Specifications

Configuring RSN (802.11i)
RoamAbout Mobility System Software Configuration Guide 10-13
Specifying the RSN Cipher Suites
TouseRSN,atleastoneciphersuitemustbeenabled.Youcanenableoneormoreofthefollowing
ciphersuites:
• CCMP
•TKIP
•40‐bitWEP
• 104‐bitWEP
Bydefault,TKIPisenabledandtheotherciphersuitesaredisabled.
Toenableordisableciphersuites,usethefollowingcommands:
set service-profile name cipher-ccmp {enable | disable}
set service-profile name cipher-tkip {enable | disable}
set service-profile name cipher-wep104 {enable | disable}
set service-profile name cipher-wep40 {enable | disable}
Example
ToenabletheCCMPciphersuiteinserviceprofilersn,typethe f ollowingcommand:
RBT-8100# set service-profile rsn cipher-ccmp enable
success: change accepted.
Afteryoutypethiscommand,theserviceprofilesupportsbothTKIPandCCMP.
Changing the TKIP Countermeasures Timer Value
TochangetheTKIPcountermeasurestimer,see“ChangingtheTKIPCountermeasuresTimer
Value”onpage 10‐9.TheprocedureisthesameforWPAandRSN.
Enabling PSK Authentication
ToenablePSKauthentication,see“EnablingPSKAuthentication”onpage 10‐9.Theprocedureis
thesameforWPAandRSN.
Displaying RSN Settings
TodisplaytheRSNsettingsinaserviceprofile,usethefollowingcommand:
show service-profile {name | ?}
TheRSNsettingsappearatthebottomoftheoutput.
Note: Microsoft Windows XP does not support WEP with RSN. To configure a service profile to
provide WEP for XP clients, leave RSN disabled and see “Configuring WEP” on page 10-15.
Note: The RSN-related fields appear in the show service-profile output only when RSN is enabled.