AT-TQ2403 Management Software User's Guide

241

 

 

Feature or Setting

CLI Command

 

 

To enable pre-authentication for WPA2

set bss wlan0bssInternal rsn-preauthentication on

clients:

 

Enable pre-authentication if you want

 

WPA2 wireless clients to send

 

pre-authentication packet. The

 

pre-authentication information will be

 

relayed from the access point the client

 

is currently using to the target access

 

point. Enabling this feature can help

 

speed up authentication for roaming

 

clients who connect to multiple access

 

points.

 

 

 

To disable pre-authentication for

set bss wlan0bssInternal rsn-preauthentication off

WPA2 clients:

 

 

 

This option does not apply if you set the WPA Version to support "WPA" clients only because the original

WPA does not support this pre-authentication

For our example, we’ll disable pre-authentication.

AT-TQ2403# set bss wlan0bssInternal rsn-preauthentication off

4. Set the Cipher Suites

Set the cipher suite you want to use. The options are:

 

Feature or Setting

 

CLI Command

 

 

 

 

 

To set the cipher suite to TKIP only:

 

set bss wlan0bssInternal wpa-cipher-tkip on

 

TKIP: Temporal Key Integrity Protocol

 

set bss wlan0bssInternal wpa-cipher-ccmp off

 

(TKIP), which is the default.

 

 

 

 

 

 

 

To set the cipher suite to CCMP (AES)

 

set bss wlan0bssInternal wpa-cipher-tkip off

 

only:

 

set bss wlan0bssInternal wpa-cipher-ccmp on

 

CCMP (AES) - Counter mode/CBC- MAC

 

 

 

 

 

Protocol (CCMP) is an encryption method

 

 

 

for IEEE 802.11i that uses the Advanced

 

 

 

Encryption Algorithm (AES).