SMC Networks SMC2552W-G2-17 manual 802.1X EAP type may require management

Models: SMC2552W-G2-17 SMC2552W-G2

1 296
Download 296 pages 22.09 Kb
Page 110
Image 110

Radio Interface 6

Wi-Fi Protected Access (WPA or WPA2)page 6-73

Both WEP and WPA security settings are configurable separately for each virtual access point (VAP) interface. MAC address filtering, and RADIUS server settings are global and apply to all VAP interfaces.

The security mechanisms that may be employed depend on the level of security required, the network and management resources available, and the software support provided on wireless clients.

A summary of wireless security considerations is listed in the following table.

Table 6-2. Wireless Security Considerations

Security

Client Support

Implementation Considerations

Mechanism

 

 

WEP

Built-in support on all 802.11g

• Provides only weak security

 

devices

• Requires manual key management

 

 

 

WEP over 802.1X

Requires 802.1X client support

• Provides dynamic key rotation for improved WEP

 

in system or by add-in software

security

 

(support provided in Windows

• Requires configured RADIUS server

 

2000 SP3 or later and Windows

• 802.1X EAP type may require management of

 

XP)

digital certificates for clients and server

 

 

 

MAC Address

Uses the MAC address of client

• Provides only weak user authentication

Filtering

network card

• Management of authorized MAC addresses

 

 

• Can be combined with other methods for improved

 

 

security

 

 

• Optionally configured RADIUS server

 

 

 

WPA over 802.1X

Requires WPA-enabled system

• Provides robust security in WPA-only mode

Mode

and network card driver

(i.e., WPA clients only)

 

(native support provided in

• Offers support for legacy WEP clients, but with

 

Windows XP)

increased security risk (i.e., WEP authentication

 

 

keys disabled)

 

 

• Requires configured RADIUS server

 

 

• 802.1X EAP type may require management of

 

 

digital certificates for clients and server

WPA PSK Mode

Requires WPA-enabled system

• Provides good security in small networks

 

and network card driver

• Requires manual management of pre-shared key

 

(native support provided in

 

 

Windows XP)

 

6-63

Page 110
Image 110
SMC Networks SMC2552W-G2-17 manual 802.1X EAP type may require management