Command Groups

802.1x broadcast-key-refresh-rate

This command sets the interval at which the broadcast keys are refreshed for stations using 802.1x dynamic keying.

Syntax

802.1x broadcast-key-refresh-rate <rate>

rate is the interval at which the access point rotates broadcast keys. Range: 0 ‐ 1440 minutes

Default Setting

0 (Disabled)

Command Mode

Interface Configuration (Wireless)

Interface Configuration (Wireless): VAP

Command Usage

Use this command for the default interface or any of the seven VAPs configurable per radio interface.

The access point uses EAPOL (Extensible Authentication Protocol Over LANs) packets to pass dynamic unicast session and broadcast keys to wireless clients. The 802.1x broadcast‐ key‐refresh‐rate command specifies the interval after which the broadcast keys are changed. The 802.1x session‐key‐refresh‐rate command specifies the interval after which unicast session keys are changed.

Dynamic broadcast key rotation allows the access point to generate a random group key and periodically update all key‐management capable wireless clients.

Example

The following example shows setting the 802.1x broadcast key refresh rate for the default interface and a VAP.

RoamAbout 3000#configure

Enter configuration commands, one per line. End with CTRL/Z RoamAbout 3000(config)#interface wireless a

Enter Wireless configuration commands, one per line.

RoamAbout 3000(if-wireless a)#802.1x broadcast-key-refresh-rate 5 RoamAbout 3000(if-wireless a)#vap 1

RoamAbout 3000(if-wireless a: VAP[1])#802.1x broadcast-key-refresh-rate 5

RoamAbout 3000(if-wireless a: VAP[1])#exit RoamAbout 3000#

Related Commands

show interface wireless page A‐151

802.1x page A‐89

RoamAbout Access Point 3000 Configuration Guide A-91

Page 217
Image 217
Enterasys Networks 9033900-04 manual 802.1x broadcast-key-refresh-rate