34
To do…
Use the command…
Remarks
3.
Enable the RSN IE in the
beacon and probe
responses.
security-ie
rsn
Required.
By default, RSN IE is disabled.
Configuring cipher suite
A cipher suite is used for data encapsulation and de-encapsulation. It uses the following encryption methods:
WEP40/WEP104/WEP128
TKIP
CCMP
Configuring WEP cipher suite
The WEP encryption mechanism requires that the authenticator and clients on a WLAN have the same key
configured. WEP adopts the RC4 algorithm (a stream encryption algorithm), supporting WEP40, WEP104
and WEP128 keys.
You can use WEP with either open system authentication mode or share the key authentication mode:
In open system authentication mode, a WEP key is used for encryption only. A client can go online
without having the same key as the authenticator. But, if the receiver has a different key from the sender,
it discards the packets received from the sender.
In shared key authentication mode, the WEP key is used for both encryption and authentication. If the
key of a client is different from that of the authenticator, the client cannot go online.
To configure WEP encryption:
To do…
Use the command…
Remarks
1.
Enter system view.
system-view
—
2.
Enter WLAN service
template view.
wlan service-template
service-template-number
crypto
—
3.
Enable the WEP cipher suite.
cipher-suite
{
wep40
|
wep104
|
wep128
}
Required.
4.
Configure the WEP default
key.
wep default-key
{
1
|
2
|
3
|
4
}
{
wep40
|
wep104
|
wep128
}
{
pass-phrase
|
raw-key
} [
cipher
|
simple
]
key
Required.
By default, the WEP default key
index number is 1.
5.
Specify a key index number.
wep key-id
{
1
|
2
|
3
|
4
}
Optional.
By default, the key index number
is 1.
Configuring TKIP cipher suite
To configure the TKIP cipher suite:
To do…
Use the command…
Remarks
1.
Enter system view.
system-view
—
2.
Enter WLAN service
template view.
wlan service-template
service-template-number
crypto
—
