User Guide

Radio Interface
6-77
6
• WPA: Clients using WPA over 802.1X are accepted for authentication.
• WPA-PSK: Clients using WPA with a Pre-shared Key are accepted for
authentication.
• WPA2: Clients using WPA2 over 802.1X are accepted for authentication.
• WPA2-PSK: Clients using WPA2 with a Pre-shared Key are accepted for
authentication.
• WPA-WPA2-mixed: Clients using WPA or WPA2 over 802.1X are accepted for
authentication.
• WPA-WPA2-PSK-mixed: Clients using WPA or WPA2 with a Pre-shared Key are
accepted for authentication.
WPA Configuration – Each VAP interface can be configured to allow only
WPA-enabled clients to access the network (Required), or to allow access to both
WPA and WEP clients (Supported). (Default: Required)
Cipher Suite – Selects an encryption method for the global key used for multicast
and broadcast traffic, which is supported by all wireless clients.
• WEP: WEP is used as the multicast encryption cipher. You should select WEP only
when both WPA and WEP clients are supported.
• TKIP: TKIP is used as the multicast encryption cipher.
• AES-CCMP: AES-CCMP is used as the multicast encryption cipher. AES-CCMP
is the standard encryption cipher required for WPA2.
WPA Pre-Shared Key Type – If the WPA or WPA2 pre-shared-key mode is used, all
wireless clients must be configured with the same key to communicate with the
access point.
• Hexadecimal – Enter a key as a string of 64 hexadecimal numbers.
• Alphanumeric – Enter a key as an easy-to-remember form of letters and numbers.
The string must be from 8 to 63 characters, which can include spaces.
The configuration settings for WPA are summarized below:
Table 6-4. WPA Configuration Settings
WPA and WPA2 pre-shared key only WPA and WPA2 over 802.1X
Encryption: Enabled
Authentication Setup: WPA-PSK, WPA2-PSK, or
WPA-WPA2-mixed
WPA Cipher Mode: WEP/TKIP/AES-CCMP
WPA Pre-shared Key Type: Hex/ASCII
Encryption: Enabled
Authentication Setup: WPA, WPA2,
WPA-WPA2-mixed
WPA Cipher Mode: WEP/TKIP/AES-CCMP
(requires RADIUS server to be specified)
1: You must enable data encryption in order to enable all types of encryption in the access point.
2: Select TKIP when any WPA clients do not support AES. Select AES only if all clients support AES.