System information

Wireless Security Configuration
Using the Security Wizard
No t e WEP has been found to be seriously flawed and cannot be recommended for
a high level of network security. For more robust wireless security, the access
point provides Wi-Fi Protected Access (WPA) for improved data encryption
and user authentication.
Ca ut ion When one SSID interface is configured to use TKIP encryption and another
SSID interface is configured for static WEP encryption using Key index 1, MIC
failure may occur.
■ 3. WPA-PSK (AES): Configures WPA Pre-Shared Key mode for security
using AES encryption for multicast and broadcast traffic. (Note that AES
encryption must be supported by all wireless clients.) Requires the key
type to be specified and a key value entered. All wireless clients must be
configured with the same key to communicate with the access point.
• Hex: Enter a key as a string of 64 hexadecimal numbers.
• Ascii: Enter a key as an easy-to-remember form of letters and
numbers. The string must be from 8 to 63 characters, which can
include spaces.
• WPA Support: Specifies support for WPA or WPA2 clients.
– WPA: Clients using WPA only are supported.
– WPA2: Clients using WPA2 only are supported.
– WPA-WPA2: Clients using WPA or WPA2 are supported.
■ 4. WPA-PSK (TKIP): Configures WPA Pre-Shared Key mode for security
using TKIP encryption for multicast and broadcast traffic. Requires the
key type to be specified and a key value entered. All wireless clients must
be configured with the same key to communicate with the access point.
• Hex: Enter a key as a string of 64 hexadecimal numbers.
• Ascii: Enter a key as an easy-to-remember form of letters and
numbers. The string must be from 8 to 63 characters, which can
include spaces.
• WPA Support: Specifies support for WPA or WPA2 clients.
– WPA: Clients using WPA only are supported.
– WPA2: Clients using WPA2 only are supported.
– WPA-WPA2: Clients using WPA or WPA2 are supported.
■ 5. Dynamic WEP (802.1x): Use 802.1X for user authentication and to
pass dynamic WEP unicast session keys and static broadcast keys to
wireless clients. Requires a RADIUS server to be configured and available
in the wired network. You can also configure 802.1X parameters for
reauthentication and key rotation, so the access point changes the
dynamic keys at a specified intervals.
7-12