Edge-Core EAP101, Руководство пользователя

Страница: 47 / 62

Chapter 4
| Wireless Settings
Radio Settings
– 47 –
■
WPA2-EAP — WPA was introduced as an interim solution for the
vulnerability of WEP pending the ratification of the IEEE 802.11i wireless
security standard. In effect, the WPA security features are a subset of the
802.11i standard. WPA2 includes the now ratified 802.11i standard, but
also offers backward compatibility with WPA. Therefore, WPA2 includes the
same 802.1X and PSK modes of operation and support for TKIP
encryption.
A RADIUS server is used for authentication, and can also be used to
accounting.
Refer to WPA-PSK for a description of encryption methods.
Refer to WPA-EAP for a information on configuring the RADIUS server.
■
WPA3-Personal — Clients using WPA3 with Simultaneous Authentication
of Equals (SAE) are accepted for authentication.
WPA3 provides more robust password-based authentication called
Simultaneous Authentication of Equals (SAE), which replaces Pre-Share Key
(PSK) in WPA2-Personal. This technology prevents offline dictionary attacks
so that data traffic can be transmitted securely. WPA3 offers backward
compatibility with WPA2 and WPA.
■
Radius MAC Auth — The MAC address of the associating station is sent to a
configured RADIUS server for authentication. (Default: Disabled)
■
Dynamic Authorization — The Dynamic Authorization Extensions (DAE) to
RADIUS enable a server to disconnect or change the authorization of clients
that are already connected to the network. (Default: Disabled)
■
DAE Port — The UDP port number to use for DAE messages.
(Default: 3799)
■
DAE Client — Specifies the IPv4 address of the RADIUS server.
■
DAE Secret — The shared text string used to encrypt DAE messages
between the access point and the RADIUS server.
■
Access Control List — Wireless clients can be authenticated for network
access by checking their MAC address against the local database configured
on the access point. (Default: OFF)
■
Policy — The MAC list can be configured to either allow or deny network
access to specified clients. (Default: Allow all MACs on list)
■
Filtered MACs — List of client MAC addresses.