Extreme Networks Summit WM3000 Series, Reference Manual

Page: 140 / 513

Network Setup
Summit WM3000 Series Controller System Reference Guide
140
7 Refer to the Server field and define the following credentials for a primary and secondary NAC
server.
CAUTION
The server’s Timeout and Retries should be less than what is defined for an MU’s timeout and retries. If the
MU’s time is less than the server’s, a fall back to the secondary server will not work.
8 Refer to the Status field for the current state of the requests made from applet. This field displays
error messages if something goes wrong in the transaction between the applet and the controller.
9 Click OK to use the changes to the running configuration and close the dialog.
10 Click Cancel to close the dialog without committing updates to the running configuration.
Configuring Different Encryption Types
To configure the WLAN data encryption options available on the controller, refer to the following:
●
Configuring WEP 64
●
Configuring WEP 128
●
Configuring WPA/WPA2 using TKIP and CCMP
Configuring WEP 64.
Wired Equivalent Privacy (WEP) is a security protocol specified in the IEEE Wireless
Fidelity (Wi-Fi) standard. WEP is designed to provide a WLAN with a level of security and privacy
comparable to that of a wired LAN.
WEP 64 is a less robust encryption scheme than WEP 128 (shorter WEP algorithm for a hacker to
duplicate), but WEP 64 may be all that a small-business user needs for the simple encryption of wireless
data. However, networks that require more security are at risk from a WEP flaw. The existing 802.11
standard alone offers administrators no effective method to update keys.
To configure WEP 64:
1 Select Network > Wireless LANs from the main menu tree.
2 Select an existing WLAN from those displayed within the Configuration tab and click the Edit button.
A WLAN screen displays with the WLAN’s existing configuration. Refer to the Authentication and
Encryption columns to assess the WLAN’s existing security configuration.
3 Select the WEP 64 button from within the Encryption field.
4 Click the Config button to the right of the WEP 64 checkbox.
The WEP 64 screen displays.
NAC Server Address
Enter the IP address of the primary and secondary NAC server.
NAC Server Port
Enter the TCP/IP port number for the primary and secondary server. The
default port is 1812.
NAC Shared Secret
Provide a shared secret (password) for user credential authentication with
the primary or secondary NAC server.
Server Timeout
Enter a value (between 1 and 300 seconds) to indicate the number of
elapsed seconds causing the controller to time out on a request to the
primary or secondary NAC server.
Server Retries
Enter a value between 1 and 100 to indicate the number of times the
controller attempts to reach the primary or secondary server before giving
up.