![ZyXEL Communications P-320W User Manual Download Page 205](http://html1.mh-extra.com/html/zyxel-communications/p-320w/p-320w_user-manual_945264205.webp)
P-320W User’s Guide
Appendix F Wireless LANs
205
Note:
EAP-MD5 cannot be used with Dynamic WEP Key Exchange
For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use
dynamic keys for data encryption. They are often deployed in corporate environments, but for
public deployment, a simple user name and password pair is more practical. The following
table is a comparison of the features of authentication types.
Table 86
Comparison of EAP Authentication Types
EAP-MD5
EAP-TLS
EAP-TTLS
PEAP
LEAP
Mutual Authentication
No
Yes
Yes
Yes
Yes
Certificate – Client
No
Yes
Optional
Optional
No
Certificate – Server
No
Yes
Yes
Yes
No
Dynamic Key Exchange
No
Yes
Yes
Yes
Yes
Credential Integrity
None
Strong
Strong
Strong
Moderate
Deployment Difficulty
Easy
Hard
Moderate
Moderate
Moderate
Client Identity Protection
No
No
Yes
Yes
No
WPA
User Authentication
WPA applies IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate
wireless stations using an external RADIUS database.
Encryption
WPA improves data encryption by using Temporal Key Integrity Protocol (TKIP) or
Advanced Encryption Standard (AES), Message Integrity Check (MIC) and IEEE 802.1x.
TKIP uses 128-bit keys that are dynamically generated and distributed by the authentication
server. It includes a per-packet key mixing function, a Message Integrity Check (MIC) named
Michael, an extended initialization vector (IV) with sequencing rules, and a re-keying
mechanism.
TKIP regularly changes and rotates the encryption keys so that the same encryption key is
never used twice.
The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up
a key hierarchy and management system, using the PMK to dynamically generate unique data
encryption keys to encrypt every data packet that is wirelessly communicated between the AP
and the wireless stations. This all happens in the background automatically.
AES (Advanced Encryption Standard) also uses a secret key. This implementation of AES
applies a 128-bit key to 128-bit blocks of data.
Summary of Contents for P-320W
Page 1: ...P 320W 802 11g Wireless Firewall Router User s Guide Version 1 00 11 2005 Edition 1...
Page 2: ......
Page 10: ...P 320W User s Guide 10 Customer Support...
Page 24: ...P 320W User s Guide 24...
Page 34: ...P 320W User s Guide 34 Chapter 1 Getting to Know Your Prestige...
Page 44: ...P 320W User s Guide 44 Chapter 2 Introducing the Web Configurator...
Page 60: ...P 320W User s Guide 60 Chapter 3 Connection Wizard...
Page 80: ...P 320W User s Guide 80 Chapter 4 Wireless LAN...
Page 92: ...P 320W User s Guide 92 Chapter 5 WAN...
Page 118: ...P 320W User s Guide 118 Chapter 10 Static Route Screens...
Page 140: ...P 320W User s Guide 140 Chapter 13 System...
Page 149: ...P 320W User s Guide Chapter 15 Tools 149 Figure 99 System Restart...
Page 150: ...P 320W User s Guide 150 Chapter 15 Tools...
Page 172: ...P 320W User s Guide 172 Appendix B IP Subnetting...