BelAir100SN User Guide
Wi-Fi AP Security
May 31, 2010
Confidential
Document Number BDTM11001-A01 Released
The
nas-id <name>
parameters specify the RADIUS Network Access Server
(NAS) identifier. The default value for
<name>
is the switch name as set with
the
/system/set system-id switch <name>
command.
The
station-id-unformatting
parameter specifies RADIUS station ID formatting.
By default the
called-station-ID
and the
calling-station-ID
fields are formatted to
include SSID information to the provided MAC address.
Client
Authentication
and
De-authentication
Trap
/interface/wifi-<n>-<m>/set client-trap {enabled|disabled}
[trap-delay {enabled|disabled}]
This command controls whether a trap is sent for this particular radio
whenever a wireless client authenticates or de-authenticates; that is,
disconnects from the radio. The trap can be used by any Network Management
System to monitor client activities.
When the client trap is enabled and the trap delay is enabled, the trap is not
sent out until 10 seconds after either of the following events:
• the client connects and stays connected
• the client is disconnected and stays disconnected
If the trap delay is disabled, then the trap is sent out immediately after either of
the previous events.
When the client trap is disabled, the trap is not sent out.
The default is to have both the client trap and trap delay enabled.
AP Privacy
/interface/wifi-<n>-<m>/set ssid <ssid_index> privacy
{none|wep40|wep104|
{wpa {tkip|aes}}|wpa2 {tkip|aes}|wpa2mixed}
[{psk <key-str>}|dot1x]
[rekey {no|kpackets <count>|seconds <seconds>}]
[strict {yes|no}]
This command configures wireless privacy for a particular SSID. Use the
show
ssid table
command to determine
<ssid_index>
. Use the
show ssid
<ssid_index> config
command to show the current privacy settings.
WPA2 privacy uses AES encryption only.
The
psk
parameter specifies using a pre-shared key for authentication. When
specifying the pre-shared key, note the following:
• For
wep40
, the pre-shared key must be exactly 5 bytes.
