AT-TQ2403 Management Software User's Guide

237

 

 

2. Set the WPA Versions

Select the WPA version based on what types of client stations you want to support.

Feature or Setting

CLI Command

 

 

To support WPA clients:

set bss wlan0bssInternal wpa-allowed on

WPA: If all client stations on the network

set bss wlan0bssInternal wpa2-allowed off

support the original WPA but none support

 

the newer WPA2, then use WPA.

 

 

 

To support WPA2 clients:

set bss wlan0bssInternal wpa-allowed off

WPA2: If all client stations on the network

set bss wlan0bssInternal wpa2-allowed on

support WPA2, we suggest using WPA2

 

which provides the best security per the

 

IEEE 802.11i standard.

 

 

 

To support both WPA and WPA2 clients:

set bss wlan0bssInternal wpa-allowed on

Both: If you have a mix of clients, some of

set bss wlan0bssInternal wpa2-allowed on

which support WPA2 and others which

 

support only the original WPA, select

 

"Both". This lets both WPA and WPA2

 

client stations associate and authenticate,

 

but uses the more robust WPA2 for clients

 

who support it. This WPA configuration

 

allows more interoperability, at the

 

expense of some security.

 

 

 

For this example, we’ll set the access point to support Both WPA and WPA2 client stations:

AT-TQ2403# set bss wlan0bssInternal wpa-allowed on

AT-TQ2403# set bss wlan0bssInternal wpa2-allowed on

3. Set the Cipher Suites

Set the cipher suite you want to use. The options are:

Feature or Setting

CLI Command

 

 

To set the cipher suite to TKIP only:

set bss wlan0bssInternal wpa-cipher-tkip on

TKIP: Temporal Key Integrity Protocol

set bss wlan0bssInternal wpa-cipher-ccmp off

(TKIP), which is the default.