Configuring Firewall Settings - Motorola AP-7131 Product Reference Manual

Allow
WPA/WPA2-TKIP
clients
8. Configure the
point roaming and key caching options. This feature is applicable only when using 802.1x
EAP authentication with WPA2/CCMP.
Pre-Authentication
NOTE PMK key caching is enabled internally by default when 802.1x EAP
9. Click the Apply
10. Click the Cancel
and return to the

6.10 Configuring Firewall Settings

The access point's firewall is a set of related programs located in the gateway on the WAN side of
the access point. The firewall uses a collection of filters to screen information packets for known
types of system attacks. Some of the access point's filters are continuously enabled, others are
configurable.
Use the access point's
each filter for maximum security. Disable a filter if the corresponding attack does not seem a threat
WPA2-CCMP Mixed Mode enables WPA2-CCMP, WPA-TKIP and
WPA2-TKIP clients to operate together on the network. Enabling
this option allows backwards compatibility for clients that support
WPA-TKIP and WPA2-TKIP but do not support WPA2-CCMP.
Motorola recommends enabling this feature if WPA-TKIP or
WPA2-TKIP supported MUs operate within a WLAN populated by
WPA2-CCMP enabled clients.
Fast Roaming (802.1x only)
Selecting this option enables an associated MU to carry out an
802.1x authentication with another access point before it roams to
it. The access point caches the keying information of the client until
it roams to the other access point. This enables the roaming client
to start sending and receiving data sooner by not having to do
802.1x authentication after it roams. This feature is only supported
when 802.1x EAP authentication is enabled.
authentication is enabled.
button to save any changes made within this New Security Policy screen.
button to undo any changes made within the WPA2/CCMP Settings field
WLAN screen. This reverts all settings to the last saved configuration.
Firewall screen to enable or disable the configurable firewall filters. Enable
Configuring Access Point Security
field as required to enable additional access
6-25