10
3.2.2.2 WPA/WPA2 Encryption
Wi-Fi Protected Access
(WPA)
is an encryption method for WLAN. WPA contains the WEP architecture, but offers additional
protection via dynamic codes, which are based on the Temporal Key Integrity Protocol (TKIP), and also offers pre-shared keys
(PSK) or extensible authentication protocol (EAP) for user authentication. However, a radius server is required for this. WPA2 is a
development of WPA and uses a different encryption algorithm, advanced encryption standard (AES).
WPA offers two types of authentication, either
pre-shared key
or authentication via special authentication
protocols, which are
generally variations of EAP (Extensible Authentication Protocol). An authentication server (RADIUS server) is used for the latter
authentication method, which is rarely used for private applications. Your administrator can give you the information you require to
confi gure this authentication method.
WPA pre-shared-key (recommended
for most users)
First select whether you want to use
WPA with TKIP
encryption algorithm,
WPA2 with AES
encryption algorithm
or the
WPA Mixed
mode. The mixed
mode allows clients using WPA or
WPA2 to access the access point.
The mixture is very practical as
presently few XP clients are WPA2
compatible. If the mixed mode is
switched off, the AP only allows
WPA2 clients, and the large number
of WPA (TKIP) devices cannot
connect.
Then you must select the key format
(Pre-shared Key Format)
. Select
either
Pass phrase
for a key with
a length of at least 8 and max. 63
characters, whereby letters (A-Z),
numbers and punctuation marks can
be used, or
Hex
for a 64 character
key, in which only numbers from 0-9 and letters from a-f can be used.
The next step is entering a key, called a
pre-shared-key
(PSK). All clients which are to access the access point must know this
character string.
Click
Apply
to save your settings. You must then restart the router for the settings to take effect. To do so, click
Apply
in the next
window. The wireless network with encryption is available after you restart.
WPA RADIUS (requires a special authentication server)
First select whether you want to use
WPA with TKIP
encryption algorithm,
WPA2 with AES
encryption algorithm or the
WPA Mixed
mode. The mixed mode allows clients using WPA or WPA2 to access the access point. The mixture is very practical as presently few
XP clients are WPA2 compatible.
Select
WPA2 (AES)
only. The AP only allows WPA2 clients, and the large number of WPA (TKIP) devices cannot connect.
Next enter the
RADIUS server IP address
. The
RADIUS Server Port
is preset to 1812. Enter the
password
for the RADIUS Server.
Click
Apply
to save your settings. You must then restart the router for the settings to take effect. To do so, click
Apply
in the next
window. The wireless network with encryption is available after you restart.
