Ruckus Wireless ZoneDirector 3000, User Manual, Page: 194 / 430

Customizing WLAN Security
Switching to a Different Security Mode
194
Ruckus Wireless, Inc.
• Open Auth/WEP encryption : Least security, only use if necessary to support
older WEP-only client devices.
• Open Auth/WPA2 encryption : The recommended configuration for modern
wireless clients.
• Open Auth/WPA-Mixed encryption : Allows both WPA and WPA2 devices on
the same WLAN. Use this option only if older WPA devices are cannot be
upgraded to WPA2.
• 802.1X EAP Auth/Any encryption : Authentication to an AAA server (RADIUS
or Local Database) using IEEE 802.1X authentication protocol.
• MAC Auth/Any encryption : Authentication by MAC address. Provides limited
security due to ease of MAC address spoofing.
• 802.1X EAP + MAC Auth/Any encryption : Allows clients to connect using
either MAC address or 802.1X authentication.
To change the security mode for an existing WLAN:
1 Go to Configure > WLANs .
2 When the WLANs workspace appears, you will want to review and then change
the security options for the internal network. To start, click
Edit
in the Internal
WLAN row.
3 When the Editing (Internal) options appear, look at the two main categories --
Authentication Options and Encryption Options .
4 If you click an Authentication Option Method such as Open, or 802.1X, different
sets of encryption options are displayed:
• Open allows you to configure a WPA- or WEP-based encryption, or "none"
if you're so inclined. After selecting a WPA or WEP level, you can then enter
a passphrase or key text of your choosing.
• 802.1X EAP allows you to choose from all available encryption methods,
but you do not need to create a key or passphrase. Instead, users will be
authenticated against ZoneDirector’s internal database or an external
RADIUS server.
•
MAC Address
allows you to use an external RADIUS server to authenticate
wireless clients based on their MAC addresses. Before you can use this
option, you need to add your external RADIUS server to ZoneDirector’s
Configure > AAA Servers page. You also need to define the MAC addresses
that you want to allow on the RADIUS server.