Allied Telesis AT-TQ2403 Network Card User Manual


 
238 AT-TQ2403 - Management Software - User's Guide
Feature or Setting CLI Command
To set the cipher suite to CCMP (AES)
only:
CCMP (AES) - Counter mode/CBC-
MAC Protocol (CCMP) is an
encryption method for IEEE 802.11i
that uses the Advanced Encryption
Algorithm (AES).
set bss wlan0bssInternal wpa-cipher-tkip off
set bss wlan0bssInternal wpa-cipher-ccmp on
To set the cipher suite to Both:
Both - When the authentication
algorithm is set to "Both", both TKIP
and AES clients can associate with the
access point. WPA clients must have
either a valid TKIP key or a valid CCMP
(AES) key to be able to associate with
the AP.
set bss wlan0bssInternal wpa-cipher-tkip on
set bss wlan0bssInternal wpa-cipher-ccmp on
In this example, we’ll set the cipher suite to Both:
AT-TQ2403# set bss wlan0bssInternal wpa-cipher-tkip on
AT-TQ2403# set bss wlan0bssInternal wpa-cipher-ccmp on
4. Set the Pre-shared Key
The Pre-s
hared Key is the shared secret key for WPA-PSK. Enter a string of at least 8 characters to a
maximum of 63 characters. Following are two examples; the first sets the key to "SeCret !", the second
sets the key to "KeepSecret".
Ex1.
AT-TQ2403# set interface wlan0 wpa-personal-key “SeCret !”
Ex2.
AT-TQ2403# set interface wlan0 wpa-personal-key “KeepSecre”
Note: Shared secret keys can include spaces and special characters if t
he key is placed
inside quotation marks as in the first example above. If the key is a string of characters with
no spaces or special characters in it, the quotation marks are not necessary as in the
second example above.
5. Get Current Security Settings After Re-Configuring to WPA/WPA2 Personal (PSK)
Now we can use the "get" co
mmand again to view the updated security configuration and see the results
of our new settings.
The following command gets the security mode in use on the Internal network:
AT-TQ2403# get interface wlan0 security