D-Link DWL-3600AP - Table 26: WPA Enterprise; WPA Enterprise

VirtualAccessPointSettings
D-Link UnifiedAccessPointAdministrator’sGuide
November2011 Page79
UnifiedAccessPointAdministrator’sGuide
WPAEnterprise
WPAEnterprisewithRADIUSisanimplementationoftheWi‐FiAllianceIEEE802.11istandard,whichincludes
CCMP(AES),andTKIPmechanisms.TheEnt erprisemoderequirestheuseofaRADIUSservertoauthenticate
users.
Thissecuritymodeisbackwards‐compatiblewithwirelessclientsthatsupporttheoriginalWPA.
Table
26:WPAEnterprise
Field Description
WPAVersions Selectthetypes ofclientstationsyouwanttosupport:
• WPA.IfallclientstationsonthenetworksupporttheoriginalWPAbutnonesupport
thenewerWPA2,thenselectWPA.
• WPA2.IfallclientstationsonthenetworksupportWPA2,wesuggestusingWPA2
whichprovidesthe
bestsecuritypertheIEEE802.11istandard.
• WPAandWPA2.Ifyouhaveamixofclients,someofwhichsupportWPA2andothers
whichsupportonly theoriginalWPA,selectbothWPAandWPA2.ThisletsbothWPA
andWPA2clientstationsassociateandauthenticate,butusesthemore
robustWPA2
forclientswhosupportit.ThisWPAconfigurationallowsmoreinteroperability,atthe
expenseofsomesecurity.
Enable
pre‐authentication
IfforWPAVersionsyouselect onlyWPA2orbothWPAandWPA2,youcanenablepre‐
authenticationforWPA2clients.
ClickEnablepre‐authenticationifyouwantWPA2
wirelessclientstosendpre‐
authenticationpacket.Thepre‐authenticationinformationwillberelayedfromtheAP
theclientiscurrentlyusingtothetargetAP.Enablingthisfeaturecanhelpspeedup
authenticationforro amingclientswhoconnecttomultipleAPs.
ThisoptiondoesnotapplyifyouselectedWPA
forWPAVersionsbecausetheoriginal
WPAdoesnotsupportthisfeature.
CipherSuites Selecttheciphersuiteyouwanttouse:
•TKIP
• CCMP(AES)
•TKIPandCCMP(AES)
BydefaultbothTKIPandCCMPareselected.WhenbothTKIPandCCMPareselected,
clientstationsconfiguredtouseWPAwithRADIUSmusthave
oneofthefo llowing:
•AvalidTKIPRADIUSIPaddressandRADIUSKey
•AvalidCCMP(AES)IPaddressandRADIUSKey
UseGlobalRADIUS
ServerSettings
BydefaulteachVAPusestheglobalRADIUSsettingsthatyoudefinefortheAPatthetop
oftheVAPpage.However,youcan
configure eachVAPtouseadifferentsetofRADIUS
servers.
TousetheglobalRADIUSserversettings,makesurethecheckboxisselected.
TouseaseparateRADIUSserverfortheVAP ,clearthecheckboxandentertheRADIUS
serverIPaddres sandkeyinthefollowingfields.
RADIUSIPAddress
Type
SpecifytheIPversionthattheRADIUSserveruses.
YoucantogglebetweentheaddresstypestoconfigureIPv4andIPv6globalRADIUS
addresssettings,buttheAPcontactsonlytheRADIUSserverorserversfortheaddress
typeyouselectinthisfield.