National Instruments NI WAP-3711 User Manual

Page 31

Advertising
background image

NI WAP-3701/3711 User’s Manual

Web Console Configuration

3-17

A total of 7 security modes are available with the different NI WAP-3701/3711 models:

y Open System. No authentication, no data encryption.
y Static WEP. WEP (Wired Equivalent Privacy) keys must be configured manually.
y Static TKIP (WPA-PSK). Only TKIP (Temporal Key Integrity Protocol) mechanism of WPA

(Wi-Fi Protected Access) is enabled. In this mode, you need to specify the Pre-shared key,
which will be used by the TKIP engine as a master key to generate keys that actually encrypt
outgoing packets and decrypt incoming packets.

NOTE

The number of characters of the Pre-shared key setting must be at least 8 and can be up to 63.

y IEEE 802.1X EAP without Encryption (EAP-MD5). The IEEE 802.1X functionality is

enabled and the user-name/password-based EAP-MD5 authentication is used. No data
encryption.

y IEEE 802.1X EAP with Static WEP (EAP-MD5). The IEEE 802.1X functionality is enabled

and the user-name/password-based EAP-MD5 authentication is used. Data encryption is
achieved by static WEP.

y IEEE 802.1X EAP with Dynamic WEP (EAP-TLS, EAP-TTLS, PEAP). The IEEE 802.1X

functionality is enabled and dynamic WEP key distribution authentication (EAP-TLS,
EAP-TTLS, or PEAP) is used. Data encryption is achieved by dynamic WEP.

y IEEE 802.1X EAP with Dynamic TKIP (WPA). This is a full WPA mode, in which both the

TKIP and IEEE 802.1X dynamic key exchange mechanisms are enabled. The AP is highly
secure in this mode.

In the above security modes, a back-end RADIUS (Remote Authentication Dial-In User Service)
server is needed if IEEE 802.1X functionality is enabled. See the appropriate section for more
information about IEEE 802.1X and RADIUS.

According to the IEEE 802.11 standard, WEP can be used for authentication and data encryption.
Normally, Shared Key authentication is used if WEP data encryption is enabled. In rare cases,
Open System authentication may be used when WEP data encryption is enabled. The
Authentication algorithm setting is provided for better compatibility with wireless clients with
various WLAN network adapters. There are three options available, including Open System,
Shared Key, and Auto.

When WEP is enabled by a security mode, the Key length can be specified to be 64 Bits or 128
Bits
. The Selected key setting specifies the key to be used as a send-key for encrypting traffic
from the AP side to the wireless client side. All 4 WEP keys are used as receive-keys to decrypt
traffic from the wireless client side to the AP side.

NOTE

Each field of a WEP key setting is a hex-decimal number from 00 to FF. For example, when the
security mode is Static WEP and the key length is 64 Bits, you could set Key 1 to
“00012E3ADF”.

Advertising
This manual is related to the following products: