Table of Contents
Advertisement
Chapter 12: BlueSecure Access Points
Enter keys as 10 hexadecimal digits (0 to 9 and A to F) for 64 bit keys, 26
3.
hexadecimal digits for 128 bit keys, or 32 hexadecimal digits for 152 bit keys. Be
sure to specify a default key (0 to 3) when entering 64-bit keys.
WPA or WPA2
If you have configured WPA or WPA2 authentication, then you must configure access to
Authentication
the RADIUS authentication server that is to authenticate each user on the network before
only
the user is able to join it.
Enter IP address or fully qualified domain name of the RADIUS server in the Address
1.
field.
Note: If using Internal 802.1X authentication, provide the BSC's protected side IP
address.
Enter the RADIUS server's port number in the Port field.
2.
Enter the known secret shared between the BSAP and the RADIUS authentication
3.
server in the Secret field, and then confirm the shared secret by entering it in the
Confirm secret field.
4.
Mark the Enable 802.11i preauth bit checkbox to enable clients to pre-authenticate
via 802.1x to another BSAP while associated to an existing BSAP.
WPA-PSK or
If you have configured WPA-PSK or WPA2-PSK authentication, then you must configure
WPA2-PSK
the key that all wireless clients will use to communicate with the BSAP.
Authentication
Enter the interval in minutes at which the WPA group key is to be regenerated in the
1.
only
Group Rekey Time field.
Enter the WPA pre-shared key in the Passphrase field, and then enter the same pre-
2.
shared key in the Confirm passphrase field.
3.
Enter a key as an easy-to-remember string of letters and numbers. The string must be
from 8 to 63 characters and can include spaces.
QoS Settings
Mark the DSCP or 802.1p radio button to prioritize packets according to their DSCP
code point setting. Enable WMM and Voice Call Admission Control must be enabled on
the Radio (see "QoS Settings" on page 12-15), and the clients must be WMM capable.
Mark the Access Category radio button to assign a specific priority (e.g. Video or Voice)
to all downlink packets for clients associated with this SSID. "Enable WMM and Voice
Call Admission Control" must be enabled on the Radio ("QoS Settings" on page 12-15).
The client does not have to be WMM capable. This is useful for a Voice SSID for legacy
clients that do not support WMM.
This checkbox has no effect if "Enable WMM and Voice Call Admission Control" is
disabled.
Saving the
Click Save to save the BSAP SSID settings to the BSC database.
settings
You may be prompted to restart the BSC. We recommend that you do not restart the BSC
until you have completely finished configuring the BSC for use in your network.
Creating BSAPs
You can uniquely identify and create a configuration for each of the BSAPs that is
currently connected to the BSC or will be connected to the BSC. BSAPs are uniquely
identified by their MAC addresses along with optional hostname and location identifiers
you supply. Note that fields that have default settings carried over from the Global AP
System Settings page (see "Configuring Global Miscellaneous Non-Radio Settings" on
page 12-8) have a dark blue background.
To create a BlueSecure Access Point:
12-24
Advertisement
Table of Contents
