Huawei AR1200 Series - Configuring an Access Security Policy

Access Security Policy Management
Access security policy management allows you to configure an authentication mode for WLAN
access users.
The AR1200 supports four access security policies: Wired Equivalent Privacy (WEP), Wi-Fi
Protected Access (WPA), WPA2, and WLAN Authentication and Privacy Infrastructure
(WAPI).
STA Blacklist and Whitelist Management
The AR1200 controls STA access by adding STAs to the blacklist or whitelist.
l After the blacklist function is enabled, a STA in the blacklist cannot be associated with an
access point (AP) or access WLANs.
l After the whitelist function is enabled, a STA in the whitelist can be associated with an AP
and access WLANs.
User Isolation
The user isolation function prevents wireless users associated with the same AP from forwarding
Layer 2 packets to each other, which prevents these users from communicating directly.
On the AR1200, you can configure user isolation in a service set and configure port isolation on
a WLAN-BSS interface to implement Layer 2 isolation between wireless users associated with
the same AP.
2.3 Configuring an Access Security Policy
By configuring an access security policy, you specify the authentication mode to use when users
access WLAN devices according to the network plan.
Applicable Environment
WLAN channels are open to users, and malicious users can easily intercept, modify, and forward
data of authorized users. The WLAN technology provides security policies to prevent
unauthorized user access. Select a security policy based on the security level needed for your
network.
l Wired Equivalent Privacy (WEP) is an old security policy and has security risks. It can be
used in open scenarios that do not require high security, such as airports.
l Wi-Fi Protected Access (WPA) and WLAN Authentication and Privacy Infrastructure
(WAPI) provide higher security for devices.
Data Preparation
To configure an access security policy, you need the following data.
No.
Data
1 Security profile name or security profile ID
2 WEP shared key and key ID
Huawei AR1200 Series Enterprise Routers
Configuration Guide - WLAN 2 WLAN Security Configuration
Issue 03 (2012-01-06) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
27