Configuring Encryption For Mac Clients - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Configuring Encryption for MAC Clients

The following example shows how to configure MSS to provide PSK authentication and TKIP or 40-bit
WEP encryption for MAC clients:
1. Create an authentication rule that sends all MAC users of SSID voice to the local database
for authentication and authorization. Type the following command:
DWS-1008# set authentication mac ssid voice * local
success: configuration saved.
2. Configure a MAC user group named wpa-for-mac that assigns all MAC users in the group
to VLAN blue. Type the following command:
DWS-1008# set mac-usergroup wpa-for-mac attr vlan-name blue
success: configuration saved.
3. Add MAC users to MAC user group wpa-for-mac. Type the following commands:
DWS-1008# set mac-user aa:bb:cc:dd:ee:ff group wpa-for-mac
success: configuration saved.
DWS-1008# set mac-user a1:b1:c1:d1:e1:f1 group wpa-for-mac
success: configuration saved.
4. Verify the AAA configuration changes. Type the following command:
DWS-1008# show aaa
Default Values
authport=1812 acctport=1813 timeout=5 acct-timeout=5 retrans=3 deadtime=0
key=(null) author-pass=(null)
Radius Servers
Server Addr Ports T/o Tries Dead State
------------------------------------------------------------------
Server groups
Web Portal: enabled
set authentication mac ssid voice * local
mac-usergroup wpa-for-mac vlan-name = blue
mac-user aa:bb:cc:dd:ee:ff Group = wpa-for-mac
mac-user a1:b1:c1:d1:e1:f1 Group = wpa-for-mac
5. Create a service profile named wpa-wep-for-mac for SSID voice. Type the following
command:
DWS-1008# set service-profile wpa-wep-for-mac
success: change accepted.
D-Link DWS-1008 User Manual 1