HP R110 Configuration And Administration Manual page 18

WPA and WPA2: Wi-Fi Protected Access (WPA) was introduced as an interim solution for the
vulnerability of WEP, replacing WEP encryption with TKIP. WPA2 includes the complete
wireless security standard (802.1 1i) and offers backward compatibility with WPA, but uses the
stronger AES-CCMP encryption. Both WPA and WPA2 provide an "enterprise" and "personal"
mode of operation. The "personal" WPA Pre-Shared Key mode uses a common password
phrase for user authentication that is manually entered on the router and all wireless clients. The
"enterprise" mode of WPA and WPA2 uses IEEE 802.1X for user authentication and requires a
RADIUS authentication server to be configured on the wired network. WPA2 is more secure
than WPA (TKIP) or WEP, therefore HP recommends that you select WPA2 for maximum
possible security.
The router provides the following Authentication Mode and Encryption Type options:
•
Open: Allows a client to associate with the router without any authentication, but provides
the option of using WEP for encrypting data. If WEP encryption is used, clients must have
the correct WEP key to exchange traffic with the router. Selecting WEP encryption also
provides the option of using 802.1X for user authentication from a RADIUS server, which
dynamically generates WEP keys and distributes them to all clients.
•
WPA2: The Enterprise mode of WPA2 using AES encryption. If all clients in the network
are WPA2 compatible, select this option for maximum security. This mode requires the use
of a RADIUS server.
•
WPA2-PSK: The Personal (pre-shared key) mode of WPA2 using AES encryption. The pre-
shared key mode uses a common password phrase for user authentication that is manually
entered on the router and all wireless clients. Data encryption keys are automatically
generated by the router and distributed to all clients connected to the network.
•
WPA/WPA2 Enterprise: The WPA2 Enterprise mode for mixed clients, that is, when
there are some wireless clients in the network that support only WPA (TKIP encryption). This
setting enables both WPA and WPA2 clients to associate and authenticate, but uses the
more robust AES encryption (WPA2) for clients that support it. This option allows more
interoperability at the expense of some security. This mode requires the use of a RADIUS
server.
•
WPA/WPA2-PSK Mixed: The WPA2 Personal mode for mixed clients, that is, when
there are some wireless clients in the network that support only WPA (TKIP encryption). This
setting enables both WPA and WPA2 clients to associate and authenticate, but uses the
more robust AES encryption (WPA2) for clients that support it. This option allows more
interoperability at the expense of some security.
•
WEP Keys: To configure WEP keys on the router you must first specify the key length and
type. You must configure at least one key, although up to four keys can be entered. Only
four WEP keys are supported for each radio, that is, the four keys are shared by all SSIDs
using a static WEP security configuration. Therefore, you must have a consistent WEP key
setup for all SSIDs. Note that the number of keys, the key index (1-4), type, and length must
match those configured on the clients.
18 Using the Wizard Setup
•
Key Length:
64-bit
128-bit