Specifications

Configuring Access Points
RoamAbout Mobility System Software Configuration Guide 9-35
Enabling LED Blink Mode
BlinkmodemakesanAPeasytoidentify.WhenblinkmodeisenabledonAP‐xxxmodels,the
healthandradioLEDsalternatelyblinkgreenandamber.Bydefault,blinkmodeisdisabled.Blink
modecontinuesuntilyoudisableit.LEDblinkmodeisdisabledbydefault.
ChangingtheLEDblink
modedoesnotalteroperationoftheaccesspoint.Onlythebehaviorof
theLEDsisaffected.
ToenableordisableLEDblinkmode,usethefollowingcommand:
set {ap | dap dap-num} blink {enable | disable}
Configuring AP- RoamAbout Switch Security
MSSprovidessecurityformanagementtrafficbetweenRoamAboutSwitchesandDistributed
APs.Whenthefeatureisenabled,allmanagementtrafficbetweenDistributedAPsthatsupport
encryptionandtheRoamAboutSwitchisencrypted.Securityissettooptionalbydefault.
TheencryptionusesRSAasthepublickeycryptosystem,withAES‐CCM
fordataencryptionand
integritycheckingandHMAC‐MD5forkeyedhashingandmessageauthenticationduringthe
keyexchange.BulkdataprotectionisprovidedbyAESinCCMmode(AESCTRforencryption
andAES‐CBC‐MACfordataintegrity).A64‐bitMessageAuthenticationCodeisusedfordata
integrity.
Encryption Key Fingerprint
APsareconfiguredwithanencryptionkeypairatthefactory.Thefingerprintforthepublickeyis
displayedonalabelonthebackoftheAP,inthefollowingformat:
RSA
aaaa:aaaa:aaaa:aaaa:
aaaa:aaaa:aaaa:aaaa
IftheAPisalreadyinstalled,youcandisplaythefingerprintinMSS.(Referto“Findingthe
Fingerprint”onpage 9‐37.)
Note: The maximum transmission unit (MTU) for encrypted AP management traffic is 1498 bytes,
whereas the MTU for unencrypted management traffic is 1474 bytes. Make sure the devices in the
intermediate network between the RoamAbout Switch and AP can support the higher MTU.