User's Manual

Features Overview
Installation and Configuration Guide: Airgo Access Point 5
• NM Portal can provide user authentication services for an entire small to mid size network or
serve as a backup security server if an external RADIUS authentication service is used.
Security
Airgo offers a comprehensive security solution that adheres to the following industry standards and
draft standards:
• Data encryption—WEP, Wi-Fi Protected Access (WPA) with TKIP or AES encryption
• User authentication—IEEE 802.1x authentication, including EAP-PEAP or EAP-TLS; WPA-
PSK
• Key management—Microsoft-IAS, FUNK-RADIUS, Airgo NMS Pro, Airgo integrated
security portal, and manual key management capabilities
These features are part of a security architecture that provides the wireless network a greater degree
of security than most traditional wired networks. The following security features are included with
all Airgo AP:
• Built-in maximum industry-standard security
• Auto-detection of the security capability of clients and APs
• Policy-based configuration of security settings
• Hardware support for high-performance encryption
• Support for installations ranging from the small-office/home-office (SOHO) to multi-site
enterprises
• Command-line access using SSH (secure shell)
• Web-based management interface and policy-based management using HTTPS (SSL)
• SNMP management interface through SNMPv3
• IEEE 802.11i standards
• User-authentication using EAP-TLS, EAP-PEAP, WPA-PSK, WEP
• Rogue AP detection
• Rogue client detection
VLANs
By decoupling traffic flow and network services from the physical network topology, virtual LANs
(VLANs) enable enterprises improve network traffic flow, increase load, and deliver varying levels
of service and access to different groups of users. The Airgo AP VLAN feature readily extends an
existing wired VLAN structure to the wireless network. It can also be used to implement new
network privileges and services; for example, user VLANs are integral to the Airgo guest access
feature (see “Guest Access” on page 6).
Airgo supports interface-based VLANs and user-based VLANs. Interface VLANs separate traffic
according to the Ethernet and radio interfaces on the Airgo AP. Packets destined for a specific
interface VLAN are directed to the port with that VLAN assigned. By contrast, user VLANs
separate traffic according to user groups. Users can be assigned to the same VLAN even if they are
in different physical LANs and at geographically dispersed locations. User VLANs are useful for
managing manage enterprise work groups and differentiating among categories of users. The Airgo
Access Point supports up to 16 VLANs, including a default VLAN.