AMX NXA-WAPZD1000, Руководство по эксплуатации/справочник

Страница: 59 / 154

Configure Tab
55 NXA-WAPZD1000 ZoneDirector Smart WLAN Controller

None: No encryption; communications are sent in clear text.
Algorithm (Only for WPA or WPA2 encryption methods)

TKIP: This algorithm provides greater compatibility with older client devices, but is not supported
by the 802.11n standard. Therefore, if you select TKIP encryption, 11n devices will be limited to
11g transfer rates. Furthermore, the Wi-Fi Alliance will be mandating the removal of TKIP, so it
should not be used.

AES: This algorithm provides enhanced security over TKIP, and is the only encryption algorithm
supported by the 802.11i standard. Choose AES encryption if you are certain that all of your clients
will be using 802.11i-compliant NICs.

Auto: Automatically selects TKIP or AES encryption based on the client’s capabilities. Note that
since it is possible to have clients using both TKIP and AES on the same WLAN, only unicast
traffic is affected (broadcast traffic must fall back to TKIP; therefore, transmit rates of broadcast
packets from 11n APs will be at lower 11g rates).
WEP Key/Passphrase

WEP Key: WEP methods only. Click in the Hex field and type the required key text. If the key is for
WEP 64 encryption, the key text must be up to 10 characters in length. If it is for WEP 128
encryption, enter a key up to 26 characters in length.

Passphrase: WPA-PSK methods only. Click in this field and type the text of the passphrase used for
authentication.
Options

Web Authentication: [Available only with Open or Shared authentication.] Click the check box to
require all WLAN users to complete a Web-based login to this network each time they attempt to
connect.

Authentication Server: When Web Authentication is active, use this option to designate the server
used to authenticate Web-based user login. When 802.1X or MAC Address authentication is active,
use this option to designate the server used to authenticate users (without Web authentication).
Options include Local Database, RADIUS server, Active Directory and LDAP. When one of these
authentication server types is selected (other than Local Database), you will need to point the
NXA-WAPZD1000 to the proper authentication server configured on the Configure > AAA
Servers page.

Wireless Client Isolation: Wireless client isolation enables subnet restrictions for connected clients.
Options are:
None: Clients associated with this WLAN are not isolated and have full access to communicate
with each other and any other nodes on the local network.
Local: Clients can not communicate with each other on the same WLAN, but can access other
resources on the local network.
Full: When full wireless client isolation is enabled for a WLAN, stations associated to this WLAN
will not be able to communicate with each other or access the local LAN; rather, they can only
access the Internet. The behavior of stations will be exactly the same as the stations that associate to
If you set the encryption method to WEP-64 (40 bit) or WEP-128 (104 bit) and you
are using an 802.11n AP for the WLAN, the AP will operate in 802.11g mode.
If you set the encryption algorithm to TKIP and you are using an 802.11n AP for the
WLAN, the AP will operate in 802.11g mode.
If you set the encryption algorithm to TKIP, the AP will only be able to support up to
25 clients. When this limit is reached, additional clients will be unable to associate
with the AP. On the other hand, if you disable encryption or select AES, the AP will be
able to support up to 100 clients per radio. If the wireless mesh network is also
enabled, the AP will be able to support less than 100 clients per radio.