•
Open
allows you to configure a WPA- or WEP-based encryption, or "none" if
you're so inclined. After selecting a WPA or WEP level, you can then enter a
passphrase or key text of your choosing
•
802.1X EAP
allows you to choose from all available encryption methods, but you
do not need to create a key or passphrase. Instead, users will be authenticated
against ZoneDirector’s internal database or an external RADIUS server.
•
MAC Address
allows you to use an external RADIUS server to authenticate wireless
clients based on their MAC addresses. Before you can use this option, you need
to add your external RADIUS server to ZoneDirector’s Configure > AAA Servers
page. You also need to define the MAC addresses that you want to allow on the
RADIUS server.
•
802.1X EAP + MAC Address
allows the use of both authentication methods on
the same WLAN.
5.
Depending on your
Authentication Option Method
selection, review and reconfigure
the related Encryption Options.
6.
Review the
Advanced Options
to change any settings as needed.
7.
When you are finished, click
OK
to apply your changes. Replacing your WPA
configuration with 802.1X requires the users to make changes to their Ruckus wireless
connection configuration—which may include the importation of certificates.
Using the Built in EAP Server
(Requires the selection of "Local Database" as the authentication server.) If you are
re-configuring your internal WLAN to use 802.1X/EAP authentication, you normally have
to generate and install certificates for your wireless users.
With the built-in EAP server and Zero-IT Wireless Activation, certificates are automatically
generated and installed on the end user's computer. Users simply follow the instructions
provided during the Zero-IT Wireless Activation process to complete this task (see
Self-Provisioning Clients with Zero-IT
on page 220). Once this is done, users can connect
to the internal WLAN using 802.1X/EAP authentication.
Authenticating with an External RADIUS Server
You can also use an external RADIUS server for your wireless client 802.1X EAP
authentication. An EAP-aware RADIUS server is required for this application. Also, you
might need to deploy your own certificates for wireless client devices and for the RADIUS
server you are using. In this case, ZoneDirector works as a bridge between your wireless
clients and the RADIUS server during the wireless authentication process.
ZoneDirector allows wireless clients to access the networks only after successful
authentication of the wireless clients by the RADIUS server. For information on configuring
a RADIUS server for client authentication, see
93.
169
Ruckus Wireless ZoneDirector™ Release 10.0 User Guide
Managing a Wireless Local Area Network
Customizing WLAN Security
