Authentication Method
Authentication Method defines the method by which users are authenticated prior to
gaining access to the WLAN. The authentication method is only configurable for "Standard
Usage" type WLANs. For other WLAN types, the authentication method is dictated by
the WLAN type.
ZoneDirector provides the following authentication method options:
• Open [Default]: No authentication mechanism is applied to connections. Any
encryption method can be used.
• 802.1X/EAP: Uses 802.1X authentication against a user database.
• MAC Address: Uses the device's MAC address for both the user name and password.
• 802.1X EAP + MAC Address: Allows the use of both authentication methods on the
Using 802.1X EAP MAC Address Authentication
on page 96.
Fast BSS Transition
The Fast BSS Transition feature uses messages and procedures defined in 802.11r to
allow continuous connectivity for wireless devices in motion, with fast and secure handoffs
from one AP to another.
A fast BSS transition is a BSS transition in the same mobility domain that establishes
the state necessary for data connectivity before the re-association rather than after the
re-association. In this way, clients that support the 11r standard (including iOS devices)
can achieve significantly faster roaming between APs.
Encryption Options
Encryption choices include WPA2, WPA-Mixed, WEP-64, WEP-128 and None. WPA2
is the only encryption method certified by the WiFi Alliance and is the recommended
method. WEP has been proven to be easily circumvented, and Ruckus Wireless
recommends against using WEP if possible.
Method
•
WPA2
: Enhanced WPA encryption that complies with the 802.11i security standard.
•
WPA-Mixed
: Allows mixed networks of WPA and WPA2 compliant devices. Use this
setting if your network has a mixture of older clients that only support WPA and TKIP,
and newer client devices that support WPA2 and AES. **Note that selection of
WPA-Mixed disables the ability to use Zero-IT for this WLAN.
•
WEP-64
: Provides a lower level of encryption, and is less secure, using shared key
40-bit WEP encryption.
•
WEP-128
: Provides a higher level of encryption than WEP-64, using a shared 104-bit
key for WEP encryption. However, WEP is inherently less secure than WPA2.
•
None
: No encryption; communications are sent in clear text.
NOTE
If you set the encryption method to WEP-64 (40 bit) or WEP-128 (104 bit) or
802.11ac AP for the WLAN, the WLAN will operate in 802.11g mode.
157
Ruckus Wireless ZoneDirector™ Release 10.0 User Guide
Managing a Wireless Local Area Network
Creating a WLAN
