Aerohive access point, Руководство по развертыванию

Страница: 125 / 221

Chapter 11 Basic Configuration Examples
124 Aerohive
E
XAMPLE
1: D
EFINING AN
SSID
An SSID (service set identifier) is an alphanumeric string that identifies a group of security and network settings that
wireless clients and access points use when establishing wireless communications with each other. In this example,
you define the following SSID, which uses a PSK (preshared key) for client authentication and data encryption:
SSID name: test1-psk
SSID access security: WPA/WPA2 PSK (Personal)
Preshared key: CmFwbo1121
A PSK is the simplest way to provide client authentication and data encryption: simply configure an SSID with the
same PSK on the HiveAP and its clients. A PSK authenticates clients by the simple fact that the clients and HiveAP
have the same key. For data encryption, both the HiveAP and clients use the PSK as a PMK (pairwise master key)
from which they generate a PTK (pairwise transient key), which they use to encrypt unicast traffic. Although the
PSK/PMK is the same on all clients, the generated PTKs are different not only for each client but for each session.
Because of its simplicity, a PSK is suitable for testing and small deployments; however, there is a drawback with
using PSKs on a larger scale. All clients connecting through the same SSID use the same PSK, so if the key is
compromised or a user leaves the company, you must change the PSK on the HiveAP and all its clients. With a large
number of clients, this can be very time-consuming. For examples of key management solutions that are more
suitable for large-scale deployments, see the 802.1X and private PSK examples in
"Common Configuration Examples"
on page 139 . For the present goal of showing how to use HiveManager to configure an SSID, the PSK method works
well.
To configure the SSID, log in to the HiveManager GUI (see "Installing and Connecting to the HiveManager GUI" on
page 109 ), click Configuration > SSIDs > New, enter the following, and then click Save:
Profile Name: test1-psk (A profile name does not support spaces, although an SSID name does.)
The profile name is the name for the entire group of settings for an SSID. It can reference a captive
web portal; include default or modified data rate settings; apply DoS (denial of service) policies,
MAC filters, and schedules; and specify the SSID name that the HiveAP advertises in beacons and
probe responses. The profile name—not the SSID name (although they can both be the same)—is the
one that appears in the Available SSIDs list in the WLAN Policy dialog box. You will later choose this
SSID when defining a WLAN policy in
"Example 3: Creating a WLAN Policy" on page 128 .
When you type in a profile name, HiveManager automatically fills in the SSID field with the same
text string. By default, the profile and SSID names are the same, yet they can also be different. You
can create many different SSID profiles, each with a different group of settings, but each with the
same SSID name. For users, their clients connect to the same SSID at different locations. From the
HiveAP perspective, each SSID profile applies a different group of settings.
SSID: test1-psk
This is the SSID name that clients discover from beacons and probe responses.
Description: Test SSID for learning how to use the GUI; remove later
This note and the very name "test1-psk" are deliberately being used as reminders to replace this
configuration later with an SSID profile and SSID name that you really intend to use in your WLAN.
SSID Access Security: WPA/WPA2 PSK (Personal)