SMC Networks 2552W-G2 User Manual page 102

5
System Configuration
WPA2 PMKSA Life Time – WPA2 provides fast roaming for authenticated clients by
retaining keys and other security settings in a cache for each VAP. In this way, when
clients roam back into a VAP they had previously been using, re-authentication is
not required. When a WPA2 client is first authenticated, it receives a Pairwise
Master Key (PMK) that is used to generate the other keys used for unicast data
encryption. This key and other client information form a client Security Association
(SA) that the VAP holds in a cache. When the lifetime expires, the security
association and keys are deleted from the cache. If the client returns to an access
point after the association has been deleted, it will require full re-authentication.
(Range: 1-1440 minutes; Default: 720 minutes)
CLI Commands for the Configuring the VAPs – From the global configuration mode,
enter the interface wireless g command to access the 802.11b/g radio interface.
From the 802.11b/g interface mode, you can access radio settings that apply to all
VAP interfaces. To access a specific VAP interface (numbered 0 to 7), use the vap
command. You can configure a name for each interface using the description
command. You can also use the closed-system command to stop sending the
SSID in beacon messages. Set any other VAP parameters and radio setting as
required before enabling the VAP interface (with the no shutdown command). To
view the current 802.11b/g radio settings for the VAP interface, use the show
interface wireless g 0 command as shown on 6-94.
Enterprise AP(if-wireless g)#vap 0
Enterprise AP(if-wireless g: VAP[0])#description RD-AP#36-103
Enterprise AP(if-wireless g: VAP[0])#vlan-id 1
Enterprise AP(if-wireless g: VAP[0])#closed-system
Enterprise AP(if-wireless g: VAP[0])#authentication-timeout-
interval 30
Enterprise AP(if-wireless g: VAP[0])#association-timeout-
interval 20
6-105
Enterprise AP(if-wireless g: VAP[0])#max-association 326-105
Enterprise AP(if-wireless g: VAP[0])#pmksa-lifetime 9006-120
Enterprise AP(if-wireless g: VAP[0])#
5-56
6-94
6-128
6-104
6-105