D-Link DWL-3500AP, Руководство администратора

Страница: 101 / 166

101
A
Wireless Client Settings and RADIUS
Server Setup
Typically, users configure security on their wireless clients for access to many different
networks (access points). The list of available wireless networks changes depending on the
location of the client and which APs are online and detectable in that location.
1
Once an AP
has been detected by the client and security is configured for it, it remains in the client’s list of
networks but shows as either reachable or unreachable depending on the situation. For each
network (AP) you want to connect to, configure security settings on the client to match the
security mode being used by that network.
The following sections describe how to set up each of the supported security modes on
wireless clients of a network served by the Unified Access Point:
• Accessing Wireless Client Security Settings
• Configuring a Client to Access an Unsecure Network
• Configuring Static WEP Security on a Client
• Configuring WPA/WPA2 Personal on a Client
• Using an External Authentication Server
• Configuring IEEE 802.1X Security on a Client
• Configuring WPA/WPA2 Enterprise (RADIUS)
• Configuring the RADIUS Server for Authentication
• Obtaining a TLS-EAP Certificate for a Client
• Configuring the RADIUS Server for VLAN Tags
NOTE: The recommended sequence for security configuration is (1) set up security
on the access point, and (2) configure security on each of the wireless clients.
A typical method to configure security is to connect to an access point that has no
security set (None) from an unsecure wireless client. With this initial connection, you
can access the Security page on the AP Administration Web UI and configure a
security mode.
When you re-configure the access point with a security setting and click Update, your
1. The exception to this is if the access point is set to prohibit the broadcast of its network name. In this case the
SSID will not show up in the list of Available Networks on the client. Instead, the client must have the exact net-
work name configured in the network connection properties before it will be able to connect.