242

 

AT-TQ2403 - Management Software - User's Guide

 

 

 

 

 

 

 

 

 

To set the cipher suite to Both:

set bss wlan0bssInternal wpa-cipher-tkip on

 

 

Both - When the authentication algorithm

set bss wlan0bssInternal wpa-cipher-ccmp on

 

 

is set to "Both", both TKIP and AES clients

 

 

 

can associate with the access point. WPA

 

 

 

clients must have either a valid TKIP key or

 

 

 

a valid CCMP (AES) key to be able to

 

 

 

associate with the AP.

 

 

 

 

 

 

In this example, we’ll set the cipher suite to TKIP Only:

AT-TQ2403# set bss wlan0bssInternal wpa-cipher-tkip on

AT-TQ2403# set bss wlan0bssInternal wpa-cipher-ccmp off

5. Set the Authentication Server

You can use the built-in authentication server on the access point or an external RADIUS server.

Note: To use the built-in authentication server, set the RADIUS IP address to that used by the built-in server (127.0.0.1) and turn RADIUS accounting off (because it is not supported by the built-in server)

Feature or Setting

 

CLI Command

 

 

 

To set the AP to use the Built-in

 

set bss wlan0bssInternal radius-ip 127.0.0.1

Authentication Server:

 

 

 

 

 

 

 

 

Feature or Setting

 

CLI Command

 

 

 

To set the AP to use an External

 

set bss wlan0bssInternal radius-ip RADIUS_IP_Address

RADIUS Server:

 

where RADIUS_IP_Address is the IP address of an external RADIUS

 

 

 

 

server.

For this example, we’ll use an external RADIUS server with an IP address of 142.77.1.1:

AT-TQ2403# set bss wlan0bssInternal radius-ip 142.77.1.1

6. Set the RADIUS Key (For External RADIUS Server Only)

If you use an external RADIUS server, you must provide the RADIUS key. (If you use the built-in authentication server the RADIUS key is automatically provided.)

This command sets the RADIUS key to KeepSecret for an external RADIUS server.

AT-TQ2403# set bss wlan0bssInternal radius-key KeepSecret

7. Enable RADIUS Accounting (External RADIUS Server Only)

You can enable RADIUS Accounting if you want to track and measure the resources a particular user has consumed such system time, amount of data transmitted and received, and so on.