User's Manual

Chapter 12: Virtual Access Point (VAP) Configuration
TR0153 Rev. E1 95
• wpa.enable
• wpa.key_mgmt
• wpa.auth.server.addr
• wpa.auth.server.port
• wpa.auth.server.shared_secret
The ‘wpa.key_mgmt’ parameter must be set to indicate that both PSK and EAP modes can be
supported, as shown in the example below.
The example below shows how to enable WPA EAP mode.
> use wlan1
wlan1> set wpa.enable=yes
wlan1> set wpa.key_mgmt=”WPA-PSK WPA-EAP”
wlan1> set wpa.auth.server.addr=1.2.3.4
wlan1> set wpa.auth.server.port=1812
wlan1> set wpa.auth.shared_secret=enroute500_radius_secret
Web GUI
WPA-EAP can be enabled and the authentication server parameters can be set via the web
interface using the “WPA/WEP” sub-tab under the “AAA” tab on the “System Parameters” page
(see Figure 45). Select “WPA-EAP” as the type of encryption/authentication from the drop-
down menu for the VAP you wish to configure and set the authentication server IP address,
port, and secret in the text boxes below the drop-down menu. In the example in Figure 45,
‘wlan3’ has been configured to use WPA-EAP.
12.10 Transmit Power Cap
The transmit power cap of the AP radio is configurable. Increased output power will improve
communication range, but will also extend the interference range of the radios. The default
power level is 22 dBm.
If the transmit power is set to a value in excess of what can be supported by
the AP radio, the actual radio output power will be the highest power
supported by the AP radio.
When setting the output power for a VAP, consider the output power of the client
devices that will be communicating the VAP. If these devices have output power
levels that are far lower than that of the VAP, an asymmetric link may result. Such a
link exists when the received signal strength at client device is sufficient for a
downlink to the client device to be established, but the received signal level at the
VAP is not sufficient for an uplink from the client device to be established.