MRV Communications MRW55, User Manual

Page: 163 / 244

Authentication
7-37
7
Command Usage
• The access point uses EAPOL (Extensible Authentication Protocol Over
LANs) packets to pass dynamic unicast session and broadcast keys to
wireless clients. The 802.1x
broadcast-key-refresh-rate command
specifies the interval after which the broadcast keys are changed. The
802.1x session-key-refresh-rate command specifies the interval after
which unicast session keys are changed.
• Dynamic broadcast key rotation allows the access point to generate a
random group key and periodically update all key-management capable
wireless clients.
Example
802.1x session-key-refresh-rate
This command sets the interval at which unicast session keys are refreshed for
associated stations using dynamic keying.
Syntax
802.1x session-key-refresh-rate < rate>
rate - The interval at which the access point refreshes a session key.
(Range: 0 - 1440 minutes)
Default Setting
0 (Disabled)
Command Mode
Global Configuration
Command Usage
Session keys are unique to each client, and are used to authenticate a client
connection, and correlate traffic passing between a specific client and the
access point.
Example
MRW55#(config)#802.1x broadcast-key-refresh-rate 5
MRW55#(config)#
MRW55#(config)#802.1x session-key-refresh-rate 5
MRW55#(config)#