Cisco WAP571, Руководство администратора

Страница: 91 / 192

Wireless
Networks
Cisco WAP571/E Administration Guide 91
5
Dynamic WEP
Dynamic WEP refers to the combination of 802.1x technology and the Extensible
Authentication Protocol (EAP). With Dynamic WEP security, WEP keys are changed
dynamically.
EAP messages are sent over an IEEE 802.11 wireless network using a protocol
called EAP Encapsulation Over LANs (EAPOL). IEEE 802.1X provides dynamically
generated keys that are periodically refreshed. An RC4 stream cipher is used to
encrypt the frame body and cyclic redundancy checking (CRC) of each 802.11
frame.
This mode requires the use of an external RADIUS server to authenticate users.
The WAP device requires a RADIUS server that supports EAP, such as the
Microsoft Internet Authentication Server. To work with Microsoft Windows clients,
the authentication server must support Protected EAP (PEAP) and MSCHAP V2.
You can use any of a variety of authentication methods that the IEEE 802.1X mode
supports, including certificates, Kerberos, and public key authentication. You must
configure the client stations to use the same authentication method the WAP
device uses.
These parameters configure Dynamic WEP:
• Use Global RADIUS Server Settings —By default, each VAP uses the
global RADIUS settings that you define for the WAP device (see RADIUS
Server ). However, you can configure each VAP to use a different set of
RADIUS servers.
To use the global RADIUS server settings, ensure that the check box is
selected.
To use a separate RADIUS server for the VAP, uncheck the check box and
enter the RADIUS server IP address and key in these fields:
• Server IP Address Type —The IP version that the RADIUS server uses.
You can toggle between the address types to configure IPv4 and IPv6
global RADIUS address settings, but the WAP device contacts only the
RADIUS server or servers for the address type you select in this field.
• Server IP Address 1 or Server IPv6 Address 1 —The address for the
primary RADIUS server for this VAP.