Digi LR54 User Manual page 288

Wi-Fi
SSID broadcasting is enabled by default for new access points.
6. Set the security for the access point to wpa2:
(config network wifi ap new_AP)> encryption type wpa2
(config network wifi ap new_AP)>
7. (Optional) Determine whether to prevent clients that are connected to this access point from
communicating with each other:
(config)> network wifi ap digi_ap1 isolate_clients true
(config)>
See Isolate Wi-Fi clients
access points from communicating with each other.
8. Configure one or more RADIUS servers:
a. Set the IP address of the RADIUS server:
(config network wifi ap new_AP)> encryption radius_servers 0 host IP_
address
(config network wifi ap new_AP)>
b. Set the secret key as configured on the RADIUS server:
(config network wifi ap new_AP)> encryption radius_servers 0 key
secret_key
(config network wifi ap new_AP)>
c. (Optional) Set the RADIUS server's port. The default is 1812.
(config network wifi ap new_AP)> encryption radius_servers 0 port port
(config network wifi ap new_AP)>
d. (Optional) Add and configure additional radius servers:
i. Add a server:
(config network wifi ap new_AP)> add encryption radius_servers end
(config network wifi ap new_AP encryption radius_servers 1)>
ii. Configure the new server as described above. For example, set the server IP address:
(config network wifi ap new_AP encryption radius_servers 1)> host
IP_address
(config network wifi ap new_AP encryption radius_servers 1)>
iii. Repeat for additional radius servers.
9. (Optional) Set the amount of time to wait before changing the group key.
The group key is shared by all in clients of the access point, and after a client has
disconnected, it will be able to use the group key to decrypt broadcast packets until the key is
changed.
LR54 User Guide
Configure a Wi-Fi access point with enterprise security
for information about how to prevent clients connected to different
288