Configuring Radius Settings - HP R110 Configuration And Administration Manual

WPA/WPA2-PSK security includes the following settings:
Authentication Mode
Select WPA/WPA2-PSK Mixed to display all settings for WPA/WPA2-PSK security.
Encryption Type
The TKIP/AES type is the only encryption available for mixed WPA/WPA2 security. In mixed
mode, the unicast encryption (TKIP or AES) is negotiated for each client as they associate with
the network.
Key Type
The WPA/WPA2 preshared key can be input as an ASCII string (an easy-to-remember form of
letters and numbers that can include spaces) or Hexadecimal format.
•
Hexadecimal: Enter exactly 64 Hexadecimal characters (characters 0-9, a-f, and A-F).
•
ASCII: Enter 8-63 characters (alphanumeric characters 0-9, a-z, and A-Z, plus spaces and
symbols).
Passphrase
Enter the key according to the type selected; in ASCII passphrase style (8-63 alphanumeric
characters), or in exactly 64 Hexadecimal characters. For an ASCII key, HP recommends that
the key be at least 20 characters long, and be a mix of letters and numbers. The passphrase
key cannot begin or end with spaces.
Group Key Interval
Enter the interval at which the broadcast (group) key is refreshed for clients associated with this
VAP interface (the default is 3600 seconds). The valid range is 60 to 86400 seconds. Specify
a value of 0 to disable the refreshing of broadcast keys.
Session Key Interval
Enter the interval at which the router refreshes session (unicast) keys for each client associated
with the VAP interface. To enable session key refreshing, specify a value in the range of 60 to
86400 seconds. Specify a value of 0 to disable session key refresh.

Configuring RADIUS settings

Remote Authentication Dial-in User Service (RADIUS) is an authentication protocol that uses
software running on a central server to control access to RADIUS-aware devices on the
network. An authentication server contains a database of user credentials for each user that
requires network access.
When using WPA2 or WPA/WPA2 enterprise security, both of which use 802.1X as the
method of user authentication, or WEP with 802.1X, a RADIUS server must be configured and
available on the connected wired network.
62 Wireless configuration