User`s manual

182
DWS-1008 User’s Manual
D-Link Systems, Inc.
Conguring User Encryption
182D-Link Systems, Inc.
To create a new service prole named wpa, type the following command:
DWS-1008# set service-prole wpa
success: change accepted.
Enabling WPA
To enable WPA, you must enable the WPA information element (IE) in the service prole. To
enable the WPA IE, use the following command:
set service-prole name wpa-ie {enable | disable}
To enable WPA in service prole wpa, type the following command:
DWS-1008# set service-prole wpa wpa-ie enable
success: change accepted.
Specifying the WPA Cipher Suites
To use WPA, at least one cipher suite must be enabled. You can enable one or more of the
following cipher suites:
• CCMP
• TKIP
• 40-bit WEP
• 104-bit WEP
By default, TKIP is enabled and the other cipher suites are disabled.
To enable or disable cipher suites, use the following commands:
set service-prole name cipher-ccmp {enable | disable}
set service-prole name cipher-tkip {enable | disable}
set service-prole name cipher-wep104 {enable | disable}
set service-prole name cipher-wep40 {enable | disable}
To enable the 40-bit WEP cipher suite in service prole wpa, type the following command:
DWS-1008# set service-prole wpa cipher-wep40 enable
success: change accepted.
After you type this command, the service prole supports TKIP and 40-bit WEP.
Changing the TKIP Countermeasures Timer Value
By default, MSS enforces TKIP countermeasures for 60,000 ms (60 seconds) after a second
MIC failure within a one-minute interval. To change the countermeasures timer value, use the
following command: