Ruckus Wireless ZoneDirector 3000, Руководство пользователя, Страница: 177 / 430

About Ruckus Wireless WLAN Security
ZoneDirector 9.8 User Guide, 800-70599-001 Rev B
177
On older single-band APs (ZF 7025), the maximum number of WLANs deployable
per AP radio is eight. If an AP is in mesh mode, the maximum number of WLANs
deployable per radio is six, since the mesh uses two SSIDs.
On newer single-band APs (ZF 7321, 7341, 7343), and all dual-band ZoneFlex APs,
the maximum number of service WLANs deployable per AP radio is 27. These APs
support maximum 32 SSIDs per radio, but five are reserved (two mesh SSIDs and
one each for monitor, recovery and scan).
CAUTION! Deploying a large number of WLANs per AP will have a performance
impact. Ruckus Wireless recommends deploying no more than eight WLANs per
AP radio.
About Ruckus Wireless WLAN Security
One of the first things you should decide for each WLAN you create is which methods
of authentication and encryption to use for both internal users and guests.
Authentication options include:
• Open
• 802.1X EAP
• MAC Address
• 802.1X EAP + MAC Address
Encryption options depend on which type of authentication is chosen. Open
authentication allows the use of WPA2, WEP or no encryption. Open authentication/
WPA2 encryption WLANs (also known as WPA-Personal) are the most common
type of WLAN and should be the default configuration if there are no special
requirements for authentication or encryption.
The 802.1X EAP (WPA-Enterprise) authentication method provides effective authen-
tication regardless of whether you deploy WEP, WPA2 or no encryption, and requires
a back-end authentication server.
You can also choose to authenticate clients by MAC address. MAC address
authentication requires a RADIUS server and uses the MAC address as the user
login name and password.
The 802.1X EAP + MAC Address authentication option allows clients to authenticate
to the same WLAN using either MAC address or 802.1X authentication. (However,
this requires that the supplicant support this feature, which no public domain
supplicants currently do.)