Motorola Netopia 7000, Administrator'S Handbook

Page: 308 / 368

Administrator’s Handbook
308
Wireless Privacy Settings
set wireless network-id privacy option { off | WEP | WPA-PSK |
WPA-802.1x }
Specifies the type of privacy enabled on the wireless LAN. off = no privacy; WEP = WEP encr yption; WPA-
PSK = Wireless Protected Access/Pre-Shared Key; WPA-802.1x = Wireless Protected Access/802.1x
authentication. See
“Wireless” on page 53 for a discussion of these options.
WPA provides Wireless Protected Access, the most secure option for your wireless network. This mecha-
nism provides the best data protection and access control. PSK requires a Pre-Shared Key; 802.1x
requires a RADIUS ser ver for authentication.
WEP is Wired Equivalent Privacy, a method of encr ypting data between the wireless Gateway and its clients.
It is strongly recommended to turn this
on
as it is the primar y way to protect your network and data from
intruders. Note that 40bit is the same as 64bit and will work with either type of wireless client. The default
is
off
.
A single key is selected (see default-key ) for encr yption of outbound/transmitted packets. The WEP-
enabled client must have the identical key, of the same length, in the identical slot (1..4) as the wireless
Gateway, in order to successfully receive and decr ypt the packet. Similarly, the client also has a ‘default’
key that it uses to encr ypt its transmissions. In order for the wireless Gateway to receive the client’s data,
it must likewise have the identical key, of the same length, in the same slot. For simplicity, a wireless Gate-
way and its clients need only enter, share, and use the first key.
set wireless network-id privacy pre-shared-key string
The Pre Shared Key is a passphrase shared between the Router and the clients and is used to generate
dynamically changing keys, when
WPA-PSK is selected or enabled. The passphrase can be 8 – 63 charac-
ters. It is recommended to use at least 20 characters for best security.
set wireless network-id privacy default-keyid { 1...4 }
Specifies which WEP encr yption key (of 4) the wireless Gateway will use to transmit data. The client must
have an identical matching key, in the same numeric slot, in order to successfully decode. Note that a client
allows you to choose which of its keys it will use to transmit. Therefore, you must have an identical key in
the same numeric slot on the Gateway.
For simplicity, it is easiest to have both the Gateway and the client transmit with the same key. The default
is
1 .
set wireless network-id privacy encryption-key1-length
{40/64bit, 128bit, 256bit}
set wireless network-id privacy encryption-key2-length
{40/64bit, 128bit, 256bit}
set wireless network-id privacy encryption-key3-length
{40/64bit, 128bit, 256bit}
set wireless network-id privacy encryption-key4-length
{40/64bit, 128bit, 256bit}
Selects the length of each encr yption key. 40bit encr yption is equivalent to 64bit encr yption. The longer
the key, the stronger the encr yption and the more difficult it is to break the encr yption.