Filter
Top Products
Radio Interface
6-73
wireless clients. A summary of wireless security considerations is
listed in the following table.
Security
Mechanism
Client Support Implementation Considerations
WEP Built-in support on all
802.11a and 802.11g
devices
• Provides only weak security
• Requires manual key
management
WEP over
802.1X
Requires 802.1X client
support in system or
by add-in software
(support provided in
Windows 2000 SP3 or
later and Windows XP)
• Provides dynamic key rotation
for improved WEP security
• Requires configured RADIUS
server
• 802.1X EAP type may require
management of digital
certificates for clients and server
MAC
Address
Filtering
Uses the MAC
address of client
network card
• Provides only weak user
authentication
• Management of authorized
MAC addresses
• Can be combined with other
methods for improved security
• Optionally configured RADIUS
server
WPA over
802.1X
Mode
Requires
WPA-enabled system
and network card
driver
(native support
provided in Windows
XP)
• Provides robust security in
WPA-only mode (i.e., WPA
clients only)
• Offers support for legacy WEP
clients, but with increased
security risk (i.e., WEP
authentication keys disabled)
• Requires configured RADIUS
server
• 802.1X EAP type may require
management of digital
certificates for clients and server
WPA PSK
Mode
Requires
WPA-enabled system
and network card
driver
(native support
provided in Windows
XP)
• Provides good security in small
networks
• Requires manual management
of pre-shared key