Alfa Network AWAP05O User Manual page 108

6
System Configuration
The configuration settings for WPA are summarized below:
WPA pre-shared key only
Authentication Type: Open System
WEP (encryption): Enable
WPA clients only: Enable
WPA Mode: Pre-shared-key
Multicast Cipher: WEP/TKIP/AES
WPA PSK Type -
Hex: 64 characters
ASCII: 8-63 characters
Shared Key: 64/128/152
3
802.1x = Disabled
MAC Authentication: Disabled/Local
1: Although WEP keys are not needed for WPA, you must enable WEP encryption
through the web or CLI in order to enable all types of encryption in the access point.
For example, use the CLI encryption command to set Encryption = 64, 128 or 152,
thus enabling encryption (i.e., all types of encryption) in the access point.
2: Do not use WEP unless the access point must support both WPA and WEP clients.
3: See Authentication (page 6-11)
4: See Radius (page 6-6)
CLI Commands for WPA Pre-shared Key Security – From the 802.11a or 802.11g
interface configuration mode, use the authentication command to set the access
point to "Open System." Use the WEP encryption command to enable all types of
encryption. To enable WPA to be required for all clients, use the wpa-clients
command. Use the wpa-mode command to enable the Pre-shared Key mode. To
enter a key value, use the wpa-psk-type command to specify a hexadecimal or
alphanumeric key, and then use the wpa-preshared-key command to define the
key. Then disable 802.1x and MAC authentication. To view the current 802.11g
security settings, use the show interface wireless a or show interface wireless g
command (not shown in example).
AP(config)#interface wireless g
Enter Wireless configuration commands, one per line.
AP(if-wireless g)#authentication open
AP(if-wireless g)#encryption 128
AP(if-wireless g)#wpa-clients required
AP(if-wireless g)#wpa-mode pre-shared-key
AP(if-wireless g)#wpa-psk-type alphanumeric
AP(if-wireless g)#wpa-preshared-key ASCII asecret
AP(if-wireless g)#end
AP(config)#no 802.1x
AP(config)#no mac-authentication
CLI Commands for WPA over 802.1x Security – From the 802.11a or 802.11g
interface configuration mode, use the authentication command to set the access
point to "Open System." Use the WEP encryption command to enable all types of
encryption. Use the wpa-clients command to set WPA to be required or supported
for clients. Use the wpa-mode command to enable WPA dynamic keys over 802.1x.
Set the broadcast and multicast key encryption using the multicast-cipher
command. Then set 802.1x to required, and disable MAC authentication. To view
6-58
WPA over 802.1x
Authentication Type: Open System
1
WEP (encryption): Enable
WPA clients only: Enable
WPA Mode: WPA over 802.1x
2
Multicast Cipher: WEP/TKIP/AES
Shared Key: 64/128/152
802.1x = Required
MAC Authentication: Disabled/Local
4
1
2
3
4
7-66
7-73
7-74
7-77
7-78
7-80
7-79
7-35
7-39