Ambit Broadband
Users Guide
36
WPA-PSK
If you don't have an external RADIUS server you should use WPA-PSK
(WPA Pre-Shared Key) that only requires a single (identical) password
entered into wireless gateway and wireless client. As long as the
passwords match, a client will be granted access to a WLAN.
WPA2
Advanced protocol, certified through Wi-Fi Alliance's WPA2 program,
implements the mandatory elements of 802.11i. In particular, it
introduces a new AES-based algorithm, CCMP, that is considered fully
secure.
WPA2-PSK
If you don't have an external RADIUS server you should use WPA2-PSK
(WPA Pre-Shared Key) that only requires a single (identical) password
entered into wireless gateway and wireless client. As long as the
passwords match, a client will be granted access to a WLAN.
WPA/WPA2 Encryption
Switch to enable and disable WPA/WPA2 encryption.
WPA Pre-Shared Key
The encryption mechanisms used for WPA and WPA-PSK are the same.
The only difference between the two is that WPA-PSK uses a simple
common password, instead of user-specific credentials.
RADIUS Server
Input the IP address of RADIUS server
RADIUS Port
Enter RADIUS port number when WPA or 802. 1x network authentication
is selected.
RADIUS Key
Enter RADIUS Key when WPA or 802. 1x network authentication is
selected.
Group Key Rotation
Interval
Allows the wireless router to generate best possible random group key
and update all the key-management capable stations periodically.
WPA/WPA2 Re-auth
Interval
Wireless router (if using WPA-PSK key management) or RADIUS server
(if using WPA key management) sends a new group key out to all clients.
The re-keying process is the WPA equivalent of automatically changing
the WEP key for an AP and all stations in a WLAN on a periodic basis.
Setting of the WPA Group Key Update Timer is also supported in
WPA-PSK mode.
WEP Encryption
If you don’t have WPA(2)
-aware wireless clients, then use WEP key
encrypting. A higher bit key offers better security. WEP encryption
scrambles the data transmitted between the wireless stations and the
access points to keep network communications private. It encrypts
unicast and multicast communications in a network. Both the wireless
stations and the access points must use the same WEP key. Data
Encryption can be set to WEP 128-bit, 64-bit, or Disable.
Shared Key
Authentication
Shared Key is an authentication method used by wireless LANs, which
follow the IEEE 802.11 standard. Wireless devices authenticate each
other by using a secret key that is kept by both devices.