Table of Contents
Advertisement
2. Select WPA2 from the Security Mode drop-down field.
3. Select a WPA2 Type of either WPA2 Personal or WPA2 Enterprise menu.
• WPA2 Personal – In this mode, a pre-shared key (password) is used for authentication.
• WPA2 Enterprise – In this mode, authentication is achieved via 802.1X and Extensible
Authentication Protocol (EAP).
4. Select an algorithm from the WPA2 Algorithm drop-down menu. The algorithms are described as
follows.
• TKIP – Defines a "wrapper" that goes around an existing WEP encryption algorithm. TKIP
comprises the same encryption engine and RC4 algorithm defined for WEP. However, the key used
for encryption in TKIP is 128 bits long.
TKIP changes the key used for each packet. The key is created by mixing together a combination of
things, including a base key (called a Pairwise Transient Key), the MAC address of the transmitting
station, and the serial number for the packet.
This mixing operation is designed to put a minimum demand on the CB3000 and its supported
clients, but enough cryptographic strength so it cannot easily be broken.
• CCMP (AES) – Utilizes an Advanced Encryption Standard (AES) 128-bit key algorithm with a 48-bit
initialization vector (IV) for replay detection. The Counter Mode (CM) component of CCMP is the
algorithm providing data privacy. The Cipher Block Chaining Message Authentication Code (CBC-
MAC) component of CCMP provides data integrity and authentication.
• Both – Select Both to enable the CB3000 to interoperate with both TKIP and CCMP supported
clients. This setting is recommended in coverage areas populated by numerous devices
5. Configure the remainder of the fields, as appropriate, per the following descriptions.
WPA2 Personal Only Parameters follow:
•
– Specify a shared key both the CB3000 and its connected device must use to
WPA2 Shared Key
exchange data encrypted using WPA1.
Figure 3.6 WPA2 Configuration
3-13
Network Configuration
Advertisement
Table of Contents
