D-Link DWS-4026 User Manual page 435

Software User Manual
12/10/09
Field
Bcast Key Refresh Rate
Pre-Authentication
Pre-Authentication Limit
Key Caching Hold Time
Session Key Refresh
Rate
Document 34CSFP6XXUWS-SWUM100-D7
Table 265: WPA Security
Description
Enter a value to set the interval at which the broadcast (group) key is refreshed for clients
associated to this VAP.
The valid range is 0-86400 seconds. A value of 0 indicates that the broadcast key is not
refreshed.
Additional Fields for WPA/WPA2 Enterprise
If you select WPA/WPA2 Enterprise, you can enable Pre-Authentication.
Click the Pre-Authentication check box if you want
authentication packets. The pre-authentication information is relayed from the access point
the client is currently using to the target access point.
Enabling this feature can help speed up authentication for roaming clients who connect to
multiple access points. Only clients that connect by using WPA2 can use this feature. It is
not supported by the original WPA.
Enter the number of pre-authentications that can be in progress simultaneously on an AP.
The limit prevents too much load on the RADIUS server. This does not prevent the pre-
authentication from being attempted again when the load is lighter. A value of 0 represents
no limit.
Enter the amount of minutes a PMK will be held by the AP. This applies to Pairwise Master
Keys (PMKs) generated by RADIUS, those that come from pre-authentication, and those
that are forwarded to the AP. Note that this time limit can be overridden by RADIUS if the
RADIUS server returns a longer time in the Session-Timeout attribute for a particular user.
The valid values of this are from 1–1440 minutes. If you do not enter a value, APs will not
forward the PMK for the wireless client to other APs in case the client roams to another AP.
Enter a value to set the interval at which the AP will refresh session (unicast) keys for each
client associated to the VAP.
The valid range is 0-86400 seconds. A value of 0 indicates that the broadcast key is not
refreshed.
D-Link Unified Access System
WPA2 wireless clients to send pre-
Basic Setup Page 435