Nortel Networks 2300 manual Enabling WPA with Tkip

Configuring User Encryption 213

Enabling WPA with TKIP

The following example shows how to configure WSS Software to provide authentication and TKIP encryption for 801.X WPA clients. This example assumes that pass-through authentication is used for all users. A RADIUS server group performs all authentication and authorization for the users.

1Create an authentication rule that sends all 802.1X users of SSID mycorp in the EXAMPLE domain to the server group shorebirds for authentication. Type the following command:

23x0# set authentication dot1x ssid mycorp EXAMPLE\* pass-through shorebirds

2Create a service profile named wpa for the SSID. Type the following command:

23x0# set service-profile wpa success: change accepted.

3Set the SSID in the service profile to mycorp. Type the following command:

23x0# set service-profile wpa ssid-name wpa success: change accepted.

4Enable WPA in service profile wpa. Type the following command:

23x0# set service-profile wpa wpa-ie enable success: change accepted.

TKIP is already enabled by default when WPA is enabled.

5Display the service profile wpa to verify the changes. Type the following command:

23x0# show service-profile wpa

ssid-name:	mycorp		ssid-type:	crypto
beacon:		yes	auth-fallthru: last-resort
WEP Key 1	value:	<none>	WEP Key 2	value:	<none>
WEP Key 3	value:	<none>	WEP Key 4	value:	<none>
WEP Unicast Index:		1	WEP Multicast Index:		1
Shared Key Auth:		NO
WPA enabled:

ciphers: cipher-tkip

authentication: 802.1X

TKIP countermeasures time: 60000ms

6Map service profile wpa to radio profile rp1. Type the following commands:

23x0# set radio-profile rp1 service-profile wpa success: change accepted.

7Apply radio profile rp1 to radio 1 on port 5 and to radios 1 and 2 on port 11, enable the radios, and verify the configuration changes. Type the following commands:

23x0# set ap 5,11 radio 1 radio-profile rp1 mode enable success: change accepted.

23x0# set ap 11 radio 2 radio-profile rp1 mode enable success: change accepted.

Nortel WLAN Security Switch 2300 Series Configuration Guide