D-Link DWS-1008 User Manual page 163

DWS-1008 User's Manual
The fingerprint is displayed regardless of whether it has been verified in MSS.
Note: The show dap config command lists an AP's fingerprint only if the fingerprint has
been confirmed in MSS. If the fingerprint has not been confirmed, the fingerprint info in the
command output is blank.
Verifying a Fingerprint on the Switch
To verify a DWL-8220AP's fingerprint on a switch, use the following command:
set dap num fingerprint hex
Where hex is the 16-digit hexadecimal number of the fingerprint. Use a colon between each
digit. Make sure the fingerprint you enter matches the fingerprint used by the AP.
The following example sets the fingerprint for Distributed AP 8:
DWS-1008# set dap 8 fingerprint b4:f9:2a:52:37:58:f4:d0:10:75:43:2f:45:c9:52:c3
success: change accepted.
Setting the AP Security Requirement on a switch
Note: A change to AP security support does not affect management sessions that are already
established. To apply the new setting to an AP, restart the AP.
To configure AP security requirements, use the following command:
set dap security {require | optional | none}
The following command configures an DWS-1008 to require Distributed APs to have encryption
keys:
DWS-1008# set dap security require
Fingerprint Log Message
If AP encryption is optional, and an AP whose fingerprint has not been confirmed in MSS
establishes a management session with the switch, MSS generates a log message such as
the following:
DAP-HS:(secure optional)configure DAP 0335301065 with fingerprint c6:98:9c:41:32:
ab:37:09:7e:93:79:a4:ca:dc:ec:fb
The message lists the serial number and fingerprint of the AP. You can check this information
against your records to verify that the AP is authentic.
D-Link Systems, Inc.
Configuring DWL-8220AP Access Points
158