Appendix B - About Wireless LANs
WPA2-PSK
This is a later version of WPA (WPA-PSK). The major change is the use of AES (Advanced
Encryption System) for protecting data. AES is very secure, considered to be unbreakable. The
PSK (Pre-shared Key) must be entered on each Wireless station.
If WPA2-PSK is used, the Wireless Stations and the Access Point must have the same
settings for each of the following:
WPA2 PSK
(Pre-shared Key)
Enter the same value on every station and the AP. The PSK
must be from 8 to 63 characters in length. The 256Bit key
used for the actual encryption is derived from this key.
Encryption
The same encryption method must be used. The most
common encryption method is TKIP. Another widely-
supported method is AES.
WPA-802.1x
WPA-802.1x - This version of WPA requires a Radius Server on your LAN to provide the
client authentication according to the 802.1x standard. Data transmissions are encrypted using
the WPA standard.
If this option is used:
•
The Access Point must have a "client login" on the Radius Server.
•
Each user must have a "user login" on the Radius Server.
•
Each user's wireless client must support 802.1x and provide the login data when required.
•
All data transmission is encrypted using the WPA standard. Keys are automatically
generated, so no key input is required.
Wireless LAN Configuration
To allow Wireless Stations to use the Access Point, the Wireless Stations and the Access Point
must use the same settings, as follows:
Mode
On client Wireless Stations, the mode must be set to "Infrastructure".
(The Access Point is always in "Infrastructure" mode.)
SSID (ESSID)
Wireless Stations should use the same SSID (ESSID) as the Access
Point they wish to connect to. Alternatively, the SSID can be set to
"any" or null (blank) to allow connection to any Access Point.
Wireless
Security
The Wireless Stations and the Access Point must use the same settings
for Wireless security. (None, WEP, WPA-PSK, WPA2-PSK, WPA-
802.1x)
•
If Wireless security remains disabled on the Wireless-N Broad-
band Router, all stations must have wireless security disabled.
•
If Wireless security is enabled on the Wireless-N Broadband
Router, each station must use the same settings as the Wireless
ADLS Router.
101