Ruckus Wireless ZoneDirector 1200, Руководство пользователя

Страница: 158 / 361

Algorithm (Only for WPA2 or WPA Mixed encryption methods)
• AES : This algorithm provides enhanced security over TKIP, and is the only encryption
algorithm supported by the 802.11i standard. Choose AES encryption if you are
confident that all of your clients will be using 802.11i-compliant NICs.
• Auto : Automatically selects TKIP or AES encryption based on the client's capabilities.
Note that since it is possible to have clients using both TKIP and AES on the same
WLAN, only unicast traffic is affected (broadcast traffic must fall back to TKIP;
therefore, transmit rates of broadcast packets from 11n/11ac APs will be at lower
11g rates).
CAUTION! If you set the encryption algorithm to TKIP and you are using an 802.11n
or 802.11ac AP for the WLAN, the WLAN will operate in 802.11g mode.
CAUTION! If you set the encryption algorithm to TKIP, the AP will only be able to
support up to 26 clients. When this limit is reached, additional clients will be unable to
associate with the AP.
WEP Key/Passphrase
• WEP Key : WEP methods only. Click in the Hex field and type the required key text.
If the key is for WEP-64 encryption, the key text must consist of 10 hexadecimal
characters. If it is for WEP-128 encryption, enter a key 26 characters in length.
Alternatively, click Generate to have ZoneDirector automatically generate a WEP key.
• Passphrase : WPA-PSK methods only. Click in this field and type the text of the
passphrase used for authentication.
802.11w Management Frame Protection
The Protected Management Frame (PMF) feature, also known as Management Frame
Protection (MFP), is defined in 802.11w to protect 802.11 Robust Management frames,
including Disassociation, Deauthentication, and Robust Action frames.
To enable, set 802.11w MFP to Optional or Required on the Configure > WLANs >
Edit (WLAN) page. Optional allows legacy devices that do not support the 802.11w
standard to associate with the SSID while also allowing devices that support 802.11w
to use the 802.11w features.
Required will prevent clients that do not support 802.11w
from associating.
Options
• Web Authentication : [Available only with "Open" authentication.] Click the check
box to require all WLAN users to complete a web-based login to this network each
time they attempt to connect (see
Enabling Web Authentication on page 235).
• Authentication Server : When "Web Authentication" is active, use this option to
designate the server used to authenticate web-based user login. When "802.1X" or
"MAC Address" authentication is active, use this option to designate the server used
Ruckus Wireless ZoneDirector™ Release 10.0 User Guide 158
Managing a Wireless Local Area Network
Creating a WLAN