On 28 Aug 2005 06:48:37 -0700, "heldmar" <heldmar@gmail.com> wrote:
>What I meant is I tried to filter WEP for some clients....and it was
>impossible, LinkSys comes with an standar of all or nothing, WEP keys
>for all or WEP keys for no one. That's it.
Oh. You'll find that only a few access points support per-client
encryption settings. Some access points (i.e. 3com) do this through
"client groups" where the access point is virtualized and can have
multiple SSID's and configurations. For commodity hardware, it's one
setting for everyone. I have one customer that has a public WLAN and
a private WLAN. It was easy enough to setup using one wireless access
point, but the level of control (i.e. turn it on/off) that the
customer wanted was too much for a simple solution. So, I installed a
2nd access point at each location and that worked just fine. One was
encrypted and secured, while the other was publicly accessible without
encryption.
Incidentally, 802.1x is capable of delivering unique WEP keys for each
session, but the access point has to support the feature and it
requires that everyone use WEP or WPA. If you look at the Windoze XP
SP2 Wireless Zero Config setup, there's a choice to have the access
point deliver the WEP/WPA key using 802.1x. However, I don't think
that "authentication with no encryption" is a useable option.
--
Jeff Liebermann
jeffl@comix.santa-cruz.ca.us
150 Felker St #D
http://www.LearnByDestroying.com
Santa Cruz CA 95060
http://802.11junk.com
AE6KS 831-336-2558