Lancom Systems LCOS 3.50 Server User Manual


 
̈ Chapter 11: Wireless LAN – WLAN LANCOM Reference Manual LCOS 3.50
239
Wireless LAN – WLAN
incorporated in the 802.11 standard for the encryption of data in wireless
transmission. This method uses keys of 40 (WEP64), 104 (WEP128) or 128
bits (WEP152) in length. A number of security loopholes in WEP have
come to light over time, and so the latest 802.11i/WPA methods should
be used wherever possible.
Further information about the 802.11i and WPA standards are
available under ’Developments in WLAN security’ page 213.
The tab '802.11i/WEP' in the configuration area 'WLAN Security' is used for
setting the encryption parameters for each logical WLAN. Open the list with
the button for WPA or Private WEP settings.
Type of encryption
First of all, select the type of encryption for the individual logical WLAN
interfaces:
̈ Yes—Access only for stations with encryption (recommended): In this
mode, only the WLAN clients with activated WEP and the correct key can
register with the access point.
̈ Yes—Access also for stations without encryption allowed: In this mode,
WLAN clients with activated WEP and AirLancer MC 11 clients (without
WEP) can register with this access point.
̈ No—No encryption
Method/
Key 1 length
Set the encryption method to be used here.
̈ 802.11i (WPA)-PSK – Encryption according to the 802.11i standard offers
the highest security. The 128-bit AES encryption used here offers security
equivalent to that of a VPN connection.
̈ WEP 152, WEP 128, WEP 64 – encryption according to the WEP standard
with key lengths of 128, 104 or 40 bits respectively. This setting is only to
be recommended when the hardware used by the WLAN client does not
support the modern method.
̈ WEP 152-802.1x, WEP 128-802.1x, WEP 64-802.1x – encryption
according to the WEP standard with key lengths of 128, 104 or 40 bits
respectively, and with additional authentication via 802.1x/EAP. This
setting is also only to be recommended when the hardware used by the
WLAN client does not support the 802.11i standard. The 802.1x/EAP
authentication offers a higher level of security than WEP encryption alone,
although the necessity for a RADIUS server makes very high demands of
the IT infrastructure.