ZyXEL MWR102 User Guide - Page 136

Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times out, disconnects or reauthentication times out. A new WEP key is generated each time reauthentication is performed. If this feature is enabled, it is not necessary to configure a default encryption key in the Wireless screen. You may still configure and store keys here, but they will not be used while Dynamic WEP is enabled. Note: EAP-MD5 cannot be used with dynamic WEP key exchange For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption. They are often deployed in corporate environments, but for public deployment, a simple user name and password pair is more practical. The following table is a comparison of the features of authentication types. Table 39 Comparison of EAP Authentication Types EAP-MD5 EAP-TLS EAP-TTLS PEAP LEAP Mutual Authentication No Certificate - Client No Certificate - Server No Dynamic Key Exchange No Credential Integrity None Deployment Difficulty Easy Client Identity Protection No Yes Yes Yes Yes Yes Optional Optional No Yes Yes Yes No Yes Yes Yes Yes Strong Strong Strong Moderate Hard Moderate Moderate Moderate No Yes Yes No 136