Intermec MobileLAN access WA21 System Manual page 157

MobileLAN access System Manual
2 Enable/disable access methods. For example, if you are not using Telnet
sessions to configure or manage your access point, you can disable this
access method. For help, see "Controlling Access to Access Point
Menus" on page 144.
3 Use a password server to maintain a list of authorized users who can
configure and manage the access points. You can either use an external
RADIUS server or you can use any access point's embedded
authentication server (EAS).
Or, change the default login for users who need to be able to configure
or manage the access point.
For help, see "Setting Up Logins" on page 145.
4 Enable secure communications between access points, which includes
secure IAPP and secure wireless hops. For help, see "Enabling Secure
Communications Between Access Points" on page 150.
5 Use a RADIUS server to maintain an access control list (ACL), which is
a list of MAC addresses of end devices that can connect to the network
through access point. You can either use an external RADIUS server or
you can use any access point's embedded authentication server (EAS).
For help, see "Using an Access Control List (ACL)" on page 152.
6 Use a dual radio access point to configure VLANs that allow secure and
non-secure communications in your network. For help, see
"Configuring VLANs" on page 162.
7 (802.11b/802.11a) Configure basic WEP 64/128/152 security. You can
configure up to four different WEP keys on the access point and most
wireless end devices, and then you specify which key is being used to
encrypt data. You should periodically change which WEP key these
devices use. For help, see "Configuring WEP 64/128/152 Security" on
page 154.
(OpenAir) Use a security ID. For help, see "Configuring the WLI
Forum OpenAir Radio" in Chapter 4.
8 (802.11b/802.11a) Use an 802.1x security solution. 802.1x security
provides a framework to authenticate user traffic to a protected 802.11b
or 802.11a network. Using 802.1x security provides secure data
transmission by enabling secure IAPP, enabling secure wireless hops,
and dynamically rotating the WEP keys. You configure the access point
as an authenticator.
For the authentication server, you can either use an external RADIUS
server or you can use a newer access point's embedded authentication
server (EAS).
For help, see "Implementing an 802.1x Security Solution" on page 156.
For help troubleshooting security, see "Troubleshooting Security" in
Chapter 8.
Chapter 6 — Configuring Security
143