Aruba IAP-335 User Manual page 93

Table 23: Configuration Parameters for WLAN Security Settings in an Employee or Voice Network
Parameter
Key
Management
Termination
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Description
CLick the Enterprise security level, select any of the following options from
the Key management drop-down list:
WPA-2 Enterprise
l
WPA Enterprise
l
Both (WPA-2 & WPA)
l
Dynamic Wired Equivalent Privacy (WEP) with 802.1X—If you do not want
l
to use a session key from the RADIUS server to derive pairwise unicast
keys, set Session Key for LEAP to Enabled. This is required for old
printers that use dynamic WEP through Lightweight Extensible
Authentication Protocol (LEAP) authentication. The Session Key for
LEAP feature is set to Disabled by default.
For the Personal security level, select any of the following encryption keys
from the Key management drop-down list.
WPA-2 Personal
l
WPA-Personal (Both TKIP and AES Encryption)
l
WPA-Personal (TKIP Encryption only)
l
WPA-Personal (AES Encryption only)
l
Both (WPA-2 & WPA)
l
Static WEP
l
If a WPA-2, WPA encryption, or Both (WPA-2&WPA) is selected, configure the
passphrase:
1. Select a passphrase format from the Passphrase format drop-down list.
The options available are 8–63 alphanumeric characters and 64
hexadecimal characters.
2. Enter a passphrase in the Passphrase text box and reconfirm.
NOTE: The Passphrase may contain any special character except for ".
For Static WEP, specify the following parameters:
1. Select an appropriate value for WEP key size from the WEP key size
drop-down list. You can specify 64-bit or 128-bit .
2. Select an appropriate value for Tx key from the Tx Key drop-down list.
You can specify 1, 2, 3, or 4.
3. Enter an appropriate WEP key and reconfirm.
To terminate the Extensible Authentication Protocol (EAP) portion of 802.1X
authentication on the IAP instead of the RADIUS server, set Termination to
Enabled. Enabling Termination can reduce network traffic to the external
RADIUS server by terminating the authorization protocol on the IAP. By
default, for 802.1X authorization, the client conducts an EAP exchange with
the RADIUS server, and the IAP acts as a relay for this exchange.
Security
Level
Applicable to
Enterprise and
Personal
security levels
only.
For the Open
security level,
no encryption
settings are
required.
Enterprise
security level
Wireless Network Profiles | 93