Specifications

11-42 Access Point Commands
set dap security
Setssecurityrequirements formanagementsessionsbetweenaRoamAboutswitchandits
Distributedaccesspoints.
Syntax
set dap security {require | optional | none}
Parameters
Defaults
Thedefaultsettingisoptional.
Mode
Enabled.
Usage
ThisparameterappliestoallDistributedAPsmanagedbytheswitch.Ifyouchangethesettingto
required,theswitchrequiresDistributedAPstohaveencryptionkeys.Theswitchalsorequires
theirfingerprintstobeverifiedinMSS.WhenAPsecurityisrequired,anAPcanestablisha
managementsession
withtheRoamAboutswitchonlyifitsfingerprinthasbeenverifiedbyyouin
MSS.
Achangetoaccesspointsecuritysupportdoesnotaffectmanagementsessionsthatarealready
established.Toapplythenewsettingtoanaccesspoint,restarttheaccesspoint.
Example
ThefollowingcommandconfiguresaRoamAbouttorequireDistributedaccesspointstohave
encryptionkeys:
RBT-8100# set dap security require
Related Commands
• setdapfingerprintonpage 11‐26
Note: The maximum transmission unit (MTU) for encrypted access point management traffic is 1498
bytes, whereas the MTU for unencrypted management traffic is 1474 bytes. Make sure the devices
in the intermediate network between the RoamAbout switch and Distributed access point can
support the higher MTU.
require RequiresallDistributedAPstohaveencryptionkeysthathavebeen
verifiedintheCLIbyanadministrator.IfanAPdoe snothavean
encryptionkeyorthekeyhasnotbeenverified,theRoamAboutswitch
doesnotestablishamanagementsessionwiththeAP.
optional AllowsAPstobe
managedbytheswitcheveniftheydonothave
encryptionkeysortheirkeyshavenotbeenverifiedby anadministrator.
EncryptionisusedforAPsthatsupportit.
none Encryptionisnotused,eveniftheAPsupportsit.