Allied Telesis AT-WA7501 - Manual (Page 173)

AT-WA7500 and AT-WA7501 Installation and User’s Guide
173
These security features and solutions are listed below in the order of
amount of security and ease of use (most basic/least secure to most
secure). Allied Telesyn recommends you configure your wireless network
for the maximum possible security that you deem necessary for the
integrity of your network.
1. Change the SSID from its default value of ATILAN and check the
Disallow Network Name of ‘ANY’ check box. For help, see Chapter 4,
“Configuring the Radios” on page 99.
2. Enable/disable access methods. For example, if you are not using
telnet sessions to configure or manage your access point, you can
disable this access method. For help, see “Controlling Access to
Access Point Menus” on page 176.
3. Use a password server to maintain a list of authorized users who can
configure and manage the access points. You can either use an
external RADIUS server or you can use any access point’s embedded
authentication server (EAS).
Or change the default login for users who need to configure or manage
the access point. For help, see “Setting Up Logins” on page 178.
4. Create a secure spanning tree, which between access points, and
includes secure IAPP and secure wireless hops. For help, see
“Creating a Secure Spanning Tree” on page 183.
5. Use a RADIUS server to maintain an access control list (ACL), which is
a list of MAC addresses of end devices that can connect to the network
through access point. You can either use an external RADIUS server
or you can use any access point’s embedded authentication server
(EAS). For help, see “Using an Access Control List (ACL)” on
page 186.
6. Configure VLANs that separate secure and non-secure
communications in your network. For help, see “Configuring VLANs”
on page 189.
Use an 802.1x security
solution X X X
Use Wi-Fi Protected
Access (WPA) X X X
Table 1 AT-WA7500 and AT-WA7501 Security Solutions (Continued)
Security Type Secure
Backbone Data
Privacy Client
Authentication