Specifications

Determining Security for Your Wireless Network
6-2
Determining Security for Your Wireless Network
This section describes the security measures you can implement in each type of wireless
network, as well as the security features used when managing the AP.
Security for a Wireless Network Infrastructure
Review these suggestions to maximize security in your wireless infrastructure network:
• Set up your networking operating system and applications, such as web and file shares,
to require user names and passwords. Refer to the documentation that came with the
networking operating system or application.
• Create a unique Wireless Network Name and enable Secure Access at the APs. Only
wireless clients that know the wireless network name can associate with an AP.
• Set up RADIUS authentication. Depending on the wireless clients, you can use
802.1X, MAC, or both types of authentication. 802.1X authentication is more secure.
If using authentication, you need a RADIUS server and the APs configured as
RADIUS clients.
For the Access Point 2000, create a custom AP RADIUS Management Authenticator
to encrypt the SNMP objects used between the AP Manager and the AP 2000 for
management of critical RADIUS client parameters. The R2 uses SNMP v3 and,
therefore, does not support the Management Authenticator.
• If using 802.1X authentication, use the Rapid Rekeying feature. This enables the APs
to automatically distribute encryption keys to authenticated clients.
• If not using 802.1X authentication, enable WEP encryption and manually enter the
encryption keys. Make sure to change the keys on a regular basis. Also, configure the
APs to not communicate with unencrypted clients.The AP 2000 has the ability to
prevent an NMS or AP Manager from changing encryption.
Security for a Wireless LAN-to-LAN Network
The only security feature available for LAN-to-LAN wireless networks is WEP encryption.
Enable WEP encryption and manually enter the encryption keys. Change the keys on a
regular basis. The AP 2000 can be configured to prevent an NMS or AP Manager from
changing encryption.
Security for a Wireless Ad-Hoc Network
The only security feature available for ad-hoc wireless networks is WEP encryption.
Enable WEP and manually enter the encryption keys. Change the keys on a regular basis.