Radio Interface
wireless clients. A summary of wireless security considerations is listed in the following table.
Security | Client Support | Implementation Considerations |
Mechanism |
|
|
|
|
|
WEP | • Provides only weak security | |
| 802.11a and 802.11g | • Requires manual key |
| devices | management |
|
|
|
WEP over | Requires 802.1X client | • Provides dynamic key rotation |
802.1X | support in system or | for improved WEP security |
| by | • Requires configured RADIUS |
| (support provided in | server |
| • 802.1X EAP type may require | |
| Windows 2000 SP3 or | |
| later and Windows XP) | management of digital |
| certificates for clients and server | |
|
| |
|
|
|
MAC | Uses the MAC | • Provides only weak user |
Address | address of client | authentication |
Filtering | network card | • Management of authorized |
|
| MAC addresses |
|
| • Can be combined with other |
|
| methods for improved security |
|
| • Optionally configured RADIUS |
|
| server |
|
|
|
WPA over | Requires | • Provides robust security in |
802.1X | ||
Mode | and network card | clients only) |
| driver | • Offers support for legacy WEP |
| (native support | clients, but with increased |
| security risk (i.e., WEP | |
| provided in Windows | authentication keys disabled) |
| XP) | • Requires configured RADIUS |
|
| server |
|
| • 802.1X EAP type may require |
|
| management of digital |
|
| certificates for clients and server |
|
|
|
WPA PSK | Requires | • Provides good security in small |
Mode | networks | |
| and network card | • Requires manual management |
| driver | of |
| (native support |
|
| provided in Windows |
|
| XP) |
|
|
|
|