Concept Guide

173 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name># auth-server <server-name>
(Instant AP)(SSID Profile <name># end
((Instant AP)# commit apply
To associate an authentication server to a wired profile:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# auth-server <name>
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
Understanding Encryption Types
Encryption is the process of converting data into a cryptic format or code when it is transmitted on a network.
Encryption prevents unauthorized use of the data.
Instant supports the following types of encryption:
l WEP —Wired Equivalent Privacy (WEP) is an authentication method where all users share the same key.
WEP is not secure as other encryption types such as TKIP.
l TKIP —Temporal Key Integrity Protocol (TKIP) uses the same encryption algorithm as WEP. However, TKIP is
more secure and has an additional message integrity check (MIC).
l AES—The Advanced Encryption Standard (AES) encryption algorithm a widely supported encryption type
for all wireless networks that contain any confidential data. AES in Wi-Fi leverages 802.1X or PSKs to
generate per station keys for all devices. AES provides a high level of security like IP Security (IPsec) clients.
WEP and TKIP are limited to WLAN connection speed of 54 Mbps. The 802.11n connection supports only AES
encryption. DellIt is recommended to use AESencryption. Ensure that all devices that do not support AES are
upgraded or replaced with the devices that support AES encryption.
WPA and WPA2
WPA is created based on a draft of 802.11i, which allowed users to create more secure WLANs. WPA2
encompasses the full implementation of the 802.11i standard. WPA2 is a superset that encompasses the full
WPA feature set.
The following table summarizes the differences between the two certifications:
Certification Authentication Encryption
WPA l PSK
l IEEE 802.1X with
Extensible
Authentication
Protocol (EAP)
TKIP with message integrity check (MIC)
WPA2 l PSK
l IEEE 802.1X with
EAP
AES -- Counter Mode with Cipher Block Chaining
Message Authentication Code (AESCCMP)
Table 35: WPA and WPA2 Features
WPA and WPA2 can be further classified as follows: