Planex CQW-AP108AG, Installation And Configuration Manual

Page: 18 / 301

Features Overview
Installation and Configuration Guide, (CQW-AP108AG) 5
•
The configuration of the NM Portal AP is easily distributed to the other APs in the network,
assuring consistent application of configuration parameters.
•
NM Portal can provide user authentication services for an entire small to mid size network or
serve as a backup security server if an external RADIUS authentication service is used.
Security
PLANEX offers a comprehensive security solution that adheres to the following industry standards
and draft standards:
• Data encryption—WEP, Wi-Fi Protected Access (WPA) with TKIP or AES encryption
•
User authentication—IEEE 802.1x authentication, including EAP-PEAP or EAP-TLS; WPA-
PSK
• Key management—Microsoft-IAS, FUNK-RADIUS, PLANEX Wireless LAN Network
Management Software, PLANEX integrated security portal, and manual key management
capabilities
These features are part of a security architecture that provides the wireless network a greater degree
of security than most traditional wired networks. The following security features are included with
all 108 Mbps Wireless AP:
•
Built-in maximum industry-standard security
•
Auto-detection of the security capability of clients and APs
•
Policy-based configuration of security settings
•
Hardware support for high-performance encryption
•
Support for installations ranging from the small-office/home-office (SOHO) to multi-site
enterprises
•
Command-line access using SSH (secure shell)
•
Web-based management interface and policy-based management using HTTPS (SSL)
•
SNMP management interface through SNMPv3
•
IEEE 802.11i standards
•
User-authentication using EAP-TLS, EAP-PEAP, WPA-PSK, WEP
•
Rogue AP detection
•
Rogue client detection
VLANs
By decoupling traffic flow and network services from the physical network topology, virtual LANs
(VLANs) enable enterprises improve network traffic flow, increase load, and deliver varying levels
of service and access to different groups of users. The 108 Mbps Wireless AP VLAN feature
readily extends an existing wired VLAN structure to the wireless network. It can also be used to
implement new network privileges and services; for example, user VLANs are integral to the
PLANEX guest access feature (see “Guest Access” on page 6).
PLANEX supports interface-based VLANs and user-based VLANs. Interface VLANs separate
traffic according to the Ethernet and radio interfaces on the 108 Mbps Wireless AP. Packets
destined for a specific interface VLAN are directed to the port with that VLAN assigned. By
contrast, user VLANs separate traffic according to user groups. Users can be assigned to the same
VLAN even if they are in different physical LANs and at geographically dispersed locations. User
VLANs are useful for managing manage enterprise work groups and differentiating among