National Instruments WAP-3711 NI WAP-3701/3711 User’s Manual, Web Console Configuration, 3-17

NI WAP-3701/3711 User’s Manual Web Console Configuration

A total of 7 security modes are available with the different NI WAP-3701/3711 models:

yOpen System. No authentication, no data encryption.

yStatic WEP. WEP (Wired Equivalent Privacy) keys must be configured manually.

yStatic TKIP (WPA-PSK).Only TKIP (Temporal Key Integrity Protocol) mechanism of WPA (Wi-Fi Protected Access) is enabled. In this mode, you need to specify the Pre-shared key, which will be used by the TKIP engine as a master key to generate keys that actually encrypt outgoing packets and decrypt incoming packets.

NOTE The number of characters of the Pre-shared key setting must be at least 8 and can be up to 63.

yIEEE 802.1X EAP without Encryption (EAP-MD5). The IEEE 802.1X functionality is enabled and the user-name/password-basedEAP-MD5 authentication is used. No data encryption.

yIEEE 802.1X EAP with Static WEP (EAP-MD5).The IEEE 802.1X functionality is enabled and the user-name/password-based EAP-MD5 authentication is used. Data encryption is achieved by static WEP.

yIEEE 802.1X EAP with Dynamic WEP (EAP-TLS, EAP-TTLS, PEAP). The IEEE 802.1X functionality is enabled and dynamic WEP key distribution authentication (EAP-TLS,EAP-TTLS, or PEAP) is used. Data encryption is achieved by dynamic WEP.

yIEEE 802.1X EAP with Dynamic TKIP (WPA). This is a full WPA mode, in which both the TKIP and IEEE 802.1X dynamic key exchange mechanisms are enabled. The AP is highly secure in this mode.

	In the above security modes, a back-end RADIUS (Remote Authentication Dial-In User Service)
	server is needed if IEEE 802.1X functionality is enabled. See the appropriate section for more
	information about IEEE 802.1X and RADIUS.
	According to the IEEE 802.11 standard, WEP can be used for authentication and data encryption.
	Normally, Shared Key authentication is used if WEP data encryption is enabled. In rare cases,
	Open System authentication may be used when WEP data encryption is enabled. The
	Authentication algorithm setting is provided for better compatibility with wireless clients with
	various WLAN network adapters. There are three options available, including Open System,
	Shared Key, and Auto.
	When WEP is enabled by a security mode, the Key length can be specified to be 64 Bits or 128
	Bits. The Selected key setting specifies the key to be used as a send-keyfor encrypting traffic
	from the AP side to the wireless client side. All 4 WEP keys are used as receive-keysto decrypt
	traffic from the wireless client side to the AP side.
NOTE	Each field of a WEP key setting is a hex-decimalnumber from 00 to FF. For example, when the
	security mode is Static WEP and the key length is 64 Bits, you could set Key 1 to
	“00012E3ADF”.

3-17