Help - Virtual AP

 

VAP
VAP Name Enter a suitable name for this VAP.
SSID Enter the desired SSID for this VAP.
Broadcast SSID If Disabled, no SSID is broadcast.
If enabled, the SSID will then be broadcast to all Wireless Stations. Stations which have no SSID (or a "null" value) can then adopt the correct SSID for connections to this Access Point.
Wireless Separation If enabled, then each Wireless station using the Access Point is invisible to other Wireless stations. In most business stations, this setting should be Disabled.
VLAN ID Enter the desired VLAN ID, as used on your network. IDs must be in the range 1 ~ 4095. These IDs must match the IDs used by other network devices.

Wireless Security
Security System Select the desired option, and then enter the settings for the selected method.
See the following sections for full details of each setting.
The options available are:
  • None - No security is used. Anyone using the correct SSID can connect to your network.
  • WEP - The 802.11b standard. Data is encrypted before transmission, but the encryption system is not as strong as later standards such as WPA-PSK.
  • WPA-PSK - Like WEP, data is encrypted before transmission. WPA is more secure than WEP, and should be used if possible. The PSK (Pre-shared Key) must be entered on each Wireless station. The 256Bit encryption key is derived from the PSK, and changes frequently.
  • WPA2-PSK - This is a further development of WPA-PSK, and offers even greater security, using the AES (Advanced Encryption Standard) method of encryption.
  • WPA-PSK and WPA2-PSK - This method, sometimes called "Mixed Mode", allows clients to use EITHER WPA-PSK (with TKIP) OR WPA2-PSK (with AES).
  • WPA with Radius - This version of WPA requires a Radius Server on your LAN to provide the client authentication according to the 802.1x standard. Data transmissions are encrypted using the WPA standard.
    If this option is selected:
    • Each user must authenticate on the Radius Server. This is usually done using digital certificates.
    • Each user's wireless client must support 802.1x and provide the Radius authentication data when required.
    • All data transmission is encrypted using the WPA standard. Keys are automatically generated, so no key input is required.
  • WPA2 with Radius - This version of WPA2 requires a Radius Server on your LAN to provide the client authentication according to the 802.1x standard. Data transmissions are encrypted using the WPA2 standard.
    If this option is selected:
    • Each user must authenticate on the Radius Server. This is usually done using digital certificates.
    • Each user's wireless client must support 802.1x and provide the Radius authentication data when required.
    • All data transmission is encrypted using the WPA2 standard. Keys are automatically generated, so no key input is required.
  • WPA and WPA2 with Radius - EITHER WPA or WPA2 require a Radius Server on your LAN to provide the client authentication according to the 802.1x standard. Data transmissions are encrypted using EITHER WPA or WPA2 standard.
    If this option is selected:
    • Each user must authenticate on the Radius Server. This is usually done using digital certificates.
    • Each user's wireless client must support 802.1x and provide the Radius authentication data when required.
    • All data transmission is encrypted using EITHER WPA or WPA2 standard. Keys are automatically generated, so no key input is required.
  • 802.1x - This uses the 802.1x standard for client authentication, and WEP for data encryption. If possible, you should use WPA-802.1x instead, because WPA encryption is much stronger than WEP encryption.
    If this option is selected:
    • Each user must authenticate on the Radius Server. This is usually done using digital certificates.
    • Each user's wireless client must support 802.1x and provide the Radius authentication data when required.
    • All data transmission is encrypted using the WEP standard. You only have to select the WEP key size; the WEP key is automatically generated.

 


WEP
Authentication Normally this can be left at the default value of "Automatic." If that fails, select the appropriate value - "Open System" or "Shared Key." Check your wireless card's documentation to see what method to use.
Data Encryption Select the desired WEP Encryption level, and ensure Wireless stations have the same setting and key value.
Key Input Select "Hex" or "ASCII" depending on your input method. (All keys are converted to Hex, ASCII input is only for convenience.)
Key Value Enter the key value you wish to use. Other stations must have the same key.
Passphrase Use this to generate a key or keys, instead of entering them directly. Enter a word or group of printable characters in the Passphrase box and click the "Generate Key" button to automatically configure the WEP Key(s). If encryption strength is set to 64 bit, then each of the four key fields will be populated with key values. If encryption strength is set to 128 bit, then only the selected WEP key field will be given a key value.

 


WPA-PSK
Key Enter the key value. Data is encrypted using this key. Other Wireless Stations must use the same key.
WPA Encryption The encryption method is TKIP. Wireless Stations must also use TKIP.
Key Updates These settings determine how often keys are changed.
  • Group Key Update
    This refers to the key used for broadcast transmissions. Enable this if you want the keys to be updated regularly, and enter the desired time period (Key Lifetime) between key updates.
  • Group Key Update when any membership terminates
    If enabled, the Group Key will be updated whenever any member leaves the group or disassociates from the Access Point.

 


WPA2-PSK
Key Enter the key value. Data is encrypted using this key. Other Wireless Stations must use the same key.
WPA Encryption The encryption method is AES. Wireless Stations must also use AES.
Key Updates These settings determine how often keys are changed.
  • Group Key Update
    This refers to the key used for broadcast transmissions. Enable this if you want the keys to be updated regularly, and enter the desired time period (Key Lifetime) between key updates.
  • Group Key Update when any membership terminates
    If enabled, the Group Key will be updated whenever any member leaves the group or disassociates from the Access Point.

 


WPA2-PSK and WPA2-PSK
Key Enter the key value. Data is encrypted using this key. Other Wireless Stations must use the same key.
WPA Encryption The encryption method is TKIP for WPA-PSK, and AES for WPA2-PSK.
Key Updates These settings determine how often keys are changed.
  • Group Key Update
    This refers to the key used for broadcast transmissions. Enable this if you want the keys to be updated regularly, and enter the desired time period (Key Lifetime) between key updates.
  • Group Key Update when any membership terminates
    If enabled, the Group Key will be updated whenever any member leaves the group or disassociates from the Access Point.

 


WPA with Radius
WPA Encryption The encryption method is TKIP. Wireless Stations must also use TKIP.
Key Updates These settings determine how often keys are changed.
  • Group Key Update
    This refers to the key used for broadcast transmissions. Enable this if you want the keys to be updated regularly, and enter the desired time period (Key Lifetime) between key updates.
  • Group Key Update when any membership terminates
    If enabled, the Group Key will be updated whenever any member leaves the group or disassociates from the Access Point.

 


WPA2 with Radius
WPA Encryption The encryption method is AES. Wireless Stations must also use AES.
Key Updates These settings determine how often keys are changed.
  • Group Key Update
    This refers to the key used for broadcast transmissions. Enable this if you want the keys to be updated regularly, and enter the desired time period (Key Lifetime) between key updates.
  • Group Key Update when any membership terminates
    If enabled, the Group Key will be updated whenever any member leaves the group or disassociates from the Access Point.

 


WPA and WPA2 with Radius
WPA Encryption The encryption method is TKIP for WPA, and AES for WPA2.
Key Updates These settings determine how often keys are changed.
  • Group Key Update
    This refers to the key used for broadcast transmissions. Enable this if you want the keys to be updated regularly, and enter the desired time period (Key Lifetime) between key updates.
  • Group Key Update when any membership terminates
    If enabled, the Group Key will be updated whenever any member leaves the group or disassociates from the Access Point.

 


802.1x
WEP Key Size Select the desired option.
  • 64 Bit - data is encrypted, using the default key, before being transmitted. You must enter at least the default key. For 64 Bit Encryption, the key size is 5 chars (ASCII) or 10 chars in HEX (0~9 and A~F).
  • 128 Bit - data is encrypted, using the default key, before being transmitted. You must enter at least the default key. For 128 Bit Encryption, the key size is 13 chars (ASCII) or 26 chars in HEX (0~9 and A~F).
  • 156 Bit - data is encrypted, using the default key, before being transmitted. You must enter at least the default key. For 156 Bit Encryption, the key size is 16 chars (ASCII) or 32 chars in HEX (0~9 and A~F).
Dynamic WEP key If checked, the required WEP key is dynamically generated. This may use EAP-TLS, PEAP, or another method, depending on the methods supported by the client.
Key Exchange Enable this if you wish the Dynamic keys to be exchanged and updated regularly. If enabled, enter the desired Key Lifetime.
Static WEP key If enabled, this uses EAP-MD5. You must enter the WEP key on the WEP Key field below, and on each Wireless station.
The WEP Key Index must also match the key index used on other Wireless stations.