User's Manual

Chapter 4 — Network Support
CN30 Mobile Computer User’s Manual 67
Configuring WPA Security
Wi-Fi Protected Access (WPA) is a strongly enhanced, interoperable Wi-Fi
security that addresses many of the vulnerabilities of Wired Equivalent Pri-
vacy (WEP). Instead of WEP, WPA uses Temporal Key Integrity Protocol
(TKIP) for its data encryption method.
Currently, WPA satisfies some of the requirements in the IEEE 802.11i
draft standard. When the standard is finalized, WPA will maintain forward
compatibility. WPA runs in Enterprise (802.1x) mode or PSK (Pre-Shared
Key) mode:
In Enterprise mode, WPA provides user authentication using 802.1x and
the Extensible Authentication Protocol (EAP). That is, an authentication
server (such as a RADIUS server) must authenticate each device before
the device can communicate with the WLAN.
In PSK mode, WPA provides user authentication using a shared key
between the access point and the CN30. WPAPSK is a good solution for
small offices or home offices that do not want to use an authentication
server.
To use WPA security, you need:
An authentication server (Enterprise mode only)
Note: You can also use a MobileLAN access point with software release
1.80 or later as an authentication server. For help, see the system manual for
your access point.
An access point with an 802.11b/g radio that supports WPA
CN30 with the 802.11b/g radio and the 802.1x/WPA security option
Configuring WPA Security With Enterprise Security
Use these procedures to set WPA and WPA-PSK security on your CN30
with Funk security.
To enable WPA security on your CN30 with Funk security
1 Make sure you have configured the communications and radio param-
eters on your CN30.
2 Make sure you have selected Funk as your security choice.
3 Press C and then B to open the System Main Menu.
4 Choose Configuration Utility > Communications > 802.11 Radio >
Profile Settings.
5 For Association, choose WPA and press Enter. Encryption automati-
cally changes to TKIP.
6 For Authentication, choose TTLS, PEAP, or TLS and press
Enter.
If you choose TTLS or PEAP: