MRV Communications MRW55, User Manual

Page: 120 / 244

System Configuration
6-62
6
The configuration settings for WPA are summarized below:
CLI Commands for WPA Pre-shared Key Security – From the 802.11a or 802.11g
interface configuration mode, use the
authentication command to set the access
point to “Open System.” Use the WEP encryption command to enable all types of
encryption. To enable WPA to be required for all clients, use the wpa-clients
command. Use the wpa-mode command to enable the Pre-shared Key mode. To
enter a key value, use the wpa-psk-type command to specify a hexadecimal or
alphanumeric key, and then use the wpa-preshared-key command to define the
key. Then disable 802.1X and MAC authentication. To view the current 802.11g
security settings, use the
show interface wireless a or show interface wireless g
command (not shown in example).
CLI Commands for WPA over 802.1X Security – From the 802.11a or 802.11g
interface configuration mode, use the
authentication command to set the access
point to “Open System.” Use the WEP encryption command to enable all types of
encryption. Use the wpa-clients command to set WPA to be required or supported
for clients. Use the wpa-mode command to enable WPA dynamic keys over 802.1X.
Set the broadcast and multicast key encryption using the multicast-cipher
command. Then set 802.1X to required, and disable MAC authentication. To view
WPA pre-shared key only WPA over 802.1X
Authentication Type: Open System
WEP (encryption): Enable
1
WPA clients only: Enable
WPA Mode: Pre-shared-key
Multicast Cipher: WEP/TKIP/AES
2
WPA PSK Type -
Hex: 64 characters
ASCII: 8-63 characters
Shared Key: 64/128/152
802.1X = Disabled
3
MAC Authentication: Disabled/Local
4
Authentication Type: Open System
WEP (encryption): Enable
1
WPA clients only: Enable
WPA Mode: WPA over 802.1X
Multicast Cipher: WEP/TKIP/AES
2
Shared Key: 64/128/152
802.1X = Required
3
MAC Authentication: Disabled/Local
4
1: Although WEP keys are not needed for WPA, you must enable WEP encryption
through the web or CLI in order to enable all types of encryption in the access point.
For example, use the CLI
encryption command to set Encryption = 64, 128 or 152,
thus enabling encryption (i.e., all types of encryption) in the access point.
2: Do not use WEP unless the access point must support both WPA and WEP clients.
3: See Authentication (page 6-11)
4: See Radius (page 6-7)
AP(config)#interface wireless g 7-69
Enter Wireless configuration commands, one per line.
AP(if-wireless g)#authentication open
7-76
AP(if-wireless g)#encryption 128 7-77
AP(if-wireless g)#wpa-clients required 7-81
AP(if-wireless g)#wpa-mode pre-shared-key 7-82
AP(if-wireless g)#wpa-psk-type alphanumeric 7-83
AP(if-wireless g)#wpa-preshared-key ASCII asecret 7-82
AP(if-wireless g)#end
AP(config)#no 802.1X
7-35
AP(config)#no mac-authentication 7-41