Nortel Networks 2300 manual Configuring RSN, Creating a Service Profile for RSN, Enabling RSN

Configuring User Encryption 207

Configuring RSN (802.11i)

Robust Security Network (RSN) provides 802.11i support. RSN uses AES encryption. You can configure a service profile to support RSN clients exclusively, or to support RSN with WPA clients, or even RSN, WPA and WEP clients.

The configuration tasks for a service profile to use RSN are similar to the tasks for WPA:

1Create a service profile for each SSID that will support RSN clients.

2Enable the RSN IE in the service profile.

3Enable the cipher suites you want to support in the service profile. (TKIP is enabled by default.) Optionally, you also can change the countermeasures timer value for TKIP.

4Map the service profile to the radio profile that will control IEEE settings for the radios.

5Assign the radio profile to the radios and enable the radios.

If you plan to use PSK authentication, you also need to enable this authentication method and enter an ASCII passphrase or a hexadecimal (raw) key.

Creating a Service Profile for RSN

Encryption parameters apply to all users who use the SSID configured by a service profile. To create a service profile, use the following command:

set service-profile name

To create a new service profile named rsn, type the following command:

23x0# set service-profile rsn

success: change accepted.

Enabling RSN

To enable RSN, you must enable the RSN information element (IE) in the service profile. To enable the RSN IE, use the following command:

set service-profile name rsn-ie {enable disable}

To enable RSN in service profile wpa, type the following command:

23x0# set service-profile rsn rsn-ie enable

success: change accepted.

Specifying the RSN Cipher Suites

To use RSN, at least one cipher suite must be enabled. You can enable one or more of the following cipher suites:

•CCMP

•TKIP

•40-bit WEP

•104-bit WEP

Nortel WLAN Security Switch 2300 Series Configuration Guide