Assigning And Clearing Encryption Types Locally - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Assigning and Clearing Encryption Types Locally

To restrict wireless uses or groups with user profiles in the local database to particular encryption
algorithms for accessing the network, use one of the following commands:
set user username attr encryption-type value
set usergroup groupname attr encryption-type value
set mac-user username attr encryption-type value
set mac-usergroup groupname attr encryption-type value
MSS supports the following values for Encryption-Type, listed from most secure to least secure.
Encryption-Type Value
1
2
4
8
16
32
64
For example, the following command restricts the MAC user group mac-fans to access the network by
using only TKIP:
DWS-1008# set mac-usergroup mac-fans attr encryption-type 4
success: change accepted.
You can also specify a combination of allowed encryption types by summing the values. For example,
the following command allows mac-fans to associate using either TKIP or WEP_104:
DWS-1008# set mac-usergroup mac-fans attr encryption-type 12
success: change accepted.
To clear an encryption type from the profile of a use or group of users in the local database, use one
of the following commands:
clear user username attr encryption-type
clear usergroup groupname attr encryption-type
clear mac-user username attr encryption-type
clear mac-usergroup groupname attr encryption-type
D-Link DWS-1008 User Manual
Encryption Algorithm Assigned
Advanced Encryption Standard using Counter with Cipher Block Chaining
Message Authentication Code (CBC-MAC)—or AES_CCM.
Reserved
Temporal Key Integrity Protocol (TKIP).
Wired-Equivalent Privacy protocol using 104 bits of key strength (WEP_
104). This is the default.
Wired-Equivalent Privacy protocol using 40 bits of key strength (WEP_
40).
No encryption.
Static WEP
1