![background image](http://html1.mh-extra.com/html/amx/nxa-wapzd1000/nxa-wapzd1000_operation-reference-manual_2937893058.webp)
Configure Tab
54
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
3.
When you finish, click OK to save the entries. This WLAN is ready for use.
4.
You can now select from these WLANs when assigning roles to users.
WLAN Usage Types
To create a WLAN with specific options, choose Standard Usage. If you have configured Hotspot services,
you can enable Hotspot service on this new WLAN. Additionally, you can select a default Guest Access
WLAN with open access and customizable encryption. Guest WLANs are subject to guest access policies,
such as redirection and subnet access restrictions.
Authentication Method
Authentication Method defines the method by which users are authenticated prior to gaining access to the
WLAN. The level of security should be determined by the purpose of the WLAN you are creating.
Open [Default]: No authentication mechanism is applied to connections. If WPA or WPA2
encryption is used, this implies WPA-PSK authentication.
Shared: If you click Shared, only WEP encryption will be available, and the WEP Key option
appears. The Shared authentication type requires creation of a WEP key that is shared by all users.
802.1X/EAP: Uses 802.1X authentication against a user database. Requires use of certificates.
MAC Address: Uses the device’s MAC address for both the user name and password.
Encryption Options
Encryption choices include WPA, WPA2, WPA-Mixed, WEP and none. WPA and WPA2 are both encryption
methods certified by the WiFi Alliance and are the recommended encryption methods. The Wi-Fi Alliance will
be mandating the removal of WEP because it is easily cracked, so it should not be used.
Method
WPA: Standard Wi-Fi Protected Access with either TKIP or AES encryption.
WPA2: Enhanced WPA encryption using the stronger AES encryption algorithm.
WPA-Mixed: Allows mixed networks of WPA and WPA2 compliant devices. Use this setting if your
network has a mixture of older clients that only support WPA and TKIP, and newer client devices
that support WPA2 and AES.
WEP-64: Provides a lower level of encryption, and is less secure, using 40-bit WEP encryption.
WEP-128: Provides a higher level of encryption than WEP-64, using a 104-bit key for WEP
encryption. However, WEP is inherently less secure than WPA.
Create New WLAN Options (cONT.)
Option
Description
Advanced Options:
Select accounting server, ACLs, rate limiting, VLAN/ dynamic VLAN set-
tings, tunneling, background scanning, maximum client threshold, and
service schedule.
When Guest Usage or Wireless Client Isolation (below) is enabled, the SpeedFlex
Wireless Performance tool may not function properly. For example, SpeedFlex may
be inaccessible to users at http://{device-ip-address}/perf or SpeedFlex may prompt
you to install the SpeedFlex application on the target client, even when it is already
installed. Before using SpeedFlex, verify that both Guest Usage and Wireless Client
Isolation options are disabled.
Because WEP encryption is easily circumvented, Shared authentication provides
little security and should not be used.
Selection of WPA-Mixed disables the ability to enable Zero-IT for this WLAN.
Summary of Contents for NXA-WAPZD1000
Page 4: ......
Page 12: ...viii NXA WAPZD1000 ZoneDirector Smart WLAN Controller Table of Contents ...
Page 16: ...Introduction 12 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 130: ...Blocking Client Devices 126 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 146: ...Smart Mesh Networking Best Practices 142 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 153: ...Troubleshooting 149 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...