User Manual

Chapter 20: Wireless Distribution System
Security Considerations Related To WDS Bridges
190
Psion Teklogix 9160 Wireless Gateway User Manual
20.1.4 Security Considerations Related To WDS Bridges
Static Wired Equivalent Privacy (WEP) is a data encryption protocol for 802.11
wireless networks. Both access points in a given WDS link must be configured with
the same security settings. For static WEP, either a static 64-bit (40-bit secret key +
24-bit initialization vector (IV)) or 128-bit (104-bit secret key + 24-bit IV) Shared
Key is specified for data encryption.
You can enable Static WEP on the WDS link (bridge). When WEP is enabled, all
data exchanged between the two access points in a WDS link is encrypted using a
fixed WEP key that you provide.
Static WEP is the only security mode available for the WDS link, and it does not
provide effective data protection to the level of other security modes available for
service to client stations. If you use WDS on a LAN intended for secure wireless
traffic you are putting your network at risk. Therefore, we recommend using WDS
to bridge the Guest network only for this release. Do not use WDS to bridge access
points on the Internal network unless you are not concerned about the security risk
for data traffic on that network.
For more information about the effectiveness of different security modes, see
Chapter 13: “Configuring Security”. This topic also covers use of plain-text security
mode for AP-to-station traffic on the Guest network, which is intended for less sen-
sitive data traffic.
20.2 Configuring WDS Settings
To specify the details of traffic exchange from this access point to others, navigate to
the Advanced, Wireless Distribution System tab, and update the fields as described
below.
Note: Figure 20.3 on page 191 shows the WDS settings page for the two-radio AP.
The Administration Web page for the one-radio AP will look slightly different.