Wpa Enterprise; Table 26: Wpa Enterprise - D-Link DWL-3600AP Administrator's Manual

Unified Access Point Administrator's Guide
WPA Enterprise
WPA Enterprise with RADIUS is an implementation of the Wi‐Fi Alliance IEEE 802.11i standard, which includes
CCMP (AES), and TKIP mechanisms. The Enterprise mode requires the use of a RADIUS server to authenticate
users.
This security mode is backwards‐compatible with wireless clients that support the original WPA.
Field Description
WPA Versions Select the types of client stations you want to support:
• WPA. If all client stations on the network support the original WPA but none support
• WPA2. If all client stations on the network support WPA2, we suggest using WPA2
• WPA and WPA2. If you have a mix of clients, some of which support WPA2 and others
Enable If for WPA Versions you select only WPA2 or both WPA and WPA2, you can enable pre‐
pre‐authentication authentication for WPA2 clients.
Click Enable pre‐authentication if you want WPA2 wireless clients to send pre‐
authentication packet. The pre‐authentication information will be relayed from the AP
the client is currently using to the target AP. Enabling this feature can help speed up
authentication for roaming clients who connect to multiple APs.
This option does not apply if you selected WPA for WPA Versions because the original
WPA does not support this feature.
Cipher Suites Select the cipher suite you want to use:
• TKIP
• CCMP (AES)
• TKIP and CCMP (AES)
By default both TKIP and CCMP are selected. When both TKIP and CCMP are selected,
client stations configured to use WPA with RADIUS must have one of the following:
• A valid TKIP RADIUS IP address and RADIUS Key
• A valid CCMP (AES) IP address and RADIUS Key
Use Global RADIUS By default each VAP uses the global RADIUS settings that you define for the AP at the top
Server Settings of the VAP page. However, you can configure each VAP to use a different set of RADIUS
servers.
To use the global RADIUS server settings, make sure the check box is selected.
To use a separate RADIUS server for the VAP, clear the check box and enter the RADIUS
server IP address and key in the following fields.
RADIUS IP Address Specify the IP version that the RADIUS server uses.
Type
You can toggle between the address types to configure IPv4 and IPv6 global RADIUS
address settings, but the AP contacts only the RADIUS server or servers for the address
type you select in this field.
D-Link
November 2011
Table 26: WPA Enterprise
the newer WPA2, then select WPA.
which provides the best security per the IEEE 802.11i standard.
which support only the original WPA, select both WPA and WPA2. This lets both WPA
and WPA2 client stations associate and authenticate, but uses the more robust WPA2
for clients who support it. This WPA configuration allows more interoperability, at the
expense of some security.
Virtual Access Point Settings
Unified Access Point Administrator's Guide
Page 79