Wi-Fi
Configure a Wi-Fi access point with enterprise security
IX20 User Guide
182
8. Set the password that clients will use when connecting to the access point:
(config)> network wifi ap digi_ap encryption key_psk2
password
(config)>
9. (Optional) Set the amount of time to wait before changing the group key.
The group key is shared by all in clients of the access point, and after a client has disconnected,
it will be able to use the group key to decrypt broadcast packets until the key is changed.
(config)> network wifi ap digi_ap encryption group_rekey
value
(config)>
where
value
is any number of days, hours, minutes, or seconds, and takes the format
number
{
d|h|m|s
}.
For example, to set
group rekey interval
to ten minutes, enter either
10m
or
600s
:
(config)> network wireless ap digi_ap encryption group_rekey 600s
(config)>
Increasing the time between rekeys can improve connectivity issues in noisy environments. To
disable group rekeys, set to
0
. This will allow any client that has previously connected see all
broadcast traffic on the wireless network until the Wi-Fi radio is restarted. The default is 10
minutes.
5. Assign the Wi-Fi access point to a LAN interface or to a bridge. See
and
for more information.
The access point must be assigned to an active LAN, or a bridge that is assigned to an active
LAN.
6. Save the configuration and apply the change:
(config)> save
Configuration saved.
>
7. Type
exit
to exit the Admin CLI.
Depending on your device configuration, you may be presented with an
Access selection
menu
. Type
quit
to disconnect from the device.
Configure a Wi-Fi access point with enterprise security
The WPA2 enterprise security mode allows a Wi-Fi access point to authenticate clients by using one or
more RADIUS servers. When the Wi-Fi access point receives a connection request from a client, it
authenticates the client with the RADIUS server before allowing the client to connect.
Using enterprise security modes allows each client to have different usernames and passwords
configured in the RADIUS server, rather than using preshared key on the IX20 device.
By default, the IX20 device comes with one preconfigured access point,
Digi AP
. You cannot delete
default access points, but you can modify them or you can create your own access points.
