User Manual

Professional Access Point
Administrator Guide
Class Structure, Commands, and Examples - 209
3. Set the Cipher Suites
Set the cipher suite you want to use. The options are:
In this example, you will set the cipher suite to Both:
USR5453-AP# set bss wlan0bssInternal wpa-cipher-tkip on
USR5453-AP# set bss wlan0bssInternal wpa-cipher-ccmp on
4. Set the Pre-shared Key
The Pre-shared Key is the shared secret key for WPA-PSK. Enter a string of at least 8 characters to a
maximum of 63 characters. Following are two examples; the first sets the key to "
SeCret ! ", the second
sets the key to "
KeepSecret ".
Ex 1. USR5453-AP# set interface wlan0 wpa-personal-key "SeCret !"
or
Ex 2. USR5453-AP# set interface wlan0 wpa-personal-key KeepSecret
Cipher Suite Option Example
TKIP: Temporal Key Integrity
Protocol (TKIP), which is the
default.
To set the cipher suite to TKIP
only:
set bss wlan0bssInternal wpa-cipher-tkip on
set bss wlan0bssInternal wpa-cipher-ccmp off
CCMP (AES) - Counter mode/
CBC-MAC Protocol (CCMP) is
an encryption method for IEEE
802.11i that uses the Advanced
Encryption Algorithm (AES).
To set the cipher suite to CCMP
(AES) only:
set bss wlan0bssInternal wpa-cipher-tkip off
set bss wlan0bssInternal wpa-cipher-ccmp on
Both - When the authentication
algorithm is set to "Both", both
TKIP and AES clients can asso-
ciate with the access point.
WPA clients must have either a
valid TKIP key or a valid CCMP
(AES) key to be able to associ-
ate with the AP.
To set the cipher suite to Both:
set bss wlan0bssInternal wpa-cipher-tkip on
set bss wlan0bssInternal wpa-cipher-ccmp on
Note
Shared secret keys can include spaces and special characters if the key is placed inside quotation
marks as in the first example above. If the key is a string of characters with no spaces or special char-
acters in it, the quotation marks are not necessary as in the second example above..