Lantronix EMG 8500 EMG User Guide - Page 106

WPA/WPA2 Security Parameters IEEE 802.1X Parameters 7: Networking If WPA2/WPA Mixed Mode security suite is selected, these authentication parameters can be selected and configured: Authentication: Select PSK for a connection where the same key must be configured on both on the EMG side and on the access point side, or IEEE 802.1X for a connection that is authenticated with a RADIUS server that is part of the network. The RADIUS server matches the credentials sent by the EMG with an internal database. If IEEE 802.1X is selected under authentication type, see the IEEE 802.1X Parameters below for configuring WPA2 enterprise authentication. Key Type: For WPA/WPA2 PSK authentication, select the type of key required for the WLAN network: Passphrase for an ASCII password, or Hex for a 64 character hexadecimal key. Passphrase / Retype Passphrase: For WPA/WPA2 PSK authentication with Passphrase, enter the passphrase required to authenticate the connection. The minimum length of passphrase is 8 characters and the maximum length is 63 characters. All printable characters may be used in the passphrase. Key: For WPA/WPA2 PSK authentication with Hex keys, enter the hexadecimal key. The key should be exactly 64 hexadecimal characters. The Show Keys checkbox can be used to display the masked key. Encryption: For WPA/WPA2 PSK authentication, select the type of encryption - CCMP (preferred), TKIP or Any. 802.1X uses enterprise class authentication to grant access to secure networks. There are 3 components to 802.1X:  A supplicant, or client, which requires authentication (the EMG).  An authenticator, or access point, which acts as a proxy for the client, and restricts the client's communication with the authentication server.  An authentication server (usually RADIUS), which decides whether to accept the client's request for network access. If IEEE 802.1X is selected for Authentication, these parameters can be selected and configured: IEEE 802.1X EAP Protocol: Select one of the following Extensible Authentication Protocol (EAP) protocols to use for authentication with the RADIUS server. With EAP, the keys used for authentication are negotiated and changed automatically, offering a greater level of security over PSK authentication where the keys are stored on the device on each side of a connection. LEAP: Lightweight Extensible Authentication Protocol (LEAP) uses dynamic WEP keys and mutual authentication with a modified version of MS-CHAP between the EMG and a RADIUS server. EAP-TLS: uses TLS and Public key Infrastructure (PKI) to set up authentication with a RADIUS server. This method requires the use of a client-side certificate for communicating with the server. EAP-TTLS: uses TTLS (Tunneled Transport Layer Security) and server-side certificates to set up authentication between the EMG and a RADIUS server. The actual authentication is, however, performed using passwords. EMG™ Edge Management Gateway User Guide 106