User's Manual

EnRoute500 User’s Guide
TR0149 Rev. C5
67
• wpa.auth.server.addr
• wpa.auth.server.port
• wpa.auth.server.shared_secret
The supported EAP modes are:
• TLS
• TTLS
• PEAP
The ‘wpa.key_mgmt’ parameter must be set to indicate that both PSK and EAP modes can be
supported, as shown in the example below.
The ‘wpa.auth.server.addr’ parameter is the IP address of the 802.1x server that will be used
for authentication and the ‘wpa.auth.server.port’ is the port that the authentication server is
listening on (typically UDP port 1812 for a RADIUS server).
The parameter ‘wpa.auth.server.shared_secret’ is the shared secret for the authentication
server. The secret must be a string that is no longer than 32 characters in length.
The example below shows how to enable WPA EAP mode.
> use wlan1
wlan1> set wpa.enable=yes
wlan1> set wpa.key_mgmt=”WPA-PSK WPA-EAP”
wlan1> set wpa.auth.server.addr=1.2.3.4
wlan1> set wpa.auth.server.port=1812
wlan1> set wpa.auth.shared_secret=enroute500_radius_secret
WPA-EAP can be enabled and the authentication server parameters can be set via the web
interface using the “WPA/WEP” sub-tab under the “AAA” tab on the “System Parameters” page
(see Figure 35). Select “WPA-EAP” as the type of encryption/authentication from the drop-
down menu for the access point you wish to configure and set the authentication server
address, port, and secret in the text boxes below the drop-down menu. The correct
‘wpa.key_mgmt’ value for WPA-EAP is automatically set by the web interface. In the example
in Figure 35, ‘wlan3’ has been configured to use WPA-EAP.
9.9 Transmit Power
The transmit power of the access point radio is configurable. Increased output power will
improve communication range, but will also extend the interference range of the radios. The
default power level is 25 dBm.