![background image](http://html1.mh-extra.com/html/amx/nxa-wapzd1000/nxa-wapzd1000_operation-reference-manual_2937893062.webp)
Configure Tab
58
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
3.
You have three options with the internal WLAN: [1] continue using the current configuration, [2] fine-
tune the existing WPA-based mode, or [3] replace this mode entirely with either an 802.1X mode
(recommended) or a WEP-based mode. The two WLAN-editing processes are described separately,
below.
Fine-Tuning the Current Security Mode
To keep the original WPA security mode and fine-tune its settings:
1.
Go to Configure > WLANs.
2.
In the Internal WLAN row, click Edit.
3.
You can choose from the following options, which will enhance the default Internal WLAN's security
without disrupting the user's connections.
WPA2: Switch to this encryption method if you prefer the IEEE 802.11i standard, which provides
the highest level of security, but is limited to devices with newer wireless NICs.
WPA-Mixed: Allows both WPA and WPA2 compliant devices to access the network.
AES: Switch to this algorithm for stronger encryption.
Passphrase: Replace the current passphrase with a new one, to help lower the risk of unauthorized
access.
4.
Click OK to apply any changes.
Switching to a Different Security Mode
You also have the option of replacing the default internal WLAN's WPA mode with one of two other modes:
The less-secure protection of a WEP key mode
The more-secure protection of an 802.1X mode
Replacing your WPA configuration with 802.1X requires the users to make changes to their wireless
connection configuration, which may include the importation of certificates.
1.
Go to Configure > WLANs.
2.
When the WLAN workspace appears, you will want to review and then change the security options for the
internal network. To start, click Edit in the Internal WLAN row.
3.
When the Editing (Internal) options appear, look at the two main categories -- Authentication Options and
Encryption Options.
4.
If you click an Authentication Option Method such as Open, Shared, or 802.1X, different
sets of encryption options are displayed:
Open allows you to configure a WPA- or WEP-based encryption, or “none” if you're so inclined.
After selecting a WPA or WEP level, you can then enter a passphrase or keytext of your choosing.
. Shared limits you to WEP-key encryption.
802.1X EAP allows you to choose from all available encryption methods, but you do not need to
create a key or passphrase.
MAC Address allows you to use an external RADIUS server to authenticate wireless clients. Before
you can use this option, you need to add your external RADIUS server to the Configure > AAA
Servers page. You also need to define the MAC addresses that you want to allow on the RADIUS
server.
Depending on your Authentication Option Method selection, review and reconfigure the related
Encryption Options.
5.
Review the Advanced Options to change any settings as needed. (For example, if you switch to 802.1X,
you'll need to choose an authentication server from the menu.)
6.
When you are finished, click OK to apply your changes.
Replacing your WPA configuration with 802.1X requires the users to make changes to theirS wireless
connection configuration.including the importation of certificates.
Using the Built-in EAP Server
(Requires the selection of “Local Database” as the authentication server.) If you are re-configuring your
internal WLAN to use 802.1X/EAP authentication, you normally have to generate and install certificates for
your wireless users. With the built-in EAP server and Zero-IT Wireless Activation, certificates are
automatically generated and installed on the end user's computer. Users simply follow the instructions
Summary of Contents for NXA-WAPZD1000
Page 4: ......
Page 12: ...viii NXA WAPZD1000 ZoneDirector Smart WLAN Controller Table of Contents ...
Page 16: ...Introduction 12 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 130: ...Blocking Client Devices 126 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 146: ...Smart Mesh Networking Best Practices 142 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 153: ...Troubleshooting 149 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...