Wpa/wpa2 enterprise (radius) – USRobotics Instant802 APSDK User Manual

Page 117

Advertising
background image

Professional Access Point

Administrator Guide

Security - 117

WPA/WPA2 Enterprise (RADIUS)

Wi-Fi Protected Access 2 (

WPA2

) with Remote Authentication Dial-In User Service (

RADIUS

) is an

implementation of the Wi-Fi Alliance IEEE

802.11i

standard, which includes Advanced Encryption

Standard (

AES

), Counter mode/CBC-MAC Protocol (

CCMP

), and Temporal Key Integrity Protocol (

TKIP

)

mechanisms. The Enterprise mode requires the use of a RADIUS server to authenticate users, and
configuration of user accounts via the Cluster menu’s User Management page.

This security mode is backward-compatible with wireless clients that support the original

WPA

.

When configuring WPA2 Enterprise (RADIUS) mode, you can use either the built-in RADIUS server or an
external RADIUS server that you provide. The Professional Access Point built-in RADIUS server supports
Protected

EAP

(PEAP) and MSCHAP V2.

If you select

WPA/WPA2 Enterprise (RADIUS)

Security Mode, you must provide the following:

Key

The Pre-shared Key is the shared secret key for

WPA

-PSK. Enter a string of at

least 8 characters to a maximum of 63 characters.

Field

Description

WPA Versions

Select the types of clients you want to support:

• WPA—

If all clients on the network support the original

WPA,

but none support the newer

WPA2

, then select

WPA

WPA2—

If all clients on the network support

WPA2

,

USRobotics

suggests using

WPA2

,

which provides the best security per the

IEEE

802.11i

standard.

Both—

If you have a mix of clients, some of which support

WPA2

and others which sup-

port only the original

WPA

, select

Both

. This option lets both WPA and WPA2 clients

associate and authenticate, but uses the more robust WPA2 for clients who support it.
This WPA configuration allows more interoperability, at the expense of some security.

Field

Description

Advertising