D-Link UNIFIED WIRED & WIRELESS ACCESS SYSTEM..., Руководство пользователя

Страница: 100 / 266

D-Link Unified Access System Software User Manual
02/15/2011
Page 100 Document 34CS3000-SWUM104-D10
If you select WPA/WPA2 as the security mode, additional fields display, as <Link>Figure 46 shows.
Figure 46: WPA Personal Configuration
<Link>Table 17 describes the configuration options for the Static WPA security mode.
Table 17: Static WPA
Field Description
WPA Personal or WPA
Enterprise
WPA/WPA2 Personal uses static key management. You manually configure the same keys
to encrypt data on both the wireless client and the AP. WPA/WPA2 Enterprise uses a
RADIUS server and dynamically generated keys to encrypt client-to-AP traffic. WPA
Enterprise is more secure than WPA Personal, but you need a RADIUS server to manage
the keys.
If you select WPA Enterprise, the screen refreshes and a different set of fields appear
(described later in this table). The AP uses the global RADIUS server IP address and secret
or the RADIUS server settings you specify for the VAP. The AP acts as the RADIUS client
and must be configured as a client in the RADIUS server.
For information about how to configure the global RADIUS server settings on the Unified
Switch, see “Configuring AAA and RADIUS Settings” on page 79 .
WPA Versions Select the types of client stations you want to support:
• WPA. If all client stations on the network support the original WPA but none support the
newer WPA2 , then select WPA.
• WPA2. If all client stations on the network support WPA2 , we suggest using WPA2 which
provides the best security per the IEEE 802.11i standard.
• WPA and WPA2. If you have a mix of clients, some of which support WPA2 and others
which support only the original WPA , select both of the boxes. This lets both WPA and
WPA2 client stations associate and authenticate, but uses the more robust WPA2 for
clients who support it. This WPA configuration allows more interoperability, at the expense
of some security.
WPA Ciphers Select the cipher suite you want to use:
• TKIP
• CCMP (AES)
• TKIP and CCMP (AES)
Both TKIP and AES clients can associate with the access point. WPA clients must have one
of the following to be able to associate with the AP:
• A valid TKIP key
• A valid AES-CCMP key
WPA Key Type Select the key type by clicking one of the radio buttons:
• ASCII —Includes upper and lower case alphabetic letters, the numeric digits, and special
symbols such as @ and #. Spaces are not permitted.
• Hex —Includes digits 0 to 9 and the letters A to F.