Virtual
Access
Point
Settings
D-Link
Unified
Access
Point
Administrator’s
Guide
November
2011
Page
79
Unified
Access
Point
Administrator’s
Guide
WPA
Enterprise
WPA
Enterprise
with
RADIUS
is
an
implementation
of
the
Wi
‐
Fi
Alliance
IEEE
802.11i
standard,
which
includes
CCMP
(
AES
),
and
TKIP
mechanisms.
The
Enterprise
mode
requires
the
use
of
a
RADIUS
server
to
authenticate
users.
This
security
mode
is
backwards
‐
compatible
with
wireless
clients
that
support
the
original
WPA
.
Table
26:
WPA
Enterprise
Field
Description
WPA
Versions
Select
the
types
of
client
stations
you
want
to
support:
•
WPA.
If
all
client
stations
on
the
network
support
the
original
WPA
but
none
support
the
newer
WPA2
,
then
select
WPA.
•
WPA2.
If
all
client
stations
on
the
network
support
WPA2
,
we
suggest
using
WPA2
which
provides
the
best
security
per
the
IEEE
802.11i
standard.
•
WPA
and
WPA2.
If
you
have
a
mix
of
clients,
some
of
which
support
WPA2
and
others
which
support
only
the
original
WPA
,
select
both
WPA
and
WPA2.
This
lets
both
WPA
and
WPA2
client
stations
associate
and
authenticate,
but
uses
the
more
robust
WPA2
for
clients
who
support
it.
This
WPA
configuration
allows
more
interoperability,
at
the
expense
of
some
security.
Enable
pre
‐
authentication
If
for
WPA
Versions
you
select
only
WPA2
or
both
WPA
and
WPA2,
you
can
enable
pre
‐
authentication
for
WPA2
clients.
Click
Enable
pre
‐
authentication
if
you
want
WPA2
wireless
clients
to
send
pre
‐
authentication
packet.
The
pre
‐
authentication
information
will
be
relayed
from
the
AP
the
client
is
currently
using
to
the
target
AP.
Enabling
this
feature
can
help
speed
up
authentication
for
roaming
clients
who
connect
to
multiple
APs.
This
option
does
not
apply
if
you
selected
WPA
for
WPA
Versions
because
the
original
WPA
does
not
support
this
feature.
Cipher
Suites
Select
the
cipher
suite
you
want
to
use:
• TKIP
• CCMP
(AES)
• TKIP
and
CCMP
(AES)
By
default
both
TKIP
and
CCMP
are
selected.
When
both
TKIP
and
CCMP
are
selected,
client
stations
configured
to
use
WPA
with
RADIUS
must
have
one
of
the
following:
• A
valid
TKIP
RADIUS
IP
address
and
RADIUS
Key
• A
valid
CCMP
(AES)
IP
address
and
RADIUS
Key
Use
Global
RADIUS
Server
Settings
By
default
each
VAP
uses
the
global
RADIUS
settings
that
you
define
for
the
AP
at
the
top
of
the
VAP
page.
However,
you
can
configure
each
VAP
to
use
a
different
set
of
RADIUS
servers.
To
use
the
global
RADIUS
server
settings,
make
sure
the
check
box
is
selected.
To
use
a
separate
RADIUS
server
for
the
VAP,
clear
the
check
box
and
enter
the
RADIUS
server
IP
address
and
key
in
the
following
fields.
RADIUS
IP
Address
Type
Specify
the
IP
version
that
the
RADIUS
server
uses.
You
can
toggle
between
the
address
types
to
configure
IPv4
and
IPv6
global
RADIUS
address
settings,
but
the
AP
contacts
only
the
RADIUS
server
or
servers
for
the
address
type
you
select
in
this
field.