Unified Access Point (AP) Administrator's Guide

More documents

Recommendations

Info

D-Link Unified Access Point Administrator’s Guide In the following example, the key length is 40-bits, and the key type is ASCII: DLINK-AP# set interface wlan0 wep-key-1 abcde DLINK-AP# set interface wlan0 wep-key-2 fghi DLINK-AP# set interface wlan0 wep-key-3 klmno DLINK-AP# set interface wlan0 wep-key-4 pqrst 6. Select the type of authentication to use. For open system authentication: DLINK-AP# set bss wlan0bssvap0 open-system-authentication on For shared key authentication: DLINK-AP# set bss wlan0bssvap0 shared-key-authentication on To use both authentication types, use both of the preceding commands. To turn either of the authentication types off, replace the keyword on with off. 7. View the security settings. Use the “get” command to view the updated security configuration and see the results of our new settings. DLINK-AP# get interface wlan0 security The following command gets details about how the internal network is configured, including security details. DLINK-AP# get bss wlan0bssvap0 detail The following command gets details about the interface and shows the WEP Key settings, specifically. DLINK-AP# get interface wlan0 detail Set Security to IEEE 802.1X To configure IEEE 802.1X as the security mode, you need to issue multiple commands. This section describes the commands and procedures to configure IEEE 802.1X. NOTE: This example shows how to configure 802.1X on VAP 0 on radio 1 (wlan0). For VAPs 1-7 interface commands, use wlanxvapy, where x is the radio, and y is the VAP ID. For example, to configure security on VAP 3 on radio 2, use wlan1vap3 instead of wlan0 in all of the following commands. 1. Set the security mode DLINK-AP# set interface wlan0 security dot1x 2. Set the Authentication Server. If you do not want to use the global RADIUS server for this VAP, you must disable the global RADIUS server and specify an IP address and RADIUS key for the VAP, as shown in the following commands: DLINK-AP# set bss wlan0bssvap0 radius-ip 10.23.6.13 DLINK-AP# set bss wlan0bssvap0 radius-key thisISmyKey You can enable RADIUS Accounting if you want to track and measure the resources a particular user has consumed such system time, amount of data transmitted and received, 142 © 2001-2008 D-Link Corporation. All Rights Reserved.
B CLI for AP Configuration and so on. To enable RADIUS accounting on the VAP, enter the following command: set bss wlan0bssvap0 radius-accounting on 3. View the security settings. Use the “get” command to view the updated security configuration and see the results of the new settings. DLINK-AP# get interface wlan0 security The following command gets details about how the internal network is configured, including security details. DLINK-AP# get bss wlan0bssvap0 detail The following command gets details about the interface and shows the WEP Key settings, specifically. DLINK-AP# get interface wlan0 detail Set Security to WPA/WPA2 Personal (PSK) To configure WPA/WPA2 Personal as the security mode, you need to issue multiple commands. This section describes the commands and procedures to configure WPA/WPA2 Personal. NOTE: This example shows how to configure WPA/WPA2 Personal on VAP 0 on radio 1 (wlan0). For VAPs 1-7, use wlanxvapy, where x is the radio, and y is the VAP ID. For example, to configure security on VAP 3 on radio 2, use wlan1vap3 instead of wlan0 in all of the following commands. 1. Set the Security Mode DLINK-AP# set interface wlan0 security wpa-personal 2. Set the WPA versions based on what types of client stations you want to support. - WPA—If all client stations on the network support the original WPA but none support the newer WPA2, then use WPA. set bss wlan0bssvap0 wpa-allowed on set bss wlan0bssvap0 wpa2-allowed off - WPA2—If all client stations on the network support WPA2, we suggest using WPA2 which provides the best security per the IEEE 802.11i standard. set bss wlan0bssvap0 wpa-allowed off set bss wlan0bssvap0 wpa2-allowed on - WPA and WPA2—If you have a mix of clients, some of which support WPA2 and others which support only the original WPA, select both. This lets both WPA and WPA2 client stations associate and authenticate, but uses the more robust WPA2 for clients who support it. This WPA configuration allows more interoperability, at the expense of some security. set bss wlan0bssvap0 wpa-allowed on set bss wlan0bssvap0 wpa2-allowed on 3. Set the Cipher Suite you want to use. - TKIP Only: Temporal Key Integrity Protocol (TKIP). Access Point CLI Commands 143
Page 1 and 2:
Unified Access Point (AP) Administr
Page 3 and 4:
Table of Contents Table of Contents
Page 5 and 6:
Table of Contents Viewing Neighbori
Page 7 and 8:
List of Figures List of Figures Fig
Page 9 and 10:
List of Tables List of Tables Table
Page 11 and 12:
About This Document About This Docu
Page 13 and 14:
About This Document Figure 1 shows
Page 15 and 16:
Overview of the D-Link Access Point
Page 17 and 18:
SpectraLink Voice Priority (SVP) 1
Page 19 and 20:
Preparing to Install the Access Poi
Page 21 and 22:
Table 2. AP Default Settings Featur
Page 23 and 24:
2 Preparing to Install the Access P
Page 25 and 26:
Installing the Access Point 3 This
Page 27 and 28:
3 Installing the Access Point 2. Co
Page 29 and 30:
3 Installing the Access Point 7. If
Page 31 and 32:
Configuring the Ethernet Interface
Page 33 and 34:
Using the CLI to Configure Ethernet
Page 35 and 36:
3 Installing the Access Point Using
Page 37 and 38:
3 Installing the Access Point Once
Page 39 and 40:
Configuring Access Point Security T
Page 41 and 42:
4 Configuring Access Point Security
Page 43 and 44:
Page 45 and 46:
None Static WEP IEEE 802.1X WPA Per
Page 47 and 48:
Table 11. Static WEP 4 Configuring
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Table 14. WPA Enterprise 4 Configur
Page 55 and 56:
Managing the Access Point 5 This ch
Page 57 and 58:
Using the 802.11h Wireless Mode The
Page 59 and 60:
5 Managing the Access Point Table 1
Page 61 and 62:
Table 16. Radio Settings 5 Managing
Page 63 and 64:
To set up multiple virtual access p
Page 65 and 66:
Table 17. VAP Configuration 5 Manag
Page 67 and 68:
5 Managing the Access Point Table 1
Page 69 and 70:
Configuring Access Point Services 6
Page 71 and 72:
6 Configuring Access Point Services
Page 73 and 74:
Packet Bursting for Better Performa
Page 75 and 76:
Configuring QoS Settings 6 Configur
Page 77 and 78:
Table 22. QoS Settings Field Descri
Page 79 and 80:
Table 22. QoS Settings Field Descri
Page 81 and 82:
Maintaining the Access Point 7 This
Page 83 and 84:
Saving the Current Configuration to
Page 85 and 86:
Rebooting the Access Point 7 Mainta
Page 87 and 88:
Configuring the Access Point for Ma
Page 89 and 90:
Table 24. Managed Access Point 8 Co
Page 91 and 92: Viewing Access Point Status 9 This
Page 93 and 94: 9 Viewing Access Point Status your
Page 95 and 96: 9 Viewing Access Point Status Enabl
Page 97 and 98: Table 27. Transmit/Receive Statisti
Page 99 and 100: Table 29 describes the information
Page 101 and 102: Wireless Client Settings and RADIUS
Page 103 and 104: A Wireless Client Settings and RADI
Page 109 and 110: Choose Open To use this type of sec
Page 115 and 116: 3 A Wireless Client Settings and RA
Page 119 and 120: 5. Click Finish. A Wireless Client
Page 125 and 126: CLI for AP Configuration B In addit
Page 127 and 128: 1. Start your SSH application. (We
Page 129 and 130: The rest of the command line contai
Page 131 and 132: B CLI for AP Configuration Example
Page 133 and 134: Table 33. Interface Naming Conventi
Page 135 and 136: Status Table 34. Basic Setting Comm
Page 137 and 138: Table 36. Ethernet Setting Commands
Page 139 and 140: Table 38. Radio Setting Commands Ac
Page 141: Index to 4. DLINK-AP# set interface
Page 145 and 146: 1. Set the Security Mode DLINK-AP#
Page 147 and 148: Table 40. Managed Access Point Comm
Page 149 and 150: Time B CLI for AP Configuration The
Page 151 and 152: Table 46. CLI Class Instances has n
Page 153 and 154: Glossary 0-9 A B C D E F G H I J K
Page 155 and 156: over layer 2 switched networks. It
Page 157 and 158: detection whereas with CSMA/CA the
Page 159 and 160: H HTTP The Hypertext Transfer Proto
Page 161 and 162: Lease Time The Lease Time specifies
Page 163 and 164: inspected by each node. The node to
Page 165 and 166: wireless local area network. It is
Page 167 and 168: W WAN A Wide Area Network (WAN) is
show all

Unified Access Point (AP) Administrator's Guide

Create successful ePaper yourself

Delete template?

Save as template?