Extreme Networks Altitude 4700 Series, Руководство по продукции

Страница: 216 / 648

Configuring Access Point Security
Altitude 4700 Series Access Point Product Reference Guide
216
NOTE
PMK key caching is enabled internally by default when 802.1x EAP authentication is enabled.
9 Click the Apply button to save any changes made within this New Security Policy screen.
10 Click the Cancel button to undo any changes made within the WPA2/CCMP Settings field and return
to the WLAN screen. This reverts all settings to the last saved configuration.
Configuring Multi Cipher Support
The Access Point’s Multi Cipher allows legacy and new MUs (Wi-Fi handheld devices) within the same
WLAN. Multi cipher extends the Access Point’s existing WLAN security options by allowing dynamic
WEP and 802.11i configurations to co-exist, and allowing multiple security policies to be associated with
the same ESSID on different WLANs. Within such an environment, legacy MUs are capable of WEP,
while new MUs are capable of WPA/2-TKIP and WPA2-CCMP encryption. This particular form of
multi cipher (security) support helps maintain the co-existence of Dynamic WEP and 802.11i based
environments.
To support this feature, certain security policy combinations need to be available on a per-WLAN basis.
The following combinations are supported:
●
WEP 64 and WPA/WPA2-TKIP
●
WEP 64 and WPA2-CCMP
●
WEP 128 and WPA/WPA2-TKIP
●
WEP 128 and WPA2-CCMP
●
WPA2-CCMP and WPA/WPA2-TKIP
To configure multi cipher support, WLANs should be created with the same ESSID, but different
BSSIDs and security schemes. This results in the AP announcing different beacons for the same ESSID.
MUs can then select a corresponding BSSID to associate, depending on their individual configurations.
From the MU’s point of view, the scenario is as if there are two APs available with same ESSID, but
different security policies. The MU can choose an appropriate AP based on its configuration.
NOTE
Multi Cipher is supported in adaptive mode (AAP), provided the required configuration is allowed on the
controller.
Configuring multi cipher support requires:
●
Creating WLANs with the same ESSID, but different BSSIDs and security schemes. This results in
the AP beaconing the same ESSID, but a different BSSID.
Opportunistic PMK
Caching Select the Opportunistic Pairwise Master Key (PMK)
Caching option to reduce handoff latency by pre-
establishing security associations between an MU and the
AP4700 Access Points in the wireless network.