National Instruments WAP-3701 Network Router User Manual


 
NI WAP-3701/3711 User’s Manual Web Console Configuration
3-17
A total of 7 security modes are available with the different NI WAP-3701/3711 models:
y
Open System. No authentication, no data encryption.
y
Static WEP. WEP (Wired Equivalent Privacy) keys must be configured manually.
y
Static TKIP (WPA-PSK). Only TKIP (Temporal Key Integrity Protocol) mechanism of WPA
(Wi-Fi Protected Access) is enabled. In this mode, you need to specify the Pre-shared key,
which will be used by the TKIP engine as a master key to generate keys that actually encrypt
outgoing packets and decrypt incoming packets.
NOTE
The number of characters of the Pre-shared key setting must be at least 8 and can be up to 63.
y IEEE 802.1X EAP without Encryption (EAP-MD5). The IEEE 802.1X functionality is
enabled and the user-name/password-based EAP-MD5 authentication is used. No data
encryption.
y
IEEE 802.1X EAP with Static WEP (EAP-MD5). The IEEE 802.1X functionality is enabled
and the user-name/password-based EAP-MD5 authentication is used. Data encryption is
achieved by static WEP.
y
IEEE 802.1X EAP with Dynamic WEP (EAP-TLS, EAP-TTLS, PEAP). The IEEE 802.1X
functionality is enabled and dynamic WEP key distribution authentication (EAP-TLS,
EAP-TTLS, or PEAP) is used. Data encryption is achieved by dynamic WEP.
y
IEEE 802.1X EAP with Dynamic TKIP (WPA). This is a full WPA mode, in which both the
TKIP and IEEE 802.1X dynamic key exchange mechanisms are enabled. The AP is highly
secure in this mode.
In the above security modes, a back-end RADIUS (Remote Authentication Dial-In User Service)
server is needed if IEEE 802.1X functionality is enabled. See the appropriate section for more
information about IEEE 802.1X and RADIUS.
According to the IEEE 802.11 standard, WEP can be used for authentication and data encryption.
Normally, Shared Key authentication is used if WEP data encryption is enabled. In rare cases,
Open System authentication may be used when WEP data encryption is enabled. The
Authentication algorithm setting is provided for better compatibility with wireless clients with
various WLAN network adapters. There are three options available, including Open System,
Shared Key, and Auto.
When WEP is enabled by a security mode, the Key length can be specified to be 64 Bits or 128
Bits. The Selected key setting specifies the key to be used as a send-key for encrypting traffic
from the AP side to the wireless client side. All 4 WEP keys are used as receive-keys to decrypt
traffic from the wireless client side to the AP side.
NOTE
Each field of a WEP key setting is a hex-decimal number from 00 to FF. For example, when the
security mode is Static WEP and the key length is 64 Bits, you could set Key 1 to
“00012E3ADF”.