Manual

AT-WA7400 Management Software User’s Guide
113
For information on how to configure this security mode, see “WPA/WPA2
Enterprise (RADIUS)” on page 125.
Does Prohibiting
the Broadcast
SSID Enhance
Security?
You can suppress (prohibit) this broadcast to discourage stations from
automatically discovering your access point. When the access point’s
broadcast SSID is suppressed, the network name is not displayed in the
List of Available Networks on a client station. Instead, the client must have
the exact network name configured in the supplicant before it can connect.
Disabling the broadcast SSID is sufficient to prevent clients from
accidentally connecting to your network, but it will not prevent even the
simplest of attempts by a hacker to connect, or monitor plain text traffic.
This offers a very minimal level of protection on an otherwise exposed
network (such as a guest network) where the priority is making it easy for
clients to get a connection and where no sensitive information is available.
(See also “Guest Network” on page 116.)
How Does Station
Isolation Protect
the Network?
When station isolation is enabled, the access point blocks communication
between wireless clients. The access point still allows data traffic between
its wireless clients and wired devices on the network, but not among
wireless clients.
The traffic blocking extends to wireless clients connected to the network
via WDS links; these clients cannot communicate with each other when
Station Isolation is on. See Chapter 16, “Configuring the Wireless
Distribution System (WDS)” on page 173 for more information about WDS.