802.1x broadcast-key-refresh-rate | 3Com 3CRWEASYA73, WL-575

CHAPTER 6: COMMAND LINE INTERFACE

•When 802.1X is required, the access point enforces 802.1X authentication for all 802.11 associated stations. If 802.1X authentication is not initiated by the station, the access point will initiate authentication. Only those stations successfully authenticated with 802.1X are allowed to access the network.

•802.1X does not apply to the 10/100Base-TX port.

Example

Outdoor 11a Building to Building (config)#802.1x supported

Outdoor 11a Building to Building (config)#

802.1x broadcast-key-refresh-rate

This command sets the interval at which the broadcast keys are refreshed for stations using 802.1X dynamic keying.

Syntax

802.1x broadcast-key-refresh-rate <rate>

rate - The interval at which the access point rotates broadcast keys. (Range: 0 - 1440 minutes)

Default Setting

0 (Disabled)

Command Mode

Global Configuration

Command Usage

•The access point uses Outdoor 11a Building to Building OL (Extensible Authentication Protocol Over LANs) packets to pass dynamic unicast session and broadcast keys to wireless clients. The 802.1x broadcast-key-refresh-ratecommand specifies the interval after which the broadcast keys are changed. The 802.1x session-key-refresh-ratecommand specifies the interval after which unicast session keys are changed.

•Dynamic broadcast key rotation allows the access point to generate a random group key and periodically update all key-management capable wireless clients.

6-74

Image 186

3Com 3CRWEASYA73, WL-575 manual Syntax 802.1x broadcast-key-refresh-rate rate

Contents

User Guide 3Com Corporation 350 Campus Drive Marlborough, MA Contents Configuring Snmp and Trap Message Parameters Advanced Setup System IdentificationAuthentication Filter Control Configuring Sntp Command Line Interface Straight-Through Wiring Crossover Wiring B-4 Pin DIN to RJ-45 Cable Wiring B-6 Terminology Viii Product Features Introduction Radio Characteristics Approved Channels Package Checklist „ One Quick Start Guide Hardware Description Integrated HIGH-GAIN AntennaExternal Antenna Options Power Injector Module Ethernet Port Grounding Point Water Tight Test Point System Configuration Operating ModesWALL- and POLE-MOUNTING Bracket KIT POINT-TO-POINT Configuration POINT-TO-MULTIPOINT Configuration Beam Angle Page Bridge Link Planning Data Rates Radio Path Planning Antenna Height Miles 4.8 km 20 m 17 m 12 m Antenna Position and Orientation Radio Interference Weather Conditions Ethernet Cabling Grounding Hardware Installation Testing Basic Link Operation Using the POLE-MOUNTING BracketMount the Unit Fit the edges of the V-shaped Part into the slots Using the WALL-MOUNTING Bracket Page Connect External Antennas Connect the Power Injector Connect Cables to the UnitPage Check the LED Indicators LED Align Antennas High 11a Signal Page Networks with a Dhcp Server Networks Without a Dhcp Server Using the 3COM Installation CD Launching the 3COM Wireless Interface Device Manager Click on the Properties button to see the following screen Using the Setup Wizard First Time only Login Home page displays the Main Menu Setup Wizard Step Setup Wizard Step Setup Wizard Step Click Finish Click the OK button to complete the wizard System Configuration Advanced Setup Advanced Setup Advanced Setup System Identification TCP / IP Settings System Configuration Smart Monitor Radius Radius Authentication Authentication Authentication Authentication Authentication System Configuration Filter Control System Configuration Vlan Filter Control Vlan ID Configuring Snmp and Trap Message Parameters Snmp Snmp Trap Configuration Configuring SNMPV3 Users Configuring SNMPv3 Users Administration Changing the Password Telnet and SSH Settings Upgrading Firmware System Configuration „ IP Address IP address or host name of the Tftp server WDS and Spanning Tree Settings WDS and Spanning Tree Settings Root bridge acting as the master bridges parent WDS and Spanning Tree Settings Range Default System LOG Enabling System Logging Configuring Sntp Error Level Description Rssi Rssi Radio Interface Radio Settings a 802.11A Interface Configuring Common Radio Settings Radio Settings a and B/G System Configuration Normal Mode Turbo Mode System Configuration 802.11B/G Interface Radio Settings B/G Configuring WI-FI Multimedia Category WMM Access CategoriesAccess Voice WMM Backoff Times System Configuration Key Type See Wired Equivalent Privacy WEP Wi-Fi Protected Access WPA or WPA2 Wireless Security ConsiderationsSecurity MAC Radius Combination Authentication b Server Wired Equivalent Privacy WEP Radius Authentication and Encryption WPA Key Management WEP Keys Wi-Fi Protected Access WPA System Configuration Configuration settings for WPA are summarized below WPA Configuration Settings Status Information AP Status Station Status Static The client is using static WEP keys for encryption Security System Configuration Using the Command Line Interface Accessing the CLIConsole Connection Telnet Connection Entering Commands Keywords and Arguments Showing Commands Negating the Effect of Commands Command Modes Configuration Commands Command Groups Keystroke Commands General Commands ConfigureGeneral Commands Related Commands Default SettingCommand Mode Example Ping Command UsageExit Syntax Reset Syntax Reset board configuration Show history Show line System Management Commands System Management CommandsCountry Country countrycode Country Codes Prompt Syntax Prompt string no prompt Username System nameSyntax System name name no system name Syntax Username name Password Ip ssh-server enable Ip ssh-server port Default Setting Command ModeIp telnet-server enable Syntax Ip ssh-server port port-number Syntax Ip http port port-numberno ip http port Syntax No ip http server Default SettingIp http port Ip http server Ip https port Syntax Ip https port portnumber no ip https port Syntax No ip https server Default Setting Ip https server Syntax No web-redirect Default Setting Web-redirect APmgmtIP APmgmtIP multiple IPaddress subnetmask single IPaddress any Syntax APmgmtUI Snmp Telnet Web enable disable APmgmtUI Show apmanagement Snmp UI Show system US United States Show config Show version Ssid PRE Shared KEY WPA PSK Enabled Dot11StationRequestFail Nocountryset System Logging Commands System Loggign CommandsShow hardware Syntax No logging on Default Setting Logging onLogging host Syntax No logging console Default Setting Logging consoleLogging level Logging facility-type Syntax Logging facility-type type Logging clear Syntax Logging clear Command ModeSyntax Show logging Command Mode Show logging System Clock Commands System Clock CommandsSyntax Show event-log Command Mode Show event-log Sntp-server ip Sntp-server enableSyntax No sntp-server enable Syntax Sntp-server ip 1 2 ip Sntp-server date-time Sntp-server ip 6-38 show sntp Sntp-server timezone Syntax No sntp-server daylight-saving Default SettingSntp-server daylight-saving Syntax Sntp-server timezone hours Show sntp TAIPEI, Beijing Syntax No dhcp-relay enable Default Setting Dhcp Relay CommandsDhcp-relay enable Dhcp Relay Commands Dhcp-relay Syntax Dhcp-relay primary secondary ipaddressShow dhcp-relay Snmp Commands Snmp Commands Displays the Snmp v3 notification filter assignments Snmp-server community Snmp-server contact Snmp-server location Snmp-server enable server Snmp-server host Hostname Name of the host. Range 1-63 characters Snmp-server trap Command Line Interface Snmp-server engine-id Snmp-server user Syntax Snmp-server user user-name Snmp-server targets Snmp-server filter Default Setting Snmp-server filter-assignments Show snmp groups Show snmp users Syntax Show snmp groups Command ModeSyntax Show snmp users Command Mode Show snmp group-assignments Show snmp target Syntax Show snmp group-assignments Command ModeSyntax Show snmp target Command Mode Show snmp filter Syntax Show snmp filter-assignments Command Mode Show snmp filter-assignments Show snmp Syntax Bootfile filename Flash/File CommandsBootfile Flash/File Commands Syntax Copy ftp tftp file copy config ftp tftp Copy Delete Dir File information is shown below Show bootfile Radius Client Radius-server address Radius-server portSyntax Radius-server secondary port portnumber Radius-server retransmit Radius-server keySyntax Radius-server secondary key keystring Syntax Radius-server secondary retransmit numberofretries Radius-server port-accounting Radius-server timeoutSyntax Radius-server secondary timeout numberofseconds Syntax Radius-server secondary port-accounting portnumber Radius-server timeout-interim Radius-server radius-mac-format Radius-server vlan-format Syntax Radius-server vlan-format hex asciiShow radius 802.1X Authentication 802.1X Authentication 802.1xSyntax 802.1x supported required no Using the Command Line Interface 802.1x broadcast-key-refresh-rate Syntax 802.1x broadcast-key-refresh-rate rate 802.1x session-timeout 802.1x session-key-refresh-rateSyntax 802.1x session-key-refresh-rate rate Default 802.1x-supplicant enable802.1x-supplicant user Show authentication MAC Address Authentication Address filter entry Address filter defaultSyntax Address filter default allowed denied Syntax Address filter entry mac-addressallowed denied Address filter default 6-79 802.1x-supplicant user Address filter delete Mac-authentication serverSyntax Mac-authentication server local remote Syntax Address filter delete mac-address Filtering Commands Mac-authentication session-timeoutSyntax Mac-authentication session-timeout minutes Filtering Commands Filter local-bridge Outdoor 11a Building to Building config#filter local-bridge Syntax No filter uplink enable Default Syntax No filter ap-manage DefaultFilter uplink enable Filter ap-manage Filter ethernet-type enable Syntax No filter ethernet-type enable Default Filter ethernet-type protocol Show filters WDS Bridge Commands WDS Bridge Commands Bridge role WDS Bridge modeSyntax Bridge mode master slave Syntax Bridge role ap repeater bridge root-bridge Syntax Bridge channel-auto-sync enable disable Bridge channel-auto-sync Bridge-link child Bridge-link parentSyntax Bridge-link parent mac-address Syntax Bridge-link child index mac-address Bridge dynamic-entry age-time Syntax Bridge dynamic-entry age-time seconds Seconds Show bridge aging-time Show bridge filter-entry MAC Syntax Show bridge link ethernet wireless a g index Show bridge link Parent 00-12-34-56-78-9a Child Spanning Tree Commands Bridge stp enableBridge Commands Syntax No bridge stp enable Default Setting Bridge stp forwarding-delay Bridge stp hello-time Syntax Bridge stp hello-time time No bridge stp hello-timeBridge stp max-age Syntax Bridge stp max-age seconds No bridge stp max-age Bridge stp prioritySyntax Bridge stp prioritypriority no bridge stp priority Bridge-link path-cost Syntax Bridge-link path-cost index cost Bridge-link port-priority Syntax Bridge-link port-priority index priorityShow bridge stp Ethernet Interface Commands Syntax Show bridge stp Command ModeEhternet Interface Commands Interface ethernet Dns server Ip address Ip address ip-address netmask gateway no ip address Syntax No ip dhcp Default Setting Ip dhcp Syntax Speed-duplex auto 10MH 10MF 100MF 100MH Syntax No shutdown Default SettingSpeed-duplex Shutdown Syntax Show interface ethernet Default Setting Show interface ethernet Wireless Interface Commands Wireless Interface Commands Interface wireless Syntax Interface wireless a g Vap SpeedSyntax Speed speed Turbo Syntax Turbo static dynamic no turbo Multicast-data-rate Syntax Multicast-data-rate speed Channel Syntax Channel channel auto Transmit-power Radio-modeSyntax Radio-mode b g b+g Default Setting +g mode Command Mode PreambleSyntax Preamble long short-or-long Antenna control Syntax Antenna control diversity left right Antenna location Antenna idSyntax Antenna id antenna-id Syntax Antenna location indoor outdoor Beacon-interval Syntax Beacon-interval interval Dtim-period Syntax Dtim-period interval Rts-threshold Fragmentation-lengthSyntax Fragmentation-length length Syntax Rts-threshold threshold Syntax No super-a Default Setting Super-a Syntax No super-g Default Setting Super-gDescription Syntax No closed-system Default Setting SsidClosed-system Max-association Assoc-timeout-intervalSyntax Assoc-timeout-interval minutes Syntax Max-association count Auth-timeout-value Syntax Auth-timeout-value minutes Show interface wireless Syntax Show interface wireless a g vap-id 130 131 132 Rogue AP Detection Commands Show station Rogue-ap enable Rogue AP Commands Rogue-ap authenticate Syntax No rogue-ap authenticate Default Setting Rogue-ap duration Syntax Rogue-ap duration millisecondsRogue-ap interval Syntax Rogue-ap interval minutes Rogue-ap scan 138 Wireless Security Commands Wireless Security CommandsShow rogue-ap Auth 141 Syntax No encryption Default Setting Encryption Key Key index size type value no key index Transmit-key Syntax Transmit-key indexKey 6-143 encryption 6-142 transmit-key Cipher-suite Syntax Cipher-suite aes-ccmp tkip wep Micmode Syntax Micmode hardware software Wpa-pre-shared-key Syntax Wpa-pre-shared-key hex passphrase-keyvalue Pmksa-lifetime Syntax Pmksa-lifetime minutes Pre-authentication Link Integrity Commands Link Integrity CommandsSyntax No link-integrity ping-detect Default Setting Link-integrity ping-detect Link-integrity ping-host Link-integrity ping-intervalSyntax Link-integrity ping-interval interval Link-integrity ping-fail-retry Syntax Link-integrity ping-fail-retry countsLink-integrity ethernet-detect Iapp Commands Syntax No link-integrity ethernet-detect Default SettingShow link-integrity Vlan Commands Syntax No iapp DefaultIapp Vlan Commands Vlan Syntax No vlan enable DefaultCommand Description Management-vlanid Vlan-id Syntax Vlan-id vlan-id Wmm WMM CommandsWMM Commands Syntax No wmm supported required Wmm-acknowledge-policy Syntax Wmm-acknowledge-policy acnumber ack noack AP Access Point BSS Wireless client Wmmparam 161 162 Troubleshooting Page Page Page Cables and Pinouts TWISTED-PAIR Cable Assignments 10/100BASE-TX PIN Assignments STRAIGHT-THROUGH Wiring Crossover Wiring PIN DIN Connector Pinout Pin DIN Ethernet Port Pinout PIN DIN to RJ-45 Cable Wiring Glossary CSMA/CA Infrastructure Radius Virtual LAN Vlan Glossary-6 Index RTS STA