Configuring Security Ie - HP a-msr Configuration Manual

To do...
2. Enter WLAN service
template view.
3. Enable GTK rekey.
4. Configure GTK rekey based
on packet.
5. Configure the device to start
GTK rekey when a client
goes offline.
By default, time-based GTK rekey is adopted, and the rekey interval is 86,400 seconds.
Configuring a new GTK rekey method overwrites the previous one. For example, if time-based GTK rekey is
configured after packet-based GTK rekey is configured, time-based GTK rekey takes effect.

Configuring security IE

The security IE configuration includes WPA and RSN configuration. For WPA and RSN configuration, open
system authentication is required.
WPA ensures greater protection than WEP. WPA operates in either WPA-PSK (or Personal) mode or
WPA-802.1X (or Enterprise) mode. In Personal mode, a pre-shared key or pass-phrase is used for
authentication. In Enterprise mode, 802.1X and RADIUS servers and the EAP are used for authentication.
Configuring WPA security IE
To configure the WPA security IE:
To do...
1. Enter system view.
2. Enter WLAN service
template view.
3. Enable the WPA IE in the
beacon and probe
responses.
Configuring RSN security IE
An RSN is a security network that allows only the creation of RSNAs. An RSN can be identified by the
indication in the RSN IE of beacon frames. It provides greater protection than WEP and WPA.
To do...
1. Enter system view.
2. Enter WLAN service
template view.
Use the command...
wlan service-template
service-template-number crypto
gtk-rekey enable
gtk-rekey method packet-based
[ packet ]
gtk-rekey client-offline enable
Use the command...
system-view
wlan service-template
service-template-number crypto
security-ie wpa
Use the command...
system-view
wlan service-template
service-template-number crypto
33
Remarks
—
Required.
By default, GTK rekey is enabled.
Required.
The default packet number is
10,000,000.
Optional.
Not configured by default.
This command takes effect only
when GTK rekey has been
enabled with the gtk-rekey
enable command.
Remarks
—
—
Required.
By default, WPA IE is disabled.
Remarks
—
—