240

AT-TQ2403 - Management Software - User's Guide

 

 

2. Set the WPA Versions

Select the WPA version based on what types of client stations you want to support.

 

Feature or Setting

 

CLI Command

 

 

 

 

 

To support WPA clients:

 

set bss wlan0bssInternal wpa-allowed on

 

WPA: If all client stations on the

 

set bss wlan0bssInternal wpa2-allowed off

 

network support the original WPA but

 

 

 

none support the newer WPA2, then

 

 

 

use WPA.

 

 

 

 

 

 

 

 

 

 

 

Feature or Setting

 

CLI Command

 

 

 

 

 

To support WPA2 clients:

 

set bss wlan0bssInternal wpa-allowed off

 

WPA2: If all client stations on the

 

set bss wlan0bssInternal wpa2-allowed on

 

network support WPA2, we suggest

 

 

 

using WPA2 which provides the best

 

 

 

security per the IEEE 802.11i standard.

 

 

 

 

 

 

 

To support both WPA and WPA2

 

set bss wlan0bssInternal wpa-allowed on

 

clients:

 

set bss wlan0bssInternal wpa2-allowed on

 

Both: If you have a mix of clients, some

 

 

 

 

 

of which support WPA2 and others

 

 

 

which support only the original WPA,

 

 

 

select "Both". This lets both WPA and

 

 

 

WPA2 client stations associate and

 

 

 

authenticate, but uses the more robust

 

 

 

WPA2 for clients who support it. This

 

 

 

WPA configuration allows more

 

 

 

interoperability, at the expense of some

 

 

 

security.

 

 

 

 

 

 

For this example, we’ll set the access point to support WPA client stations only:

AT-TQ2403# set bss wlan0bssInternal wpa-allowed on

AT-TQ2403# set bss wlan0bssInternal wpa2-allowed off

3. Enable Pre-Authentication

If you set WPA versions to "WPA2" or "Both", you can enable pre-authentication for WPA2 clients.