Teletronics International TT 900, User Manual

Page: 38 / 57

38
Cipher Type
•
TKIP
o
Temporal Key Integrity Protocol is an upgrade to the WEP known as WEP 1.1 that fixes known
security problems in WEP’s implementation of the RC4 stream cipher. TKIP scrambles the keys using
a hashing algorithm and by adding an integrity-checking feature, ensures that the keys haven’t been
tampered with.
•
AES
o
Advanced Encryption Standard (Rijndael Cypher) is the U.S. government's next-generation
cryptography algorithm, which will replace DES and 3DES. AES works at multiple network layers
simultaneously. AES Supports 128, 192 and 256 bit keys. Unlike the older standard, AES and 802.11i
(WEP version 2) are based on 32bit processing.
•
TKIP and AES
o
If clients support both the TKIP and AES standards then this would be the strongest cipher type to use
that combines both TKIP and AES security.
PSK
PSK stands for Pre-Shared-Key and serves as a password. User may key in 8 to 63 characters string to set the
password and activate 802.1x Authentication. Note that the same password must be used at both ends of the
communication link (access point and client end).
WPA Group Key Update Interval
The Group Key (Group Transient Key) is a shared key among all Supplicants connected to the same AP, and is used to
secure multicast/broadcast traffic. It is not used for normal unicast traffic. A pair wise Transient Key secures the unicast
traffic. Group Key renewal controls how often the Group Transient Key is changed. The Group Key renewal does not
control the update period for the pair wise Transient Key. The pair wise Transient Key is changed each time the
Supplicant authenticates or re-authenticates.
802.1X Configuration
Remote RADIUS server configuration settings. There are two sections to setup 2 RADIUS servers for the TT900 to
connect to. At any given time the TT900 will connect to one RADIUS server for authentication and will use the other
one as a backup if that option is configured.
802.1X enabled
Option that enables or disables remote RADIUS authentication.
Authentication timeout (mins)
The default value is 60(minutes). When the time expires, the device will re-authenticate with RADIUS server.
RADIUS server IP address
Enter the RADIUS server IP address.
RADIUS server port number
Port used for RADIUS, the port number must be the same as the RADIUS server‘s, normally the port is 1812.