7-17
Wireless Security Configuration
Establishing Security
You should give special consideration to the security option for WLAN 1 if you
are configuring one or more Wireless Distribution System (WDS) links on the
AP 530. The security option configured for WLAN 1 also establishes the
security option that is used with WDS links (1–6). WDS security options (and
thus the WLAN 1 configuration) are limited to one of the choices listed in Table
7-4. The security modes in the table are listed in order of the least secure to
the most secure.
Table 7-4. WLAN 1 and WDS Security Configuration
NOTE You must configure WDS data encryption keys separately, because the WEP
or WPA/WPA2 encryption key configured for WLAN 1 is not used for WDS
links. See “Wireless Distribution System (WDS) and Spanning Tree Protocol (STP)” on page 8-15.
CAUTION When access point configuration parameters are changed, wireless stations
may be temporarily disconnected until the new configuration parameter is
enabled. This includes any changes to a WLAN or radio parameter.
The recommended security option for WDS operation is WPA2, using the AES
cipher, because this setting provides the maximum security for data sent over
the WDS link.
The No Security option can be used for initial setup, testing, or problem solving
for a WDS link, but this setting is not recommended for normal operation. With
No Security, all wireless data received by the access point (for all WLANs) is
decrypted by the access point upon receipt and is then sent over the WDS link
with no data encryption.
Security Mode on WLAN 1 Security Mode for WDS links (1–6)
No Security No Security (not recommended)
Static/Dynamic WEP Static WEP
WPA-PSK/802.1X, WPA-only, TKIP cipher WPA-PSK, TKIP cipher
WPA-PSK/802.1X, WPA2-only, AES cipher WPA-PSK, AES cipher (recommended)