User manual

39
Appendix B About Wireless LANs
Linksys
• When using multiple access points it is better if adjacent access points
use different channels to reduce interference. The recommended channel
spacing between adjacent access points is five channels, e.g., use Channels
1 and 6, or 6 and 11.
• InInfrastructureModewirelessstationsnormallyscanallchannelslooking
for an access point. If more than one access point can be used, the one with
the strongest signal is used. (This can only happen within an ESS.)
• IfusingAd-hocMode(noaccesspoint)allwirelessstationsshould be set
to use the same channel. However, most wireless stations will still scan all
channels to see if there is an existing Ad-hoc group they can join.
WEP
WEP (Wired Equivalent Privacy) is a standard for encrypting data before it is
transmitted. This is desirable because it is impossible to prevent snoopers from
receiving any data which is transmitted by your wireless stations. If the data is
encrypted, it is meaningless unless the receiver can decrypt it.
If WEP is used, the wireless stations and the wireless access point must have the
same settings.
WPA-PSK
In WPA-PSK, like WEP, data is encrypted before transmission. WPA is more secure
than WEP. The PSK (pre-shared key) must be entered on each wireless station.
The 256-bitencryption key is derived from the PSK, and changes frequently.
WPA2-PSK
This is a further development of WPA-PSK, and offers even greater security, using
the AES (Advanced Encryption Standard) method of encryption. It should be
used if possible.
WPA-Enterprise
This version of WPA requires a RADIUS server on your LAN to provide the
client authentica-tion according to the 802.1X standard. Data transmissions are
encrypted using the WPA standard.
If this option is used:
• TheaccesspointmusthaveaclientloginontheRADIUSserver.
• EachusermusthaveauserloginontheRADIUSserver.
• Each user’s wireless client must support 802.1X and provide the login data
when required.
All data transmission is encrypted using the WPA standard. Keys are automatically
generated, so no key input is required.
WPA2-Enterprise
This version of WPA2 requires a RADIUS server on your LAN to provide the client
authentication according to the 802.1X standard. Data transmissions are encrypted
using the WPA2 standard.
If this option is used:
• TheaccesspointmusthaveaclientloginontheRADIUSserver.
• EachusermusthaveauserloginontheRADIUSserver.
• Each user’s wireless client must support 802.1X and provide the login data
when required.
All data transmission is encrypted using the WPA2 standard. Keys are automatically
generated, so no key input is required.
802.1x
This uses the 802.1X standard for client authentication, and WEP for data encryption.
If possible, you should use WPA-Enterprise instead, because WPA encryption is
much stronger than WEP encryption.
If this option is used:
• TheaccesspointmusthaveaclientloginontheRADIUSserver.
• EachusermusthaveauserloginontheRADIUSserver.
• Each user’s wireless client must support 802.1X and provide the login data
when required.
• AlldatatransmissionisencryptedusingtheWEPstandard.Youonlyhaveto
select the WEP key size; the WEP key is automatically generated.