Chapter 10 Wireless LAN
NBG6604 User’s Guide
66
The types of encryption you can choose depend on the type of user authentication. (See
page 65
for
information about this.)
For example, if the wireless network has a RADIUS server, you can choose
WPA
or
WPA2
. If users do not
log in to the wireless network, you can choose
no e nc ryptio n
,
WPA- PSK
, or
WPA2- PSK
.
Usually, you should set up the strongest encryption that every wireless client in the wireless network
supports. For example, suppose the AP does not have a local user database, and you do not have a
RADIUS server. Therefore, there is no user authentication. Suppose the wireless network has two wireless
clients. Device A only supports WPA, and device B supports WPA and WPA2. Therefore, you should set
up
WPA
or
WPA- PSK
in the wireless network.
Note: It is recommended that wireless networks use
WPA - PSK
,
WPA
, or stronger encryption.
IEEE 802.1x and WEP encryption are better than none at all, but it is still possible for
unauthorized devices to figure out the original information pretty quickly.
Note: It is not possible to use
WPA - PSK
,
WPA
or stronger encryption with a local user database.
In this case, it is better to set up stronger encryption with no authentication than to set
up weaker encryption with the local user database.
When you select
WPA2
or
WPA2- PSK
in your NBG6604, you can also select an option (
WPA
/
WPA- PSK
C o m pa tib le
) to support WPA/WPA-PSK as well. In this case, if some wireless clients support WPA and
some support WPA2, you should set up
WPA2- PSK
or
WPA2
(depending on the type of wireless network
login) and select the
WPA
/
WPA- PSK C o m pa tib le
option in the NBG6604.
Many types of encryption use a key to protect the information in the wireless network. The longer the
key, the stronger the encryption. Every wireless client in the wireless network must have the same key.
G ue st WLAN
Guest WLAN allows you to set up a wireless network where users can access to Internet via the NBG6604
(
Z
), but not other networks connected to the
Z
. In the following figure, a guest user can access the
Internet from the guest wireless network
A
via
Z
but not the home or company network
N
.
Note: The home or company network
N
and Guest WLAN network are independent networks.
Note: Only Router mode supports guest WLAN.
Table 20 Types of Encryption for Each Type of Authentication
NO AUTHENTIC ATIO N
RADIUS SERVER
We a ke st
No Security
WPA
WPA-PSK
Stro ng e st
WPA2-PSK
WPA2
