18
-
TKIP : Temporal Key Integrity Protocol is an upgrade to the WEP known as WEP 1.1 that fixed unknown
security problems in WEP’s implementation of the RC4 stream cipher. TKIP scrambled the keys using a
hashing algorithm and, by adding an integrity-checking feature, ensures that the keys haven’t been tampered
with.
- AES : Advanced Encryption Standard is the U.S. government’s next-generation cryptography algorithm, which
will replace DES and 3DES. AES works at multiple network layers simultaneously and support 128, 192 and
256 bit keys.
- TKIP and AES : If clients support both the TKIP and AES standards, then this would be the strongest cipher
type to use and combine both the TKIP and AES security.
3.6.1.4 PSK
PSK is the pre-shared key mode of WPA which does not require the inclusion of a RADIUS server in your
network. The user needs to enter a pass phrase in this field. The pass phrase is an alpha-numeric password
between 8 and 63 characters long. The password can include symbols (!?*&_) and spaces. Make sure you enter
key exactly the same on all other wireless clients.
Leave blank to enable 802.1X Authentication. (
Default:
password)
3.6.1.5 WPA Group Key Update Interval
Select the interval during which the group key will be valid and user need to enter a figure in this field. The default
value of
3600
is recommended.
3.6.2
802
.1X Configuration
IEEE 802.1x is a standard framework for network access control that uses a central RADIUS server for user
authentication. This control feature prevents unauthorized access to the network by requiring an 802.1x client
application to submit user credentials for authentication. The 802.1x standard uses the Extensible Authentication
Protocol (EAP) to pass user credentials (digital certificates, user names and passwords, or other) from the client to
the RADIUS server. Client authentication is then verified on the RADIUS server before the access point grants
client access to the network. Only the Access Point could work with 802.1x standard with the RADIUS Server.
