Specifications

Wireless Configuration 5-13
2. To use WPA/WPA2-TKIP encryption with 802.1x EAP authentication or the No Authentication
selection, click the WPA/WPA2-TKIP Settings button to display a sub-screen for key and key rotation
settings.
3. To Enable WPA2 check the Use WPA2 check box to use WPA2 encryption in conjunction with WPA-TKIP.
4. If using WPA2 in conjunction with 802.1x EAP authentication you may enable Pre-Authentication and
Opportunistic Key Caching by checking the corresponding check boxes.
5. Check the Broadcast Key Rotation check box to enable or disable the broadcasting of encryption-key
changes to mobile units.
6. Specify a time period in seconds for broadcasting encryption-key changes to mobile units. Set key
broadcasts to a shorter time interval (at least 300 seconds) for tighter security on this WLAN’s wireless
connections. Set key broadcasts to a longer time interval (at most, 80,000 seconds) to relax security on
wireless connections.
A Pre-Shared Key (PSK) is an Internet Protocol security (IPSec) technology that uses a shared, secret key for
authentication in IPSec policy. IPSec is a set of industry-standard, cryptography-based protection services
and protocols. IPSec protects all protocols in the TCP/IP protocol suite and Internet communications by using
Layer Two Tunneling Protocol (L2TP). Use pre-shared key authentication only in a WLAN environment
intended for relaxed security. The administrator can specify the key either as an ASCII passphrase or as a
128-bit key. All WLAN clients must use the same PSK.
7. Select either the ASCII Passphrase or 256-bit Key radio button.
8. If ASCII Passphrase is selected, specify a 8 to 63 character alphanumeric string. The alphanumeric
string allows character spaces. The switch converts the string to a numeric value.
9. To use the 256-bit Key option, enter 16 hexadecimal characters into each of the four fields.
10.Click the Ok button to return to the WLAN security screen.
11.Click the Apply button on the WLAN Security screen to save changes.
5.3.7 Configuring WPA2-CCMP (802.11i) Encryption
WPA2 is a newer 802.11i standard that provides stronger wireless security than WiFi Protected Access
(WPA) and WEP.
CCMP is the security protocol used by AES. It is the equivalent of TKIP in WPA. CCMP computes a Message
Integrity Check (MIC) using the well known, and proven, Cipher Block Chaining Message Authentication Code