104 Operation
Chapter 4 - System Configuration
The AP can simultaneously support clients using various different security
mechanisms. The configuration for these security combinations are outlined in
the following table. Note that MAC address authentication can be configured
WPA over 802.1X
Mode
Requires WPA-enabled system
and network card driver
(native support provided in
Windows XP)
Provides robust security in WPA-only mode
(i.e., WPA clients only)
Offers support for legacy WEP clients, but with
increased security risk (i.e., WEP authentication
keys disabled)
Requires configured RADIUS server
802.1X EAP type may require management of digital
certificates for clients and server
WPA PSK Mode Requires WPA-enabled system
and network card driver
(native support provided in
Windows XP)
Provides good security in small networks
Requires manual management of pre-shared key
WPA2 with 802.1X Requires WPA-enabled system
and network card driver (native
support provided in Windows XP)
Provides the strongest security in WPA2-only mode
Provides robust security in mixed mode for WPA and
WPA2 clients
Offers fast roaming for time-sensitive client
applications
Requires configured RADIUS server
802.1X EAP type may require management of digital
certificates for clients and server
Clients may require hardware upgrade to be WPA2
compliant
WPA2 PSK Mode Requires WPA-enabled system
and network card driver (native
support provided in Windows XP)
Provides robust security in small networks
Requires manual management of pre-shared key
Clients may require hardware upgrade to be WPA2
compliant
NOTE
You must enable data encryption through the web or CLI in order to enable all types of encryption
(WEP, TKIP, or AES) in the access point.
Table 4-6: Wireless Security Considerations
Security
Mechanism
Client Support Implementation Considerations