Chapter 6 Wireless Security Configuration
ZyXEL NWA-3100 User’s Guide
83
Key differences between WPA(2) and WEP are improved data encryption and user
authentication.
6.4.1 User Authentication
WPA or WPA2 applies IEEE 802.1x and Extensible Authentication Protocol (EAP) to
authenticate wireless clients using an external RADIUS database.
If both an AP and the wireless clients support WPA2 and you have an external RADIUS
server, use WPA2 for stronger data encryption. If you don't have an external RADIUS server,
you should use WPA2-PSK (WPA2 -Pre-Shared Key), which only requires a single (identical)
password entered into each access point, wireless gateway and wireless client. As long as the
passwords match, a wireless client will be granted access to a WLAN.
If the AP or the wireless clients do not support WPA2, use WPA or WPA-PSK depending on
whether you have an external RADIUS server or not.
Select WEP only when the AP and/or wireless clients do not support WPA or WPA2. WEP is
less secure than WPA or WPA2.
6.4.2 Encryption
Both WPA and WPA2 improve data encryption by using Temporal Key Integrity Protocol
(TKIP), Message Integrity Check (MIC) and IEEE 802.1x. In addition to TKIP, WPA2 also
uses Advanced Encryption Standard (AES) in the Counter mode with Cipher block chaining
Message authentication code Protocol (CCMP) to offer stronger encryption.
Temporal Key Integrity Protocol (TKIP) uses 128-bit keys that are dynamically generated and
distributed by the authentication server. It includes a per-packet key mixing function, a
Message Integrity Check (MIC) named Michael, an extended initialization vector (IV) with
sequencing rules, and a re-keying mechanism.
TKIP regularly changes and rotates the encryption keys so that the same encryption key is
never used twice. The RADIUS server distributes a Pairwise Master Key (PMK) key to the
AP that then sets up a key hierarchy and management system, using the pair-wise key to
dynamically generate unique data encryption keys to encrypt every data packet that is
wirelessly communicated between the AP and the wireless clients. This all happens in the
background automatically.
WPA2 AES (Advanced Encryption Standard) is a block cipher that uses a 256-bit
mathematical algorithm called Rijndael.
The Message Integrity Check (MIC) is designed to prevent an attacker from capturing data
packets, altering them and resending them. The MIC provides a strong mathematical function
in which the receiver and the transmitter each compute and then compare the MIC. If they do
not match, it is assumed that the data has been tampered with and the packet is dropped.
By generating unique data encryption keys for every data packet and by creating an integrity
checking mechanism (MIC), TKIP makes it much more difficult to decode data on a Wi-Fi
network than WEP, making it difficult for an intruder to break into the network.
Содержание NWA-3100
Страница 1: ...www zyxel com NWA 3100 802 11a b g Wireless Access Point User s Guide Version 3 60 10 2006 Edition 1...
Страница 2: ......
Страница 7: ...Safety Warnings ZyXEL NWA 3100 User s Guide 7...
Страница 8: ...Safety Warnings ZyXEL NWA 3100 User s Guide 8...
Страница 10: ...Contents Overview ZyXEL NWA 3100 User s Guide 10...
Страница 24: ...List of Figures ZyXEL NWA 3100 User s Guide 24...
Страница 28: ...List of Tables ZyXEL NWA 3100 User s Guide 28...
Страница 29: ...29 PART I Introduction Introducing the ZyXEL Device 31 Introducing the Web Configurator 39 Tutorial 43...
Страница 30: ...30...
Страница 60: ...Chapter 3 Tutorial ZyXEL NWA 3100 User s Guide 60...
Страница 62: ...62...
Страница 104: ...Chapter 7 MBSSID and SSID ZyXEL NWA 3100 User s Guide 104...
Страница 116: ...Chapter 9 IP Screen ZyXEL NWA 3100 User s Guide 116...
Страница 132: ...Chapter 11 Remote Management ZyXEL NWA 3100 User s Guide 132...
Страница 150: ...Chapter 12 Certificates ZyXEL NWA 3100 User s Guide 150...
Страница 174: ...Chapter 14 VLAN ZyXEL NWA 3100 User s Guide 174...
Страница 184: ...Chapter 15 Maintenance ZyXEL NWA 3100 User s Guide 184...
Страница 186: ...186...
Страница 198: ...Chapter 20 System Password ZyXEL NWA 3100 User s Guide 198...
Страница 228: ...228...
Страница 232: ...Appendix A Product Specifications ZyXEL NWA 3100 User s Guide 232...
Страница 244: ...Appendix B Setting up Your Computer s IP Address ZyXEL NWA 3100 User s Guide 244...
Страница 248: ...Appendix C IP Address Assignment Conflicts ZyXEL NWA 3100 User s Guide 248...
Страница 258: ...Appendix D Wireless LANs ZyXEL NWA 3100 User s Guide 258...
Страница 282: ...Appendix H Text File Based Auto Configuration ZyXEL NWA 3100 User s Guide 282...
Страница 286: ...Appendix I Legal Information ZyXEL NWA 3100 User s Guide 286...