Deploying Secure 802.11 Wireless Networks with Microsoft Windows

Wireless APs

When choosing and deploying wireless APs, use the following best practices:

• Use wireless APs that support 802.1X, 128-bit WEP, and the use of both multicast/global and unicast session encryption keys. Optionally, choose wireless APs that support WPA.

• Change the administration configuration of the wireless AP, such as administrator-level usernames and passwords, from its default configuration.

• If you are installing wireless APs in the plenum area (the space between the ceiling tiles and the ceiling), you must obtain plenum-rated wireless APs to comply with fire safety codes.

• To minimize interference on the 802.11b wireless frequencies in the S-Band Industrial, Scientific, and Medical (ISM) frequency band, overlapping coverage areas should have a five-channel separation. For example, to get the most channels in the United States, use channels numbers 1, 6, and 11.

• If you are using Simple Network Management Protocol (SNMP) to manage or configure wireless APs, change the default SNMP community name. If possible, use wireless APs that support SNMPv2.