Edge-Core ECW5212, Management Manual

Page: 17 / 48

Chapter 1
| Introduction
Setup Wizard
– 17 –
and key management as WPA in the enterprise, providing a robust and
manageable alternative for small networks.
■
Cipher – Data encryption uses one of the following methods:
■
AES (CCMP) – This method is used as the unicst encryption cipher.
AES-CCMP is the standard encryption cipher required for WPA2.
■
TKIP – TKIP is used as the unicast encryption cipher.
■
AES/TKIP Mixed – This option of WPA with “ TKIP or AES ” allows you to
run a mixed network: Those devices that support WPA2 with AES will
use that system, less advanced devices that only support WPA will use
WPA with TKIP. (This is the default setting.)
■
Key – WPA is used to encrypt data transmitted between wireless clients and
the VAP. WPA uses static shared keys (fixed-length hexadecimal or
alphanumeric strings) that are manually distributed to all clients that want
to use the network.
String length must be 8 to 63 ASCII characters (letters and numbers). No
special characters are allowed.
◆
WPA2-PSK – Clients using WPA2 with a Pre-shared Key are accepted for
authentication.
WPA was introduced as an interim solution for the vulnerability of WEP pending
the ratification of the IEEE 802.11i wireless security standard. In effect, the WPA
security features are a subset of the 802.11i standard. WPA2 includes the now
ratified 802.11i standard, but also offers backward compatibility with WPA.
Therefore, WPA2 includes the same 802.1X and PSK modes of operation and
support for TKIP encryption.
Refer to WPA-PSK for a description of encryption methods and the key.
◆
WPA-PSK / WPA2-PSK Mixed Mode – The TKIP/AES type is the only encryption
available for mixed WPA/WPA2 security. In mixed mode, the unicast encryption
(TKIP or AES) is negotiated for each client as they associate with the network.
◆
WPA-EAP – WPA employs a combination of several technologies to provide an
enhanced security solution for 802.11 wireless networks. A RADIUS server is
used for authentication, and can also be used for accounting.
Refer to WPA-PSK for a description of encryption methods.
RADIUS Settings
A RADIUS server must be specified for the access point to implement IEEE
802.1X network access control and Wi-Fi Protected Access (WPA) wireless
security.