Psion Teklogix 9160 G2 Wireless Gateway User Manual 95
Chapter 10: Configuring Security
Comparison Of Security Modes For Key Management, Authentication And Encryption Algorithms
Additionally, compatibility issues may be cumbersome because of the variety of
authentication methods supported and the lack of a standard implementation m ethod.
Therefore, IEEE 802.1x mode is not as secure a solution as Wi-Fi Protected Access
(WPA) or WPA2. If you cannot use WPA because some of your client stations do
not have WPA, then a better solution than using IEEE 802.1x mode is to use WPA
Enterprise mode.
See Also
For information on how to configure IEEE 802.1x security mode, see “IEEE
802.1x” on page107.
10.1.2.4 When To Use WPA Personal Wi-Fi Protected Access Personal Pre-Shared Key (PSK) is an implementation of the
Wi-Fi Alliance IEEE 802.11h standard, which includes Advanced Encryption Algo-
rithm (AES), Counter mode/CBC-MAC Protocol (CCMP), and Temporal Key
Integrity Protocol (TKIP) mechanisms. This mode offers the same encryption algo-
rithms as WPA 2 with RADIUS but without the ability to integrate a RADIUS
server for user authentication.
This security mode is backwards-compatible for wireless clients that support only
the original WPA.
Recommendations
WPA Personal is not recommended for use with the 9160 G2 Wirel ess Gateway
when WPA Enterprise is an option.
Key Management Encryption Algorithms User Authentication
WPA Personal provides
dynamically-generated
keys that are periodically
refreshe d.
There are different
Uni-
cast
keys for each station.
• Temporal Key Integrity Protocol
(TKIP).
• Counter mode/CBC-MAC Proto-
col (CCMP) Advanced Encryp-
tion Standard (AES).
The use of a Pre-Shared (
PSK
) key provides
user authentication similar to that of shared
keys in
WEP
.