D-Link DWL-3500AP Administration Guide - Page 143
Set Security to WPA/WPA2 Personal (PSK)
UPC - 790069297090
View all D-Link DWL-3500AP manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 143 highlights
B CLI for AP Configuration Set Security to WPA/WPA2 Personal (PSK) To configure WPA/WPA2 Personal as the security mode, you need to issue multiple commands. This section describes the commands and procedures to configure WPA/WPA2 Personal. NOTE: This example shows how to configure WPA/WPA2 Personal on VAP 0 on radio 1 (wlan0). For VAPs 1-7, use wlanxvapy, where x is the radio, and y is the VAP ID. For example, to configure security on VAP 3 on radio 2, use wlan1vap3 instead of wlan0 in all of the following commands. 1. Set the Security Mode DLINK-AP# set interface wlan0 security wpa-personal 2. Set the WPA versions based on what types of client stations you want to support. - WPA-If all client stations on the network support the original WPA but none support the newer WPA2, then use WPA. set bss wlan0bssvap0 wpa-allowed on set bss wlan0bssvap0 wpa2-allowed off - WPA2-If all client stations on the network support WPA2, we suggest using WPA2 which provides the best security per the IEEE 802.11i standard. set bss wlan0bssvap0 wpa-allowed off set bss wlan0bssvap0 wpa2-allowed on - WPA and WPA2-If you have a mix of clients, some of which support WPA2 and others which support only the original WPA, select both. This lets both WPA and WPA2 client stations associate and authenticate, but uses the more robust WPA2 for clients who support it. This WPA configuration allows more interoperability, at the expense of some security. set bss wlan0bssvap0 wpa-allowed on set bss wlan0bssvap0 wpa2-allowed on 3. Set the Cipher Suite you want to use. - TKIP Only: Temporal Key Integrity Protocol (TKIP). set bss wlan0bssvap0 wpa-cipher-tkip on set bss wlan0bssvap0 wpa-cipher-ccmp off - CCMP (AES) Only-Counter mode/CBC-MAC Protocol (CCMP) is an encryption method for IEEE 802.11i that uses the Advanced Encryption Algorithm (AES). set bss wlan0bssvap0 wpa-cipher-tkip off set bss wlan0bssvap0 wpa-cipher-ccmp on - TKIP and CCMP (AES)-When you enable both authentication algorithms, both TKIP and AES clients can associate with the access point. WPA clients must have either a valid TKIP key or a valid CCMP (AES) key to be able to associate with the AP. set bss wlan0bssvap0 wpa-cipher-tkip on set bss wlan0bssvap0 wpa-cipher-ccmp on 4. Set the Pre-shared key. The Pre-shared Key is the shared secret key for WPA-PSK. Enter a string of at least 8 Access Point CLI Commands 143