Nortel Networks 2300 Enabling Dynamic WEP in a WPA Network, 23x0# show service-profile wpa-wep

Configuring User Encryption 215

Enabling Dynamic WEP in a WPA Network

The following example shows how to configure WSS Software to provide authentication and encryption for 801.X dynamic WEP clients, and for 801.X WPA clients using TKIP. This example assumes that pass-through authentication is used for all users. The commands are the same as those in “Enabling WPA with TKIP” on page 213, with the addition of a command to enable a WEP cipher suite. The WEP cipher suite allows authentication and encryption for both WPA and non-WPA clients that want to authenticate using dynamic WEP.

1Create an authentication rule that sends all 802.1X users of SSID mycorp in the EXAMPLE domain to the server group shorebirds for authentication. Type the following command:

23x0# set authentication dot1x ssid thiscorp EXAMPLE\* pass-through shorebirds

2Create a service profile named wpa-wepfor the SSID. Type the following command:

23x0# set service-profile wpa-wep success: change accepted.

3Set the SSID in the service profile to thiscorp. Type the following command:

23x0# set service-profile wpa-wep ssid-name thiscorp success: change accepted.

4Enable WPA in service profile wpa-wep. Type the following command:

23x0# set service-profile wpa-wep wpa-ie enable success: change accepted.

5Enable the WEP40 cipher suite in service profile wpa-wep. Type the following command:

23x0# set service-profile wpa-wep cipher-wep40 enable success: change accepted.

TKIP is already enabled by default when WPA is enabled.

6Display the service profile wpa-wepto verify the changes. Type the following command:

23x0# show service-profile wpa-wep

ssid-name:	mycorp		ssid-type:	crypto
beacon:		yes	auth-fallthru: last-resort
WEP Key 1	value:	<none>	WEP Key 2	value:	<none>
WEP Key 3	value:	<none>	WEP Key 4	value:	<none>
WEP Unicast Index:		1	WEP Multicast Index:		1
Long Preamble:		YES	Shared Key Auth:		NO
WPA enabled:

ciphers: cipher-tkip, cipher-wep40

authentication: 802.1X

TKIP countermeasures time: 60000ms

7Map service profile wpa-wepto radio profile rp2. Type the following commands:

23x0# set radio-profile rp2 service-profile wpa-wep success: change accepted.

8Apply radio profile rp2 to radio 1 on port 5 and to radios 1 and 2 on port 11, enable the radios, and verify the configuration changes. Type the following commands:

23x0# set ap 5,11 radio 1 radio-profile rp2 mode enable

Nortel WLAN Security Switch 2300 Series Configuration Guide