Chapter 4
| Wireless Settings
Radio Settings
– 71 –
WPA2-PSK — Clients using WPA2 with a Pre-shared Key are accepted for
authentication.
WPA was introduced as an interim solution for the vulnerability of WEP
pending the ratification of the IEEE 802.11i wireless security standard. In
effect, the WPA security features are a subset of the 802.11i standard.
WPA2 includes the now ratified 802.11i standard, but also offers backward
compatibility with WPA. Therefore, WPA2 includes the same 802.1X and
PSK modes of operation and support for TKIP encryption.
Refer to WPA-PSK for a description of encryption methods and the key.
WPA-EAP — WPA employs a combination of several technologies to
provide an enhanced security solution for 802.11 wireless networks. A
RADIUS server is used for authentication, and can also be used for
accounting.
Refer to WPA-PSK for a description of encryption methods.
RADIUS Settings — A RADIUS server must be specified for the access
point to implement IEEE 802.1X network access control and Wi-Fi Protected
Access (WPA) wireless security.
In addition, you can configure a RADIUS Accounting server to receive user-
session accounting information from the access point. RADIUS Accounting
can be used to provide valuable information on user activity in the network.
Note:
This guide assumes that you have already configured RADIUS server(s) to
support the access point. Configuration of RADIUS server software is beyond the
scope of this guide, refer to the documentation provided with the RADIUS server
software.
Radius Auth Server — Specifies the IP address or host name of the
RADIUS authentication server.
Radius Auth Port — The UDP port number used by the RADIUS server
for authentication messages. (Range: 1024-65535; Default: 1812)
Radius Auth Secret — A shared text string used to encrypt messages
between the access point and the RADIUS server. Be sure that the same
text string is specified on the RADIUS authentication server. Do not use
blank spaces in the string. (Maximum length: 255 characters)
NAS ID — The RADIUS NAS identifier for the SSID interface This value
must be between 1 and 48 characters long.
Backup Radius Auth — Enables the support of a backup RADIUS
authentication server.