HP procurve 420 Management And Configuration Manual page 116

Access Point Configuration
Configuring Wireless Security
5-58
Multicast Cipher Mode: Selects an encryption method for the global
■
key used for multicast and broadcast traffic, which is supported by all
wireless clients.
• WEP: WEP is the first generation security protocol used to encrypt
data crossing the wireless medium using a fairly short key. Commu-
nicating devices must use the same WEP key to encrypt and decrypt
radio signals. WEP has many security flaws, and is not recommended
for transmitting highly-sensitive data.
• TKIP: TKIP provides data encryption enhancements including per-
packet key hashing (that is, changing the encryption key on each
packet), a message integrity check, an extended initialization vector
with sequencing rules, and a re-keying mechanism.
• AES: AES has been designated by the National Institute of Standards
and Technology as the successor to the Data Encryption Standard
(DES) encryption algorithm, and will be used by the U.S. government
for encrypting all sensitive, nonclassified information. Because of its
strength, and resistance to attack, AES is also being incorporated as
part of the 802.11 standard.
WPA Pre-Shared Key Type: If the WPA pre-shared-key mode is used, all
■
wireless clients must be configured with the same key to communicate
with the access point.
• Hexadecimal: Enter a key as a string of 64 hexadecimal numbers.
• Alphanumeric: Enter a key as an easy-to-remember form of letters
and numbers. The string must be from 8 to 63 characters, which can
include spaces.
To Configure WPA in Enterprise Mode:
Select the Configuration tab.
1.
2. Click the [ button.
Radius]
3. Configure parameters for the primary RADIUS server and, optionally, a
secondary RADIUS server. See "Web: Setting RADIUS Server Parameters"
on page 5-28 for more details.
4. Click the
[Apply Changes]
5. Select the Security tab.
6. Click the [
Authentication]
7. Under 802.1x Setup, select Required.
8. If there are clients in the service area that are not WPA-enabled, enter time
periods for refreshing the session and broadcast encryption keys, and for
re-authenticating the client.
button.
button.