User`s manual

186
DWS-1008 User’s Manual
D-Link Systems, Inc.
Conguring User Encryption
186D-Link Systems, Inc.
If you plan to use PSK authentication, you also need to enable this authentication method
and enter an ASCII passphrase or a hexadecimal (raw) key.
Creating a Service Prole for RSN
Encryption parameters apply to all users who use the SSID congured by a service prole.
To create a service prole, use the following command:
set service-prole name
To create a new service prole named rsn, type the following command:
DWS-1008# set service-prole rsn
success: change accepted.
Enabling RSN
To enable RSN, you must enable the RSN information element (IE) in the service prole. To
enable the RSN IE, use the following command:
set service-prole name rsn-ie {enable | disable}
To enable RSN in service prole wpa, type the following command:
DWS-1008# set service-prole rsn rsn-ie enable
success: change accepted.
Specifying the RSN Cipher Suites
To use RSN, at least one cipher suite must be enabled. You can enable one or more of the
following cipher suites:
• CCMP
• TKIP
• 40-bit WEP
• 104-bit WEP
By default, TKIP is enabled and the other cipher suites are disabled.
To enable or disable cipher suites, use the following commands:
set service-prole name cipher-ccmp {enable | disable}
set service-prole name cipher-tkip {enable | disable}
set service-prole name cipher-wep104 {enable | disable}
set service-prole name cipher-wep40 {enable | disable}
To enable the CCMP cipher suite in service prole rsn, type the following command:
DWS-1008# set service-prole rsn cipher-ccmp enable
success: change accepted.