H3C Technologies H3C Intelligent Management Center - Manual (Page 353)

331
− All—Both Open System and Shared Key are configured.
When the encryption mode is Clear, the authentication mode can only be Open System.
When the encryption mode is Crypto, the authentication mode options are Open System,
Shared Key, and All.
{
Binding Interface—Bind or do not bind the service policy to a wireless logical interface. You
must select this option when you add a service policy. You can either select or not select this
option when you modify a service policy.
{
Interface ID—Enter the interface ID to be bound to the service policy. If the ID represents a
non-existent WLAN logical interface, WSM automatically creates the WLAN logical
interface for the AC or fat AP. Make sure the WLAN logical interface is not bound to any
other service policy. Otherwise, the service policy configuration fails.
{
Interface Type—Select the type of the interface bound to the service policy, which is always
WLAN-ESS.
{
Max Clients—Enter the maximum number of clients that can use the service policy.
Security information
If Crypto is selected as the Encryption Mode, set the following security parameters as needed:
{
Security IE—Select the security IE used in the beacon frames and probe responses sent by
the fit AP. Options are None, RSN, WPA, and All. None indicates no security IE is configured.
All indicates both RSN and WPA are configured.
− RSN—A robust security network is a security network that only allows the creation of
robust security network associations to provide greater protection than WPA.
− WPA—WPA operates in either WPA-PSK (Personal) mode or WPA-802.1X (Enterprise)
mode. In Personal mode, a preshared key or pass phrase is used for authentication. In
Enterprise mode, 802.1X and RADIUS servers and the EAP are used for authentication.
For more information about RSN and WPA, see the related device manual.
{
Cipher Suite—Select the cipher suite used for data frame encryption and decryption. Options
are:
− WEP—Includes WEP40 and WEP104. Both are static WEP encryption mechanisms. A
WEP40 key is 40 bits and a WEP104 key is 104 bits. WEP uses RC4 encryption and
requires that all clients accessing the wireless network use the same key. You can set the
key index and key only when you select WEP40 or WEP104. You cannot select both
WEP40 and WEP104.
− TKIP—Temporal key integrity Protocol uses the RC4 algorithm as WEP does, but provides
more secure protection for WLAN.
− CCMP—Counter mode with CBC-MAC Protocol is a Counter mode with CBC-MAC
mechanism based on AES to provide high security.
{
Key Index—Enter the authentication key index for clients.
{
Key—Enter the authentication key for clients. For WEP40, the key is a string of five
alphanumeric characters. For WEP104, the key is a string of 13 alphanumeric characters.
6. Click OK.