Edge-Core VG007, Management Manual, Page: 64 / 86

Wireless Settings
7-6
7
- TKIP/AES – Use both TKIP and AES keys for encryption. WPA2 defines a
transitional mode of operation for networks moving from WPA security to WPA2.
WPA2 Mixed Mode allows both WPA and WPA2 clients to associate to a
common SSID interface. In mixed mode, the unicast encryption cipher (TKIP or
AES-CCMP) is negotiated for each client.
• Authentication Type – The authentication types available depend on the selected
encryption type. By first selecting the encryption type, only valid authentication
types are then displayed.
- Open System – No user authentication is used.
- Shared Key – Use a WEP share key for authentication. If you choose to use
WEP shared keys, be sure to define at least one static WEP key. Also, be sure
that the WEP shared keys are the same for each client in the wireless network.
- Auto Switch – Allows support of clients using a static WEP key or no keys.
- WPA-TLS – The WPA enterprise mode that uses IEEE 802.1X and EAP-TLS to
authenticate users and to dynamically distribute encryption keys to clients.
Either TKIP or AES can be used as the encryption cipher. Requires a RADIUS
server to be configured and available in the wired network.
- WPA-PSK – The WPA Pre-shared Key (PSK) mode for small networks that uses
a common password string that is manually distributed. Requires the PSK
pass-phrase string to be entered. All wireless clients must be configured with the
same key to communicate with the unit. Either TKIP or AES can be used as the
encryption cipher.
- WPA2-TLS – The WPA2 enterprise mode that uses IEEE 802.1X and EAP-TLS
to authenticate users and to dynamically distribute encryption keys to clients.
Either TKIP or AES can be used as the encryption cipher. Requires a RADIUS
server to be configured and available in the wired network.
- WPA2-PSK – The WPA2 Pre-shared Key (PSK) mode for small networks that
uses a common password string that is manually distributed. Requires the PSK
pass-phrase string to be entered. All wireless clients must be configured with the
same key to communicate with the unit. Either TKIP or AES can be used as the
encryption cipher.
• Active Key / Key 1-4 – If you select Shared Key encryption or authentication,
configure at least one shared key by entering 10 (64-bit) or 26 (128-bit)
hexadecimal characters (0~9, A~F). Then select the active transmit key to use for
encryption.
Note: All wireless devices must be configured with the same Key ID values to
communicate with the unit.
• Radius Server IP – IP address of the Remote Authentication Dial-in User Service
(RADIUS) server. A RADIUS server must be specified for the unit when you
implement 802.1X, WPA-TLS, or WPA2-TLS security.
- Secret – A shared text string used to encrypt messages between the unit and
the RADIUS server. Be sure that the same text string is specified on the RADIUS
server. Do not use blank spaces in the string. (Maximum length: 20 characters)