Wireless > Security
480
SonicOS 5.8.1 Administrator Guide
• Transparent authentication with Windows log-in
• No client software needed in most cases
WPA2
• Best security (uses AES)
• For use with trusted corporate wireless clients
• Transparent authentication with Windows log-in
• Client software install may be necessary in some cases
• Supports 802.11i “Fast Roaming” feature
• No backend authentication needed after first log-in (allows for faster roaming)
WPA2-AUTO
• Tries to connect using WPA2 security.
• If the client is not WPA2 capable, the connection will default to WPA.
WPA/WPA2 Encryption Settings
Both WPA and WPA2 support two protocols for storing and generating keys:
• Pre-Shared Key (PSK): PSK allows WPA to generate keys from a pre-shared passphrase
that you configure. The keys are updated periodically based on time or number of packets.
Use PSK in smaller deployments where you do not have a RADIUS server.
• Extensible Authentication Protocol (EAP): EAP allows WPA to synchronize keys with an
external RADIUS server. The keys are updated periodically based on time or number of
packets. Use EAP in larger, enterprise-like deployments where you have an existing
RADIUS framework.
WPA2 also supports EAP and PSK protocols, but adds an optional AUTO mode for each
protocol. WPA2 EAP AUTO and WPA2 PSK AUTO try to connect using WPA2 security, but will
default back to WPA if the client is not WPA2 capable.
Note WPA support is only available in Access Point Mode. WPA support is not available in Bridge
Mode.