User's Manual

System Configuration
5-32
The security mechanisms that may be employed depend on the
level of security required, the network and management
resources available, and the software support provided on
wireless clients. A summary of wireless security considerations is
listed in the following table.
Security
Mechanism
Client
Support
Implementation Considerations
WEP Built-in support on all
802.11a, 802.11b and
802.11g devices
• Provides only weak security
• Requires manual key management
WEP with
802.1x
Requires 802.1x client
support in system or by
add-in software
(native support provided
in Windows XP)
• Provides dynamic key rotation for
improved WEP security
• Requires configured RADIUS server
• 802.1x EAP type may require
management of digital certificates for
clients and server
MAC Address
Filtering
Uses the MAC address
of client network card
• Provides only weak user
authentication
• Management of authorized MAC
addresses
• Can be combined with other methods
for improved security
• Optionally configured RADIUS server
WPA
Enterprise
Mode
Requires WPA-enabled
system and network
card driver
(native support provided
in Windows XP)
• Provides robust security in WPA-only
mode
• Offers support for legacy WEP clients,
but with increased security risk
• Requires configured RADIUS server
• 802.1x EAP type may require
management of digital certificates for
clients and server
WPA PSK
Mode
Requires WPA-enabled
system and network
card driver
(native support provided
in Windows XP)
• Provides good security in small
networks
• Requires manual management of
pre-shared key