ZyXEL NWA1121-NI User Guide - Page 58

Chapter 6 Wireless LAN

NWA1121-NI User’s Guide

58

User Authentication

Authentication is the process of verifying whether a wireless device is allowed to use the wireless

network. You can make every user log in to the wireless network before they can use it. However,

every device in the wireless network has to support IEEE 802.1x to do this.

For wireless networks, you can store the user names and passwords for each user in a RADIUS

server. This is a server used in businesses more than in homes. If you do not have a RADIUS server,

you cannot set up user names and passwords for your users.

Unauthorized wireless devices can still see the information that is sent in the wireless network,

even if they cannot use the wireless network. Furthermore, there are ways for unauthorized

wireless users to get a valid user name and password. Then, they can use that user name and

password to use the wireless network.

The following table shows the relative effectiveness of wireless security methods:.

The available security modes in your NWA1121-NI are as follows:

•

None.

No data encryption.

•

WEP.

Wired Equivalent Privacy (WEP) encryption scrambles the data transmitted between the

wireless stations and the access points to keep network communications private.

•

802.1x-Only.

This is a standard that extends the features of IEEE 802.11 to support extended

authentication. It provides additional accounting and control features. This option does not

support data encryption.

•

802.1x-Static WEP.

This provides 802.1x-Only authentication with a static 64bit or 128bit

WEP key and an authentication server.

•

WPA.

Wi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i standard.

•

WPA2.

WPA2 (IEEE 802.11i) is a wireless security standard that defines stronger encryption,

authentication and key management than WPA.

•

WPA2-MIX.

This commands the NWA1121-NI to use either WPA2 or WPA depending on which

security mode the wireless client uses.

•

WPA2-PSK

. This adds a pre-shared key on top of WPA2 standard.

•

WPA2-PSK-MIX

. This commands the NWA1121-NI to use either WPA-PSK or WPA2-PSK

depending on which security mode the wireless client uses.

Note: To guarantee 802.11n wireless speed, please only use WPA2 or WPA2-PSK security

mode. Other security modes may degrate the wireless speed performance to

802.11g.

Table 9

Wireless Security Levels

SECURITY

LEVEL

SECURITY TYPE

Least

Secure

Most Secure

Unique SSID (Default)

Unique SSID with Hide SSID Enabled

MAC Address Filtering

WEP Encryption

IEEE802.1x EAP with RADIUS Server Authentication

Wi-Fi Protected Access (WPA)

WPA2

Section	Page
NWA1121-NI	1
Contents Overview	3
Table of Contents	5
User’s Guide	9
Introducing the NWA1121-NI	11
1.1 Introducing the NWA1121-NI	11
1.2 Wireless Modes	11
1.2.1 MBSSID	11
1.2.2 Wireless Client	13
1.2.3 Root AP	14
1.2.4 Repeater	14
1.3 Ways to Manage the NWA1121-NI	15
1.4 Configuring Your NWA1121-NI’s Security Features	16
1.4.1 Control Access to Your Device	16
1.4.2 Wireless Security	16
1.5 Good Habits for Managing the NWA1121-NI	16
1.6 Hardware Connections	17
1.7 LED	17
Introducing the Web Configurator	19
2.1 Accessing the Web Configurator	19
2.2 Resetting the NWA1121-NI	20
2.2.1 Methods of Restoring Factory-Defaults	21
2.3 Navigating the Web Configurator	22
2.3.1 Title Bar	22
2.3.2 Navigation Panel	23
2.3.3 Main Window	24
Dashboard	25
3.1 The Dashboard Screen	25
Tutorial	29
4.1 How to Configure the Wireless LAN	29
4.1.1 Choosing the Wireless Mode	29
4.1.2 Further Reading	29
4.2 How to Configure Multiple Wireless Networks	29
4.2.1 Configure the SSID Profiles	31
4.2.2 Configure the Standard Network	33
4.2.3 Configure the VoIP Network	34
4.2.4 Configure the Guest Network	36
4.2.5 Testing the Wireless Networks	38
4.3 NWA1121-NI Setup in AP and Wireless Client Modes	38
4.3.1 Scenario	38
4.3.2 Configuring the NWA1121-NI in MBSSID or Root AP Mode	39
4.3.3 Configuring the NWA1121-NI in Wireless Client Mode	42
4.3.4 MAC Filter Setup	44
4.3.5 Testing the Connection and Troubleshooting	45
Technical Reference	47
Monitor	49
5.1 Overview	49
5.2 What You Can Do	49
5.3 View Logs	49
5.4 Statistics	50
5.5 Association List	51
5.6 Channel Usage	52
Wireless LAN	55
6.1 Overview	55
6.2 What You Can Do in this Chapter	55
6.3 What You Need To Know	56
6.4 Wireless Settings Screen	60
6.4.1 Root AP Mode	61
6.4.2 Repeater Mode	64
6.4.3 Wireless Client Mode	67
6.4.4 MBSSID Mode	69
6.5 SSID Screen	72
6.5.1 Configuring SSID	73
6.6 Wireless Security Screen	74
6.6.1 Security: WEP	76
6.6.2 Security: 802.1x Only	77
6.6.3 Security: 802.1x Static WEP	79
6.6.4 Security: WPA, WPA2, WPA2-MIX	83
6.6.5 Security: WPA-PSK, WPA2-PSK, WPA2-PSK-MIX	86
6.7 RADIUS Screen	87
6.8 MAC Filter Screen	89
6.9 Technical Reference	91
6.9.1 Additional Wireless Terms	91
6.9.2 WMM QoS	92
6.9.3 Security Mode Guideline	93
LAN	94
7.1 Overview	94
7.2 What You Can Do in this Chapter	94
7.3 What You Need to Know	94
7.4 LAN IP Screen	96
VLAN	98
8.1 Overview	98
8.1.1 What You Can Do in This Chapter	98
8.2 What You Need to Know	98
8.3 VLAN Screen	99
System	101
9.1 Overview	101
9.2 What You Can Do in this Chapter	101
9.3 What You Need To Know	102
9.4 WWW Screen	104
9.5 Certificates Screen	105
9.6 Telnet Screen	106
9.7 SNMP Screen	107
9.8 FTP Screen	110
9.9 Technical Reference	111
9.9.1 MIB	111
9.9.2 Supported MIBs	112
9.9.3 Private-Public Certificates	112
9.9.4 Certification Authorities	112
9.9.5 Checking the Fingerprint of a Certificate on Your Computer	112
Log Settings	115
10.1 Overview	115
10.2 What You Can Do in this Chapter	115
10.3 What You Need To Know	116
10.4 Log Settings Screen	116
Maintenance	119
11.1 Overview	119
11.2 What You Can Do in this Chapter	119
11.3 What You Need To Know	120
11.4 General Screen	120
11.5 Password Screen	121
11.6 Time Screen	122
11.7 Firmware Upgrade Screen	123
11.8 Configuration File Screen	124
11.8.1 Backup Configuration	124
11.8.2 Restore Configuration	124
11.8.3 Back to Factory Defaults	125
11.9 Restart Screen	125
Troubleshooting	127
12.1 Power, Hardware Connections, and LEDs	127
12.2 NWA1121-NI Access and Login	128
12.3 Internet Access	129
Setting Up Your Computer’s IP Address	131
Pop-up Windows, JavaScript and Java Permissions	159
IP Addresses and Subnetting	171
Wireless LANs	179
Legal Information	193

ZyXEL NWA1121-NI User Guide - Page 58

User Authentication, None., 1x-Only., 1x-Static WEP., WPA2., WPA2-MIX., WPA2-PSK, WPA2-PSK-MIX

Page 58 highlights