681042
40
Zoom out
Zoom in
Previous page
1/82
Next page
LANCOM OAP-54-1 Wireless – LANCOM OAC-54-1 Wireless
Chapter 4: Security settings
39
EN
The passphrases for 802.11i or WPA do not have to be changed quite so
regularly as new keys are generated for each connection anyway. This is
not the only reason that the encryption with 802.11i/AES or WPA/TKIP is
so much more secure than the now obsolete WEP method. If you use WEP
encryption to maintain compatibility with older WLAN clients, regularly
change the WEP key in your access point.
If the data is of a high security nature, further improvements include addi-
tionally authenticating the client with the 802.1x method (’802.1x / EAP’
Seite 39) or activate an additional encryption of the WLAN connection
as used for VPN tunnels (’IPSec over WLAN’ Seite 40). In special cases,
a combination of these two mechanisms is possible.
Detailed information about WLAN security and the various encryption
methods are to be found in the LCOS reference manual.
4.1.2 802.1x / EAP
The international industry standard IEEE 802.1x and the Extensible Authenti-
cation Protocol (EAP) enable access points to carry out reliable and secure
access checks. The access data can be managed centrally on a RADIUS server
(integrated RADIUS/EAP server in the LANCOM OAP/OAC-54-1 Wireless or
external RADIUS/EAP server) and accessed by the access point when required.
The dynamically generated and cryptographically secure key material for
802.11i (WPA1/2) replaces the manual key management.
The IEEE-802.1x technology has already been fully integrated since Windows
XP. Client software exists for other operating systems. The drivers for the
LANCOM AirLancer wireless cards feature an integrated 802.1x client.
4.1.3 LANCOM Enhanced Passphrase Security
With LEPS (LANCOM Enhanced Passphrase Security), LANCOM Systems has
developed an efficient method that makes use of the simple configuration of
IEEE 802.11i with passphrase, but that avoids the potential error sources in
passphrase distribution. LEPS uses an additional column in the ACL to assign
an individual passphrase consisting of any 4 to 64 ASCII characters to each
MAC address. The connection to the access point and the subsequent encryp-
tion with IEEE 802.11i or WPA is only possible with the right combination of
passphrase and MAC address.
LEPS can be used locally in the device and can also be centrally managed with
the help of a RADIUS server, and it works with all WLAN client adapters cur-
rently available on the market without modification. Full compatibility to
40


Need help? Post your question in this forum.

Forumrules


Report abuse

Libble takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Product:

For example, Anti-Semitic content, racist content, or material that could result in a violent physical act.

For example, a credit card number, a personal identification number, or an unlisted home address. Note that email addresses and full names are not considered private information.

Forumrules

To achieve meaningful questions, we apply the following rules:

Register

Register getting emails for Lancom OAC-54-1 Wireless at:


You will receive an email to register for one or both of the options.


Get your user manual by e-mail

Enter your email address to receive the manual of Lancom OAC-54-1 Wireless in the language / languages: English as an attachment in your email.

The manual is 1,52 mb in size.

 

You will receive the manual in your email within minutes. If you have not received an email, then probably have entered the wrong email address or your mailbox is too full. In addition, it may be that your ISP may have a maximum size for emails to receive.

Others manual(s) of Lancom OAC-54-1 Wireless

Lancom OAC-54-1 Wireless User Manual - German - 86 pages


The manual is sent by email. Check your email

If you have not received an email with the manual within fifteen minutes, it may be that you have a entered a wrong email address or that your ISP has set a maximum size to receive email that is smaller than the size of the manual.

The email address you have provided is not correct.

Please check the email address and correct it.

Your question is posted on this page

Would you like to receive an email when new answers and questions are posted? Please enter your email address.



Info