Configuring User Encryption 205
Nortel WLAN Security Switch 2300 Series Configuration Guide
To enable PSK authentication, use the following command:
set service-profile name auth-psk {enable | disable}
To enable PSK authentication in service profile wpa, type the following command:
23x0# set service-profile wpa auth-psk enable
success: change accepted.
Configuring a Global PSK Passphrase or Raw Key for All Clients
To configure a global passphrase for all WPA clients, use the following command:
set service-profile name psk-phrase passphrase
The passphrase must be exactly 63 characters long, including blanks. If you use blanks, you must enclose the string in
quotation marks.
To configure service profile wpa to use passphrase 1234567890123<>?=+&% The quick brown fox jumps over the lazy
sl, type the following command:
23x0# set service-profile wpa psk-phrase "1234567890123<>?=+&% The quick brown
fox jumps over the lazy sl"
success: change accepted.
As an alternative to entering a passphrase, which WSS Software converts into a key, you can enter the key itself in raw
hexadecimal format. To enter a PSK key in raw format, use the following command:
set service-profile name psk-raw hex
For hex, type a 64-bit ASCII string representing a 32-digit hexadecimal number. Enter the two-character ASCII form of
each hexadecimal number.
Examples
To configure service profile wpa to use a raw PSK with PSK clients, type a
command such as the following:
23x0# set service-profile wpa psk-raw
c25d3fe4483e867d1df96eaacdf8b02451fa0836162e758100f5f6b87965e59d
success: change accepted.
Disabling 802.1X Authentication for WPA
To disable 802.1X authentication for WPA clients, use the following command:
set service-profile name auth-dot1x {enable | disable}
To disable WPA authentication in service profile wpa, type the following command:
23x0# set service-profile wpa auth-dot1x disable
success: change accepted.
Note. This command does not disable 802.1X authentication for non-WPA clients.
