D-Link DWS-1008 User Manual page 335

DWS-1008 User's Manual
Configuring 802.1X Key Transmission Time Intervals
The following command sets the number of seconds the switch waits before retransmitting an
EAPoL packet of key information:
set dot1x tx-period seconds
The default is 5 seconds. The range for the retransmission interval is from 1 to 65,535 seconds.
For example, type the following command to set the retransmission interval to 300 seconds:
DWS-1008# set dot1x tx-period 300
success: dot1x tx-period set to 300.
Type the following command to reset the retransmission interval to the 5-second default:
DWS-1008# clear dot1x tx-period
success: change accepted.
Managing WEP Keys
Wired-Equivalent Privacy (WEP) is part of the system security of 802.1X. MSS uses WEP
to provide confidentiality to packets as they are sent over the air. WEP operates on the
DWL-8220AP access point.
WEP uses a secret key shared between the communicators. WEP rekeying increases the
security of the network. New unicast keys are generated every time a client performs 802.1X
authentication.
The rekeying process can be performed automatically on a periodic basis. By setting the
Session-Timeout RADIUS attribute, you make the reauthentication transparent to the client,
who is unaware that reauthentication is occurring. A good value for Session-Timeout is
30 minutes.
WEP broadcast rekeying causes the broadcast and multicast keys for WEP to be rotated
every WEP rekey period for each radio to each connected VLAN. The switch generates
the new broadcast and multicast keys and pushes the keys to the clients via EAPoL key
messages. WEP keys are case-insensitive.
Use the set dot1x wep-rekey and the set dot1x wep-rekey-period commands to enable
WEP key rotation and configure the time interval for WEP key rotation.
Configuring 802.1X WEP Rekeying
WEP rekeying is enabled by default on the switch. Disable WEP rekeying only if you need to
debug your 802.1X network.
D-Link Systems, Inc.
Managing 802.1X
330