User's Manual

EnRoute500 User’s Guide

TR0149 Rev. C5

or using a hexadecimal key with

> use wlan1

wlan1> set key=”0123456789abcdef0123456789”

WEP encryption can be disabled by specifying a blank value as shown below.

> use wlan1

wlan1> set key=

WEP encryption can be enabled and the key can be set via the web interface using the

“WPA/WEP” sub-tab under the “AAA” tab on the “System Parameters” page (see Figure 35).

Select “WEP” as the type of encryption from the drop-down menu for the access point you

wish to configure and set the WEP key in the text box below the drop-down menu. In the

example in Figure 35, ‘wlan1’ has been configured to use WEP.

9.8.2 WPA Pre-Shared Key Mode (WPA-PSK)

In WPA pre-shared key (PSK) mode, a common passphrase is used for clients connecting to

an EnRoute500 AP. To set the WPA-PSK mode, enable WPA for the interface and set the pre-

shared key value as shown below. The passphrase must be between 8 and 63 characters in

length. It is suggested that the passphrase is 14 characters or longer to achieve an adequate

level of security from the encryption algorithm. The ‘wpa.key_mgmt’ parameter must also be

set to indicate that PSK mode is being used, as shown below.

> use wlan1

wlan1> set wpa.enable=yes

wlan1> set wpa.key_mgmt=”WPA-PSK”

wlan1> set wpa.passphrase=long_passphrases_improve_encryption_effectiveness

WPA-PSK can be enabled and the pre-shared key can be set via the web interface using the

“WPA/WEP” sub-tab under the “AAA” tab on the “System Parameters” page (see Figure 35).

Select “WPA-PSK” as the type of encryption/authentication from the drop-down menu for the

access point you wish to configure and enter the WPA-PSK key in the text box below the drop-

down menu. The correct ‘wpa.key_mgmt’ value for WPA-PSK is automatically set by the web

interface. In the example in Figure 35, ‘wlan2’ has been configured to use WPA-PSK.

9.8.3 WPA EAP Mode

In WPA-EAP mode, a client device is authenticated using an 802.1x authentication server,

which is typically a RADIUS server. To configure the EnRoute500 to support 802.1x

authentication, the following parameters in a ‘wlanN’ interface must be set:

• wpa.enable

• wpa.key_mgmt