User's Manual

Chapter 3: Connections and setup
37
Illustrationscontainedinthisdocumentareforrepresentationonly.
WPA(Wi‐FiProtectedAccess)/WPA2: 
ItmustbeusedinconnectionwithanauthenticationserversuchasRADIUStoprovide
centralizedaccesscontrolandmanagement.Itcanprovidestrongerencryptionand
authenticationsolutionthannoneWPAmodes.WPA2isthesecondgenerationofWPAsecurity.
TherearetwotypesforchooseAESandTKIP+AES.
TKIP(TemporalKeyIntegrityProtocol):Takestheoriginalmasterkeyonlyasastartingpointand
derivesitsencryptionkeysmathematicallyfromthismaterkey.Thenitregularlychangesand
rotatestheencryptionkeyssothatthesameencryptionkeywillneverbeusedtwice.
AES(AdvancedEncryptionStandard):ThisProvidessecuritybetweenclientworkstations
operatinginadhocmode.Itusesamathematicalcipheringalgorithmthatemploysvariablekey
sizesof128,192or256bits.
RADIUS(RemoteAuthenticationDialInUserService)Server:
aprotocolforcarryingauthentication,authorization,andconfigurationinformationbetweena
NetworkAccessServerwhichdesirestoauthenticateitslinksandasharedAuthenticationServer.
PleasekeyintheIPAddressfortheRADIUSServer.
RADIUS(RemoteAuthenticationDialInUserService)Port:
BesidestheIPaddressoftheRADIUSServer,youhavetoentertheportnumberfortheserver.
Port1812isthereservedRADIUS‐authenticationportdescribedinRFC2138.EarlierAP(RADIUS
clients)useport1945.Thedefaultvaluewillbeshownonthisbox.Youcankeepanduseit.
RADIUS(RemoteAuthenticationDialInUserService)Key: 
ARADIUSKeyislikeapassword,whichisusedbetweenIASandthespecificRADIUSclientto
verifyidentity.BothIASandtheRADIUSclientmustbeusethesameRADIUSKeyforsuccessful
communicationtooccur.EntertheRADIUSKey.
GroupKeyRotationInterval:
KeyinthetimefortheWAPgroupkeyrotationinterval.Theunitissecond.Withincreasingrekey
interval,userbandwidthrequirementisreduced
WPA/WPA2Re‐authInterval: 
WhenawirelessclienthasassociatedwiththeWirelessVoiceGatewayforaperiodoftime
longerthanthesettinghere,itwouldbedisconnectedandtheauthenticationwillbeexecuted
again.Thedefaultvalueis3600,youmaymodifyit
WPA‐PSK(WPA‐Pre‐SharedKey)/WPA2‐PSK:
Itsusefulforsmallplaceswithoutauthenticationserverssuchasthenetworkathome.Itallows
theuseofmanually‐enteredkeysorpasswordsandisdesignedtobeeasilysetupforhome
users.
Pleasetypethekeytobebetween8and63characters,or64hexadecimaldigits.Onlythe
deviceswithamatchingkeythatyousetherecanjointhisnetwork.
WEP(WiredEquivalentPrivacy)Encryption:
Therearetwotypesencryptiontochoose64‐bitor128‐bit.IfyouchooseDisabled,theNetwork