Wireless Configuration and Security
50
ProSAFE Dual Band Wireless-N Access Point with RFID Support, WNDAP380R
Network Authentication
and Data Encryption
(continued)
WPA & WPA2 with
Radius
Configure the RADIUS server setting. TKIP + AES
encryption is the default encryption.
See
Configure WPA with RADIUS, WPA2 with RADIUS,
and WPA & WPA2 with RADIUS
on page
53.
Note:
This setting allows clients to connect through either
WPA with TKIP or WPA2 with AES.
WPA-PSK
Enter a WPA passphrase and select TKIP or TKIP + AES
encryption.
See
Configure WPA-PSK, WPA2-PSK, and WPA-PSK &
WPA2-PSK
on page
54.
WPA2-PSK
Enter a WPA passphrase and select AES or TKIP + AES
encryption.
See
Configure WPA-PSK, WPA2-PSK, and WPA-PSK &
WPA2-PSK
on page
54.
Note:
Select this setting only if all clients support WPA2.
WPA-PSK &
WPA2-PSK
Enter a WPA passphrase. TKIP + AES encryption is the
default encryption.
See
Configure WPA-PSK, WPA2-PSK, and WPA-PSK &
WPA2-PSK
on page
54.
Note:
This setting allows clients to connect through either
WPA with TKIP or WPA2 with AES.
Wireless Client Security
Separation
If you enable wireless client security separation by selecting Enable from the
drop-down menu, the associated wireless clients cannot communicate with
each other. By default, Disable is selected from the drop-down menu. This
feature is intended for hotspots and other public access situations.
Dynamic VLAN
From the drop-down menu, select how VLANs operate by making one of the
following selections:
•
Disable
. Disables dynamic VLANs, and enables static VLANs. This is the
default setting.
•
Optional
. Enables dynamic VLANs, but if a RADIUS server does not return
a VLAN ID, the wireless client is still allowed to connect to the wireless
access point.
•
Required
. Enables dynamic VLANs. If a RADIUS server does not return a
VLAN ID, the wireless client is not authenticated and cannot connect to the
wireless access point.
For dynamic VLANs to operate (that is, the selection is Optional or Required),
the following is required:
•
The hubs and switches on your LAN must support the VLAN (802.1Q)
standard.
•
The authentication is set to any RADIUS type authentication: either the
network authentication in the wireless security profile or the remote MAC
address database authentication for the MAC Authentication feature can be
used.
Setting
Description