Configuring security settings for a WLAN SSID profile

This section describes the procedure for configuring security settings for employee and voice network only. For information on guest network configuration, see Captive portal for guest access on page 56 .

If you are creating a new SSID profile, configure the WLAN and VLAN settings before defining security settings. For more information, see Configuring WLAN settings on page 23 and Configuring VLAN settings for a WLAN SSID profile on page 26.

Configuring security settings for an employee or voice network

To configure security settings for an employee or voice network:1.In Security, specify any of the following for SECURITY LEVEL:

• Enterprise —On selecting enterprise security level, the authentication options applicable to the enterprise network is displayed.

• Personal — On selecting personal security level, the authentication options applicable to the personalized network is displayed.

• Open — On selecting Open security level, the authentication options applicable to an open network is displayed:

The default security setting for a network profile is Personal.2. Based on the security level specified, specify the following parameters:

Table 10: Configuration parameters for WLAN security settings

Data pane item

Description

 

 

KEY

For Enterprise security level, select any of the following options from

MANAGEMENT

KEY MANAGEMENT:

 

•

WPA-2 Enterprise

 

• Both (WPA-2 & WPA)

 

•

WPA Enterprise

 

• Dynamic WEP with 802.1X — If you do not want to use a session key from the

 

 

RADIUS Server to derive pairwise unicast keys, set SESSION KEY FOR

 

 

LEAP to Enabled. This is required for old printers that use dynamic WEP

 

 

through Lightweight Extensible Authentication Protocol (LEAP)

 

 

authentication. The SESSION KEY FOR LEAP feature is Disabled by default.

 

NOTE: When WPA-2 Enterprise and Both (WPA2-WPA) encryption types are

 

selected and if 802.1x authentication method is configured, the

 

OPPURTUNISTIC KEY CACHING (OKC) is enabled by default. If OKC is

 

enabled, a cached Pairwise Master Key (PMK) is used when the client roams to

 

a new AP. This allows faster roaming of clients without the need for a complete

 

802.1x authentication. OKC roaming can be configured only for the Enterprise

 

security level.

 

 

 

For Personal security level, select an encryption key from KEY MANAGEMENT.

•For WPA-2 Personal, WPA Personal, and Both (WPA-2&WPA) keys, specify the following parameters:

•PASSPHRASE FORMAT: Select a passphrase.format. The options are available are 8-63 alphanumeric characters and 64 hexadecimal characters.

•Enter a passphrase in PASSPHRASE and reconfirm.

•For STATIC WEP, specify the following parameters:

•Select an appropriate value for WEP KEY SIZE from the WEP key size. You can specify 64-bit or 128-bit .

27 Wireless configuration

HP Cloud Network Manager User Guide