Specifications

Configuring WPA
RoamAbout Mobility System Software Configuration Guide 10-9
Changing the TKIP Countermeasures Timer Value
Bydefault,MSSenforcesTKIPcountermeasuresfor60,000ms(60seconds)afterasecondMIC
failurewithinaone‐minuteinterval.Tochangethecountermeasurestimervalue,usethe
followingcommand:
set service-profile name tkip-mc-time wait-time
Example
Tochangethecountermeasureswaittimeinserviceprofilewpato30seconds,typethefollowing
command:
RBT-8100# set service-profile wpa tkip-mc-time 30000
success: change accepted.
Enabling PSK Authentication
Bydefault,WPAuses802.1Xdynamickeying.Ifyouplantousestatickeys,youmustenablePSK
authenticationandconfigureapassphraseortherawkey.Youcanconfigurethepassphraseor
keyglobally.YoualsocanconfigurekeysonanindividualMACclientbasis.
Bydefault,802.1Xauthenticationremains
enabledwhenyouenablePSK authentication.
ToenablePSKauthentication,usethefollowingcommand:
set service-profile name auth-psk {enable | disable}
Example
ToenablePSKauthenticationinserviceprofilewpa,typethefollowingcommand:
RBT-8100# set service-profile wpa auth-psk enable
success: change accepted.
Configuring a Global PSK Passphrase or Raw Key for All Clients
ToconfigureaglobalpassphraseforallWPAclients,usethefollowingcommand:
set service-profile name psk-phrase passphrase
Thepassphrasemustbebetween8to63characterslong,includingblanks.Ifyouuseblanks,you
mustenclosethestringinquotationmarks.
Examples
Toconfigureserviceprofilewpatousepassphrase12345678 90123<>?=+&%Thequickbrownfox
jumpsoverthelazysl,typethefollowingcommand:
RBT-8100# set service-profile wpa psk-phrase "1234567890123<>?=+&% The quick
brown fox jumps over the lazy sl"
success: change accepted.
Asanalternativetoenteringapassphrase,whichMS Sconvertsintoakey,youcanenterthekey
itselfinrawhexadecimalformat.Toenter a PSKkeyinrawformat,usethefollowingcommand:
set service-profile name psk-raw hex
Forhex,typea64‐bitASCIIstringrepresentinga32‐digithexadecimalnumber.Enterthetwo‐
characterASCIIformofeachhexadecimalnumber.
ToconfigureserviceprofilewpatousearawPSKwithPSKclients,typeacommandsuchasthe
following: