System information

5
5
Wireless Security Configuration
Using the Security Wizard
Using the CLI to Configure WPA with 802.1X. To configure the access
point to support only WPA-enabled clients, use the security-suite command
wizard option 6 for AES encryption, option 7 for TKIP encryption, or option
9 for WPA2 auto-negotiation. (Also requires RADIUS server configuration.)
HP420(if-wireless-g-ssid-1)#security-suite 6 wpa
HP420(if-wireless-g-ssid-1)#802.1x broadcast-key-refresh-
rate 5
HP420(if-wireless-g-ssid-1)#802.1x session-key-refresh-rate
HP420(if-wireless-g-ssid-1)#802.1x session-timeout 600
HP420(if-wireless-g-ssid-1)#
Alternatively, you can use the following security-suite command to configure
WPA2 (AES) with 802.1X without using the wizard option:
HP420(if-wireless-g-ssid-1)#security-suite open-system wpa-
required 802.1x-required aes-aes wpa2
HP420(if-wireless-g-ssid-1)#802.1x broadcast-key-refresh-
rate 5
HP420(if-wireless-g-ssid-1)#802.1x session-key-refresh-rate
HP420(if-wireless-g-ssid-1)#802.1x session-timeout 600
HP420(if-wireless-g-ssid-1)#
Using the CLI to Configure Dynamic and Static WEP Key
Combination. The following example shows how to manually configure
access point security to support a combination of clients using both static and
dynamic WEP keys. (Also requires RADIUS server configuration.)
HP420(if-wireless-g-ssid-1)#security-suite open-system wpa-
disabled 802.1x-supported
HP420(if-wireless-g-ssid-1)#transmit-key-wep 2 128 ascii
1234512345abc
HP420(if-wireless-g-ssid-1)#802.1x broadcast-key-refresh-
rate 5
HP420(if-wireless-g-ssid-1)#802.1x session-key-refresh-rate
HP420(if-wireless-g-ssid-1)#802.1x session-timeout 600
HP420(if-wireless-g-ssid-1)#
7-23
5