Configuring Security Ie; Configuring Cipher Suite - H3C MSR Series Configuration Manual

Step
3. Enable GTK rekey.
4. Configure GTK rekey
based on packet.
5. Configure the device to
start GTK rekey when a
client goes offline.

Configuring security IE

Security IE configurations comprise WPA security IE configuration and RSN security IE configuration,
both of which require open system authentication.
WPA ensures greater protection than WEP. WPA operates in either WPA-PSK (or Personal) mode or
WPA-802.1X (or Enterprise) mode. In Personal mode, a pre-shared key or pass-phrase is used for
authentication. In Enterprise mode, 802.1X and RADIUS servers and the EAP are used for
authentication.
Configuring WPA security IE
Step
1. Enter system view.
2. Enter WLAN service
template view.
3. Enable the WPA-IE in the
beacon and probe
responses.
Configuring RSN security IE
An RSN is a security network that only allows the creation of robust security network associations
(RSNAs). An RSN can be identified by the indication in the RSN Information Element (IE) of beacon
frames. It provides greater protection than WEP and WPA.
To configure RSN security IE:
Step
1. Enter system view.
2. Enter WLAN service
template view.
3. Enable the RSN-IE in the
beacon and probe
responses.

Configuring cipher suite

A cipher suite is used for data encapsulation and de-encapsulation. It uses the following encryption
methods:
Command
gtk-rekey enable
gtk-rekey method packet-based
[ packet ]
gtk-rekey client-offline enable
Command
system-view
wlan service-template
service-template-number crypto
security-ie wpa
Command
system-view
wlan service-template
service-template-number crypto
security-ie rsn
38
Remarks
By default, GTK rekey is enabled.
The default packet number is
10000000.
Optional.
By default, the device does not start
GTK rekey when a client goes
offline.
This command takes effect only
when you execute the gtk-rekey
enable command.
Remarks
N/A
N/A
By default, WPA-IE is disabled.
Remarks
N/A
N/A
By default, RSN-IE is disabled.