Implementing An 802.1X Security Solution - Intermec MobileLAN access WA21 System Manual

Chapter 6 — Configuring Security

Implementing an 802.1x Security Solution

156
WEP Configuration Parameter Descriptions
Parameter Explanation
Enable WEP Determines if you are using WEP 64/128/152 security.
Encryption
Allow Unencrypted Determines if the access point will receive transmissions from
Clients wireless end devices that are not using WEP encryption.
Check this check box to accept transmissions from devices that
are not using WEP encryption.
Clear this check box to block transmissions from end devices
that are not using WEP encryption.
WEP Transmit Key Determines which of the four WEP keys this access point uses
to transmit data.
WEP Key 1 through For WEP 64, enter five ASCII characters or five hex pairs. For
WEP Key 4 WEP 128, enter 13 ASCII characters or hex pairs. For WEP
128, enter 16 ASCII characters or hex pairs.
To enter a hexadecimal key, prefix it with 0x. For example, the
ASCII key ABCDE is equivalent to 0x4142434445.
MobileLAN access products can help implement 802.1x security in an
802.11b or 802.11a network. The IEEE 802.1x standard provides an
authentication protocol for 802.11 LANs. 802.1x provides strong
authentication, access control, and key management, and lets wireless
networks scale by allowing centralized authentication of wireless end
devices. Intermec can provide a complete 802.1x security solution. For
more information, see the MobileLAN secure 802.1x Security Solution
Installation Guide (P/N 073134).
The 802.1x authentication process uses a RADIUS server, which is the
authentication server, and access points, which are the authenticators, to
manage the wireless end device authentication and wireless connection
attributes. Extensible Authentication protocol (EAP) authentication types
provide devices with secure connections to the network. They protect
credentials and data privacy. Examples of EAP authentication types
include Transport Layer Security (EAP-TLS) and Tunneled Transport
Layer Security (EAP-TTLS).
To implement 802.1x security, you must have the following:
• A trusted certificate authority (CA), which issues digital authentication
certificates. The authentication server must have a certificate installed
on it. Also, if the end devices are using EAP-TLS, each one needs a
client certificate.
Intermec and others can provide the service of acting as a certificate
authority and can issue certificates. For more information, contact your
local Intermec representative.
MobileLAN access System Manual