System information

Wireless Configuration and Security
39
ProSAFE Single Band 802.11n Wireless Access Point WN203
Network Authentication
and Data Encryption
(continued)
WPA & WPA2 with
Radius
Configure the RADIUS server setting. TKIP + AES
encryption is the default encryption.
For more information, see Configure WPA with RADIUS,
WPA2 with RADIUS, and WPA & WPA2 with RADIUS on
page 42.
Note: This setting allows clients to connect through either
WPA with TKIP or WPA2 with AES.
WPA-PSK Enter a WPA passphrase and select TKIP or TKIP + AES
encryption.
For more information, see Configure WPA-PSK,
WPA2-PSK, and WPA-PSK & WPA2-PSK on page 43.
WPA2-PSK Enter a WPA passphrase and select AES or TKIP + AES
encryption.
For more information, see Configure WPA-PSK,
WPA2-PSK, and WPA-PSK & WPA2-PSK on page 43.
Note: Select this setting only if all clients support WPA2.
WPA-PSK &
WP
A2-PSK
Enter a WPA passphrase. TKIP + AES encryption is the
default encryption.
For more information, see Configure WPA-PSK,
WPA2-PSK, and WPA-PSK & WPA2-PSK on page 43.
Note: This setting allows clients to connect through either
WPA with TKIP or WPA2 with AES.
Wireless Client Security
Separation
If you enable wireless client security separation by selecting Enable from the
drop-down menu, the associated wireless clients cannot communicate with
each other
. By default, Disable is selected from the drop-down menu.
This
feature is intended for hotspots and other public access situations.
Dynamic VLAN From the drop-down menu, select how VLANs operate by making one of the
following selections:
• Disable. Disables dynamic VLANs, and enables static VLANs.
This is the
default setting.
• Optional
. Enables dynamic VLANs, but if a RADIUS server does not return
a VLAN ID, the wireless client is still allowed to connect to the wireless
access point.
• Required. Enables dynamic VLANs. If a RADIUS server does not return a
VLAN ID, the wireless client is not authenticated and cannot connect to the
wireless access point.
For dynamic VLANs to operate (that is, the selection is Optional or Required),
the following is required:
• The hubs and switches on your LAN need to support the VLAN (802.1Q)
standard.
• The authentication is set to any RADIUS type authentication: either the
network authentication in the wireless security profile or the remote MAC
address database authentication for the MAC Authentication feature can be
used.
Setting Description