Specifications

ManualsBrandsEnterasys ManualsComputer equipmentRoamAbout RBT-8100

241

242

243

244

245

246

247

248

249

250

Encryption Configuration Scenarios

10-22 Configuring User Encryption

Configuring Encryption for MAC Clients

ThefollowingexampleshowshowtoconfigureMSStoprovidePSKauthenticationandTKIPor

40‐bitWEPencryptionforMACclients:

1. CreateanauthenticationrulethatsendsallMACusersofSSIDvoicetothelocaldatabasefor

authenticationandauthorization.Typethefollowingcommand:

RBT-8100# set authentication mac ssid voice * local

2. ConfigureaMACusergroupnamedwpa‐for‐macthatassignsallMACusersinthegroupto

VLANblue.Typethefollowingcommand:

RBT-8100# set mac-usergroup wpa-for-mac attr vlan-name blue

3. AddMACuserstoMACusergroupwpa‐for‐mac.Typethefollowingcommands:

RBT-8100# set mac-user aa:bb:cc:dd:ee:ff group wpa-for-mac

RBT-8100# set mac-user a1:b1:c1:d1:e1:f1 group wpa-for-mac

4. Ve rifytheAAAconfigurationchanges.Typethefoll owingcommand:

RBT-8100# show aaa

Default Values

authport=1812 acctport=1813 timeout=5 acct-timeout=5

retrans=3 deadtime=0 key=(null) author-pass=(null)

Radius Servers

Server Addr Ports T/o Tries Dead State

-------------------------------------------------------------------

Server groups

set authentication mac ssid voice * local

mac-usergroup wpa-for-mac

vlan-name = blue

mac-user aa:bb:cc:dd:ee:ff

Group = wpa-for-mac

mac-user a1:b1:c1:d1:e1:f1

Group = wpa-for-mac

5. Createaserviceprofilenamedwpa‐wep‐for‐macforSSIDvoice.Typethefollowingcommand:

RBT-8100# set service-profile wpa-wep-for-mac

6. SettheSSIDintheserviceprofiletovoice.Typethefollowingcommand:

RBT-8100# set service-profile wpa-wep-for-mac ssid-name voice

7. EnableWPAinserviceprofilewpa‐wep‐for‐mac.Typethefollowingcommand:

RBT-8100# set service-profile wpa-wep-for-mac wpa-ie enable

8. EnabletheWEP40ciphersuiteinserviceprofilewpa‐wep‐for‐mac.Typethe following

command:

RBT-8100# set service-profile wpa-wep-for-mac cipher-wep40 enable

9. EnablePSKauthenticationinserviceprofilewpa‐wep‐for‐mac.Typethefollowingcommand:

RBT-8100# set service-profile wpa-wep-for-mac auth-psk enable