User's Manual

hwc_vnsconfiguration.fm
Virtual Network configuration
Configuring privacy for a VNS
A31003-W1050-U100-2-7619,
March 2008
HiPath Wireless Controller, Access Points and Convergence Software V5 R1 , C20/C2400 User Guide 217
•Auto – The AP will advertise both TKIP and CCMP (Counter Mode
with Cipher Block Chaining Message Authentication Code Protocol)
for WPAv1. CCMP is an IEEE 802.11i encryption protocol that uses
the encryption cipher AES (Advanced Encryption Standard). Auto is
the default.
• TKIP only – The AP will advertise TKIP as an available encryption
protocol for WPAv1. It will not advertise CCMP.
6. To enable WPA v2 encryption, select WPA v.2.
• From the Encryption drop-down list, click one of the following encryption
types:
•Auto – The AP advertises both TKIP and CCMP (counter mode with
cipher block chaining message authentication code protocol). CCMP
is an IEEE 802.11i encryption protocol that uses the encryption cipher
AES (Advanced Encryption Standard). Auto is the default.
• AES only – The AP advertises CCMP as an available encryption
protocol. It will not advertise TKIP.
• From the Key Management options, click one of the following key
management options:
• None – The mobile units (client devices) performs a complete 802.1X
authentication each time it associates or connects to a Wireless AP.
• Opportunistic Keying – Enables secure fast roaming (SFR) of
mobile units. For more information, see Section 6.11.2.3,
“Opportunistic Keying”, on page 215.
• Pre-authentication – Enables seamless roaming. For more
information, see Section 6.11.2.3, “Pre-authentication”, on page 215.
• Opportunistic Keying & Pre-auth – For more information, see
Section 6.11.2.3, “Opportunistic Keying & Pre-auth”, on page 216.
7. To enable re-keying after a time interval, select Broadcast re-key interval.
If this checkbox is not selected, the Broadcast encryption key is never
changed and the Wireless AP will always use the same broadcast key for
Broadcast/Multicast transmissions. This will reduce the level of security for
wireless communications.
8. In the Broadcast re-key interval box, type the time interval after which the
broadcast encryption key is changed automatically. The default is 3600.
9. To save your changes, click Save.