Software User Manual
D-Link UAP
12/10/09
34CSFP6XXUAP-SWUM100-D13
Virtual Access Point Settings
Page 55
WPA E
NTERPRISE
WPA Enterprise with
RADIUS
is an implementation of the Wi-Fi Alliance IEEE
802.11i
standard, which includes
CCMP
(
AES
), and
TKIP
mechanisms. The Enterprise mode requires the use of a RADIUS server to authenticate users.
This security mode is backwards-compatible with wireless clients that support the original
WPA
.
Table 19: WPA Enterprise
Field
Description
WPA Versions
Select the types of client stations you want to support:
• WPA.
If all client stations on the network support the original
WPA
but none support the newer
WPA2
, then select WPA.
• WPA2.
If all client stations on the network support
WPA2
, we suggest using WPA2 which provides
the best security per the
IEEE
802.11i
standard.
• WPA and WPA2.
If you have a mix of clients, some of which support
WPA2
and others which
support only the original
WPA
, select both WPA and WPA2. This lets both WPA and WPA2 client
stations associate and authenticate, but uses the more robust WPA2 for clients who support it.
This WPA configuration allows more interoperability, at the expense of some security.
Enable
pre-authentication
If for WPA Versions you select only WPA2 or both WPA and WPA2, you can enable pre-
authentication for
WPA2
clients.
Click
Enable pre-authentication
if you want
WPA2
wireless clients to send pre-authentication
packet. The pre-authentication information will be relayed from the AP the client is currently using to
the target AP. Enabling this feature can help speed up authentication for roaming clients who
connect to multiple APs.
This option does not apply if you selected WPA for WPA Versions because the original
WPA
does
not support this feature.
Cipher Suites
Select the cipher suite you want to use:
•
TKIP
•
CCMP (AES)
•
TKIP and CCMP (AES)
By default both TKIP and CCMP are selected. When both TKIP and CCMP are selected, client
stations configured to use WPA with RADIUS must have one of the following:
•
A valid TKIP RADIUS IP address and RADIUS Key
•
A valid CCMP (AES) IP address and RADIUS Key
Use Global RADIUS
Server Settings
By default each VAP uses the global RADIUS settings that you define for the AP at the top of the
VAP page. However, you can configure each VAP to use a different set of RADIUS servers.
To use the global RADIUS server settings, make sure the check box is selected.
To use a separate RADIUS server for the VAP, clear the check box and enter the RADIUS server IP
address and key in the following fields.
RADIUS IP Address
Type
Specify the IP version that the RADIUS server uses.
You can toggle between the address types to configure IPv4 and IPv6 global RADIUS address
settings, but the AP contacts only the RADIUS server or servers for the address type you select in
this field.
RADIUS IP Address
RADIUS IPv6
Address
Enter the IPv4 or IPv6 address for the primary RADIUS server for this VAP.
If the IPv4 RADIUS IP Address Type option is selected in the previous field, enter the IP address of
the RADIUS server that all VAPs use by default, for example 192.168.10.23. If the IPv6 RADIUS IP
Address Type option is selected, enter the IPv6 address of the primary global RADIUS server, for
example 2001:0db8:1234::abcd.
