Moxa AWK-1127-PoE-T [23/97] Wlan security settings

AWK-1121/1127 Web Console Configuration

3-9

WLAN Security Settings

The AWK-1121/1127 provides four standardized wireless security modes: Open, WEP (Wired Equivalent

Privacy), WPA (Wi-Fi Protected Access), and WPA2. Several security modes are available in the

AWK-1121/1127 by selecting Security mode and WPA type:

• Open: No authentication, no data encryption.

• WEP: Static WEP (Wired Equivalent Privacy) keys must be configured manually.

• WPA/WPA2-Personal: Also known as WPA/WPA2-PSK. You will need to specify the Pre-Shared Key in the

Passphrase field, which will be used by the TKIP or AES engine as a master key to generate keys that

actually encrypt outgoing packets and decrypt incoming packets.

• WPA/WPA2-Enterprise: Also called WPA/WPA2-EAP (Extensible Authentication Protocol). In addition to

device-based authentication, WPA/WPA2-Enterprise enables user-based authentication via IEEE802.1X.

The AWK-1121/1127 can support three EAP methods: EAP-TLS, EAP-TTLS, and EAP-PEAP.

Security mode

Setting Description Factory Default

Open No authentication Open

WEP Static WEP is used

WPA Fully supports IEEE802.11i with “TKIP/AES + 802.1X”

WPA2 Fully supports IEEE802.11i with “TKIP/AES + 802.1X”

Open

For security reasons, you should NOT set security mode to Open (or “Open System”), since authentication and

data encryption are NOT performed in Open (or “Open System”) mode.

WEP

According to the IEEE802.11 standard, WEP can be used for authentication and data encryption to maintain

confidentiality. Shared (or Shared Key) authentication type is used if WEP authentication and data encryption

are both needed. Normally, Open (or Open System) authentication type is used when WEP data encryption is

run with authentication.

When WEP is enabled as a security mode, the length of a key (so-called WEP seed) can be specified as 64/128

bits, which is actually a 40/104-bit secret key with a 24-bit initialization vector. The AWK-1121/1127 provides

4 entities of WEP key settings that can be selected to use with Key index. The selected key setting specifies the

key to be used as a send-key for encrypting traffic from the AP side to the wireless client side. All 4 WEP keys

are used as receive-keys to decrypt traffic from the wireless client side to the AP side.

The WEP key can be presented in two Key types, HEX and ASCII. Each ASCII character has 8 bits, so a 40-bit

(or 64-bit) WEP key contains 5 characters, and a 104-bit (or 128-bit) key has 13 characters. In hex, each

character uses 4 bits, so a 40-bit key has 10 hex characters, and a 104-bit key has 26 hex characters.