Manuals / Enterasys Networks / Computer Equipment / Network Router

Enterasys Networks RBT-4102 Using the CLI to Configure WPA2 Pre-Shared Key Security, Examples

Models: RBT-4102

1 168

Download 168 pages 49.88 Kb

Page 135

Security

Using the CLI to Configure WPA2 Pre-Shared Key Security

From the interface wireless or interface wireless: VAP configuration modes, use the authentication command to select wpa2‐psk authentication. Use the wpa‐pre‐shared‐key password command to enter a password.

Examples

RoamAbout 4102#

RoamAbout 4102#configure

Enter configuration commands, one per line. End with CTRL/Z

RoamAbout 4102(config)#int wireless g

Enter Wireless configuration commands, one per line.

RoamAbout 4102(if-wireless g)#authentication wpa2-psk required

Data Encryption is set to Enabled.

WPA Clients Mode is set to Disabled.

WPA2 Clients Mode is set to Required.

WPA2 Multicast Cipher is set to AES-CCMP.

WPA2 Unicast Ciphers can accept AES-CCMP only.

WPA2 Authentication is set to Pre-Shared Key.

RoamAbout 4102(if-wireless g)#wpa-pre-shared-key pass 1234567890

RoamAbout 4102(if-wireless g)#exit

RoamAbout 4102#

To display the current settings, use the show interface wireless a or the show interface wireless g command from the Executive mode.

Examples

RoamAbout 4102#sho int wireless g

Wireless Interface Information

=========================================================================

----------------Identification	-------------------------------------------: ETS
Description	-------------------------------------------: ETS
SSID	: ETS
802.11g band	:	802.11b + 802.11g
Channel	:	6
Status	: Enable
----------------Antenna--------------------------------------------------	: External
Antenna Select	: External
Antenna ID	: 0x0183(Ext. RBTES-BG-S1490M,14dBi)
Ack-TimeOut	:	0	us
----------------802.11 Parameters----------------------------------------
Transmit Power	: FULL (6 dBm)
Automated Data Rate	: ENABLED
Max Station Data Rate	: 54Mbps
Multicast Data Rate	: 1Mbps
Fragmentation Threshold	:	2346 bytes
RTS Threshold	:	2347 bytes
Beacon Interval	:	100 TUs
Association Timeout Interval	:	5	Mins
DTIM Interval	:	2	beacons
Preamble Length	:	LONG
Maximum Association	:	255 stations
Native VLAN ID	:	1
Software Retry Mode	:	DISABLED
Software Retry No	:	3
Hardware Retry No	:	4
----------------Security-------------------------------------------------	: DISABLED
Secure Access	: DISABLED

RoamAbout RBT-4102 Wireless Access Point Configuration Guide 4-99

Image 135

Enterasys Networks RBT-4102 manual Using the CLI to Configure WPA2 Pre-Shared Key Security, Examples

Contents

RBT-4102 Wireless Access Point Configuration Guide Wireless NetworkingEnterasys RoamAbout Page Enterasys Networks, Inc 50 Minuteman Road Andover, MA You and Enterasys agree as follows Enterasys Networks, Inc. Firmware License AgreementBEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT CAREFULLY READ THIS LICENSE AGREEMENT5. UNITED STATES GOVERNMENT RESTRICTED RIGHTS. The enclosed Program i was developed solely at private expense ii contains “restricted computer software” submitted with restricted rights in accordance with section 52.227‐19 a through d of the Commercial Computer Software‐Restricted Rights Clause and its successors, and iii in all respects is proprietary data belonging to Enterasys and/or its suppliers. For Department of Defense units, the Program is considered commercial computer software in accordance with DFARS section 227.7202‐3 and its successors, and use, duplication, or disclosure by the U.S. Government is subject to restrictions set forth herein 11. ASSIGNMENT. You may not assign, transfer or sublicense this Agreement or any of Your rights or obligations under this Agreement, except that You may assign this Agreement to any person or entity which acquires substantially all of Your stock assets. Enterasys may assign this Agreement in its sole discretion. This Agreement shall be binding upon and inure to the benefit of the parties, their legal representatives, permitted transferees, successors and assigns as permitted by this Agreement. Any attempted assignment, transfer or sublicense in violation of the terms of this Agreement shall be void and a breach of this Agreement 4. TITLE AND PROPRIETARY RIGHTS Enterasys Networks, Inc. Software License Agreementto Enterasys 12. GENERAL viii Chapter 4 Advanced Configuration ContentsChapter 2 Network Configuration Chapter 3 Initial ConfigurationFilter Control and VLANs Appendix A Default Settings Appendix B TroubleshootingIndex Page Firmware Version Support PrefacePurpose of This Manual Intended AudienceGetting Help ConventionDescription Overview IntroductionPolicy FeaturesApplications 1-4 Introduction ApplicationsOverview Network ConfigurationFigure 2-1 Ad Hoc Wireless LAN Network TopologiesAd Hoc Wireless LAN no Access Point or Bridge Figure 2-2 Infrastructure Wireless LAN Infrastructure Wireless LANFigure 2-3 Infrastructure Wireless LAN for Roaming Infrastructure Wireless LAN for Roaming Wireless PCsFigure 2-4 Infrastructure Wireless Bridge Infrastructure Wireless BridgeNetwork Topologies 2-6 Network ConfigurationOverview Initial ConfigurationInitial Setup Using the CLI Required ConnectionsLogging In c. Reboot the RoamAbout RBT‐4102 Using Web Management If applicable, the County Code page appears, go to step d. Click OK The access point reboots, and the Login window appears 4. Enter the following information, and click Apply d. Click Apply at the bottom of the page h. Click OK The access point reboots c. Specify a new password in the Password field Table 4-1 Advanced Configuration Advanced ConfigurationUsing the Web Interface Using the Command Line Interface CLIPage Table 4-1 Advanced Configuration continuedMenu DescriptionIdentification Using Web Management to Configure System InformationUsing the CLI to Configure System Information TCP / IP Settings Using Web Management to Configure TCP/IP The access point only supports SSH version Using the CLI to Configure TCP/IP TCP/IP ConfigurationExample Example SSH ConfigurationEthernet Settings Configuration ExampleSpeed-duplexOper 100Base-TX Full Duplex Auto Negotiate Disable Speed-duplexAdmin 100Base-TX Full DuplexTCP / IP Settings 4-10 Advanced ConfigurationRADIUS Using Web Management to Configure RADIUS Description Table 4-2 RADIUS AttributesRADIUS Accounting Attribute RADIUS Accounting enables or disables the AP to send RADIUS accounting information for clients to the RADIUS accounting server. Default DisableRADIUS Accounting Attribute Using the CLI to Configure RADIUSTable 4-2 RADIUS Attributes continued ExampleAuthentication Using Web Management to Configure Authentication Example Using the CLI to Configure AuthenticationFilter Control and VLANs Using Web Management to Configure Filter Control and VLANsIBSS Relay Control, in conjunction with radio interface and Virtual AP VAP IBSS settings, controls whether clients associated with an interface or VAP can establish wireless communications with clients associated with other interfaces or VAPs. Default All VAP mode Using the CLI to Configure Filter Control and VLANs CLI Commands for VLAN SupportExample Page Example CLI Commands for FilteringExample SVP CommandsCDP Settings Using Web Management to Configure CDPGlobal Status Port Status Disable ‐ disables this AP from using CDP Example Using the CLI to Configure CDPRogue AP Detection Using Web Management to Configure Rogue AP DetectionExample Using the CLI to Configure Rogue AP Detection802.11a Rogue AP Status SNMP Using Web Management to Configure SNMPDescription Table 4-3 SNMP NotificationsNotification SNMP allows you to enable or disable SNMP management access and also enables the access point to send SNMP traps notifications. SNMP management is enabled by defaultTable 4-3 SNMP Notifications continued User specifies string to identify an SNMP user. 32 characters maximum Security LevelSNMP Targets SNMP FilterIP Address is the IP address of the user Using the CLI to Configure SNMP CLI Commands for SNMPExamples Examples CLI Commands for Configuring SNMPv3 Users and GroupsRoamAbout 4102#show snmp group-assignments GroupName TPS RoamAbout RBT-4102 Wireless Access Point Configuration GuidePassphrase PrivType DES Passphrase =============================================Example CLI Commands for Configuring SNMPv3 TargetsCLI Commands for Configuring SNMPv3 Trap Filters ExampleChanging the Password AdministrationUsing Web Management to Change the Password Enabling and Disabling Com Port Using the CLI to Change the PasswordUsing Web Management to Enable and Disable Com Port Using the CLI to Enable and Disable Com PortUpgrading Firmware Using Web Management to Upgrade Firmware Example Using the CLI to Upgrade FirmwareSystem Log Using Web Management to Configure System LogDescription Error LevelTable 4-4 Logging Level Descriptions Logging Level sets the severity level for event loggingExamples Using the CLI to Configure System LogUsing Web Management to Configure SNTP Examples Using the CLI to Configure SNTPWDS and STP 4-50 Advanced ConfigurationWDS and STP WDS and STP Using Web Management to Configure WDS and STPRoamAbout RBT-4102 Wireless Access Point Configuration Guide Select WDS & STP from the menuBridge enables/disables STP on the wireless bridge. Default Disabled ‐ Range 0‐65535 ‐ Default Using the CLI to Configure WDS ExamplesExample Example Using the CLI to Configure STPRadio Interface Radio Signal CharacteristicsUsing Web Management to Configure Interface Radio Settings Radio SettingsValue Table 4-5 VLAN ID RADIUS AttributesNumber RADIUS AttributeNote The Antenna ID must be selected in conjunction with the Antenna Control Method to configure proper use of any of the antenna options Default 802.11b and 802.11g faster. Using higher DTIM values reduces the power used by stations in Power Save mode, but delays the transmission of broadcast/multicast frames. Range 1‐255 beacons Default 2 beacons Using the CLI to Configure the 802.11a Interface Radio Settings ExampleSet any other parameters as required 802.11 Parameters Authentication ParametersQuality of Service ExampleAdmission Control No Example Using the CLI to Configure the 802.11b/g Interface Radio SettingsAuthentication Parameters Quality of ServiceExample Radio Interface WMM Operation Wi-Fi Multimedia WMM ConfigurationTable 4-6 WMM Access Categories AccessFigure 4-1 WMM Backoff Wait times Using Web Management to Configure WMMExamples Using the CLI to Configure WMMSecurity AntennaAdmission Control No Using Web Management to Configure Virtual APs Virtual APs VAPs ConfigurationRadio Interface 4-74 Advanced ConfigurationExamples Using the CLI to Configure Virtual APs802.11 Parameters To view VAP settings, use the show interface wireless ag vap# commandAdmission Control No Mechanism SecurityTable 4-7 Security Mechanisms SecurityUsing Web Management to Configure Security Settings Wired Equivalent Privacy WEPKey Len specifies whether to use 64, 128 or 152 bit keys Security RoamAbout RBT-4102 Wireless Access Point Configuration GuideTo use Pre‐Authentication, you must have the following AuthenticationHexadecimal uses a key made up of a string of 64 hexadecimal numbers 802.1x AuthenticationThe 802.1x EAP packets are also used to pass dynamic unicast session keys and static broadcast keys to wireless clients. Session keys are unique to each client and are used to encrypt and correlate traffic passing between a specific client and the access point. You can also enable broadcast key rotation, so the access point provides a dynamic broadcast key and changes it at a specified interval If you specify RADIUS MAC for this default interface or VAP, you must specify the following parameters Example Using the CLI to Configure WPA Pre-Shared KeyUsing the CLI to Configure WPA over 802.1X Security ExampleExample g commandAuthentication Parameters Quality of ServiceAC1Background Examples Using the CLI to Configure Local MAC Authentication802.11a 4-90 Advanced ConfigurationIndex MAC Address StatusExamples Using the CLI to Configure RADIUS MAC AuthenticationExample Examples Using the CLI to Configure WEP Shared Key SecurityPage Examples Using the CLI to Configure WEP over 802.1x SecurityWPA Key Mgmt Mode Examples Using the CLI to Configure WPA2 SecurityWPA PSK Key Type Using the CLI to Configure WPA2 Pre-Shared Key Security ExamplesExamples Multicast cipher Menu Status InformationTable 4-8 Status Status information is described in Table 4‐8Status Information Using Web Management to View AP Status4-102 Advanced Configuration Select AP Status from the menuSystem Up Time is the length of time the management agent has been up Examples Using the CLI to Display AP StatusUsing Web Management to View CDP Status Example Using the CLI to Display CDP StatusUsing Web Management to View Station Status RoamAbout RBT-4102 Wireless Access Point Configuration GuideStatus Information Station Address is the MAC address of the wireless client Using Web Management to View Neighbor AP Detection Status Example Using the CLI to View Neighbor AP Detection StatusForward Transitions Using Web Management to View WDS-STP StatusUsing the CLI to View WDS-STP Status show bridgeExample show bridge link Child StatusExample Example Root Bridge StatusUsing Web Management to View Event Logs Examples Using the CLI to View Event LogsFrom the global configuration mode, use the show logging command command from the Executive mode. clear command from the GlobalStatus Information RoamAbout RBT-4102 Wireless Access Point Configuration GuideStatus Information 4-118 Advanced ConfigurationParameter Default SettingsFeature DefaultParameter FeatureDefault A-2 Default SettingsParameter FeatureDefault RoamAbout RBT-4102 Wireless Access Point Configuration Guide A-3Parameter FeatureDefault A-4 Default SettingsParameter FeatureDefault RoamAbout RBT-4102 Wireless Access Point Configuration Guide A-5Parameter FeatureDefault A-6 Default SettingsTroubleshooting Steps Troubleshooting4. If you forgot or lost the password Maximum Distance Tables Table B-1 802.11a Wireless Distance Speed and Distance Ranges1Table B-2 802.11b Wireless Distance Speed and Distance Ranges1 Table B-3 802.11g Wireless Distance Table Speed and Distance Ranges1Maximum Distance Tables B-4 TroubleshootingNumerics IndexCLI 4-28 detection WDS 4-50 bridge 4-52 CLI Index-4