Wireless Configuration and Security
41
ProSAFE Dual Band Wireless-N Access Point with RFID Support, WNDAP380R
There are many ways in which you can enhance the security of your wireless network:
•
Use multiple BSSIDs combined with VLANs
. You can configure combinations of
VLANS and BSSIDs (security profiles) with stronger or less restrictive access security
according to your requirements. For example, visitors could be given wireless Internet
access but be excluded from any access to your internal network.
For information about how to configure BSSIDs, see
Configure and Enable Security
Profiles
on page
46.
•
Restrict access based by MAC address
. You can allow only trusted devices to connect
so that unknown devices cannot wirelessly connect to the wireless access point.
Restricting access by MAC address adds an obstacle against unwanted access to your
network, but the data broadcast over the wireless link is fully exposed.
For information about how to restrict access by MAC address, see
Restrict Wireless
Access by MAC Address
on page
57.
•
Turn off the broadcast of the wireless network name (SSID)
. If you disable broadcast
of the SSID, only devices that have the correct SSID can connect. This nullifies the
wireless network discovery feature of some products, such as Windows XP, but the data
is still exposed.
For information about how to turn off broadcast of the SSID, see
Configure and Enable
Security Profiles
on page
46.
•
WEP
. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP
shared key authentication and WEP data encryption block all but the most determined
eavesdropper. This data encryption mode has been superseded by WPA-PSK and
WPA2-PSK.
For information about how to configure WEP, see the following sections:
-
Configure and Enable Security Profiles
on page
46
-
Configure an Open System with WEP or Shared Key with WEP
on page
51
•
Legacy 802.1X
. Legacy 802.1X uses RADIUS-based 802.1x authentication but no data
encryption.
For information about how to configure Legacy 802.1X, see the following sections:
-
Configure and Enable Security Profiles
on page
46
-
Configure Legacy 802.1X
on page
52
•
WPA and WPA-PSK (TKIP)
. Wi-Fi Protected Access (WPA) data encryption provides
strong data security with Temporal Key Integrity Protocol (TKIP) encryption. The very
strong authentication along with dynamic per-frame rekeying of WPA makes it virtually
impossible to compromise.
WPA uses RADIUS-based 802.1x authentication; for more information, see the following
sections:
-
Configure and Enable Security Profiles
on page
46
-
Configure WPA with RADIUS, WPA2 with RADIUS, and WPA & WPA2 with RADIUS
on page
53
