HP ProCurve 530 NA, Руководство по управлению и настройке

Страница: 213 / 556

7-19
Wireless Security Configuration
Establishing Security
■
WPA-PSK: Uses a preshared key (instead of using IEEE 802.1X and EAP
as is used in the WPA-802.1X security mode). The PSK is used for an initial
check of credentials only. A WPA-supported station is required. If a mix
of stations is used, with some supporting WPA2 and others supporting the
original WPA, configure for both (set both wpa/wpa2 allowed).
• WPA Versions : Specifies support for WPA/WPA2 stations.
– WPA : Stations using WPA only are supported.
– WPA2 : Stations using WPA2 only are supported.
– Both : Stations using both WPA and WPA2 are supported.
(Default.)
• Cipher Suites : Specifies encryption support:
– TKIP : Uses a 128-bit temporal key, which combines the station’s
MAC address and a 16-octet initialization vector to produce the
encryption key. This ensures unique key encryption. TKIP uses
RC4 to perform the encryption and changes temporal keys every
10,000 packets and distributes them, thereby greatly improving
the security of the network. (Default.)
– AES : An IEEE 802.1X encryption method that uses the Advanced
Encryption Standard (AES). It uses a CCM Combined Block
Chaining Counter mode (CBC-CTR) and Cipher Block Chaining
Message Authentication Code (CBC-MAC) for encryption and
message integrity.
– Both: If you select both TKIP and AES, Pairwise cipher is AES
and Groupwise cipher is TKIP. Pairwise cipher is used for unicast
traffic, and Groupwise cipher is used for multicast/broadcast
traffic. Both TKIP and AES stations can associate with the access
point if WPA stations have either a valid TKIP or AES key to
associate with the access point.
• Pre-Authentication : Enables pre-authentication packets to be
transmitted from the access point the station is currently using to the
target access point. It speeds up authentication for roaming stations
connecting to multiple access points. Only enabled if WPA2 or Both
were selected with the WPA support drop-down. WPA does not
support this feature.
• Key Type: Select the preferred method of entering WEP encryption
keys on the access point and enter up to four keys:
–
ASCII: Enter a key between 8 and 63 ASCII characters.
– Hex: Enter a key of exactly 64 hex characters. (The default is
Hex.)
• Pre-Shared Key : The Pre-shared key is the shared secret key for
WPA-PSK. Enter a string of 8 characters to 63 characters.
• [Update]: Updates the security parameters.