Draytek VigorAP 800 - Page 69

VigorAP 800 User’s Guide
59
a
uthentication. It enables centralized remote access
a
uthentication for network management.
T
he WPA encrypts each frame transmitted from the radio using
t
he key, which either PSK (Pre-Shared Key) entered manually
i
n this field below or automatically negotiated via 802.1x
a
uthentication. Select WPA, WPA2 or Auto as WPA mode.
W
PA/802.1x - The WPA encrypts each frame transmitted from
t
he radio using the key, which either PSK (Pre-Shared Key)
e
ntered manually in this field below or automatically negotiated
v
ia 802.1x authentication.
W
PA2/802.1x - The WPA encrypts each frame transmitted
f
rom the radio using the key, which either PS
K
(Pre-Shared
K
ey) entered manually in this field below or automatically
n
egotiated via 802.1x authentication.
WPA Algorithms
S
elect TKIP, AES or TKIP/AES as the algorithm for WPA. Such
f
eature is available for WPA2/802.1x, WPA/802.1x,
W
PA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PS
K
m
ode.
Pass Phrase
E
ither 8~63 ASCII characters, such as 012345678..(or 64
H
exadecimal digits leading by 0x, such as "0x321253abcde...").
S
uch feature is available for WPA/PSK or WPA2/PSK or
M
ixed (WPA+WPA2)/PS
K
mode.
Key Renewal Interval
W
PA uses shared key for authentication to the network.
H
owever, normal network operations use a different encryption
k
ey that is randomly generated. This randomly generated key
t
hat is periodically replaced. Enter the renewal security time
(
seconds) in the column. Smaller interval leads to greater
s
ecurity but lower performance. Default is 3600 seconds. Set 0
t
o disable re-key. Such feature is available for
W
PA2/802.1,WPA/802.1x, WPA/PSK or WPA2/PSK or
M
ixed (WPA+WPA2)/PS
K
mode.
PMK Cache Period
S
et the expire time of WPA2 PMK (Pairwise master key) cache.
P
MK Cache manages the list fro
m
the BSSIDs in the associated
S
SID with which it has pre-authenticated. Such feature is
a
vailable for WPA2/802.1 mode.
Pre-Authentication
E
nables a station to authenticate to multiple APs for roaming
s
ecurer and faster. With the pre-authentication procedure
d
efined in IEEE 802.11i specification, the
p
re-four-way-handshake can reduce handoff delay perceivable
b
y a mobile node. It makes roaming faster and more secure.
(
Only valid in WPA2)
E
nable - Enable IEEE 802.1X Pre-Authentication.
D
isable - Disable IEEE 802.1X Pre-Authentication.
Key 1 – Key 4
F
our keys can be entered here, but only one key can be selected
a
t a time. The format of WEP Key is restricted to 5 ASCII
c
haracters or 10 hexadecimal values in 64-bit encryption level,
o
r restricted to 13 ASCII characters or 26 hexadecimal values in
128-bit encryption level. The allowed content is the ASCII
c
haracters from 33(!) to 126(~) except '#' and ','. Such feature is