Configuring Wpa2-Ccmp (802.11I) - Motorola AP-7131 Product Reference Manual

8. Configure the
point roaming and key caching options. This feature is applicable only when using 802.1x
EAP authentication with WPA2-TKIP.
Pre-Authentication
NOTE PMK key caching is enabled internally by default for WPA2-TKIP when
9. Click the Apply
10. Click the Cancel
return to the

6.9 Configuring WPA2-CCMP (802.11i)

WPA2 is a newer 802.11i standard that provides even stronger wireless security than Wi-Fi Protected
Access (WPA) and WEP. CCMP is the security standard used by the Advanced Encryption Standard
(AES). AES serves the same function TKIP does for WPA-TKIP. CCMP computes a Message Integrity
Check (MIC) using the proven Cipher Block Chaining (CBC) technique. Changing just one bit in a
message produces a totally different result.
WPA2/CCMP is based on the concept of a Robust Security Network (RSN), which defines a hierarchy
of keys with a limited lifetime (similar to TKIP). Like TKIP, the keys the administrator provides are used
to derive other keys. Messages are encrypted using a 128-bit secret key and a 128-bit block of data.
The end result is an encryption scheme as secure as any the access point provides.
To configure WPA2-CCMP on the access point:
1. Select Network Configuration
If security policies supporting WPA2-CCMP exist, they appear within the
Configuration
Fast Roaming (802.1x only)
Selecting this option enables an associated MU to carry out an
802.1x authentication with another access point before it roams to
it. The access point caches the keying information of the client until
it roams to the other access point. This enables the roaming client
to start sending and receiving data sooner by not having to do
802.1x authentication after it roams. This feature is only supported
when 802.1x EAP authentication and WPA2-TKIP is enabled.
802.1x EAP authentication is enabled.
button to save any changes made within this New Security Policy screen.
button to undo any changes made within the WPA/TKIP Settings field and
WLAN screen. This reverts all settings to the last saved configuration.
->
screen. These existing policies can be used as is, or their properties edited
field as required to enable additional access
Wireless -> Security
Configuring Access Point Security
from the access point menu tree.
Security
6-23