BelAir Networks BelAir 100SN, User Manual

Page: 99 / 212

BelAir100SN User Guide Wi-Fi AP Security
May 31, 2010 Confidential Page 99 of 212
Document Number BDTM11001-A01 Released
Wi-Fi AP Security
This chapter describes how you can set up security to encrypt your Wi-Fi
transmissions so that your data cannot be deciphered if it is intercepted, and to
prevent access to the network by unauthorized clients. The following topics are
covered:
• “Security Options for Wireless Clients” on page 99
• “RADIUS Servers for Wireless Clients” on page 100
— “Managing RADIUS Servers” on page 103
— “Changing RADIUS Server Admin State” on page 104
— “Assigning SSIDs to RADIUS Servers” on page 104
— “RADIUS Pre-authentication” on page 104
— “RADIUS Assigned VLAN” on page 105
— “RADIUS Accounting” on page 105
• “Client Authentication and De-authentication Trap” on page 106
• “AP Privacy” on page 106
• “Wireless Client Blacklist” on page 108
• “Wireless Client Access Control List” on page 108
• “Controlling Inter-client Communication” on page 109
• “Protecting against Denial of Service Attacks” on page 112
See also:
• “Configuring Wi-Fi Radio Parameters” on page 77
• “Configuring Wi-Fi Access Point Parameters” on page 85
• “Wi-Fi Backhaul Link Configuration” on page 113
• “Mobile Backhaul Mesh” on page 120
Security Options
for Wireless
Clients
The BelAir100SN has several options for wireless authentication and data
encryption. The method that you use depends on your security needs and your
network configuration.