Table 10 Types Of Encryption For Each Type Of Authentication - ZyXEL Communications NXC-8160 User Manual

Chapter 4 WLAN Settings
4.2.1.2 Encryption
Wireless networks can use encryption to protect the information that is sent in the wireless
network. Encryption is like a secret code. If you do not know the secret code, you cannot
understand the message.
The types of encryption you can choose depend on the type of user authentication.

Table 10 Types of Encryption for Each Type of Authentication

Weakest
Strongest
For example, if the wireless network has a RADIUS server, you can choose WEP & 802.1x
Authentication or WPA. If users do not log in to the wireless network, you can choose no
encryption, WEP or WPA-Personal or WPA-Enterprise.
Usually, you should set up the strongest encryption that every wireless client in the wireless
network supports. For example, suppose the AP does not have a local user database, and you
do not have a RADIUS server. Therefore, there is no user authentication. Suppose the wireless
network has two wireless clients. Device A only supports WEP, and device B supports WEP
and WPA. Therefore, you should set up WEP in the wireless network.
It is recommended that wireless clients use WPA-Personal, WPA-Enterprise,
or stronger encryption. IEEE 802.1x and WEP encryption are better than none
at all, but it is still possible for unauthorized devices to figure out the original
information pretty quickly.
It is not possible to use WPA or stronger encryption with a local user database. In this case, it
is better to set up stronger encryption with no authentication than to set up weaker encryption
with the local user database.
Many types of encryption use a key to protect the information in the wireless network. The
longer the key, the stronger the encryption. Every wireless client in the wireless network must
have the same key.
4.2.1.3 Additional Installation Requirements for Using 802.1x
• A computer with an IEEE 802.11 compatible wireless LAN card.
• A computer equipped with a web browser (with JavaScript enabled) and/or Telnet.
• A wireless station must be running IEEE 802.1x-compliant software. Currently, this is
offered in Windows XP.
• An optional network RADIUS server for remote user authentication and accounting.
48
NO AUTHENTICATION
No Security
WEP
WPA-Personal
WPA-Enterprise
RADIUS SERVER
WEP + 802.1x Authentication
WPA
WPA
NXC-8160 User's Guide