[KLUG Members] WAPs that don't suck

[Bruce Smith]

> > Download the image, go to the web config screen and tell it to upload
> > the new flash file, wait until it's done flashing.
> >> Does it then still support 802.1x & EAP?
> > Yes.
> 
> So there is a field in the wireless section to enter the RADIUS server's IP
> address and shared secret?

The Linux flash actually give the WAP the capability to be a limited
RADIUS server (you could also specify a different RADIUS server).  
I had it running that way for awhile as a test (RADIUS server in WAP).

I never tried running RADIUS mode "out of the box", but here is what the
"out of the box" help screen says:

------------------------------------------------------------------------
The router supports four different types of security settings for your
network. Wi-Fi Protected Access (WPA) Pre-Shared key, WPA Remote Access
Dial In User Service (RADIUS), RADIUS, and Wire Equivalence Protection
(WEP). 


To enable Security Settings, click the Enable radio button. Then click
the Edit Security Settings button to configure the security settings. To
disable security settings, keep the default setting, Disable.

WPA Pre-Shared Key: There are two encryption options for WPA Pre-Shared
Key, TKIP and AES. TKIP stands for Temporal Key Integrity Protocol. TKIP
utilizes a stronger encrytption method and incorporates Message
Integrity Code (MIC) to provide protection against hackers. AES stands
for Advanced Encryption System, which utilizes a symmetric 128-Bit block
data encryption. 

To use WPA Pre-Shared Key, enter a password in the WPA Shared Key field
between 8 and 63 characters long. You may also enter a Group Key Renewal
Interval time between 0 and 99,999 seconds. 

WPA RADIUS: WPA RADIUS uses an external RADIUS server to perform user
authentication. To use WPA RADIUS, enter the IP address of the RADIUS
server, the RADIUS Port (default is 1812) and the shared secret from the
RADIUS server.

RADIUS: RADIUS utilizes either a RADIUS server for authentication or WEP
for data encryption. To utilize RADIUS, enter the IP address of the
RADIUS server and its shared secret. Select the desired encryption bit
(64 or 128) for WEP and enter either a passphrase or a manual WEP key.

WEP: There are two levels of WEP encryption, 64-bit and 128-bit. The
higher the encryption bit, the more secure your network, however, speed
is sacrificed at higher bit levels. To utilize WEP, select the desired
encryption bit, and enter a passphrase or a WEP key in hexadecimal
format.
-----------------------------------------------------------------------

 - BS