Enabling Dynamic Wep In A Wpa Network - Nortel 2360 Configuration Manual

Enabling dynamic WEP in a WPA network

The following example shows how to configure WSS Software to provide authentication and encryption for
801.X dynamic WEP clients, and for 801.X WPA clients using TKIP. This example assumes that pass-through
authentication is used for all users. The commands are the same as those in
(page 313), with the addition of a command to enable a WEP cipher suite. The WEP cipher suite allows
authentication and encryption for both WPA and non-WPA clients that want to authenticate using dynamic
WEP.
1
Create an authentication rule that sends all 802.1X users of SSID mycorp in the EXAMPLE
domain to the server group shorebirds for authentication. Type the following command:
WSS# set authentication dot1x ssid thiscorp EXAMPLE\* pass-through
shorebirds
2
Create a service profile named wpa-wep for the SSID. Type the following command:
WSS# set service-profile wpa-wep
success: change accepted.
3
Set the SSID in the service profile to thiscorp. Type the following command:
WSS# set service-profile wpa-wep ssid-name thiscorp
success: change accepted.
4
Enable WPA in service profile wpa-wep. Type the following command:
WSS# set service-profile wpa-wep wpa-ie enable
success: change accepted.
5
Enable the WEP40 cipher suite in service profile wpa-wep. Type the following command:
WSS# set service-profile wpa-wep cipher-wep40 enable
success: change accepted.
TKIP is already enabled by default when WPA is enabled.
6
Display the service profile wpa-wep to verify the changes. Type the following command:
WSS# show service-profile sp1
ssid-name: mycorp ssid-type:
Beacon:
DHCP restrict:
Short retry limit:
Auth fallthru:
Enforce SODA checks:
Custom success web-page:
Custom logout web-page:
Static COS:
CAC mode:
User idle timeout:
Keep initial vlan:
Web Portal ACL:
WEP Key 1 value:
WEP Key 3 value:
WEP Unicast Index:
Shared Key Auth:
yes Proxy ARP:
no No broadcast:
5 Long retry limit:
none Sygate On-Demand (SODA):
yes SODA remediation ACL:
Custom failure web-page:
Custom agent-directory:
no COS:
none CAC sessions:
180 Idle client probing:
no Web Portal Session Timeout:
<none> WEP Key 2 value:
<none> WEP Key 4 value:
1 WEP Multicast Index:
NO
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Configuring user encryption 315
"Enabling WPA with TKIP"
crypto
no
no
5
no
0
14
yes
5
<none>
<none>
1