Enabling Wpa With Tkip - Nortel 2300 Series Configuration Manual

Enabling WPA with TKIP

The following example shows how to configure WSS Software to provide authentication and TKIP encryption for 801.X
WPA clients. This example assumes that pass-through authentication is used for all users. A RADIUS server group
performs all authentication and authorization for the users.
1
Create an authentication rule that sends all 802.1X users of SSID mycorp in the EXAMPLE domain to the
server group shorebirds for authentication. Type the following command:
23x0# set authentication dot1x ssid mycorp EXAMPLE\* pass-through shorebirds
2
Create a service profile named wpa for the SSID. Type the following command:
23x0# set service-profile wpa
success: change accepted.
3
Set the SSID in the service profile to mycorp. Type the following command:
23x0# set service-profile wpa ssid-name wpa
success: change accepted.
4
Enable WPA in service profile wpa. Type the following command:
23x0# set service-profile wpa wpa-ie enable
success: change accepted.
TKIP is already enabled by default when WPA is enabled.
5
Display the service profile wpa to verify the changes. Type the following command:
23x0# show service-profile wpa
ssid-name:
beacon:
WEP Key 1 value:
WEP Key 3 value:
WEP Unicast Index:
Shared Key Auth:
WPA enabled:
ciphers: cipher-tkip
authentication: 802.1X
TKIP countermeasures time: 60000ms
6
Map service profile wpa to radio profile rp1. Type the following commands:
23x0# set radio-profile rp1 service-profile wpa
success: change accepted.
7
Apply radio profile rp1 to radio 1 on port 5 and to radios 1 and 2 on port 11, enable the radios, and verify
the configuration changes. Type the following commands:
23x0# set ap 5,11 radio 1 radio-profile rp1 mode enable
success: change accepted.
23x0# set ap 11 radio 2 radio-profile rp1 mode enable
success: change accepted.
mycorp ssid-type:
yes auth-fallthru: last-resort
<none> WEP Key 2 value:
<none> WEP Key 4 value:
1 WEP Multicast Index:
NO
Nortel WLAN Security Switch 2300 Series Configuration Guide
Configuring User Encryption 213
crypto
<none>
<none>
1