WPA/WPA2 Enterprise Radius, Key | USRobotics Instant802 APSDK

Professional Access Point Administrator Guide

Field

Key

Description

The Pre-shared Key is the shared secret key for WPA-PSK. Enter a string of at least 8 characters to a maximum of 63 characters.

WPA/WPA2 Enterprise (RADIUS)

Wi-Fi Protected Access 2 (WPA2) with Remote Authentication Dial-In User Service (RADIUS) is an implementation of the Wi-Fi Alliance IEEE 802.11i standard, which includes Advanced Encryption Standard (AES), Counter mode/CBC-MAC Protocol (CCMP), and Temporal Key Integrity Protocol (TKIP) mechanisms. The Enterprise mode requires the use of a RADIUS server to authenticate users, and configuration of user accounts via the Cluster menu’s User Management page.

This security mode is backward-compatible with wireless clients that support the original WPA.

When configuring WPA2 Enterprise (RADIUS) mode, you can use either the built-in RADIUS server or an external RADIUS server that you provide. The Professional Access Point built-in RADIUS server supports Protected EAP (PEAP) and MSCHAP V2.

If you select WPA/WPA2 Enterprise (RADIUS) Security Mode, you must provide the following:

Field

WPA Versions

Description

Select the types of clients you want to support:

•WPA—If all clients on the network support the original WPA, but none support the newer WPA2, then select WPA

•WPA2—If all clients on the network support WPA2, USRobotics suggests using WPA2, which provides the best security per the IEEE 802.11i standard.

•Both—If you have a mix of clients, some of which support WPA2 and others which sup- port only the original WPA, select Both. This option lets both WPA and WPA2 clients associate and authenticate, but uses the more robust WPA2 for clients who support it. This WPA configuration allows more interoperability, at the expense of some security.

Security - 117

Image 117

USRobotics Instant802 APSDK manual WPA/WPA2 Enterprise Radius, Key

Contents

R46.1224.00 rev 2.0 07/06 Professional Access Point Administrator GuidePage USA Professional Access Point Administrator Guide Professional Access Point Administrator Guide Contents Advanced Class Structure, Commands, and ExamplesClass and Field Reference Support Information Robotics Corporation Two 2 Year Limited Warranty Viii Online Help Features Administrator Audience Typographical Conventions Recommended Settings, Notes and Cautions Getting Started Ieee Standards Support and Wi-Fi Compliance Features and BenefitsWireless Features Security Features Guest Interface Clustering and Auto-ManagementNetworking What’s Next? Snmp SupportMaintainability Professional Access Point Option Default Settings Related Information Default Settings for the Professional Access Point Transmit Power Ieee 802.11 ModeSecurity Mode None Authentication Type Administrator’s Computer What the Access Point Does Not ProvideRequired Software or Component Description Required Component Description Wireless Client Computers How Does the Access Point Obtain an IP Address at Startup? Dynamic IP AddressingRequired Component Static IP Addressing Recovering an IP Address Professional Access Point Administrator Guide Unpack the access point Access Point Hardware and PortsWhat’s inside the Access Point? Connect the access point to network and power UK Users Hardware Connections for a Guest Vlan Professional Access Point Administrator Guide Professional Access Point Administrator Guide Professional Access Point Administrator Guide Field Default Setting Viewing Basic Settings for Access PointsLog on to the Web User Interface Username Configure Basic Settings and start the wireless network Default Configuration Make Sure the Access Point is Connected to the LAN Wall Mounting the Access Point Test LAN Connectivity with Wireless Clients Web User Interface Navigating to Basic Settings Field Description Review / Describe the Access PointMAC Address Firmware Version Administrator Password Provide Administrator Password and Wireless Network NameAdministrator Password again Wireless Network Name Ssid Set Configuration Policy for New Access Points New Access PointsField Summary of Settings Update Basic Settings Basic Settings for a Standalone Access Point Your Network at a Glance Understanding Indicator IconsIcon Description Professional Access Point Administrator Guide Cluster Access Points Understanding Clustering Navigating to Access Points Management What is a Cluster? How Many APs Can a Cluster Support?What Kinds of APs Can Cluster? Settings Not Shared by the Cluster Cluster Mode Standalone ModeCluster Formation Auto-Synchronization of Cluster Configuration Understanding Access Point SettingsCluster Size and Membership Intra-Cluster Security Modifying the Location Description Removing an Access Point from the Cluster Http//IPAddressOfAccessPoint Adding an Access Point to a Cluster Professional Access Point Administrator Guide Professional Access Point Administrator Guide User Management Navigating to User Management for Clustered Access Points Viewing User AccountsAdding a User Enabling and Disabling User Accounts Editing a User AccountEnabling a User Account Real Name Removing a User Account Restoring a User Database from a Backup FileBacking Up and Restoring a User Database Disabling a User Account Professional Access Point Administrator Guide Professional Access Point Administrator Guide Navigating to Session Monitoring Sessions User AP Location User MAC Idle Rate Understanding Session Monitoring Information Signal Utilization Rx Total Tx Total Error Rate Viewing Session Information for Access PointsSorting Session Information Refreshing Session Information Professional Access Point Administrator Guide Channel Management Understanding Channel Management Navigating to Channel ManagementHow it Works Overview Overlapping Channels Background Information Example a Network before and after Channel Management Configuring and Viewing Channel Management Settings Stopping/Starting Automatic Channel Assignment Viewing Last Proposed Set of Changes Viewing Current Channel Assignments and Setting LocksIP Address Band Current Locked IP Address Current Proposed Advanced Use these channels when applying channel assignmentsChange channels if interference is reduced by at least Determine if there is better set of channels every Apply channel modifications even when the network is busy Professional Access Point Administrator Guide Wireless Neighborhood Understanding Wireless Neighbourhood Information Navigating to Wireless Neighborhood Viewing Wireless Neighborhood Display neighboring APsCluster Neighbors Details for a Cluster Member AP Viewing Details for a Cluster Member Signal ChannelBeacon Age Interfaces Status Wireless Settings Ethernet Wired Settings Log Relay Host for Kernel Messages Events Understanding Remote Logging Setting Up the Log Relay HostSYSLOGD=-r Tmp/APsyslog Enabled Log Relay Host EnabledEtc/init.d/sysklogd restart Relay Host Events Log Transmit/Receive Statistics Client Associations ErrorsName Ssid Total Packets Link Integrity Monitoring What is the Difference Between an Association and a Session? Select AP Detection Enabled Neighboring Access Points Beacon Int TypePrivacy # of Beacons Last BeaconRates Professional Access Point Administrator Guide Advanced Ethernet Wired Settings Navigating to Ethernet Wired Settings Managing Guest Access Setting the DNS NameConfiguring an Internal LAN and a Guest Network Enabling and Disabling Guest Access Guest Access For Guest access, useSpecifying a Virtual Guest Network Virtual Wireless Networks Configuring Internal Interface Ethernet Settings Default Gateway Static IP AddressDNS Nameservers Configuring Guest Interface Ethernet Wired Settings Updating SettingsSubnet Professional Access Point Administrator Guide Navigating to Wireless Settings Wireless Settings 802.11d Regulatory Domain Support Configuring 802.11d Regulatory Domain Support Configuring the Radio Interface Configuring Internal LAN Wireless SettingsMode Channel Read-only field Configuring Guest Network Wireless Settings Understanding Security Issues on Wireless Networks How Do I Know Which Security Mode to Use?Security When to Use No Security User Authentication Key ManagementEncryption Algorithm Encryption Algorithms When to Use WPA/WPA2 Enterprise Radius How Does Station Isolation Protect the Network? Does Prohibiting the Broadcast of Ssid Enhance Security? Navigating to Security Settings Configuring Security SettingsBroadcast SSID, Station Isolation, and Security Mode Static WEP None Professional Access Point Administrator Guide Key Length Transfer Key IndexBits Key Type Open System Shared Key Both Authentication Algorithm Example of Using Static WEP Static WEP with Transfer KEY Indexes on Client Devices Ieee Enable Radius Accounting Authentication ServerWPA/WPA2 Personal PSK Radius IP Cipher Suites WPA Versions Key WPA/WPA2 Enterprise Radius Improving the security of the network Enable pre-authentication Enter the Radius IP Professional Access Point Administrator Guide Guest Login Configuring Guest Access Using Virtual LANsConfiguring a Guest Network on a Virtual LAN DSL/T1 Using the Guest Network Configuring the Welcome Screen Captive Portal Configuring a Guest Network on a Dedicated Access Point Configuring Guest Access without Virtual LANs Navigating to Virtual Wireless Network Settings Virtual Wireless Networks Virtual Wireless Network Configuring VLANsOne Two Ton Professional Access Point Administrator Guide Radio Understanding Radio Settings Navigating to Radio Settings Configuring Radio SettingsStatus On/Off Mode Ieee 802.11bSuper G Maximum Stations Broadcast a subset of its supported rate sets Rate Sets Professional Access Point Administrator Guide MAC Filtering Navigating to MAC Filtering Settings Filter Using MAC Filtering Stations List Professional Access Point Administrator Guide Load Balancing Understanding Load BalancingSpecifying Limits for Utilization and Client Associations Navigating to Load Balancing Settings Configuring Load BalancingLoad Balancing and QoS Utilization for Disassociation Utilization for No New AssociationsStations Threshold for Disassocia Tion To apply your changes, click Update Settings Understanding QoS Quality of ServiceQoS and Load Balancing 802.11e and WMM Standards Support QoS Queues and Parameters to Coordinate Traffic Flow Professional Access Point Administrator Guide Random Backoff and Minimum / Maximum Contention Windows Configuring QoS Queues Navigating to QoS Settings Configuring AP Edca Parameters Enabling/Disabling Wi-Fi Multimedia Data 0 Voice Configuring Station Edca Parameters Transmission Opportunity Limit Txop Limit Professional Access Point Administrator Guide Wireless Distribution System Understanding the Wireless Distribution SystemUsing WDS to Bridge Distant Wired LANs LAN Segment Backup Links and Unwanted Loops in WDS Bridges Security Considerations Related to WDS Bridges Navigating to WDS Settings Configuring WDS Settings Remote Address Local AddressBridge with Internal Network Example of Configuring a WDS Link DisabledWEP Key Local Address Professional Access Point Administrator Guide Time Protocol Navigating to Time Protocol Settings Enabling and Disabling a Network Time Protocol NTP Server NTP Server Professional Access Point Administrator Guide Understanding Snmp Snmp Navigating to Simple Network Management Protocol Read-only Community Name entire Enable SnmpAllow Snmp SET Requests Read-write community name for per Configuring Your Network Management System Rebooting and Upgrading Your Access Point Using SnmpSource hostname or subnet Upgrading your Access Point Rebooting Your Access Point Using SnmpFtp//testuser1testuser1@192.168.1.9922/54531.1.23.tar Ftp//192.168.1.100/54531.1.24.tar Professional Access Point Administrator Guide Reset Configuration Reboot Upgrade Professional Access Point Administrator Guide Navigating to Backup and Restore Settings Backup/Restore Restoring Access Point Settings to a Previous Configuration Backing up Configuration Setting for an Access Point Professional Access Point Administrator Guide Command Line Interface Professional Access Point Administrator Guide Basic Settings Yes Described in Backup/Restore on Telnet Connection to the Access Point How to Access the CLI for an Access PointUSR5453-AP login Password USR5453-AP login admin Password Enter help for help Telnet Function Telnet Command SSH2 Connection to the Access PointStatus Status Down USR5453-AP# Login as Commands and Syntax Quick View of Commands and How to Get HelpSSH Function SSH Command Set ssh Status Get log CommandGet log-entry Get bss wlan0bssInternal Add radius-user wally Command Description Remove radius-user wally Getting Help on Commands at the CLI Ready to Get Started? Command Usage and Configuration Examples Professional Access Point Administrator Guide Interface Description Understanding Interfaces as Presented in the CLIWlan0vwn1 Vlan1234 Saving Configuration Changes Get interface vlanVLANID roleGet interface vlan1234 role Basic Setting Example Get Both the IP Address and MAC Address Get the MAC Address for an Access Point Wlan0wds1 Wds Down Wlan0wds2 Wlan0wds3 USR5453-AP# Get the Location of the Access Point Get the Firmware Version for the Access PointSet the Location for an Access Point Get the Current Password Cluster Command Example Access Point and Cluster SettingsGet MAC Addresses for all Access Points in the Cluster User Accounts User Account Command Example Get All User AccountsUSR5453-AP#get radius-user all name name USR5453-AP#set radius-user samantha disabled USR5453-AP#set radius-user samantha password westportAdd Users USR5453-AP#add radius-user samantha username samantha Remove a User Account Status Command ExampleUSR5453-AP#remove radius-user wally Larry samantha endora darren USR5453-AP#get interface br0 Get Current Wireless Radio Settings Get Current Settings for the Ethernet Wired Guest Interface Get Status on Events USR5453-AP# get radio wlan0 detailUSR5453-AP# get log-entry Priority Daemon USR5453-AP#set log relay-enabled USR5453-AP#set log relay-host myserver USR5453-AP#set log relay-hostUSR5453-AP#set log relay-port USR5453-AP# get log Get neighbouring Access Points Get Transmit / Receive StatisticsGet Client Associations USR5453-AP# get detected-ap USR5453-AP#get detected-ap Wired Interface Command Example Ethernet Wired Interface Get Wired Guest Interface Settings Get Wired Internal Interface SettingsSet Up Guest Access Get Summary View of Internal and Guest Interfaces USR5453-AP#get interface brguest status down USR5453-AP#remove bridge-port br0 interface eth0USR5453-AP# get bss USR5453-AP#get interface brguest status up USR5453-AP# get interface brguestUSR5453-AP#get bridge-port brguest USR5453-AP#get bridge-port br0 Name Interface USR5453-AP#get dhcp-client status up Get/Change the Connection Type Dhcp or Static IPUSR5453-AP#set dhcp-client status up USR5453-AP#get interface br0 detail USR5453-AP#get interface br0 static-ip Re-Configure Static IP Addressing ValuesUSR5453-AP#set interface br0 static-ip USR5453-AP#get interface br0 static-mask Security Wireless Interface Get the Current Security Mode Security Command ExampleGet Detailed Description of Current Security Settings USR5453-AP#get interface wlan0 security none Set the Broadcast Ssid Allow or Prohibit Enable / Disable Station Isolation USR5453-AP#set interface wlan0 security none Set Security to NoneSet Security to Static WEP USR5453-AP#set interface wlan0 security static-wep Set bss wlan0bssInternal shared-key-authentication off Set bss wlan0bssInternal open-system-authentication onSet bss wlan0bssInternal shared-key-authentication on USR5453-AP#set interface wlan0 wep-key-ascii yes USR5453-AP#get interface wlan0 detail USR5453-AP#set interface wlan0 security dot1x Set Security to IeeeRadius Option Example USR5453-AP#set bss wlan0bssInternal radius-ip Set Bss USR5453-AP#set bss wlan0bssInternal radius-key secretUSR5453-AP#set bss wlan0bssInternal radius-accounting off USR5453-AP#get interface wlan0 security dot1x Set Security to WPA/WPA2 Personal PSK USR5453-AP#set interface wlan0 security wpa-personalWPA Option Example Set bss wlan0bssInternal wpa-cipher-tkip on Cipher Suite Option ExampleSet bss wlan0bssInternal wpa-cipher-ccmp off Set bss wlan0bssInternal wpa-cipher-tkip off Set Security to WPA/WPA2 Enterprise Radius USR5453-AP#get interface wlan0 security wpa-personal USR5453-AP#set interface wlan0 security wpa-enterprise Enable Pre-Authentication USR5453-AP#set bss wlan0bssInternal radius-key KeepSecret Cipher Suite Option USR5453-AP#get interface wlan0 security wpa-enterprise USR5453-AP#set bss wlan0bssInternal radius-accounting on View Guest Login Settings Enable/Configure Guest Login WelcomeEnable/Disable the Guest Welcome Set Guest Welcome Page Text Review Guest Login Settings Configuring Multiple BSSIDs on Virtual Wireless NetworksConfiguring Virtual Wireless Network One on Radio One Set interface wlan0vwn1 security wpa-enterprise Radio Setting Command Example Radio SettingsGet Ieee 802.11 Radio Mode Creating VWN Two on Radio One with WPA security Get Basic Radio Settings Get All Radio SettingsGet Radio Channel Get Supported Rate Set Configure Radio SettingsUSR5453-AP#get supported-rate Get Basic Rate Set USR5453-AP#set radio wlan0 beacon-interval USR5453-AP#set radio wlan0 mode gUSR5453-AP#set bss wlan0bssInternal dtim-period USR5453-AP#get bss wlan0bssInternal dtim-period USR5453-AP#set radio wlan0 rts-threshold USR5453-AP#set radio wlan0 fragmentation-thresholdUSR5453-AP#add basic-rate wlan0 rate USR5453-AP#add supported-rate wlan0 rate USR5453-AP#get supported-rate wlan0 rate MAC Filtering Specify an Accept or Deny List Set bss wlan0bssGuest mac-acl-name GuestAdd MAC Addresses of Client Stations to the Filtering List USR5453-AP#remove mac-acl Guest mac Get Current MAC Filtering SettingsGet bss interface mac-acl-mode USR5453-AP#get bss wlan0bssGuest mac-acl-mode accept-list Quality of Service QoS CommandLoad Balancing Enable/Disable Wi-Fi Multimedia QoS Command Example About Access Point and Station Edca Parameters Understanding the Queues for Access Point and StationData Access Point Station Get QoS Settings on the Client Station Get QoS Settings on the Access PointUSR5453-AP#get wme-queue Set Arbirtation Interframe Spaces Aifs Setting Minimum and Maximum Contention Windows cwmin, cwmax Set wme-queue wlan0 with queue QueueName to aifs AIFSValueUSR5453-AP#set wme-queue wlan0 with queue vo to aifs Set the Maximum Burst Length burst on the Access Point USR5453-AP#set wme-queue wlan0 with queue vi cwmin 7 cwmaxSet tx-queue wlan0 with queue QueueName to burst burstValue USR5453-AP#set wme-queue wlan0 with queue vo to txop-limit USR5453-AP#set tx-queue wlan0 with queue data2 to burst Configuring a WDS Link Wireless Distribution SystemGetting Details on a WDS Configuration USR5453-AP#set interface wlan0wds0 remote-mac 00E0B8761B14 Time Protocol Set ntp server ntp.instant802.comUSR5453-AP#get ntp detail Reset the Access Point to Factory Defaults Reboot the Access PointUSR5453-AP#factory-reset Keyboard Shortcuts and Tab Completion Help Keyboard Shortcuts Tab Completion and HelpAction on CLI Keyboard Shortcut USR5453-AP#get system v USR5453-AP#get system version USR5453-AP# set mac-acl CLI Class and Field Overview Has name? \ # of instances? One Multiple Field Reference on CLI Class Relationships Class Index AssociationClass Description Field Index AuthenticatedInterface Station Bridge-port Basic-rate Bss Path-costPriority Description StatusRadio Beacon-interface Dtim-period MacMax-stations Ignore-broadcast-ssid Channel-planner Open-system-authenticationCluster Cluster-member Default ConfigNo-external-updates Debug Field Description Detected-ap Capability Beacon-interval Type Erp Dhcp-clientBeacons Last-beacon Host Dot11Debug Dot11d Domain Dns-12Static-dns-12 Static-domain Mask Interface Type Rx-errorsStatic-ip Static-mask Rx-compressed Tx-errorsRx-multicast Tx-packets Ip-route Kickstartd JvmLog Gateway Depth Log-entryNumber Time Ntp Mac-aclMessage Server Portal Welcome-screenWelcome-screen-text Max-bss Max-bss Tx-powerChannel-policy Mode Rts-threshold WmewifinoacktestFragmentation-threshold Load-balance-disassociation-utilization Serial Radius-userSnmp Ro-community Supported-rate SshSystem Rw-community Encrypted-password PasswordPassword-initialized Telnet Tx-queue CommunityQueue Wme-queue Web-ui Possible Solution Professional Access Point Detection Utility does not find Cannot access the Web User Interface Access point My wireless device cannot find the wireless network Possible Solution Am experiencing poor wireless link quality Wireless Distribution System WDS Problems and Solutions Reboot or Reset Access Point Cluster Recovery Click Stop Clustering Stop Clustering and Reset Each Access Point in the Cluster Professional Access Point Administrator Guide Country Webmail Voice Support Information UAE Detachable Antenna Information Declaration of ConformityFCC Radiation Exposure Statement Radio and Television Interference For Canadian Users Industry Canada ICUL Listing/CUL Listing Declaration of Conformity CE Compliance Regulatory Channel Frequency EU Health ProtectionEU Detachable Antenna Information Professional Access Point Administrator Guide Professional Access Point Administrator Guide Robotics Corporation Two 2 Year Limited Warranty Obtaining Warranty Service Limitations Disclaimer 802.1x 802802.2 802.3 802.11d 802.11b802.11e 802.11f AES Bridge BeaconBroadcast Broadcast Address Ccmp BssidCGI CSMA/CA Dhcp DCFDNS DOM Edcf EAPESS Ethernet Gateway FrameHtml Http Ibss Infrastructure ModeIeee Intrusion Detection ISP IPSecJitter Latency Ldap LANLLC MAC NIC NATNTP OSI Packet Loss PacketPHY PID PSK PPP RC4 RadiusRssi RTP Snmp SsidSTP TCP Supported Rate SetTCP/IP Tkip Unicast UDPURL Vlan WDS WANWEP Wins WPA2 WMM WPAWrap XML Index DCF Ieee Snmp WDS Index-328