HP procurve 420 Management And Configuration Manual page 114

Access Point Configuration
Configuring Wireless Security
Configuring Encryption in the HP ProCurve Wireless Access Point 420
Encryption Methods and
Process
WEP Static ONLY
1. Define MAC
authentication method
2. Disable IEEE 802.1x
3. Configure multicast
cipher type
4. Configure clients type
5. Configure key index
6. Configure key
7. Configure shared
authentication
8. Enable encryption
* The AP 420 supports the following Extensible Authentication Protocol (EAP) methods: MD5, TLS, TTLS and PEAP
** Please refer to the table "Configuring MAC Authentication in the HP ProCurve Wireless Access Point 420"
*** To start, the access point is in the factory default configuration.
Conventions used:
Vertical bars separate alternative, mutually exclusive elements ( | ).
Braces enclose required elements ( < > ).
Italics indicate variables for which the user must supply a value when executing the command.
Configuring MAC Authentication in the HP ProCurve Wireless Access Point 420
MAC MAC
Authentication Authentication
Mode
Local MAC Local MAC
authentication
5-56
CLI Privilege Level and Commands***
Global Configuration Level
HP420(config)#mac-authentication server
remote**
OR
HP420(config)#mac-authentication server local
OR
HP420(config)#no mac-authentication server
HP420(config)#no 802.1x
Context Configuration Level
HP420(if-wireless g)#multicast-cipher WEP
HP420(if-wireless g)#wpa-clients supported
HP420(if-wireless g)#transmit-key <1 | 2 | 3 | 4>
HP420(if-wireless g)#key <1 | 2 | 3 | 4> <64 | 128 | 152>
<ASCII | HEX> <key>
HP420(if-wireless g)#authentication shared
HP420(if-wireless g)#encryption <64 | 128 | 152>
Table 5-2. Summary of MAC Authentication Configuration
Local MAC MAC Authentication Settings
Authentication
MAC Address
System Default
Deny xx-xx-xx-xx-xx-xx
Additional
Requirements
WEP supported
client required.
RADIUS Comments
Permission
Deny Allow
* Not All MAC addresses
needed denied unless permis-
sion specifically
allowed in MAC Authen-
tication Table. Can be
combined with other
methods for improved
security.
Notes
Requires manual
key management.
Encryption index,
length and type
configured in the
access point must
match those config-
ured in the clients.
Parameters "index"
and "length" of the
Key command must
match the values
entered in the
Encryption and
Transmit-Key
commands.