Cisco QuickVPN - PC Administration Manual page 111

Wireless Configuration for the SA 520W
Configuring an Access Point
STEP 4
Cisco SA 500 Series Security Appliances Administration Guide
- WPA (Wi-Fi Protected Access): WPA provides better security than WEP
because it uses dynamic key encryption. This standard was
implemented as an intermediate measure to replace WEP, pending final
completion of the 802. 1 1i standard for WPA2. WPA supports TKIP or
TKIP+CCMP encryption (default is TKIP) and PSK/RADIUS
authentication. This option is a good choice if you need to allow access
to devices that do not support WPA2.
- WPA2: WPA2 provides the best security for wireless transmissions. This
method implements the security standards specified in the final version
of 802. 1 1i. WPA2 supports CCMP or CCMP+TKIP encryption (default is
CCMP) and PSK/RADIUS authentication. WPA2 is recommended,
although some devices may not support this security mode. To protect
your information as it is transmitted over the airwaves, you should enable
the highest level of encryption supported by your network equipment.
- WPA + WPA2: This mode allows both WPA and WPA2 clients to connect
simultaneously. This option is a good choice to enable a higher level of
security while allowing access by devices that might not support WPA2.
• Encryption: Select the encryption method to be used. For WPA, the choices
are TKIP or TKIP+CCMP. For WPA, the choices are CCMP or CCMP+TKIP.
CCMP is stronger than TKIP and is recommended. However, some wireless
devices may support only TKIP.
• Authentication: For WPA/WPA2, select the WPA/WPA2 authentication
method to be used: RADIUS, PSK, or PSK + RADIUS.
• WPA Password: For PSK authentication, enter a pre-shared key. The key can
include up to 64 ASCII characters. The clients also need to be configured
with the same password.
• Enable Pre-Authentication: If you chose RADIUS as the Authentication
method, you can check this box to enable Pre-Authentication for this profile.
• AP Isolation: Check this box to create a separate virtual network for the
clients that use this profile. When this feature is enabled, each client is in its
own virtual network and will not be able to communicate with other clients.
If you chose WEP as the Security Type, enter the following information in the WEP
Index and Keys area:
• Authentication: Select either Open System or Shared Key scheme. Shared
key is recommended.
4
111