H3C Technologies H3C WA3600 Series Access Points - Manual (Page 290)

277
2. Click the icon corresponding to the target crypto type wireless service.
The page for configuring advanced settings for the crypto type wireless service appears.
Figure 276 Advanced settings for the crypto type wireless service
3. Configure the advanced settings for the crypto type wireless service as described in Table 102 .
4. Click Apply.
Table 102 Configuration items
Item Description
Client Max Users
Maximum number of clients of an SSID to be associated with the same radio
of the AP.
IMPORTANT:
When the number of clients of an SSID to be associated with the same radio of
the AP reaches the maximum, the SSID is automatically hidden.
PTK Life Time
Set the pairwise transient key (PTK) lifetime. A PTK is generated through a
four-way handshake.
TKIP CM Time
Set the TKIP countermeasure time.
By default, the TKIP countermeasure time is 0 seconds, that is, the TKIP
countermeasure policy is disabled.
If the TKIP countermeasure time is set to a value other than 0, the TKIP
countermeasure policy is enabled.
Message integrity check (MIC) is designed to avoid hacker tampering. It uses
the Michael algorithm and is extremely secure. When failures occur to MIC,
the data may have been tampered, and the system may be under attack. In
this case, TKIP enables the countermeasure policy to prevent hackers from
attacking. With the countermeasure policy enabled, if more than two MIC
failures occur within the specified time, the TKIP disassociates all connected
wireless clients and no new associations are allowed within the TKIP
countermeasure time.