USRobotics Instant802 APSDK manual Cipher Suite Option

Professional Access Point Administrator Guide

Cipher Suite Option

Both - When the authentication algorithm is set to "Both", both TKIP and AES clients can asso- ciate with the access point. WPA clients must have either a valid TKIP key or a valid CCMP (AES) key to be able to associ- ate with the AP.

To set the cipher suite to Both:

Example

set bss wlan0bssInternal wpa-cipher-tkip on

set bss wlan0bssInternal wpa-cipher-ccmp on

In this example, you will set the cipher suite to TKIP Only:

USR5453-AP#set bss wlan0bssInternal wpa-cipher-tkip on

USR5453-AP#set bss wlan0bssInternal wpa-cipher-ccmp off

5. Set the Authentication Server

You can use the built-in authentication server on the access point or an external RADIUS server.

Note

To use the built-in authentication server, set the RADIUS IP address to that used by the built-in server (127.0.0.1) and turn RADIUS accounting off (because it is not supported by the built-in server)

RADIUS Option	Example
To set the AP to use the Built-in	set bss wlan0bssInternal radius-ip 127.0.0.1
Authentication Server:
To set the AP to use an External	set bss wlan0bssInternal radius-ip RADIUS_IP_Address
RADIUS Server:
	where RADIUS_IP_Address is the IP address of an external RADIUS server.

In this example, you will use an external RADIUS server with an IP address of 142.77.1.1:

USR5453-AP#set bss wlan0bssInternal radius-ip 142.77.1.1

6. Set the RADIUS Key (For External RADIUS Server Only)

If you use an external RADIUS server, you must provide the RADIUS key. (If you use the built-in authentication server the RADIUS key is automatically provided.)

This command sets the RADIUS key to KeepSecret for an external RADIUS server.

USR5453-AP#set bss wlan0bssInternal radius-key KeepSecret

7. Enable RADIUS Accounting (External RADIUS Server Only)

You can enable RADIUS Accounting if you want to track and measure the resources a particular user has

Class Structure, Commands, and Examples - 226