HP ProCurve 530 NA, Management And Configuration Manual

Page: 202 / 556

7-8
Wireless Security Configuration
Wireless Security Overview
connections. The AP 530 supports port-access authentication through the AP
Authentication feature. See
“Configuring 802.1X AP Authentication” on page 7-53
for
more information.
Encryption
The AP 530 supports three types of encryption:
■
Wired Equivalent Privacy (WEP): Key lengths of 64 bits and 128 bits are
possible. WEP provides the least secure method of encryption (static WEP
is not secure, because it can be easily compromised).
■ Temporal Key Integrity Protocol (TKIP): Intermediate security between
WEP and AES with a key length of 256 bits. Provides a more secure
method of encryption than WEP (security is much better than WEP, but
not as robust as CCMP).
■ Counter mode/CBC-MAC Protocol (CCMP): Robust security with a key
length of 128 bits. Provides the most secure method of encryption.
Wired Equivalent Privacy (WEP)
WEP provides a basic level of security, preventing unauthorized access to the
network and encrypting data transmitted between wireless stations and the
access point.
WEP is the security protocol initially specified in the IEEE 802.11 standard
for wireless communications. Unfortunately, static WEP has been found to be
seriously flawed and cannot be recommended for a high level of network
security. For improved wireless security, the access point provides more
robust data encryption methods like TKIP and AES.
Temporal Key Integrity Protocol (TKIP)
TKIP avoids the problems of WEP static keys by dynamically changing data
encryption keys. TKIP starts with a master (temporal) key for each user
session and then mathematically generates other keys to encrypt each data
packet.
TKIP provides further data encryption enhancements by including a message
integrity check for each packet and a re-keying mechanism, that periodically
changes the master key.