
Appendix B - About Wireless LANs
106
WPA2-PSK
This is a later version of WPA (WPA-PSK). The major change is the use of AES
(Advanced Encryption System) for protecting data. AES is very secure, considered to
be unbreakable. The PSK (Pre-shared Key) must be entered on each Wireless station.
If WPA2-PSK is used, the Wireless Stations and the Access Point must have the
same settings for each of the following:
WPA2 PSK
(Pre-shared Key)
Enter the same value on every station and the AP. The
PSK must be from 8 to 63 characters in length. The
256Bit key used for the actual encryption is derived
from this key.
Encryption
The same encryption method must be used. The most
common encryption method is TKIP. Another widely-
supported method is AES.
WPA-802.1x
WPA-802.1x - This version of WPA requires a Radius Server on your LAN to provide
the client authentication according to the 802.1x standard. Data transmissions are
encrypted using the WPA standard.
If this option is used:
The Access Point must have a "client login" on the Radius Server.
Each user must have a "user login" on the Radius Server.
Each user's wireless client must support 802.1x and provide the login data when
required.
All data transmission is encrypted using the WPA standard. Keys are automatically
generated, so no key input is required.
Wireless LAN Configuration
To allow Wireless Stations to use the Access Point, the Wireless Stations and the
Access Point must use the same settings, as follows:
Mode
On client Wireless Stations, the mode must be set to "Infrastruc-
ture".
(The Access Point is always in "Infrastructure" mode.)
SSID (ESSID)
Wireless Stations should use the same SSID (ESSID) as the
Access Point they wish to connect to. Alternatively, the SSID can
be set to "any" or null (blank) to allow connection to any Access
Point.
Wireless
Security
The Wireless Stations and the Access Point must use the same
settings for Wireless security. (None, WEP, WPA-PSK, WPA2-
PSK, WPA-802.1x)
If Wireless security remains disabled on the Wireless Rou-
ter, all stations must have wireless security disabled.
If Wireless security is enabled on the Wireless Router, each
station must use the same settings as the Wireless ADLS
Router.