System Configuration
6-72Security (Access Point Mode)
A radio band set to access point mode is configured by default as
an “open system,” which broadcasts a beacon signal including
the configured SSID. Wireless clients can read the SSID from the
beacon, and automatically reset their SSID to allow immediate
connection to the access point.
To improve wireless network security for access point operation,
you have to implement two main functions:
•Authentication: It must be verified that clients attempting to
connect to the network are authorized users.
•Traffic Encryption: Data passing between the access point and
clients must be protected from interception and evesdropping.
For a more secure network, the access point can implement one
or a combination of the following security mechanisms:
•Wired Equivalent Privacy (WEP)page 6-66
•IEEE 802.1Xpage 6-19
•Wireless MAC address filteringpage 6-19
•Wi-Fi Protected Access (WPA)page 6-80
The security mechanisms that may be employed depend on the
level of security required, the network and management
resources available, and the software support provided on