ZyXEL Communications NBG-417N, User Manual, Page: 83 / 279

Chapter 7 Wireless LAN
User
’
s Guide
84
Local user databases also have an additional limitation that is explained in the
next section.
Encryption
Wireless networks can use encryption to protect the information that is sent in the
wireless network. Encryption is like a secret code. If you do not know the secret
code, you cannot understand the message.
The types of encryption you can choose depend on the type of user
authentication. (See
Section on page 83 for information about this.)
For example, if the wireless network has a RADIUS server, you can choose WPA
or WPA2 . If users do not log in to the wireless network, you can choose no
encryption, Static WEP , WPA-PSK , or WPA2-PSK .
Usually, you should set up the strongest encryption that every wireless client in
the wireless network supports. For example, suppose the AP does not have a local
user database, and you do not have a RADIUS server. Therefore, there is no user
authentication. Suppose the wireless network has two wireless clients. Device A
only supports WEP, and device B supports WEP and WPA. Therefore, you should
set up
Static WEP in the wireless network.
Note: It is recommended that wireless networks use WPA-PSK , WPA , or stronger
encryption. IEEE 802.1x and WEP encryption are better than none at all, but it
is still possible for unauthorized devices to figure out the original information
pretty quickly.
Note: It is not possible to use WPA-PSK , WPA or stronger encryption with a local user
database. In this case, it is better to set up stronger encryption with no
authentication than to set up weaker encryption with the local user database.
When you select WPA2 or WPA2-PSK in your NBG4115, you can also select an
option ( WPA Compatible ) to support WPA as well. In this case, if some wireless
clients support WPA and some support WPA2, you should set up WPA2-PSK or
WPA2 (depending on the type of wireless network login) and select the WPA
Compatible option in the NBG4115.
Table 25 Types of Encryption for Each Type of Authentication
NO AUTHENTICATION RADIUS SERVER
Weakest No Security WPA
Static WEP
WPA-PSK
Stronges
t WPA2-PSK WPA2
C
om
pan
y
C
on
fiden
tial