Chapter 19 AP Profile
NXC Series User’s Guide
274
Cipher Type Select an encryption cipher type from the list. WPA3 security mode uses AES only.
• auto - This automatically chooses the best available cipher based on the cipher in use
by the wireless client that is attempting to make a connection.
• aes - This is the Advanced Encryption Standard encryption method. It is a more recent
development over TKIP and considerably more robust. Not all wireless clients may
support this.
Group Key Update
Timer
Enter the interval (in seconds) at which the AP updates the group WPA encryption key.
Pre-Authentication This field is available only when you set Security Mode to wpa2 or wpa2-mix and enable
802.1x authentication.
Enable or Disable pre-authentication to allow the AP to send authentication information to
other APs on the network, allowing connected wireless clients to switch APs without having
to re-authenticate their network connection.
Management
Frame Protection
This field is available only when you select wpa2 in the Security Mode field and set Cipher
Type to aes.
Data frames in 802.11 WLANs can be encrypted and authenticated with WEP, WPA or
WPA2. But 802.11 management frames, such as beacon/probe response, association
request, association response, de-authentication and disassociation are always
unauthenticated and unencrypted. IEEE 802.11w Protected Management Frames allows
APs to use the existing security mechanisms (encryption and authentication methods
defined in IEEE 802.11i WPA/WPA2) to protect management frames. This helps prevent
wireless DoS attacks.
Select the check box to enable management frame protection (MFP) to add security to
802.11 management frames.
Select Optional if you do not require the wireless clients to support MFP. Management
frames will be encrypted if the clients support MFP.
Select Required and wireless clients must support MFP in order to join the AP’s wireless
network.
Fast Roaming
Settings
802.11r fast roaming reduces the delay when the clients switch from one AP to another by
allowing security keys to be stored on all APs in a network. Information from the original
association is passed to the new AP when the client roams. The client doesn’t need to
perform the whole 802.1x authentication process.
802.11r This field is available only when you set Security Mode to wpa2 or wpa2-mix.
Select this to turn on IEEE 802.11r fast roaming on the AP.
Radius Settings
Radius Server Type Select Internal to use the NXC’s internal authentication database, or External to use an
external RADIUS server for authentication.
Primary / Secondary
Radius Server
Activate
Select this to have the AP use the specified RADIUS server.
Radius Server IP
Address
Enter the IP address of the RADIUS server to be used for authentication.
Radius Server
Port
Enter the port number of the RADIUS server to be used for authentication.
Radius Server
Secret
Enter the shared secret password of the RADIUS server to be used for authentication.
Primary / Secondary
Accounting Server
Activate
Select the check box to enable user accounting through an external authentication server.
Accounting
Server IP Address
Enter the IP address of the external accounting server in dotted decimal notation.
Table 127 Configuration > Object > AP Profile > SSID > Security Profile > Add/Edit Security Profile
LABEL DESCRIPTION
To Next Page
Loading...
