Encryption Configuration Scenarios; Enabling Wpa With Tkip - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

To configure an SSID that uses service profile wepsrvc to use WEP key index 2 for encrypting multicast
traffic, type the following command:
DWS-1008# set service-profile wepsrvc wep active-multicast-index 2
success: change accepted.
To configure an SSID that uses service profile wepsrvc4 to use WEP key index 4 for encrypting unicast
traffic, type the following command:
DWS-1008# set service-profile wepsrvc4 wep active-unicast-index 4
success: change accepted.

Encryption Configuration Scenarios

The following scenarios provide examples of ways in which you can configure encryption for network
clients:
• "Enabling WPA with TKIP" (below)
• "Enabling Dynamic WEP in a WPA Network"
• "Configuring Encryption for MAC Clients"
The following example shows how to configure MSS to provide authentication and TKIP encryption
for 801.X WPA clients. This example assumes that pass-through authentication is used for all users. A
RADIUS server group performs all authentication and authorization for the users.
1. Create an authentication rule that sends all 802.1X users of SSID mycorp in the EXAMPLE
domain to the server group shorebirds for authentication. Type the following command:
DWS-1008# set authentication dot1x ssid mycorp EXAMPLE\* pass-through shorebirds
2. Create a service profile named wpa for the SSID. Type the following command:
DWS-1008# set service-profile wpa
success: change accepted.
3. Set the SSID in the service profile to mycorp. Type the following command:
DWS-1008# set service-profile wpa ssid-name wpa
success: change accepted.
4. Enable WPA in service profile wpa. Type the following command:
DWS-1008# set service-profile wpa wpa-ie enable
success: change accepted.
D-Link DWS-1008 User Manual

Enabling WPA with TKIP

10