User's Manual

Deployment Guide 117
EXAMPLE 5: SETTING SSIDS
EXAMPLE 5: SETTING SSIDS
An SSID (service set identifier) is an alphanumeric string that identifies a set of authentication and encryption
services that wireless clients and access points use when communicating with each other. In this example, you
define the following three SSIDs, which are also shown in Figure 14:
Figure 14 SSIDs Providing Network Access to Different Users
SSID Name Security Protocol Other
voip Key method: WPA2-PSK
Encryption method: TKIP
Preshared key (ASCII): CmFwbo1121
Authentication method: Open
A MAC filter restricts access only to VoIP phones
specified in the filter.
corp Key method: WPA2-EAP (802.1X)
Encryption method: CCMP (AES)
Authentication method: EAP (802.1X)
Employees use the RADIUS server specified in
"Example 7: Defining AAA RADIUS Settings" on
page 123 to authenticate themselves using IEEE
802.1X.
guest Key method: Auto-(WPA or WPA2)-PSK
Encryption method: Auto-TKIP or CCMP (AES)
Preshared key (ASCII): guest123
Authentication method: Open
and
for captive web portal: CWP-guest1
For guest access using a preshared key, the
receptionist supplies guests with the SSID name and
configuration details, including the preshared key,
when they arrive.
Note: You can define up to seven SSIDs for a single radio in access mode. If hive members use one radio for
wireless backhaul communications, then they must use the other radio in access mode. In this case, a
HiveAP can have a maximum of seven SSIDs. If hive members send backhaul traffic completely over wired
links, then both radios can be in access mode and a HiveAP can have a maximum of 14 SSIDs.
User Profiles SSID Definitions
SSID: corp
Key method: WPA2-802.1X (WPA2 Enterprise)
Encryption method: CCMP (AES)
Authentication method: EAP (802.1X)
SSID: voip
Key method: WPA2-PSK (WPA2 Personal)
Encryption method: TKIP
Preshared key (ASCII): CmFwbo1121
Authentication method: Open
SSID: guest
Key method: Auto-(WPA or WPA2)-PSK
Encryption method: Auto-TKIP or CCMP (AES)
Preshared key (ASCII): guest123
Authentication method: Open
and
for captive web portal: CWP-guest1
VoIP Phones
Corporate Network
Visiting Guest
at Corporate Site
HiveAP
RADIUS Servers for
802.1X Authentication
VoIP
IT
Emp
Unregistered-
Guests
(for captive
web portal)
Guests