ZyXEL Communications USG-300 - V2.20 ED 2, Руководство пользователя

Страница: 337 / 1149

Chapter 13 Interfaces
ZyWALL USG 300 User’s Guide
337
The following table describes the WPA-PSK/WPA2-PSK-related wireless LAN
security labels.
13.6.4 WLAN Add/Edit: WPA/WPA2 Security
With WPA or WPA2 security, each user can have a separate user name and
password. The ZyWALL uses an external RADIUS server or the ZyWALL’s internal
user account list to authenticate the user names and passwords.
To configure and enable WPA or WPA2 security, click Configuration > Network
> Interface > WLAN > Add (or Edit ) to open the WLAN Edit screen. Select
WPA-Enterprise , WPA2-Enterprise , or WPA/WPA2-Enterprise as the
Security Type . WPA/WPA2-Enterprise means wireless clients can use either
WPA or WPA2 to connect to the WLAN interface. The following figure shows the
security fields.
Table 73 Configuration > Network > Interface > WLAN > Add (WPA-PSK, WPA2-
PSK, or WPA/WPA2-PSK Security)
LABEL DESCRIPTION
Pre Shared Key The encryption mechanisms used for WPA and WPA-PSK are the
same. The only difference between the two is that WPA-PSK uses a
simple common password, instead of user-specific credentials.
Type a pre-shared key from 8 to 63 case-sensitive ASCII characters
(including spaces and symbols).
ReAuthentication
Timer Specify how often wireless stations have to resend usernames and
passwords in order to stay connected.
Note: If a RADIUS server authenticates wireless stations, the
reauthentication timer on the RADIUS server has priority.
Idle Timeout The ZyWALL automatically disconnects a wireless station from the
wired network after a period of inactivity. The wireless station needs
to enter the username and password again before access to the wired
network is allowed.
Group Key
Update Timer The Group Key Update Timer is the rate at which the AP sends a
new group key out to all clients. The re-keying process is the WPA
equivalent of automatically changing the group key for an AP and all
stations in a WLAN on a periodic basis. Setting of the
Group Key
Update Timer is also supported in WPA-PSK mode.