Allied Telesis AT-TQ2403 Network Card User Manual


 
242 AT-TQ2403 - Management Software - User's Guide
To set the cipher suite to Both:
Both - When the authentication algorithm
is set to "Both", both TKIP and AES clients
can associate with the access point. WPA
clients must have either a valid TKIP key or
a valid CCMP (AES) key to be able to
associate with the AP.
set bss wlan0bssInternal wpa-cipher-tkip on
set bss wlan0bssInternal wpa-cipher-ccmp on
In this example, we’ll set the cipher suite to TKIP Only:
AT-TQ2403# set bss wlan0bssInternal wpa-cipher-tkip on
AT-TQ2403# set bss wlan0bssInternal wpa-cipher-ccmp off
5. Set the Authentication Server
You can
use the built-in authentication server on the access point or an external RADIUS server.
Note: To use the built-in authentication server, set th
e RADIUS IP address to that used
by the built-in server (127.0.0.1) and turn RADIUS accounting off (because it is not
supported by the built-in server)
Feature or Setting CLI Command
To set the AP to use the Built-in
Authentication Server:
set bss wlan0bssInternal radius-ip 127.0.0.1
Feature or Setting CLI Command
To set the AP to use an External
RADIUS Server:
set bss wlan0bssInternal radius-ip RADIUS_IP_Address
where RADIUS_IP_Address is the IP address of an external RADIUS
server.
For this example, we’ll use an external RADIUS server with an IP address of 142.77.1.1:
AT-TQ2403#
set
bss
wlan0bssInternal
radius-ip
142.77.1.1
6. Set the RADIUS Key (For External RADIUS Server Only)
If you use an externa
l RADIUS server, you must provide the RADIUS key. (If you use the built-in
authentication server the RADIUS key is automatically provided.)
This command sets the RADIUS key to KeepSecret for an external RADIUS server.
AT-TQ2403#
set bss wlan0bssInternal radius-key KeepSecret
7. Enable RADIUS Accounting (External RADIUS Server Only)
You can enable RADIUS Accounting if you want to track and measure the resources a particular user has
consumed such system time, amount of data transmitted and received, and so on.