Symbol CB3000 - Configuring WPA2 (CCMP) Security Settings

CB3000 Client Bridge User Guide
3-12
The shared key can be any alphanumeric string. The CB3000, other proprietary routers and Symbol
devices use the shared key to convert an ASCII string to the same hexadecimal number. Wireless
devices without Symbol adapters need to use a shared key manually configured as hexadecimal
numbers.
WPA1 Enterprise Only Parameters follow:
• WPA1 EAP Type – Specifies the WPA1 EAP type. These types are described and compared in
detail in About WPA1 (TKIP) Security. Possible options are:
• TLS – Transport Level Security is an EAP type that is used in certificate-based security
environments. If you are using smart cards for remote access authentication, TLS
authentication is the method to use.
• TTLS – Tunneled TLS. Requires certificate-based RADIUS server authentication, but supports
an extensible set of user authentication methods
• PEAP – Windows XP SP1 and Microsoft 802.1X Authentication Client support Protected EAP
(PEAP).
• WPA1 User ID – For all EAP types.
• WPA1 TLS Key – For TLS only. Drag a user certificate into the WPA1 root certificate field to upload.
• WPA1 Key Password – For TLS only. Enter a key password.
• WPA1 User Certificate – For TLS only. Drag a user certificate into the WPA1 user certificate field
to upload.
• WPA1 Root Certificate – For TLS and PEAP only. Cut and paste a root certificate into the WPA1
root certificate field to upload. The certificate should be in PEM format.
• WPA1 Password – For TLS and PEAP only.
6. Click Apply to apply and save the settings, or Cancel to exit the screen without saving your changes.
3.1.3.4 Configuring WPA2 (CCMP) Security Settings
WPA2 (CCMP) is based on the concept of a Robust Security Network (RSN), which defines a hierarchy of keys
with a limited lifetime (similar to TKIP). Like TKIP, the keys the administrator provides are used to derive other
keys. Messages are encrypted using a 128-bit secret key and a 128-bit block of data. The end result is an
encryption scheme as secure as any that the CB3000 provides.
For further overview information on WPA2, see About WPA2 (CCMP) Security.
For more details on encryption types, pros and cons of different encryption types and required configuration
parameters, see the Wi-Fi Alliance Web site at: http://www.wifialliance.org/OpenSection/index.asp.
To configure WPA2 (CCMP) security settings, follow these steps:
1. Select Settings > Wireless Settings > Security from the CB3000 menu tree.