SMC Networks E21011, User Manual

Page: 215 / 264

C
HAPTER
27
| Wireless Security Commands
– 215 –
wpa-wpa2-mixed - Clients using WPA or WPA2 are accepted for
authentication.
wpa-wpa2-psk-mixed - Clients using WPA or WPA2 with a Pre-
shared Key are accepted for authentication
D
EFAULT
S
ETTING
open-system
C
OMMAND
M
ODE
Interface Configuration (Wireless-VAP)
C
OMMAND
U
SAGE
◆
The auth command automatically configures settings for each
authentication type, including encryption, 802.1X, and cipher suite. The
command auth open-system disables encryption and 802.1X.
◆
To use WEP shared-key authentication, set the authentication type to
“shared-key” and define at least one static WEP key with the key
command. Encryption is automatically enabled by the command.
◆
To use WEP encryption only (no authentication), set the authentication
type to “open-system.” Then enable WEP with the encryption
command, and define at least one static WEP key with the key
command.
◆
When any WPA or WPA2 option is selected, clients are authenticated
using 802.1X via a RADIUS server. Each client must be WPA-enabled or
support 802.1X client software. The 802.1X settings (see “802.1X
Authentication Commands” on page 171 ) and RADIUS server details
(see “RADIUS Client Commands” on page 165 ) must be configured on
the access point. A RADIUS server must also be configured and be
available in the wired network.
◆
If a WPA/WPA2 mode that operates over 802.1X is selected (WPA,
WPA2, WPA-WPA2-mixed, or WPA-WPA2-PSK-mixed), the 802.1X
settings (see “802.1X Authentication Commands” on page 171 ) and
RADIUS server details (see “RADIUS Client Commands” on page 165 )
must be configured. Be sure you have also configured a RADIUS server
on the network before enabling authentication. Also, note that each
client has to be WPA-enabled or support 802.1X client software. A
RADIUS server must also be configured and be available in the wired
network.
◆
If a WPA/WPA2 Pre-shared Key mode is selected (WPA-PSK, WPA2-PSK
or WPA-WPA2-PSK-mixed), the key must first be generated and
distributed to all wireless clients before they can successfully associate
with the access point. Use the wpa-preshared-key command to
configure the key (see “key” on page 217 and “transmit-key” on
page 218 ).
◆
WPA2 defines a transitional mode of operation for networks moving
from WPA security to WPA2. WPA2 Mixed Mode allows both WPA and
WPA2 clients to associate to a common VAP interface. When the