HP ProCurve Wireless Access Point 420 - Hewlett Packard

Configuring Wireless Security
Access Point Configuration
Configuring Wireless Security
The access point is configured by default as an “open system,” which broadcasts
a beacon signal including the configured SSID. Wireless clients can read
the SSID from the beacon, and automatically reset their SSID to allow immediate
connection to the nearest access point.
To improve wireless network security, you have to implement two main
functions:
■ Authentication: It must be verified that clients attempting to connect to
the network are authorized users.
■ Traffic Encryption: Data passing between the access point and clients
must be protected from interception and eves dropping.
For a more secure network, the access point can implement one or a combination
of the following security mechanisms:
■ Wired Equivalent Privacy (WEP)
■ IEEE 802.1x
■ Wireless MAC address filtering
■ Wi-Fi Protected Access (WPA)
The security mechanisms that may be employed depend on the level of
security required, the network and management resources available, and the
software support provided on wireless clients.
Wired Equivalent Privacy (WEP) . WEP provides a basic level of security,
preventing unauthorized access to the network and encrypting data transmitted
between wireless clients and the access point. WEP uses static shared
keys (fixed-length hexadecimal or alphanumeric strings) that are manually
distributed to all clients that want to use the network.
WEP is the security protocol initially specified in the IEEE 802.11 standard
for wireless communications. Unfortunately, WEP has been found to be
seriously flawed and cannot be recommended for a high level of network
security. For more robust wireless security, the access point provides Wi-Fi
Protected Access (WPA) for improved data encryption and user authentication.
IEEE 802.1x Network Access Control. IEEE 802.1x is a standard framework
for network access control that uses a central RADIUS server for user
authentication. This control feature prevents unauthorized access to the
5-45