31
which will be used by the TKIP engine as a
master key
to generate keys that actually encrypt
outgoing packets and decrypt incoming packets.
NOTE:
The
Pre-Shared Key
has a minimum of 8 and maximum of 63 characters.
z
IEEE 802.1x EAP without Encryption (EAP-MD5).
The IEEE 802.1x functionality is
enabled and the user-name/password-based EAP-MD5 authentication is used. No data encryp-
tion.
z
IEEE 802.1x EAP with Static WEP (EAP-MD5).
The IEEE 802.1x functionality is enabled
and the user-name/password-based EAP-MD5 authentication is used. Data encryption is
achieved by static WEP.
z
IEEE 802.1x EAP with Dynamic WEP (EAP-TLS, EAP-TTLS, PEAP).
The IEEE 802.1x
functionality is enabled and dynamic WEP key distribution authentication (EAP-TLS,
EAP-TTLS, or PEAP) is used. Data encryption is achieved by dynamic WEP.
z
IEEE 802.1x EAP with Dynamic TKIP (WPA).
This is a full WPA mode, in which both the
TKIP and IEEE 802.1x dynamic key exchange mechanisms are enabled. The HD24613 is highly
secured in this mode.
In the above security modes, a back-end RADIUS (Remote Authentication Dial-In User Service)
server is needed if IEEE 802.1x functionality is enabled. See Section 3.5.3 for more information about
IEEE 802.1x and RADIUS.
According to the IEEE 802.11 standard, WEP can be used for authentication and data encryption.
Normally,
Shared Key
authentication is used if WEP data encryption is enabled. In rare cases,
Open
System
authentication may be used when WEP data encryption is enabled. The
Authentication algo-
rithm
setting is provided for better compatibility with wireless clients with various WLAN network
adapters. There are three options available, including
Open System
,
Shared Key
, and
Auto
.
When WEP is enabled by a security mode, the
Key length
can be specified to be
64 Bits
or
128 Bits
.
The
Selected key
setting specifies the key to be used as a
send-key
for encrypting traffic from the
HD24613 side to the wireless client side. All 4 WEP keys are used as
receive-keys
to decrypt traffic
from the wireless client side to the HD24613 side.
NOTE:
Each field of a WEP key setting is a
hex-decimal
number from 00 to FF. For example, when
the security mode is
Static WEP
and the key length is
64 Bits
, you could set Key 1 to
“00012E3ADF”.
3.5.2.2. MAC-Address-Based Access Control
When the
MAC-Address-Based Access Control
feature, the wireless client computers that are per-
mitted or not permitted to associate with the HD24613 can specified. When the table type is set to
inclusive
, entries in the table are permitted to associate with the HD24613. When the table type is set
to
exclusive
, entries in the table are not permitted to associate with the HD24613.