Extreme Networks Summit WM3000 Series Reference Manual page 143

Default (hexadecimal) keys for WEP 128 include:
Key 1
Key 2
Key 3
Key 4
7 If you feel it necessary to restore the WEP algorithm back to its default settings, click the Restore
Default WEP Keys button. This may be the case if you feel the latest defined WEP algorithm has been
compromised and no longer provides its former measure of data security.
8 Refer to the Status field for the current state of the requests made from applet. This field displays
error messages if something goes wrong in the transaction between the applet and the controller.
9 Click OK to use the changes to the running configuration and close the dialog.
10 Click Cancel to close the dialog without committing updates to the running configuration.
Configuring WPA/WPA2 using TKIP and CCMP. Wi-Fi Protected Access (WPA) is a robust encryption scheme
specified in the IEEE Wireless Fidelity (Wi-Fi) standard, 802.11i. WPA provides more sophisticated data
encryption than WEP. WPA is designed for corporate networks and small-business environments where
more wireless traffic allows quicker discovery of encryption keys by an unauthorized person.
WPA's encryption method is Temporal Key Integrity Protocol (TKIP). TKIP addresses WEP's weaknesses
with a re-keying mechanism, a per-packet mixing function, a message integrity check, and an extended
initialization vector. WPA also provides strong user authentication based on 802.1x EAP.
WPA2 is a newer 802.11i standard that provides even stronger wireless security than WPA and WEP.
CCMP is the security standard used by the Advanced Encryption Standard (AES). AES serves the same
function TKIP does for WPA-TKIP. CCMP computes a Message Integrity Check (MIC) using the proven
Cipher Block Chaining (CBC) technique. Changing just one bit in a message produces a totally different
result.
WPA2-CCMP is based on the concept of a Robust Security Network (RSN), which defines a hierarchy of
keys with a limited lifetime (similar to TKIP). Like TKIP, the keys the administrator provides are used to
derive other keys. Messages are encrypted using a 128-bit secret key and a 128-bit block of data. The
end result is an encryption scheme as secure as any the controller provides.
To configure WPA/WPA2-TKIP/CCMP encryption:
1 Select Network > Wireless LANs from the main menu tree.
2 Select an existing WLAN from those displayed within the Configuration tab and click the Edit button.
A WLAN screen displays with the WLAN's existing configuration. Refer to the Authentication and
Encryption columns to assess the WLAN's existing security configuration.
3 Select either the WPA/WPA2-TKIP or WPA2-CCMP button from within the
Encryption field.
4 Click the Config button to the right of the WPA/WPA2-TKIP and WPA2-CCMP checkboxes.
The WPA/WPA2-TKIP/CCMP screen displays. This single screen can be used to configure either
WPA/WPA2-TKIP or WPA-CCMP.
Summit WM3000 Series Controller System Reference Guide
101112131415161718191A1B1C
202122232425262728292A2B2C
303132333435363738393A3B3C
404142434445464748494A4B4C
143