Configuring Wpa Or Wpa2 Pre-Shared Key; Using The Cli - Foundry Networks IronPoint 200 User Manual

Encryption – Enable or disable the VAP interface to use data encryption (WEP shared keys, WPA or
WPA2). When WEP encryption is selected, you must configure at least one key on the access point
and all clients. (Default: Disable)

Configuring WPA or WPA2 Pre-Shared Key

The WPA Pre-Shared Key security uses a single key for authentication that is manually distributed to
all clients.

Using the CLI

The following example shows how to enable WPA Pre-shared Key security for VAP interface "0" on
the 802.11g radio. From the CLI 802.11g interface configuration mode, use the vap command to
access VAP interface configuration. Use the authentication command to set the VAP interface to
"wpa-psk." The authentication command automatically enables data encryption and sets the
appropriate WPA mode and encryption ciphers. To enter a key value, use the wpa-preshared-key
command to specify a hexadecimal or pass-phrase key and define the key. You can use the cipher-
suite command to force specific unicast and multicast encryption ciphers. To view the current
802.11g security settings, use the show interface wireless g command (not shown in example).
Foundry AP(config)#interface wireless g
Enter Wireless configuration commands, one per line.
Foundry AP(if-wireless g)#vap 0
Foundry AP(if-wireless g: VAP[0])#authentication wpa-psk required
Data Encryption is set to Enabled.
WPA2 Clients Mode is set to Disabled.
WPA Clients Mode is set to Required.
WPA Multicast Cipher is set to TKIP.
WPA Unicast Cipher can accept TKIP only.
WPA Authentication is set to Pre-Shared Key.
Foundry AP(if-wireless g: VAP[0])#wpa-preshared-key passphrase-key agoodsecret
Foundry AP(if-wireless a: VAP[0])#cipher-suite wep
Authentication mode is changed to WPA-TKIP-WEP due to multicase cipher is changed
to WEP.
Unicast Ciphers can accept TKIP only.
Multicast Cipher is set to WEP.
Foundry AP(if-wireless g: VAP[0])#
cipher-suite
This command defines the unicast and multicast encryption ciphers when using WPA or WPA2
security.
Syntax
cipher-suite <aes-ccmp | tkip | wep>
• aes-ccmp - Use AES-CCMP encryption for the unicast and multicast cipher.
• tkip - Use TKIP encryption for the multicast cipher. When WPA is set to "required," TKIP is used
for the unicast cipher. When WPA is set to "supported," TKIP or AES-CCMP can be used for
the unicast cipher depending on the capability of the client.
• wep - Use WEP encryption for the multicast cipher. When WPA is set to "required," TKIP is
used for the unicast cipher. When WPA is set to "supported," TKIP or AES-CCMP can be used
for the unicast cipher depending on the capability of the client.
December 2006 © 2006 Foundry Networks, Inc.
Wireless Security Configuration
21-13