D-Link DWL-3500AP, Руководство администратора

Страница: 143 / 166

Access Point CLI Commands 143
B CLI for AP Configuration
Set Security to WPA/WPA2 Personal (PSK)
To configure WPA/WPA2 Personal as the security mode, you need to issue multiple
commands. This section describes the commands and procedures to configure WPA/WPA2
Personal.
NOTE: This example shows how to configure WPA/WPA2 Personal on VAP 0 on
radio 1 (
wlan0
). For VAPs 1-7, use
wlan
x
vap
y
, where
x
is the radio, and
y
is
the VAP ID. For example, to configure security on VAP 3 on radio 2, use
wlan1vap3
instead of
wlan0
in all of the following commands.
1. Set the Security Mode
DLINK-AP#
set interface wlan0 security wpa-personal
2. Set the WPA versions based on what types of client stations you want to support.
- WPA—If all client stations on the network support the original WPA but none support
the newer WPA2, then use WPA.
set bss wlan0bssvap0 wpa-allowed on
set bss wlan0bssvap0 wpa2-allowed off
- WPA2—If all client stations on the network support WPA2, we suggest using WPA2
which provides the best security per the IEEE 802.11i standard.
set bss wlan0bssvap0 wpa-allowed off
set bss wlan0bssvap0 wpa2-allowed on
- WPA and WPA2—If you have a mix of clients, some of which support WPA2 and
others which support only the original WPA, select both. This lets both WPA and
WPA2 client stations associate and authenticate, but uses the more robust WPA2 for
clients who support it. This WPA configuration allows more interoperability, at the
expense of some security.
set bss wlan0bssvap0 wpa-allowed on
set bss wlan0bssvap0 wpa2-allowed on
3. Set the Cipher Suite you want to use.
- TKIP Only: Temporal Key Integrity Protocol (TKIP).
set bss wlan0bssvap0 wpa-cipher-tkip on
set bss wlan0bssvap0 wpa-cipher-ccmp off
- CCMP (AES) Only—Counter mode/CBC-MAC Protocol (CCMP) is an encryption
method for IEEE 802.11i that uses the Advanced Encryption Algorithm (AES).
set bss wlan0bssvap0 wpa-cipher-tkip off
set bss wlan0bssvap0 wpa-cipher-ccmp on
- TKIP and CCMP (AES)—When you enable both authentication algorithms, both
TKIP and AES clients can associate with the access point. WPA clients must have
either a valid TKIP key or a valid CCMP (AES) key to be able to associate with the
AP.
set bss wlan0bssvap0 wpa-cipher-tkip on
set bss wlan0bssvap0 wpa-cipher-ccmp on
4. Set the Pre-shared key.
The Pre-shared Key is the shared secret key for WPA-PSK. Enter a string of at least 8