Wireless Access Point User Guide
20
• WPA-PSK - Like WEP, data is encrypted before transmission. WPA is more secure than
WEP, and should be used if possible. The PSK (Pre-shared Key) must be entered on each
Wireless station. The 256Bit encryption key is derived from the PSK, and changes fre-
quently.
• WPA2-PSK - This is a further development of WPA-PSK, and offers even greater security,
using the AES (Advanced Encryption Standard) method of encryption.
• WPA-PSK and WPA2-PSK - This method, sometimes called "Mixed Mode", allows
clients to use EITHER WPA-PSK (with TKIP) OR WPA2-PSK (with AES).
• WPA with Radius - This version of WPA requires a Radius Server on your LAN to
provide the client authentication according to the 802.1x standard. Data transmissions are
encrypted using the WPA standard.
If this option is selected:
• This Access Point must have a "client login" on the Radius Server.
• Each user must have a "user login" on the Radius Server.
• Each user's wireless client must support 802.1x and provide the login data when re-
quired.
• All data transmission is encrypted using the WPA standard. Keys are automatically
generated, so no key input is required.
• WPA2 with Radius - This version of WPA2 requires a Radius Server on your LAN to
provide the client authentication according to the 802.1x standard. Data transmissions are
encrypted using the WPA2 standard.
If this option is selected:
• This Access Point must have a "client login" on the Radius Server.
• Each user must authenticate on the Radius Server. This is usually done using digital
certificates.
• Each user's wireless client must support 802.1x and provide the Radius authentication
data when required.
• All data transmission is encrypted using the WPA2 standard. Keys are automatically
generated, so no key input is required.
• WPA and WPA2 with Radius - EITHER WPA or WPA2 require a Radius Server on
your LAN to provide the client authentication according to the 802.1x standard. Data
transmissions are encrypted using EITHER WPA or WPA2 standard.
If this option is selected:
• This Access Point must have a "client login" on the Radius Server.
• Each user must authenticate on the Radius Server. This is usually done using digital
certificates.
• Each user's wireless client must support 802.1x and provide the Radius authentication
data when required.
• All data transmission is encrypted using EITHER WPA or WPA2 standard. Keys are
automatically generated, so no key input is required.
• 802.1x - This uses the 802.1x standard for client authentication, and WEP for data encryp-
tion.
If this option is selected:
• This Access Point must have a "client login" on the Radius Server.
• Each user must have a "user login" on the Radius Server.
• Each user's wireless client must support 802.1x and provide the login data when re-
quired.