Atel IWE1200A-G, Руководство пользователя

Страница: 60 / 87

AP 1 AP 2
STA 1
STA 2
STA 3
Wireless Link
Ethernet Link
Switch
WCI:
All APs in This
Subnet
WCI:
All APs in This
Subnet
Fig. 75. Behavior of the “All APs on This Subnet” wireless client isolation option.
As illustrated in Fig. 74 when AP 1 and AP 2 are using the “This AP Only” option, wireless traffic
between STA 1 and STA 2 is blocked by AP 1, while wireless traffic between STA 2 and STA 3,
which are associated with different APs, is still allowed. If the “All APs in This Subnet” option is
used as shown in Fig. 75, AP 1 and AP 2 communicates with each other via an inter-AP protocol to
share their STA association information to block wireless traffic among all the STAs.
There are up to 9 security modes depending on wireless access gateway model variations:
Open System. No authentication, no data encryption.
64-bit WEP. Authentication and data encryption based on 64-bit WEP (Wired Equivalent Pri-
vacy).
128-bit WEP. Authentication and data encryption based on 128-bit WEP (Wired Equivalent
Privacy), and 128-bit keys are used.
802.1x EAP-MD5. The IEEE 802.1x functionality is enabled and the user-
name/password-based EAP-MD5 authentication is used. No data encryption.
802.1x EAP-MD5 + 64-Bit WEP. The IEEE 802.1x functionality is enabled and the user-
name/password-based EAP-MD5 authentication is used. Data encryption is achieved by 64-bit
WEP.
802.1x EAP-MD5 + 128-Bit WEP. The IEEE 802.1x functionality is enabled and the user-
name/password-based EAP-MD5 authentication is used. Data encryption is achieved by 128-bit
WEP.
802.1x EAP-TLS; No Encryption. The IEEE 802.1x functionality is enabled and the digital
certificate-based EAP-TLS user authentication. No data encryption is used.
802.1x EAP-TLS 64-Bit Key. The IEEE 802.1x functionality is enabled and the digital cer-
tificate-based EAP-TLS (Transport Layer Security) user authentication and data encryption is
used. Session keys are 64-bit.
802.1x EAP-TLS 128-Bit Key. The IEEE 802.1x functionality is enabled and the digital cer-
53