User manual SMC 2552W-G2

[. . . ] USER GUIDE SMC2552W-G2 EliteConnectTM Universal 802. 11g 2. 4GHz Wireless Access Point EliteConnectTM SMC2552W-G2 2. 4GHz Wireless Access Point The easy way to make all your network connections 20 Mason Irvine, CA 92618 Phone: (949) 679-8000 September 2008 Pub. # 149100034100E F4. 3. 2. 2 E092008-AP-R03 Information furnished by SMC Networks, Inc. However, no responsibility is assumed by SMC for its use, nor for any infringements of patents or other rights of third parties which may result from its use. No license is granted by implication or otherwise under any patent or patent rights of SMC. SMC reserves the right to change specifications at any time without notice. [. . . ] Client authentication is then verified on the RADIUS server before the access point grants client access to the network. The 802. 1X EAP packets are also used to pass dynamic unicast session keys and static broadcast keys to wireless clients. Session keys are unique to each client and are used to encrypt and correlate traffic passing between a specific client and the access point. You can also enable broadcast key rotation, so the access point provides a dynamic broadcast key and changes it at a specified interval. 5-82 Radio Interface Open the Security page, and click More for one of the VAP interfaces. 5 You can enable 802. 1X as optionally supported or as required to enhance the security of the wireless network. (Default: Disable) · Disable: The access point does not support 802. 1X authentication for any wireless client. After successful wireless association with the access point, each client is allowed to access the network. · Supported: The access point supports 802. 1X authentication only for clients initiating the 802. 1X authentication process (i. e. , the access point does not initiate 802. 1X authentication). For clients initiating 802. 1X, only those successfully authenticated are allowed to access the network. For those clients not initiating 802. 1X, access to the network is allowed after successful wireless association with the access point. The 802. 1X supported mode allows access for clients not using WPA or WPA2 security. · Required: The access point enforces 802. 1X authentication for all associated wireless clients. If 802. 1X authentication is not initiated by a client, the access point will initiate authentication. Only those clients successfully authenticated with 802. 1X are allowed to access the network. Note: If 802. 1X is enabled on the access point, then RADIUS setup must be completed (see "RADIUS" on page 5-7). When 802. 1X is enabled, the broadcast and session key rotation intervals can also be configured. · Broadcast Key Refresh Rate: Sets the interval at which the broadcast keys are refreshed for stations using 802. 1X dynamic keying. (Range: 0-1440 minutes; Default: 0 means disabled) · Session Key Refresh Rate: The interval at which the access point refreshes unicast session keys for associated clients. (Range: 0-1440 minutes; Default: 0 means disabled) 5-83 5 System Configuration · 802. 1X Reauthentication Refresh Rate: The time period after which a connected client must be re-authenticated. During the re-authentication process of verifying the client's credentials on the RADIUS server, the client remains connected the network. (Range: 0-65535 seconds; Default: 0 means disabled) CLI Commands for 802. 1X Authentication ­ Use the 802. 1X supported command from the VAP interface mode to enable 802. 1X authentication. Set the session and broadcast key refresh rate, and the re-authentication timeout. To display the current settings, use the show authentication command from the Exec mode. Enterprise AP(if-wireless g: VAP[0])#802. 1X supported 6-64 Enterprise AP(if-wireless g: VAP[0])#802. 1X broadcast-key-refresh-rate 5 6-65 Enterprise AP(if-wireless g: VAP[0])#802. 1X session-key-refresh-rate 5 6-66 Enterprise AP(if-wireless g: VAP[0])#802. 1X session-timeout 300 6-66 Enterprise AP(if-wireless g: VAP[0])#exit Enterprise AP#show authentication 6-67 Authentication Information =========================================================== MAC Authentication Server : DISABLED MAC Auth Session Timeout Value : 0 min 802. 1x supplicant : DISABLED 802. 1x supplicant user : EMPTY 802. 1x supplicant password : EMPTY Address Filtering : ALLOWED System Default : ALLOW addresses not found in filter table. Filter Table MAC Address Status -------------------------00-70-50-cc-99-1a DENIED 00-70-50-cc-99-1b ALLOWED ========================================================= Enterprise AP# 5-84 Status Information 5 Status Information The Status page includes information on the following items: Menu AP Status Station Status Event Logs Description Displays configuration settings for the basic system and the wireless interface Shows the wireless clients currently associated with the access point Shows log messages stored in memory Page 5-85 5-88 5-91 Access Point Status The AP Status window displays basic system configuration settings, as well as the settings for the wireless interface. 5-85 5 System Configuration AP System Configuration ­ The AP System Configuration table displays the basic system configuration settings: System Up Time: Length of time the management agent has been up. IP Default Gateway: IP address of the gateway router between this device and management stations that exist on other network segments. [. . . ] Access points attached to a wired network, support the creation of multiple radio cells that enable roaming throughout a facility. Ad Hoc A group of computers connected as an independent wireless network, without an access point. Advanced Encryption Standard (AES) An encryption algorithm that implements symmetric key cryptography. AES provides very strong encryption using a completely different ciphering algorithm to TKIP and WEP. Authentication The process to verify the identity of a client requesting network access. IEEE 802. 11 specifies two forms of authentication: open system and shared key. Backbone The core infrastructure of a network. The portion of the network that transports information from one central location to another central location where it is unloaded onto a local system. Basic Service Set (BSS) A set of 802. 11-compliant stations and an access point that operate as a fully-connected wireless network. Beacon A signal periodically transmitted from the access point that is used to identify the service set, and to maintain contact with wireless clients. Glossary-1 Glossary Broadcast Key Broadcast keys are sent to stations using 802. 1X dynamic keying. [. . . ]