HP ProCurve 420 Management And Configuration Manual page 134

Access Point Configuration
Configuring Wireless Security
5-76
Dynamic WEP (802.1x): Use 802.1X for user authentication and to pass
■
dynamic WEP unicast session keys and static broadcast keys to wireless
clients. Requires a RADIUS server to be configured and available in the
wired network. You can also configure 802.1X parameters for reauthenti­
cation and key rotation, so the access point changes the dynamic keys at
a specified intervals.
WPA (802.1x-AES): Use WPA with 802.1X for user authentication and
■
to dynamically distribute encryption keys to clients. Sets the multicast
encryption cipher as AES, which must be supported on all wireless clients.
Requires a RADIUS server to be configured and available in the wired
network. The 802.1X parameters for reauthentication and key refresh can
also be configured.
WPA (802.1x-TKIP): Use WPA with 802.1X for user authentication and
■
to dynamically distribute encryption keys to clients. Sets the multicast
encryption cipher as TKIP, which must be supported on all wireless
clients. Requires a RADIUS server to be configured and available in the
wired network. The 802.1X parameters for reauthentication and key
refresh can also be configured.
■ Manual Configuration (CLI): Use the CLI to manually configure a
specific security setting other than those provided by the wizard. The
current configuration of security parameters is displayed in the Web
interface window.
• Authentication: Indicates the basic 802.11 authentication setting for
the access point; either "open" or using shared keys.
– Open: Accepts network access attempts from any client without
authentication using a static shared WEP key. This setting is
required if you plan to use WPA or 802.1X as a security mecha­
nism. If no other security mechanism is configured, the network
has no protection and is open to all users.
– Shared Key: The access point is using static WEP shared keys
for the authentication of clients. This setting requires that at least
one WEP key is configured on the access point and all clients.
• WPA Mode: Indicates if WPA support is required by clients that are
attempting access to the network.
– wpa-disabled: WPA is disabled. Clients do not use WPA to gain
access to the network.
– wpa-required: Only WPA-enabled clients can gain access to the
network.
– wpa-supported: Supports clients with or without WPA. Clients
only capable of supporting WEP can also access the network.
• 802.1x: Indicates if 802.1X is used for the authentication of clients.