Foundry Networks IronPoint 200 User Manual page 218

Foundry IronPoint 200 User Guide
Encryption – Enable or disable the access point to use data encryption (WEP, TKIP, or AES-
CCMP). If encryption is enabled when set to Open System, you must configure at least one WEP key
on the access point and all clients. (Default: Disabled)
Authentication Setup – Sets the access point as an open system or using one of the following
security settings. Relevant options are displayed when a security setting is selected, other settings
that do not apply are hidden.
• Open System: If you don't set up any other security mechanism on the access point, the network
has no protection and is open to all users. This is the default setting.
• Shared Key: Sets the access point to use WEP shared keys. If this option is selected, you must
configure at least one key on the access point and all clients. You can manually disable
encryption to use WEP keys for authentication only.
• wpa: Clients using WPA over 802.1X are accepted for authentication.
• wpa2: Clients using WPA2 over 802.1X are accepted for authentication.
• wpa-wpa2-mixed: Clients using WPA or WPA2 over 802.1X are accepted for authentication.
• wpa-psk: Clients using WPA Pre-shared Key are accepted for authentication.
• wpa2-psk: Clients using WPA2 Pre-shared Key are accepted for authentication.
• wpa-wpa2-psk-mixed: Clients using WPA or WPA2 Pre-shared Key are accepted for
authentication.
WPA Configuration – Each interface can be configured to allow only WPA-enabled clients to access
the network (Required), or to allow access to both WPA and WEP clients (Supported). (Default:
Required)
Multicast Cipher Mode – Selects an encryption method for the global key used for multicast and
broadcast traffic, which is supported by all wireless clients.
• WEP: WEP is used as the multicast encryption cipher. You should select WEP only when both
WPA and WEP clients are supported.
• TKIP: TKIP is used as the multicast encryption cipher. Select TKIP when there are clients that
may not support AES encryption.
• AES-CCMP: AES-CCMP is used as the multicast encryption cipher. AES-CCMP is the standard
encryption cipher required for WPA2. If clients in the network are not WPA2 compliant, use TKIP
encryption.
WPA Pre-Shared Key Type – If the WPA or WPA2 pre-shared-key mode is used, all wireless clients
must be configured with the same key to communicate with the access point.
• Hexadecimal: Enter a key as a string of 64 hexadecimal numbers.
• Alphanumeric: Enter a key as an easy-to-remember form of letters and numbers. The string
must be from 8 to 63 characters, which can include spaces.
21-22 © 2006 Foundry Networks, Inc. December 2006