IP-COM In-wall AP Series, Руководство пользователя

Страница: 36 / 106

29
Parameter description
Parameter Description
Security Mode
It indicates the personal or pre-shared key security mode, including WPA-PSK ,
WPA2-PSK , and Mixed WPA/WPA2-PSK .
−
WPA-PSK : It indicates that the wireless network corresponding to the
selected SSID is encrypted with WPA-PSK.
−
WPA2-PSK : It indicates that the wireless network corresponding to the
selected SSID is encrypted with WPA2-PSK.
−
Mixed WPA/WPA2-PSK : It indicates that wireless clients can connect to the
wireless network corresponding to the selected SSID using either WPA-PSK or
WPA2-PSK.
Encryption
Algorithm
It specifies the encryption algorithm corresponding to the selected security mode.
If
Security Mode is set to WPA-PSK , this parameter has the AES and TKIP values. If
Security Mode is set to WPA2-PSK or Mixed WPA/WPA2-PSK , this parameter has
the AES , TKIP , and TKIP&AES values.
−
AES : It indicates the Advanced Encryption Standard.
−
TKIP : It indicates the Temporal Key Integrity Protocol. If TKIP is used, the
maximum wireless throughput of the AP is limited to 54 Mbps.
−
TKIP&AES : It indicates that both TKIP and AES encryption algorithms are
supported. Wireless clients can connect to the wireless network
corresponding to the selected SSID using TKIP or AES.
Key
It specifies a pre-shared WPA key, that is, the password clients use to connect to
the wireless network.
Key Update Interval
It specifies the automatic update interval of a WPA key for data encryption. A
shorter interval results in higher data security.
The value
0 indicates that a WAP key is not updated.

WPA and WPA2
To address the key management weakness of WPA-PSK and WPA2-PSK, the WiFi Alliance puts
forward WPA and WPA2, which use 802.1x to authenticate clients and generate data
encryption–oriented root keys. WPA and WPA2 use the root keys to replace the pre-shared
keys that set manually, but adopt the same encryption process as WPA-PSK and WPA2-PSK.
WPA and WPA2 uses 802.1x to authenticate clients and the login information of a client is
managed by the client. This effectively reduces the probability of information leakage. In
addition, each time a client connects to an AP that adopts the WPA or WPA2 security mode,
the RADIUS server generates a data encryption key and assigns it to the client. This makes it
difficult for attackers to obtain the key. These features of WPA and WPA2 help significantly
increase network security, making WPA and WPA2 the preferred security modes of wireless
networks that require high security.