![background image](http://html1.mh-extra.com/html/smc-networks/2555w-ag2/2555w-ag2_user-manual_1301117138.webp)
System Configuration
6-84
6
CLI Commands for
WPA Over 802.1X Security
– From the VAP interface
configuration mode, use the
auth wpa required
command to select WPA over
802.1X security. Then set the 802.1X key refresh rates. To view the current security
settings, use the
show interface wireless a 0
or
show interface wireless g 0
command (not shown in example).
Configuring 802.1X
IEEE 802.1X is a standard framework for network access control that uses a central
RADIUS server for user authentication. This control feature prevents unauthorized
access to the network by requiring an 802.1X client application to submit user
credentials for authentication. The 802.1X standard uses the Extensible
Authentication Protocol (EAP) to pass user credentials (either digital certificates,
user names and passwords, or other) from the client to the RADIUS server. Client
authentication is then verified on the RADIUS server before the access point grants
client access to the network.
The 802.1X EAP packets are also used to pass dynamic unicast session keys and
static broadcast keys to wireless clients. Session keys are unique to each client and
are used to encrypt and correlate traffic passing between a specific client and the
access point. You can also enable broadcast key rotation, so the access point
provides a dynamic broadcast key and changes it at a specified interval.
Enterprise AP(config)#interface wireless g
7-87
Enter Wireless configuration commands, one per line.
Enterprise AP(if-wireless g)#vap 0
Enterprise AP(if-wireless g: VAP[0])#auth wpa required
Data Encryption is set to Enabled.
WPA2 Clients mode is set to Disabled.
WPA Clients Mode is set to Required.
WPA Multicast Cipher is set to TKIP.
WPA Unicast Cipher can accept TKIP only.
WPA Authentication is set to 802.1X Required.
Enterprise AP(if-wireless g: VAP[0])#802.1X broadcast-key-refresh-rate 5
Enterprise AP(if-wireless g: VAP[0])#802.1X
session-key-refresh-rate 5
7-65
Enterprise AP(if-wireless g: VAP[0])#802.1X session-timeout 300
7-66
Enterprise AP(if-wireless g: VAP[0])#
Summary of Contents for 2555W-AG2
Page 1: ...USER GUIDE EliteConnectTM Universal 802 11a g 2 4GHz 5GHz Wireless Access Point SMC2555W AG2...
Page 6: ...vi...
Page 18: ...COMPLIANCES xii...
Page 26: ...xx Contents...
Page 38: ...Introduction 1 12 1...
Page 54: ...Initial Configuration 5 4 5 The home page displays the Main Menu...
Page 62: ...System Configuration 6 8 6...
Page 302: ...Glossary 6 Glossary...
Page 307: ......