
Configuring Access Point Security 6-25
8. Configure the Fast Roaming (802.1x only) field as required to enable additional AP-5131 
roaming and key caching options. This feature is applicable only when using 802.1x EAP 
authentication with WPA2/CCMP.
9. Click the Apply button to save any changes made within the WPA2/CCMP Settings field of 
the New Security Policy screen.
10. Click the Cancel button to undo any changes made within the WPA2/CCMP Settings field 
and return to the WLAN screen. This reverts all settings to the last saved configuration.
6.10 Configuring Firewall SettingsThe AP-5131's firewall is a set of related programs located in the gateway on the WAN side of the 
AP-5131. The firewall uses a collection of filters to screen information packets for known types of 
system attacks. Some of the AP-5131's filters are continuously enabled, others are configurable.
Use the AP-5131’s Firewall screen to enable or disable the configurable firewall filters. Enable each 
filter for maximum security. Disable a filter if the corresponding attack does not seem a threat in order 
to reduce processor overhead. Use the WLAN Security screens (WEP, Kerberos etc.) as required for 
setting user authentication and data encryption parameters.
To configure the AP-5131 firewall settings:
1. Select Network Configuration -> Firewall from the AP-5131 menu tree.
Pre-Authentication Selecting this option enables an associated MU to carry out an 
802.1x authentication with another AP-5131 before it roams to it. 
The AP-5131 caches the keying information of the client until it 
roams to the other AP-5131. This enables the roaming client to 
start sending and receiving data sooner by not having to do 802.1x 
authentication after it roams. This feature is only supported when 
802.1x EAP authentication is enabled.