderate
No Yes
you don't have an external RADIUS server,
that only requires a single (identical)
PEAP LEAP
Yes Yes
Optional No
Yes No
Yes Yes
Strong Moderate
Moderate Moderate
Yes No
133