Instruction manual

WBSn-2400 Quick Start Guide Page 12
Parameter Description
BH SSID Indicates whether this SSID is configured as a backhaul SSID.
Values:
• Enabled
• Disabled
ACL Group The ACL (Access Control List) controls who can access the VAP.
A list is created according to specific parameters, and given a unique
name, and will either define an access group (those users permitted VAP
access), or a reject group (those users denied VAP access).
Security Mode Choose between the following:
• None (Open)
• WEP (shared key)
• WPA (PSK and RADIUS)
• WPA2 (PSK and RADIUS)
For more information about authentication and encryption, please see the
table below this one.
To view the status of a VAP:
To view the status of any or all defined VAPs, navigate to Status => Wireless => VAP.
Authentication Combinations
WBS-2400 allows the following authentication types and combinations.
• Open (none) and Shared Key are the basic 802.11n authentications. In Shared Key authentication,
the WEP key is used as the shared key. If the VAP is configured to Open + Shared Key, both types of
clients can associate to the WBSn.
• The WPA authentication automatically presumes that the basic 802.11 authentication is Open. WPA
defines advanced authentications, either PSK (Pre-Shared Key) or RADIUS. The initial keys are
determined during the last phase of the WPA authentication.
• When RADIUS Authentication is used, the RADIUS server can determine which VLAN belongs to which
user.
Note: WBSn-2400 supports multiple VLAN per VAP.
• WBSn-2400 enables a VAP that supports both RADIUS and PSK authentication, with the exact method
determined according to the packet that comes from the client. If multiple VLANs are defined over such
a VAP, clients authenticated using PSK are assigned to the default VLAN, while clients authenticated
using RADIUS have their VLAN determined by the RADIUS.
• Each VAP can have a different RADIUS server configured. This allows for the transportation of several
networks over the same infrastructure of WBSn-2400
Encryption Methods
Legacy 802.11 clients can either connect using the Open authentication (see above), or WEP. In WEP, the
encryption key can be either 40bit or 104bit. In WPA, WBSn-2400 supports TKIP encryption.
In order to support legacy clients, (supporting only WEP), WBSn-2400 enables the TSN (Transient Security
Network) mode, which allows VAPs that support both WEP and TKIP clients. In this case, the broadcast key
is WEP, while the unicast key is either TKIP or WEP, depending on the manner in which the client is
connected to the system.
Note: When you configure a TSN VAP, key #1 is used by TKIP, and you should therefore configure the WEP
key as key #2.