ZyXEL Communications NXC-8160, User Manual

Page: 48 / 205

Chapter 4 WLAN Settings
NXC-8160 User’s Guide
48
4.2.1.2 Encryption
Wireless networks can use encryption to protect the information that is sent in the wireless
network. Encryption is like a secret code. If you do not know the secret code, you cannot
understand the message.
The types of encryption you can choose depend on the type of user authentication.
For example, if the wireless network has a RADIUS server, you can choose WEP & 802.1x
Authentication or WPA . If users do not log in to the wireless network, you can choose no
encryption, WEP or WPA-Personal or WPA-Enterprise .
Usually, you should set up the strongest encryption that every wireless client in the wireless
network supports. For example, suppose the AP does not have a local user database, and you
do not have a RADIUS server. Therefore, there is no user authentication. Suppose the wireless
network has two wireless clients. Device A only supports WEP, and device B supports WEP
and WPA. Therefore, you should set up
WEP in the wireless network.
"
It is recommended that wireless clients use WPA-Personal , WPA-Enterprise ,
or stronger encryption. IEEE 802.1x and WEP encryption are better than none
at all, but it is still possible for unauthorized devices to figure out the original
information pretty quickly.
It is not possible to use WPA or stronger encryption with a local user database. In this case, it
is better to set up stronger encryption with no authentication than to set up weaker encryption
with the local user database.
Many types of encryption use a key to protect the information in the wireless network. The
longer the key, the stronger the encryption. Every wireless client in the wireless network must
have the same key.
4.2.1.3 Additional Installation Requirements for Using 802.1x
• A computer with an IEEE 802.11 compatible wireless LAN card.
• A computer equipped with a web browser (with JavaScript enabled) and/or Telnet.
• A wireless station must be running IEEE 802.1x-compliant software. Currently, this is
offered in Windows XP.
• An optional network RADIUS server for remote user authentication and accounting.
Table 10 Types of Encryption for Each Type of Authentication
NO AUTHENTICATION RADIUS SERVER
Weakest No Security
WEP
WEP + 802.1x Authentication
WPA-Personal WPA
Strongest WPA-Enterprise WPA