ZyXEL Communications P8802T, User Manual

Page: 182 / 278

Chapter 14 Wireless
Basic Home Station VDSL2 P8802T User’s Guide
182
Network
Authentication Use the strongest authentication method that the wireless clients all support.
WPA2 or WPA uses an external RADIUS server to authenticate a separate user name
and password for each user. While WPA2 offers the strongest security, more wireless
clients support WPA.
Mixed WPA2/WPA supports WPA and WPA2 simultaneously.
WPA2-PSK or WPA-PSK uses a common password for all clients. While WPA2-PSK offers
stronger security, more wireless clients support WPA-PSK.
Mixed WPA2/WPA -PSK supports WPA2-PSK and WPA-PSK simultaneously.
Choose Open to allow all wireless connections without authentication.
WPA2
Preauthentication This field displays when you select WPA2 or Mixed WPA2/WPA.
Enable pre-authentication for fast roaming by allowing a wireless client already connected
to an AP to perform IEEE 802.1x authentication with another AP before connecting to it.
Network Re-auth
Interval This field displays when you select WPA2 or Mixed WPA2/WPA.
Specify how often wireless stations have to resend usernames and passwords in order to
stay connected. If wireless station authentication is done using a RADIUS server, the
reauthentication timer on the RADIUS server has priority.
WPA Group Rekey
Interval Set the rate at which the AP (if using WPA(2)-PSK key management) or RADIUS server (if
using WPA(2) key management) sends a new group key out to all clients. The re-keying
process is the WPA(2) equivalent of automatically changing the WEP key for an AP and all
stations in a WLAN on a periodic basis.
RADIUS Server IP
Address Enter the IP address of the external authentication server in dotted decimal notation.
RADIUS Port Enter the port number of the external authentication server. The default port number is
1812. You need not change this value unless your network administrator instructs you to
do so with additional information.
RADIUS Key Enter a password (up to 31 alphanumeric characters) as the key to be shared between
the external RADIUS server and the VDSL Router. The key must be the same on the
RADIUS server and your VDSL Router. The key is not sent over the network.
WPA/WAPI
Encryption Select the encryption type (AES or TKIP+AES) for data encryption.
Select AES if your wireless clients can all use AES.
Select TKIP+AES to allow the wireless clients to use either TKIP or AES.
Generate
password
automatically This field displays when you select WPA(2)-PSK.
Select this option to have the VDSL Router automatically generate a password. The
password field becomes read-only.
WPA/WAPI
passphrase This field displays when you select WPA(2)-PSK.
Enter 16 to 63 alphanumeric characters (0-9, A-Z, with no spaces). It must contain both
letters and numbers and is case-sensitive. Click the link to display the password.
WEP Encryption This field displays when you set Network Authentication to Open. Enable WEP
encryption to scramble the wireless data transmissions between the wireless stations and
the access points (AP) to keep network communications private. Both the wireless
stations and the access points must use the same WEP key.
Note: WEP is extremely insecure. Attackers can break it using widely-available software. It
is strongly recommended that you use a more effective security mechanism.
Encryption
Strength If you are using WEP encryption, select 64-bit or 128-bit to set the length of the
encryption key.
Table 66
Wireless: Security
LABEL DESCRIPTION