Phoenix Contact FL WLAN 24 AP 802-11, Руководство пользователя

Страница: 79 / 122

Startup and functions
7190_en_02 PHOENIX CONTACT
3-45
Figure 3-42 Setting WEP encryption
Authentication type : When "Automatic" is selected, the device selects the authentication
mode itself. "Open System" mode is the default authentication type.
In "Shared Key" mode, an extended handshake mechanism is used during login, however
this does not increase security.
Key encoding : Key encoding in either ASCII or HEX can be used. With ASCII, 7-bit
encoding is used, with HEX, it is 16-bit encoding.
WPA/PSK
In "WPA/PSK" mode, a keyword is used in combination with a special encryption method.
The keyword (pre-shared key, PSK) should have a minimum of eight and a maximum of
63 characters. Words should not be selected, instead combinations of letters and numbers
should be used.
Encryption algorithm: This option can be used to specify whether all encryption methods
should be supported or only one specific method. Please note that standard WPA 2 must
be supported by all devices in order to ensure communication.
WPA/RADIUS
In "WPA/RADIUS" mode, the access point uses an available RADIUS server for the
authentication of user accounts. The IP address of the RADIUS server must be entered in
the IP address field.
The TCP port, on which the RADIUS server is operated, must also be entered under "TCP
port". As a rule, the RADIUS server runs on TCP port 1812.
The RADIUS keyword is used to identify and authenticate the access point at the RADIUS
server.
If two RADIUS servers are used, another configuration can be entered under "Secondary"
as an alternative. The entry under "Secondary" is only used if the primary RADIUS server
cannot be reached.
The basic encryption levels of WEP with 64-bit or 128-bit key lengths have become
standard. They ensure compatibility with all standard-compliant client adapters available
on the market. Since the WEP standard has been completely compromised, WEP only
offers protection from inquisitive and unauthorized persons. Once a sufficient amount of
encrypted data has been written it is very easy for hackers to penetrate WLANs only
protected with WEP using suitable software tools.
NOTE: In PROFIsafe applications, the PSK must be at least 20 characters long.