Technical data

Professional Access Point
Administrator Guide
Class Structure, Commands, and Examples - 225
3. Enable Pre-Authentication
If you set WPA versions to "WPA2" or "Both", you can enable pre-authentication for WPA2 clients.
This option does not apply if you set the WPA Version to support "WPA" clients only because the original
WPA does not support this pre-authentication
In this example, you will disable pre-authentication.
USR5453-AP# set bss wlan0bssInternal rsn-preauthentication off
4. Set the Cipher Suites
Set the cipher suite you want to use. The options are:
Enable pre-authentication if you want
WPA2 wireless clients to send pre-authen-
tication packet. The pre-authentication
information will be relayed from the
access point the client is currently using to
the target access point. Enabling this fea-
ture can help speed up authentication for
roaming clients who connect to multiple
access points.
To enable pre-authentication for WPA2 cli-
ents:
set bss wlan0bssInternal rsn-preauthentication on
To disable pre-authentication for WPA2 cli-
ents:
set bss wlan0bssInternal rsn-preauthentication on
Cipher Suite Option Example
TKIP: Temporal Key Integrity
Protocol (TKIP), which is the
default.
To set the cipher suite to TKIP
only:
set bss wlan0bssInternal wpa-cipher-tkip on
set bss wlan0bssInternal wpa-cipher-ccmp off
CCMP (AES) - Counter mode/
CBC-MAC Protocol (CCMP) is
an encryption method for IEEE
802.11i that uses the Advanced
Encryption Algorithm (AES).
To set the cipher suite to CCMP
(AES) only:
set bss wlan0bssInternal wpa-cipher-tkip off
set bss wlan0bssInternal wpa-cipher-ccmp on