ZyXEL Communications NWA50AX, Руководство пользователя, Страница: 123 / 266

Chapter 12 AP Profile
NWA50AX/NWA90AX/NWA55AXE Series User’s Guide
123
Advance
Note: Click on the Show Advanced Settings button to show the fields describe below.
Idle Timeout Enter the idle interval (in seconds) that a client can be idle before authentication is
discontinued.
Group Key Update
Timer Enter the interval (in seconds) at which the AP updates the group WPA2 encryption key.
Pre-Authentication Select Enable to allow pre-authentication. Otherwise, select Disable .
Management Frame
Protection This field is available only when you select wpa2 in the Security Mode field and set Cipher
Type to aes .
Data frames in 802.11 WLANs can be encrypted and authenticated with WEP, WPA or
WPA2. But 802.11 management frames, such as beacon/probe response, association
request, association response, de-authentication and disassociation are always
unauthenticated and unencrypted. IEEE 802.11w Protected Management Frames allows
APs to use the existing security mechanisms (encryption and authentication methods
defined in IEEE 802.11i WPA/WPA2) to protect management frames. This helps prevent
wireless DoS attacks.
Select the check box to enable management frame protection (MFP) to add security to
802.11 management frames. This option is always enabled if you select
enhanced-open
or WPA3 as the Security Mode.
If Optional is selected, WiFi clients will not be not required to support MFP. Management
frames will be encrypted if the clients support MFP.
If Required is selected, WiFi clients must support MFP in order to join the Zyxel Device’s
WiFi network.
Radius Settings
Primary / Secondary
Radius Server Activate Select this to have the Zyxel Device use the specified RADIUS server.
Radius Server IP
Address
Enter the IP address of the RADIUS server to be used for authentication.
Radius Server Port Enter the port number of the RADIUS server to be used for authentication.
Radius Server Secret Enter the shared secret password of the RADIUS server to be used for authentication.
Primary / Secondary
Accounting Server
Activate Select the check box to enable user accounting through an external authentication
server.
Accounting Server
IP Address
Enter the IP address of the external accounting server in dotted decimal notation.
Accounting Server
Port
Enter the port number of the external accounting server. The default port number is 1813.
You need not change this value unless your network administrator instructs you to do so
with additional information.
Accounting Share
Secret
Enter a password (up to 128 alphanumeric characters) as the key to be shared between
the external accounting server and the Zyxel Device. The key must be the same on the
external accounting server and your Zyxel Device. The key is not sent over the network.
Accounting Interim
Update This field is available only when you enable user accounting through an external
authentication server.
Select this to have the Zyxel Device send subscriber status updates to the accounting
server at the interval you specify.
Interim Update
Interval
Specify the time interval for how often the Zyxel Device is to send a subscriber status
update to the accounting server.
General Server Settings
Table 47 Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security Profile> Security
Mode: wpa3 (continued)
LABEL DESCRIPTION