Security Profile Table - Details

To update security profile information, click Refresh. The following table lists the detailed security profile information:

Security Profile Name	Name of the security profile.
L2 Modes Allowed	Active L2 security mode. Available L2 security modes are: Clear: The WLAN does not require a station to use authentication or encryption. 802.1X: Requires 802.1X authentication and encryption. Static WEP keys: Requires stations to use a WEP key. WPA: Requires stations use WPA with TKIP encryption and 802.1X Radius authentication. WPA PSK: Requires stations use the WPA Pre-shared Key (PSK). WPA2: Requires stations use WPA2 with CCMP-AES encryption and 802.1X Radius authentication. WPA2-PSK: Requires stations use WPA2 with CCMP-AES encryption and a Pre-shared Key. Mixed: Both WPA and WPA2 clients are nusing a single security profile. Mixed PSK: Pre-shared key clients are using a single security profile.
Data Encrypt	Data encryption in use. Available encryption settings are: By default, no data encryption is selected, meaning that data is in the clear. WEP64: A 64-bit WEP key is used to encrypt packets. WEP128: A 128-bit WEP key is used to encrypt packets. TKIP: A 128-bit encryption key and a 64-bit Initialization Vector (IV) providing encryption for WPA. CCMP-AES: A 128-bit block key is used to encrypt packets for WPA2. CCMP/TKIP: Using the Counter Mode with Cipher Block Chaining (CCMP) encryption protocol that replaces TKIP, the mandatory protocol in WPA, and WEP.
Primary Radius Profile Name	Specifies the primary Radius Server Profile name.
Secondary Radius Profile Name	Specifies the secondary Radius Server Profile name.
WEP Key (Alphanumeric/Hexadecimal)	WEP key used during authorization. If 64-bit encryption is used, a 5-character ASCII or 10-character hex key is used, for 128-bit encryption, a 13-character ASCII or 26-character hex key is used. Hex keys start with the 0x characters.
Static WEP Key Index	Index number of the WEP key to be used.
Re-Key Period (seconds)	Duration in seconds that the WEP key is valid.
Captive Portal	Disabled: No captive portal configuration is in use. WebAuth: AWebAuth Captive Portal is configured.
Captive Portal Authentication Method	InternalExternal means that a third-party Captive Portal solution from a company such as Bradford, Avenda, or CloudPath is configured..
802.1X Network Initiation	On: The controller initiates 802.1X authentication by sending an EAP-REQUEST packet to the client. By default, this feature is enabled. Off: The client sends an EAP-START packet to the controller to initiate 802.1X authentication. With this option, the controller cannot initiate 802.1X authentication.
Shared Key Authentication	On: 802.1X shared key authentication is used. Off: Open authentication is used.
Pre-shared Key	Alpha-numeric key for WPA-PSK or WPA2-PSK. The key can be from 8 to 63 ASCII characters or 64 hex characters (hex keys must use the prefix "0x" or the key will not work).
Group Keying Interval (seconds)	Shows the time in seconds for the interval before a new group key is distributed.
Key Rotation	Enabled: Key rotation is used. Disabled: Key rotation is not used.
Backend Authentication Server Timeout	Amount of time that triggers a timeout for authentication, select 1 - 65535 seconds.
Reauthentication	On: 802.1X re-authentication is used. Causes the controller to honor and enforce the "Session-timeout" Radius attribute that may be present in a Radius Access-Accept packet. Use this option if the Session-timeout attribute is used to require stations to reauthenticate to the network (802.1X) at a specified period. If "Session-timeout" is not used, there is no reason to enable reauthentication. Off: Reauthentication is not used on this profile.
MAC Filtering	On: MAC Filtering is used. Off: MAC Filtering is not used.
Firewall Capability	Configured: The controller defines the policy through configuration of the Firewall filter-id. Radius-configured: The Radius server provides the policy after successful 802.1X authentication of the user. This option requires the Radius server have the filter-id configured. If this is not configured, the firewall capability is not guaranteed. None: The Firewall Capability is disabled for this security profile.
Firewall Filter ID	Lists the filter ID of the configured Per-User Firewall, if one is used for this security profile. The filter-id is an alphanumeric value that defines the firewall policy to be used on the controller, when the firewall capability is set to configured. For example, 1.
Security Logging	On: Enables logging of security-related messages for this security profile. Off: Disables logging of security-related messages for this security profile
Passthrough Firewall Filter ID	Number of the QoS rule in use by the firewall.

Click Show Detail Info to see the owner of this security profile, either the controller or E(z)RF Network Manager.