ZyXEL ZyWALL ATP700 User Guide - Page 675

Chapter 34 Object The following table describes the labels in this screen. Table 268 Configuration > Object > AP Profile > SSID > Security Profile > Add/Edit Security Profile LABEL DESCRIPTION Profile Name Security Mode Fast Roaming Settings Enter up to 31 alphanumeric characters for the profile name. This name is only visible in the Web Configurator and is only for management purposes. Spaces and underscores are allowed. Select a security mode from the list: none, wep, wpa2, or wpa2-mix. IEEE 802.11r fast roaming, which is also known as Fast BSS Transition (FT), allows wireless clients to quickly move from one AP to another in a WiFi network that uses WPA2 with 802.1x authentication. Information from the original association is passed to the target AP when the client roams. The client doesn't need to perform the whole 802.1x authentication process. Messages exchanged between the target AP and client are reduced and performed using one of the two methods: 802.11r Radius Server Type Primary / Secondary Radius Server Activate Radius Server IP Address Radius Server Port Radius Server Secret Primary / Secondary Accounting Server Activate Accounting Server IP Address Accounting Server Port Accounting Share Secret Accounting Interim Update • Over-the-DS: The wireless client communicates with the target AP via the current AP. The communication is sent to the target AP through the wired Ethernet connection. • Over-the-Air: The wireless client communicates directly with the target AP. Select this to turn on IEEE 802.11r fast roaming on the AP (Zyxel Device). This is good for wireless clients that transport a lot of real-time interactive traffic, such as voice and video. Wireless clients should also support WPA2 and fast roaming to associate with the AP (Zyxel Device) and roam seamlessly. Select Internal to use the Zyxel Device's internal authentication database, or External to use an external RADIUS server for authentication. Select this to have the Zyxel Device use the specified RADIUS server. Enter the IP address of the RADIUS server to be used for authentication. Enter the port number of the RADIUS server to be used for authentication. Enter the shared secret password of the RADIUS server to be used for authentication. Select the check box to enable user accounting through an external authentication server. Enter the IP address of the external accounting server in dotted decimal notation. Enter the port number of the external accounting server. Enter a password (up to 128 alphanumeric characters) as the key to be shared between the external accounting server and the AP. The key must be the same on the external accounting server and your AP. The key is not sent over the network. This field is available only when you enable user accounting through an external accounting server. Select this to have the AP send accounting update messages to the accounting server at the interval you specify. Interim Interval Specify the time interval for how often the AP is to send an interim update message with current client statistics to the accounting server. MAC Authentication Select this to use an external server or the Zyxel Device's local database to authenticate wireless clients by their MAC addresses. Users cannot get an IP address if the MAC authentication fails. Delimiter (Account) An external server can use the wireless client's account (username/password) or Calling Station ID for MAC authentication. Configure the ones the external server uses. Select the separator the external server uses for the two-character pairs within account MAC addresses. ZyWALL ATP Series User's Guide 675