Security Profile

Use this page (Configuration > Security > Profile) to do the following:

Review summary information about security profiles
Add security profiles
Modify an existing security profile
Delete security profiles
Review additional information about a security profile

To review a summary of security profiles

To see updated security profile information, click Refresh.

The following table lists the security profile information you can review.

Security Profile Name	Name of the security profile
L2 Modes Allowed	Clear: The wireless LAN does not require any authentication or encryption for access. 802.1x: Requires 802.11 MAC address authentication via a Radius server or ACL filtering. Static WEP keys: Requires stations to use a static WEP key. WPA: WPA with TKIP encryption using an 802.1x Radius server for authentication is in use. WPA-PSK: WPA with TKIP encryption using a Pre-shared Key requires a key that is manually distributed to clients and APs before client association. WPA2-PSK: WPA2 with CCMP-AES encryption using a Pre-shared Key requires a key that is manually distributed to clients and APs before client association. WPA2: WPA2 with CCMP-AES encryption using an 802.1x Radius server for authentication is in use. MIXED: Security profile using both WPA and WPA2 MIXED_PSK: Security profile using both WPA-PSK and WPA2-PSK
Data Encrypt	Nothing is selected: No encryption is used. WEP64: A 64-bit WEP key is used to encrypt packets. WEP128: A 128-bit WEP key is used to encrypt packets. TKIP: A 128-bit WPA TKIP key is used to encrypt packets. CCMP-AES: A 128-bit CCMP-AES key is used to encrypt packets. CCMP/TKIP: Uses the Counter Mode with Cipher Block Chaining (CCMP) encryption protocol that replaces TKIP, the mandatory protocol in WPA, and WEP
Firewall Capability	Configured: The controller defines the policy through configuration of the Firewall filter-id. Radius-configured: The Radius server provides the policy after successful 802.1X authentication of the user. This option requires the Radius server to have the filter-id configured. If this is not configured, the firewall capability is not guaranteed. None: The firewall capability is disabled for this security profile.
Firewall Filter ID	The firewall filter ID is an alphanumeric value that defines the firewall policy to be used on the controller when the firewall capability is set to configured. For example, an ID can be 1. Create a firewall filter by clicking Configuration > Qos > System Settings > QoS and Firewall Rules > Add.
Passthrough Firewall Filter ID	Firewall filter ID that was created by clicking Configuration > Qos > System Settings > QoS and Firewall Rules > Add. The filter ID is an alphanumeric value that defines the firewall policy to be used on the controller for a Captive Portal-enabled client that has no authentication.
Owner	Controller if the security profile was created on the controller; NMS if the security profile was inherited from Network Manager.

To add security profiles (Level 10 required)

Click Add. The Security Profile Table - Add page appears.

To delete security profiles (Level 10 required)

Select the checkbox for the security profile you want to delete.
Click Delete.

To modify security profiles (Level 10 required)

Select the checkbox for the security profile you want to modify.

Click Settings. The Security Profile Table - Update page appears.

To review additional details about security profiles

Select the checkbox for the security profile for which you want to see additional information.

Click View Details. The Security Profile - Details page appears.