ZyXEL Communications NWA-3500, User Manual

Page: 114 / 324

Chapter 7 Wireless Security Configuration
ZyXEL NWA-3500 User’s Guide
114
Figure 63 Security:WPA2 or WPA2-MIX
The following table describes the labels not previously discussed
Table 31 Security: WPA2 or WPA2-MIX
LABEL DESCRIPTIONS
Name Type a name to identify this security profile.
Security Mode Choose WPA2 or WPA2-MIX in this field.
ReAuthentication
Timer
Specify how often wireless stations have to resend usernames and passwords in
order to stay connected.
Enter a time interval between 10 and 9999 seconds. The default time interval is
1800 seconds (30 minutes). Alternatively, enter “0” to turn reauthentication off.
Note: If wireless station authentication is done using a
RADIUS server, the reauthentication timer on the
RADIUS server has priority.
Idle Timeout The ZyXEL Device automatically disconnects a wireless station from the wired
network after a period of inactivity. The wireless station needs to enter the
username and password again before access to the wired network is allowed.
The default time interval is
3600 seconds (or 1 hour).
Group Key
Update Timer
The Group Key Update Timer is the rate at which the AP sends a new group key
out to all clients. The re-keying process is the WPA equivalent of automatically
changing the group key for an AP and all stations in a WLAN on a periodic basis.
Setting of the Group Key Update Timer is also supported in WPA-PSK mode.
The ZyXEL Device‘s default is 1800 seconds (30 minutes).
PMK Cache When a wireless client moves from one AP’s coverage area to another, it performs
an authentication procedure (exchanging security information) with the new AP.
Instead of re-authenticating a client each time it returns to the AP’s coverage area,
which can cause delays to time-sensitive applications, the AP and the client can
store (or “cache”) and use information about their previous authentication. Select
Enable to allow PMK caching, or Disable to switch this feature off.
Pre-
Authentication
Pre-authentication allows a wireless client to perform authentication with a
different AP from the one to which it is currently connected, before moving into the
new AP’s coverage area. This speeds up roaming. Select Enable to allow pre-
authentication, or Disable to switch it off.
Apply Click Apply to save your changes.
Reset Click Reset to begin configuring this screen afresh.