Cisco Systems WAP561AK9 Network Hardware User Manual


 
Wireless
Networks
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point 77
5
Enable RADIUS Accounting—Enables tracking and measuring of the
resources a particular user has consumed, such as system time, amount of
data transmitted and received, and so on.
If you enable RADIUS accounting, it is enabled for the primary RADIUS
server and all backup servers.
Active Server—Enables administratively selecting the active RADIUS
server, rather than having the WAP device attempt to contact each
configured server in sequence and choose the first server that is up.
Broadcast Key Refresh Rate—The interval at which the broadcast (group)
key is refreshed for clients associated with this VAP.
The default is 300. The valid range is from 0 to 86400 seconds. A value of 0
indicates that the broadcast key is not refreshed.
Session Key Refresh Rate—The interval at which the WAP device
refreshes session (unicast) keys for each client associated with the VAP.
The valid range is from 0 to 86400 seconds. A value of 0 indicates that the
broadcast key is not refreshed.
WPA Personal is a Wi-Fi Alliance IEEE 802.11i standard, which includes AES-CCMP
and TKIP encryption. The Personal version of WPA uses a pre-shared key (PSK)
instead of using IEEE 802.1X and EAP as is used in the Enterprise WPA security
mode. The PSK is used for an initial check of credentials only. WPA Personal is also
referred to as WPA-PSK.
This security mode is backwards-compatible for wireless clients that support the
original WPA.
These parameters configure WPA Personal:
WPA Versions—The types of client stations you want to support:
- WPA—The network has client stations that support the original WPA
and none that support the newer WPA2.
- WPA2—All client stations on the network support WPA2. This protocol
version provides the best security per the IEEE 802.11i standard.
If the network has a mix of clients, some of which support WPA2 and others
which support only the original WPA, select both of the check boxes. This
lets both WPA and WPA2 client stations associate and authenticate, but
uses the more robust WPA2 for clients who support it. This WPA
configuration allows more interoperability in place of some security.