USRobotics Instant802 APSDK - Manual (Page 226)

Professional Access Point
Administrator Guide
Class Structure, Commands, and Examples - 226
In this example, you will set the cipher suite to TKIP Only :
USR5453-AP# set bss wlan0bssInternal wpa-cipher-tkip on
USR5453-AP# set bss wlan0bssInternal wpa-cipher-ccmp off
5. Set the Authentication Server
You can use the built-in authentication server on the access point or an external RADIUS server.
In this example, you will use an external RADIUS server with an IP address of 142.77.1.1:
USR5453-AP# set bss wlan0bssInternal radius-ip 142.77.1.1
6. Set the RADIUS Key (For External RADIUS Server Only)
If you use an external RADIUS server, you must provide the RADIUS key. (If you use the built-in
authentication server the RADIUS key is automatically provided.)
This command sets the RADIUS key to KeepSecret for an external RADIUS server.
USR5453-AP# set bss wlan0bssInternal radius-key KeepSecret
7. Enable RADIUS Accounting (External RADIUS Server Only)
You can enable RADIUS Accounting if you want to track and measure the resources a particular user has
Both - When the authentication
algorithm is set to " Both ", both
TKIP and AES clients can asso-
ciate with the access point.
WPA clients must have either a
valid TKIP key or a valid CCMP
(AES) key to be able to associ-
ate with the AP.
To set the cipher suite to Both :
set bss wlan0bssInternal wpa-cipher-tkip on
set bss wlan0bssInternal wpa-cipher-ccmp on
Note
To use the built-in authentication server, set the RADIUS IP address to that used by the built-in server
(127.0.0.1
) and turn RADIUS accounting off (because it is not supported by the built-in server)
RADIUS Option Example
To set the AP to use the Built-in
Authentication Server:
set bss wlan0bssInternal radius-ip 127.0.0.1
To set the AP to use an External
RADIUS Server:
set bss wlan0bssInternal radius-ip RADIUS_IP_Address
where RADIUS_IP_Address is the IP address of an external RADIUS server.
Cipher Suite Option Example