52 © 2001-2008 D-Link Corporation. All Rights Reserved.
D-Link Unified Access Point Administrator’s Guide
WPA Enterprise
WPA Enterprise with
RADIUS
is an implementation of the IEEE
802.11i
standard, which
includes
CCMP
(
AES
) and
TKIP
mechanisms. The Enterprise mode requires the use of a
RADIUS server to authenticate users.
This security mode is backwards-compatible with wireless clients that support the original
WPA
.
If you select WPA Enterprise as the Security Mode, additional fields display as
Figure 13
shows.
Figure 13. WPA Enterprise Configuration
Table 14
describes the configuration options for the WPA Enterprise security mode.
Table 14.
WPA Enterprise
Field
Description
WPA Versions
Select the types of client stations you want to support:
•
WPA. If all client stations on the network support the original
WPA
but none support the newer
WPA2
, then select WPA.
•
WPA2. If all client stations on the network support
WPA2
, we suggest
using WPA2 which provides the best security per the
IEEE
802.11i
standard.
•
WPA and WPA2.
If you have a mix of clients, some of which support
WPA2
and others which support only the original
WPA
, select both
WPA and WPA2. This lets both WPA and WPA2 client stations
associate and authenticate but uses the more robust WPA2 for clients
who support it. This WPA configuration allows more interoperability,
at the expense of some security.
Enable
pre-authentication
If for WPA Versions you select only WPA2 or both WPA and WPA2, you
can enable pre-authentication for
WPA2
clients.
Click Enable pre-authentication if you want
WPA2
wireless clients to
send pre-authentication packets. The pre-authentication information will be
relayed from the access point the client is currently using to the target
access point. Enabling this feature can help speed up authentication for
roaming clients who connect to multiple access points.
This option does not apply if you selected “WPA” for WPA Versions
because the original
WPA
does not support this feature.