Configuring Rsn (802.11I); Creating A Service Profile For Rsn; Enabling Rsn - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Configuring RSN (802.11i)

Robust Security Network (RSN) provides 802.11i support. RSN uses AES encryption.
You can configure a service profile to support RSN clients exclusively, or to support RSN with WPA
clients, or even RSN, WPA and WEP clients.
The configuration tasks for a service profile to use RSN are similar to the tasks for WPA:
1. Create a service profile for each SSID that will support RSN clients.
2. Enable the RSN IE in the service profile.
3. Enable the cipher suites you want to support in the service profile. (TKIP is enabled by
default.) Optionally, you also can change the countermeasures timer value for TKIP.
4. Map the service profile to the radio profile that will control IEEE settings for the radios.
5. Assign the radio profile to the radios and enable the radios.
If you plan to use PSK authentication, you also need to enable this authentication method and enter an
ASCII passphrase or a hexadecimal (raw) key.
Encryption parameters apply to all users who use the SSID configured by a service profile. To create a
service profile, use the following command:
set service-profile name
To create a new service profile named rsn, type the following command:
DWS-1008# set service-profile rsn
success: change accepted.
To enable RSN, you must enable the RSN information element (IE) in the service profile. To enable the
RSN IE, use the following command:
set service-profile name rsn-ie {enable | disable}
To enable RSN in service profile wpa, type the following command:
DWS-1008# set service-profile rsn rsn-ie enable
success: change accepted.
D-Link DWS-1008 User Manual

Creating a Service Profile for RSN

Enabling RSN

1