Digi IX20-WAG4 User Manual page 210

Wi-Fi
b. Set the secret key as configured on the RADIUS server:
(config network wifi ap new_AP)> encryption radius_servers 0 key
secret_key
(config network wifi ap new_AP)>
c. (Optional) Set the RADIUS server's port. The default is 1812.
(config network wifi ap new_AP)> encryption radius_servers 0 port port
(config network wifi ap new_AP)>
d. (Optional) Add and configure additional radius servers:
i. Add a server:
(config network wifi ap new_AP)> add encryption radius_servers end
(config network wifi ap new_AP encryption radius_servers 1)>
ii. Configure the new server as described above. For example, set the server IP address:
(config network wifi ap new_AP encryption radius_servers 1)> host
IP_address
(config network wifi ap new_AP encryption radius_servers 1)>
iii. Repeat for additional radius servers.
8. (Optional) Set the amount of time to wait before changing the group key.
The group key is shared by all in clients of the access point, and after a client has
disconnected, it will be able to use the group key to decrypt broadcast packets until the key is
changed.
(config network wifi ap new_AP)> encryption group_rekey value
(config network wifi ap new_AP)>
where value is any number of days, hours, minutes, or seconds, and takes the format number
{d|h|m|s}.
For example, to set group rekey interval to ten minutes, enter either 10m or 600s:
(config network wireless ap new_AP)> encryption group_rekey 600s
(config network wireless ap new_AP)>
Increasing the time between rekeys can improve connectivity issues in noisy environments. To
disable group rekeys, set to 0. This will allow any client that has previously connected to see
all broadcast traffic on the wireless network until the Wi-Fi radio is restarted. The default is 10
minutes.
1. Assign the Wi-Fi access point to a LAN interface or to a bridge. See
Configure a bridge
The access point must be assigned to an active LAN, or a bridge that is assigned to an active
LAN.
IX20 User Guide
Configure a Wi-Fi access point with enterprise security
for more information.
Configure a LAN and
210