Netgear WGT624v3- 108 Mbps Wireless Firewall Router 참조 매뉴얼

다운로드
페이지 148
Reference Manual for the 108 Mbps Wireless Firewall Router WGT624 v3
Wireless Networking Basics
D-9
202-10090-01, April 2005
WPA and WPA2 offer the following benefits: 
Enhanced data privacy
Robust key management
Data origin authentication
Data integrity protection 
The Wi-Fi Alliance is now performing interoperability certification testing on Wi-Fi Protected 
Access products. Starting August of 2003, all new Wi-Fi certified products have to support WPA. 
NETGEAR is implementing WPA and WPA2 on client and access point products. The 802.11i 
standard was ratified in 2004. 
How Does WPA Compare to WEP?
WEP is a data encryption method and is not intended as a user authentication mechanism. WPA 
user authentication is implemented using 802.1x and the Extensible Authentication Protocol 
(EAP). Support for 802.1x authentication is required in WPA. In the 802.11 standard, 802.1x 
authentication was optional. For details on EAP specifically, refer to IETF's RFC 2284. 
With 802.11 WEP, all access points and client wireless adapters on a particular wireless LAN must 
use the same encryption key. A major problem with the 802.11 standard is that the keys are 
cumbersome to change. If you do not update the WEP keys often, an unauthorized person with a 
sniffing tool can monitor your network for less than a day and decode the encrypted messages. 
Products based on the 802.11 standard alone offer system administrators no effective method to 
update the keys.
For 802.11, WEP encryption is optional. For WPA, encryption using Temporal Key Integrity 
Protocol (TKIP) is required. TKIP replaces WEP with a new encryption algorithm that is stronger 
than the WEP algorithm, but that uses the calculation facilities present on existing wireless devices 
to perform encryption operations. TKIP provides important data encryption enhancements 
including a per-packet key mixing function, a message integrity check (MIC) named Michael, an 
extended initialization vector (IV) with sequencing rules, and a re-keying mechanism. Through 
these enhancements, TKIP addresses all of known WEP vulnerabilities.