188
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuring User Encryption
188
D-Link Systems, Inc.
Configuring WEP
Wired-Equivalent Privacy (WEP) is a security protocol defined in the 802.11 standard. WEP
uses the RC4 encryption algorithm to encrypt data.
To provide integrity checking, WEP access points and clients check the integrity of a frame’s
cyclic redundancy check (CRC), generate an integrity check value (ICV), and append the
value to the frame before sending it. The radio or client that receives the frame recalculates
the ICV and compares the result to the ICV in the frame. If the values match, the frame is
processed. If the values do not match, the frame is discarded.
WEP is either dynamic or static depending on how the encryption keys are generated.
DWL-8200AP access points support dynamic WEP and static WEP.
• For dynamic WEP, MSS dynamically generates keys for broadcast, multicast, and
unicast traffic. MSS generates unique unicast keys for each client session and
periodically regenerates (rotates) the broadcast and multicast keys for all clients. You
can change or disable the broadcast or multicast rekeying interval.
• For static WEP, MSS uses statically configured keys typed in the switch’s configuration
and on the wireless client and does not rotate the keys.
Dynamic WEP encryption is enabled by default. You can disable dynamic WEP support by
enabling WPA and leaving the WEP-40 or WEP-104 cipher suites disabled. If you use dynamic
WEP, 802.1X must also be configured on the client in addition to WEP.
Static WEP encryption is disabled by default. To enable static WEP encryption, configure the
static WEP keys and assign them to unicast and multicast traffic. Make sure you configure
the same static keys on the clients.
Setting Static WEP Key Values
MSS supports dynamic WEP automatically. To enable static WEP, configure WEP keys and
assign them to unicast and multicast traffic. You can set the values of the four static WEP keys,
then specify which of the keys to use for encrypting multicast frames and unicast frames. If
you do this, MSS continues to support dynamic WEP in addition to static WEP.
To set the value of a WEP key, use the following command:
set service-profile
name
wep key-index
num
key
value
The
key-index
num
parameter specifies the index you are configuring. You can specify a
value from 1 through 4.
Summary of Contents for DWS-1008
Page 1: ......
