D-Link DWS-1008 User Manual page 191

DWS-1008 User's Manual
If you plan to use PSK authentication, you also need to enable this authentication method
and enter an ASCII passphrase or a hexadecimal (raw) key.
Creating a Service Profile for RSN
Encryption parameters apply to all users who use the SSID configured by a service profile.
To create a service profile, use the following command:
set service-profile name
To create a new service profile named rsn, type the following command:
DWS-1008# set service-profile rsn
success: change accepted.
Enabling RSN
To enable RSN, you must enable the RSN information element (IE) in the service profile. To
enable the RSN IE, use the following command:
set service-profile name rsn-ie {enable | disable}
To enable RSN in service profile wpa, type the following command:
DWS-1008# set service-profile rsn rsn-ie enable
success: change accepted.
Specifying the RSN Cipher Suites
To use RSN, at least one cipher suite must be enabled. You can enable one or more of the
following cipher suites:
• CCMP
• TKIP
• 40-bit WEP
• 104-bit WEP
By default, TKIP is enabled and the other cipher suites are disabled.
To enable or disable cipher suites, use the following commands:
set service-profile name cipher-ccmp {enable | disable}
set service-profile name cipher-tkip {enable | disable}
set service-profile name cipher-wep104 {enable | disable}
set service-profile name cipher-wep40 {enable | disable}
To enable the CCMP cipher suite in service profile rsn, type the following command:
DWS-1008# set service-profile rsn cipher-ccmp enable
success: change accepted.
After you type this command, the service profile supports both TKIP and CCMP.
D-Link Systems, Inc. D-Link Systems, Inc.
Configuring User Encryption
186 186