ZyXEL Communications ATP200, Руководство пользователя

Страница: 609 / 852

Chapter 34 Object
ZyWALL ATP Series User’s Guide
609
The following table describes the labels in this screen.
Table 250 Configuration > Object > AP Profile > SSID > Security Profile > Add/Edit Security Profile
LABEL DESCRIPTION
Profile Name Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the
Web Configurator and is only for management purposes. Spaces and underscores are
allowed.
Security Mode Select a security mode from the list: none , wep , wpa2 , or wpa2-mix .
Fast Roaming
Settings IEEE 802.11r fast roaming, which is also known as Fast BSS Transition (FT), allows wireless clients
to quickly move from one AP to another in a WiFi network that uses WPA2 with 802.1x
authentication. Information from the original association is passed to the target AP when the
client roams. The client doesn’t need to perform the whole 802.1x authentication process.
Messages exchanged between the target AP and client are reduced and performed using
one of the two methods:
• Over-the-DS: The wireless client communicates with the target AP via the current AP. The
communication is sent to the target AP through the wired Ethernet connection.
• Over-the-Air: The wireless client communicates directly with the target AP.
802.11r Select this to turn on IEEE 802.11r fast roaming on the AP (Zyxel Device). This is good for
wireless clients that transport a lot of real-time interactive traffic, such as voice and video.
Wireless clients should also support WPA2 and fast roaming to associate with the AP (Zyxel
Device) and roam seamlessly.
Radius Server Type Select Internal to use the Zyxel Device’s internal authentication database, or External to use
an external RADIUS server for authentication.
Primary / Secondary
Radius Server
Activate Select this to have the Zyxel Device use the specified RADIUS server.
Radius Server IP
Address Enter the IP address of the RADIUS server to be used for authentication.
Radius Server Port Enter the port number of the RADIUS server to be used for authentication.
Radius Server Secret Enter the shared secret password of the RADIUS server to be used for authentication.
Primary / Secondary
Accounting Server
Activate Select the check box to enable user accounting through an external authentication server.
Accounting Server IP
Address Enter the IP address of the external accounting server in dotted decimal notation.
Accounting Server
Port Enter the port number of the external accounting server.
Accounting Share
Secret Enter a password (up to 128 alphanumeric characters) as the key to be shared between the
external accounting server and the AP. The key must be the same on the external
accounting server and your AP. The key is not sent over the network.
Accounting Interim
Update This field is available only when you enable user accounting through an external accounting
server.
Select this to have the AP send accounting update messages to the accounting server at
the interval you specify.
Interim Interval Specify the time interval for how often the AP is to send an interim update message with
current client statistics to the accounting server.
MAC Authentication Select this to use an external server or the Zyxel Device’s local database to authenticate
wireless clients by their MAC addresses. Users cannot get an IP address if the MAC
authentication fails.
An external server can use the wireless client’s account (username/password) or Calling
Station ID for MAC authentication. Configure the ones the external server uses.
Delimiter
(Account)
Select the separator the external server uses for the two-character pairs within account
MAC addresses.