Nortel Networks 2300 Switch User Manual


 
242 Configuring APs
NN47250-500 (320657-F Version 02.01)
RSA
aaaa:aaaa:aaaa:aaaa:
aaaa:aaaa:aaaa:aaaa
If the AP is already installed, you can display the fingerprint in WSS Software. (See “Finding the fingerprint”
(page 243).)
Encryption options
By default, a WSS can configure and manage a Distributed AP regardless of whether the AP has an encryption
key, and regardless of whether you have confirmed the fingerprint by setting it in WSS Software.
You can configure a WSS to require Distributed APs to have an encryption key. In this case, the switch also
requires their fingerprints to be confirmed in WSS Software. When AP security is required, an AP can
establish a management session with the WSS only if its fingerprint has been confirmed by you in WSS
Software.
If you do not want any APs to use encryption for management information, you can disable the feature.
Table 10 lists the AP security options and whether an AP can establish a management session with a WSS
based on the option settings.
Verifying an AP’s fingerprint on a WSS
To verify an AP’s fingerprint, find the fingerprint and use the set ap fingerprint command to enter the finger-
print in WSS Software.
Table 10: AP security requirements
AP Security
Setting
AP Has
Fingerprint?
Fingerprint
Verified in WSS
Software?
AP Can Establish
Management Session with
Switch?
AP Security
Required
Yes Ye s Ye s
No No
No Not Applicable No
AP Security
Optional
Yes Ye s Ye s1
1. WSS Software generates a log message listing the AP serial number and fingerprint so
you can verify the AP’s identity. (See “Fingerprint log message” (page 244).)
No
Yes
1
No Not Applicable Yes