Intel Wireless WiFi Link 4965AGN, Руководство пользователя

Страница: 142 / 191

Cisco LEAP (Cisco Light EAP) is a server and client 802.1x authentication through a
user-supplied logon password. When a wireless access point communicates with a
Cisco LEAP-enabled RADIUS (Cisco Secure Access Control Server [ACS]), Cisco LEAP
provides access control through mutual authentication between client wireless
adapters and the wireless networks and provides dynamic, individual user
encryption keys to help protect the privacy of transmitted data.
Cisco Rogue Access Point Security Feature
The Cisco Rogue Access Point feature provides security protection from an
introduction of a rogue access point that could mimic a legitimate access point on a
network in order to extract information about user credentials and authentication
protocols that could compromise security. This feature only works with Cisco's LEAP
authentication. Standard 802.11 technology does not protect a network from the
introduction of a rogue access point. See LEAP Authentication for more information.
Fast Roaming (CCKM)
When a wireless LAN is configured for fast reconnection, a LEAP-enabled client
device can roam from one access point to another without involving the main
server. Using Cisco Centralized Key Management (CCKM), an access point
configured to provide Wireless Domain Services (WDS) takes the place of the
RADIUS server and authenticates the client without perceptible delay in voice or
other time-sensitive applications.
CKIP
Cisco Key Integrity Protocol (CKIP) is Cisco proprietary security protocol for
encryption in 802.11 media. CKIP uses the following features to improve 802.11
security in infrastructure mode:
●
Key Permutation (KP)
●
Message Sequence Number
802.11b and 802.11g Mixed Environment Protection Protocol
Some access points, for example Cisco 350 or Cisco 1200, support environments in
which not all client stations support WEP encryption; this is called Mixed-Cell Mode.
When these wireless networks operate in "optional encryption" mode, client stations
that join in WEP mode, send all messages encrypted, and stations that use standard
mode send all messages unencrypted. These access points broadcast that the
network does not use encryption, but allow clients that use WEP mode. When Mixed-
Cell is enabled in a profile, it allows you to connect to access points that are
configured for "optional encryption."