User's Manual

W IRELESS
3-15
• WPA-PSK (automatically)
Notes: 1. Manual Pre-Shared Key supports up to 64-Hex characters.
2. Type 8~63 Hex characters for the Pre-Shared Passphrase.
3. Do not use a key that is too long and complex for your clients to type
accurately.
4. A Hex (hexadecimal) digit is a number or letter in the
range 0-9 or A-F.
For enterprise deployment, WPA requires a RADIUS authentication server
to be configured on the wired network. The 802.1x client and RADIUS
server should use an appropriate EAP type - such as EAP-TLS (Transport
Layer Security), EAP-TTLS (Tunneled TLS), or PEAP (Protected EAP) -
for strongest authentication. Working together, these protocols provide
"mutual authentication" between a client, the access point, and a RADIUS
server that prevents users from accidentally joining a rogue network. Only
when a RADIUS server has authenticated a user’s credentials will
encryption keys be sent to the access point and client.
Note: To implement WPA on wireless clients requires a WPA-enabled
network card driver and 802.1x client software that supports
theEAP authentication type that you want to use. Windows XP
provides native WPA support, other systems require additional
software.