Security
4-126 Avaya W ireless AP-4/ 5/6 User’s G uide
• Client/server mutual authentication
— 802.1x
— Pre-shared key (for networks that do not have an 802.1x
solution implemented)
NOTE:
For more information on WPA, see the Wi-Fi Alliance Web site at
http://www.wi-fi.org.
The AP supports two WPA authentication modes:
• WPA: The AP uses 802.1x to authenticate clients. You should only
use an EAP that supports mutual authentication and session key
generation, such as EAP-TLS, EAP-TTLS, and PEAP. See 802.1x
Authentication for details.
• WPA-PSK (Pre-Shared Key): For networks that do not have 802.1x
implemented, you can configure the AP to authenticate clients
based on a Pre-Shared Key. This is a shared secret that is manually
configured on the AP and each of its clients. The Pre-Shared Key
must be 256 bits long, which is 64 hexadecimal digits. The AP also
supports a PSK Pass Phrase option to facilitate the creation of the
Pre-Shared Key (so a user can enter an easy-to-remember phrase
rather than a string of characters).