50

Ruckus Metro Broadband Gateway

USM-Metro-RKS1-091807-01

Customizing Metro WLAN or Home WLAN Settings

•

Key Entry Method

•

Hexadecimal: The encryption key only accepts hexadecimal characters (0-9, A-F).

•

ASCII Text: The encryption key accepts ASCII printable characters.

•

Passphrase

: This assists in automatic key generation. Enter some text and click the Generate

button. The system will generate the WEP key automatically. You may specify a passphrase up

to 32 characters. Please note that the algorithm used for key generation may vary from system to

system. Checking the WEP keys used between wireless stations and the Metro Broadband

Gateway is recommended.

•

WEP Key

: Enter the key manually according to the Key Entry Method and Encryption Strength

settings.

•

Key Index

: Choose the index, from “1” to “4”, that the WEP key is to be stored in.

5.

Click

Update Settings

to save and apply the changes. A confirmation message appears at the top of this

workspace.

6.

Click

Go back to Wireless Configuration

to reopen the previous workspace.

Customizing WPA Encryption

When WPA-Auto is selected, the wireless client decides the version of WPA will be used.

•

WPA

is the recommended default compatibility-wise. Wi-Fi WPA-capable PDAs and other

gadgets are usually limited to

WPA + TKIP

.

•

WPA2

is an advanced option.

WPA2

support on Windows requires a Microsoft patch and is only

available on Windows XP with Service pack 2 or later.

•

WPA-Auto

is an advanced option. Only the best WPA 802.11i-conforming/Wi-Fi WPA-certified

client devices can operate in this mode.

Use of WPA PSK allows automatic key generation based on a single passphrase. WPA-PSK provides very

strong security, but may not be supported on older wireless devices. In some cases, the older devices can be

upgraded with adapters to take advantage of WPA-PSK.

If you configure the Metro Broadband Gateway with WPA-PSK, some devices will not be able to connect

to your WLAN unless the devices are manually set to WPA-PSK and configured with the same passphrase.

To configure WLAN-specific WPA encryption settings, follow these steps:

1.

Open the Web User interface, and click

Wireless

under Configuration.

2.

When the Configure :: Wireless :: Common workspace appears, click the

Metro WLAN

tab.

3.

When the workspace appears, open the

Encryption Method

menu and choose

WPA

. An additional set of

WPA-specific encryption options appear in this workspace.

ALERT

Do not undertake the customizing of these options unless you are an experienced

network administrator or are under the guidance of an IT/support professional.

4Gon

www.4Gon.co.uk

[email protected]

Tel: +44 (0)1245 808295

Fax: +44 (0)1245 808299

USM-Metro-RKS1-091807-01

Ruckus Metro Broadband Gateway

51

Customizing Metro WLAN or Home WLAN Settings

4.

You can make the following changes:

•

WPA Version

: Your options are WPA, WPA2 or WPA Auto.

•

When WPA-Auto is selected, the wireless client decides the version of WPA will be used. WPA

is the recommended default for best compatibility. Wi-Fi WPA-capable PDAs and other gadgets

are usually limited to WPA + TKIP.

•

WPA2 is an advanced option. WPA2 support on Windows requires a Microsoft patch and is only

available on Windows XP with Service pack 2 or later.

•

WPA-Auto is an advanced option. Only the best WPA 802.11i-conforming/Wi-Fi WPA-certified

client devices can operate in this mode.

•

WPA Authentication

: PSK is suitable for home/personal use. 802.1X uses the network RADIUS

server to verify user identity. The Auto mode offers both options to the wireless client to pick.

•

WPA Algorithm

: When Auto is selected, the wireless client decides whether TKIP or AES will

be used. AES is the strongest encryption and requires additional hardware support on wireless

devices.You should consult the documentation of your wireless client devices. Auto is an

advanced option and some wireless clients may fail to associate.

•

Passphrase

: Enter a new passphrase between 8 and 32 characters long, using any combination

of printable characters (letters, numbers, hyphens and underscores).

Figure 42—

Configure :: Wireless :: Metro WLAN :: WPA settings

5.

Click

Update Settings

to save and apply the changes. A confirmation message appears at the top of this

workspace.

6.

Click

Go back to Wireless Configuration

to reopen the previous workspace.

4Gon

www.4Gon.co.uk

[email protected]

Tel: +44 (0)1245 808295

Fax: +44 (0)1245 808299

52

Ruckus Metro Broadband Gateway

USM-Metro-RKS1-091807-01

Customizing Metro WLAN or Home WLAN Settings

Customizing 802.1X Settings

If you choose “WPA” as the encryption method, you have the option to set up the Metro Broadband Gateway

to act as an 802.1X proxy, utilizing external authentication sources such as a RADIUS server. This provides

a higher level of security, when compared to the static security process in a WEP configuration.Using

802.1X lets a device complete authentication prior to the exchange of data.

To configure WLAN-specific 802.1X authentication settings, follow these steps:

1.

Open the Web User interface, and click

Wireless

under Configuration.

2.

When the Configure :: Wireless :: Common workspace appears, click the

Metro WLAN

tab.

3.

When the workspace appears, open the

Encryption Method

menu and choose

WPA

. The basic set of

WPA-specific encryption options appear in this workspace.

Figure 43—

Configure :: Wireless :: Metro WLAN 802.1X settings

4.

Select

802.1x

as the

WPA Authentication

mode.

ALERT

Do not undertake the customizing of these options unless you are an experienced

network administrator or are under the guidance of an IT/support professional.

4Gon

www.4Gon.co.uk

[email protected]

Tel: +44 (0)1245 808295

Fax: +44 (0)1245 808299

USM-Metro-RKS1-091807-01

Ruckus Metro Broadband Gateway

53

Customizing Metro WLAN or Home WLAN Settings

5.

Additional options appear, that you can use to customize your 802.1X authentication.

•

WPA Algorithm

•

EAP Authentication Protocol

•

Certificate Management: For more, see

"Certificate Management" on page 53

.

•

Inner Authentication Protocol

• identity

•

user name

• password

6.

Click

Update Settings

to save and apply the changes. A confirmation message appears at the top of this

workspace.

7.

Click

Go back to Wireless Configuration

to reopen the previous workspace.

Certificate Management

Certificate management can be a part of two-factor authentication in your environment. In conjunction with

other security requirements that you know (“what I know”), such as a user name and password, using a

certificate fills the “what I have” requirement in two-factor authentication.

To manage certificates, follow these steps:

1.

After selecting WPA and 802.1X settings under the Metro WLAN workspace, click the

Certificate

Management

link. The “Cert Management” screen appears.

Figure 44—

Certificate Management for Client Certificate option

4Gon

www.4Gon.co.uk

[email protected]

Tel: +44 (0)1245 808295

Fax: +44 (0)1245 808299

54

Ruckus Metro Broadband Gateway

USM-Metro-RKS1-091807-01

Customizing Metro WLAN or Home WLAN Settings

Figure 45—

Certificate Management for CA Certificate option

2.

Select the appropriate

Cert. Type

and do one of the following:

•

CA Certificate

: Browse your computer (or reachable network locations) for the certificate from

your certificate authority (CA).

•

Client Certificate

: Enter the appropriate values in the following fields and then browse to your

certificate.

•

Certificate User Name

: Type the user name of the client certificate.

•

Certificate Export Password

: Type the password that protects the certificate private key.

•

Certificate Source

: Toggle this drop-down list to select either to

self-generate

the CA certificate

from the client certificate file or choose the

system-default

.

•

Select Certificate File

: Browse your computer (or reachable network locations) for the

certificate.

3.

Click the

Update Settings

button.

4Gon

www.4Gon.co.uk

[email protected]

Tel: +44 (0)1245 808295

Fax: +44 (0)1245 808299