183
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuring User Encryption
183
D-Link Systems, Inc.
set service-profile
name
tkip-mc-time
wait-time
To change the countermeasures wait time in service profile
wpa
to 30 seconds, type the
following command:
DWS-1008#
set service-profile wpa tkip-mc-time 30000
success: change accepted.
Enabling PSK Authentication
By default, WPA uses 802.1X dynamic keying. If you plan to use static keys, you must
enable PSK authentication and configure a passphrase or the raw key. You can configure the
passphrase or key globally. You also can configure keys on an individual MAC client basis.
By default, 802.1X authentication remains enabled when you enable PSK authentication.
To enable PSK authentication, use the following command:
set service-profile
name
auth-psk
{
enable
|
disable
}
To enable PSK authentication in service profile
wpa
, type the following command:
DWS-1008#
set service-profile wpa auth-psk enable
success: change accepted.
Configuring a Global PSK Passphrase or Raw Key for All Clients
To configure a global passphrase for all WPA clients, use the following command:
set service-profile
name
psk-phrase
passphrase
The passphrase must be exactly 63 characters long, including blanks. If you use blanks,
you must enclose the string in quotation marks.
To configure service profile
wpa
to use passphrase
1234567890123<>?=+&% The quick
brown fox jumps over the lazy sl
, type the following command:
DWS-1008#
set service-profile wpa psk-phrase “1234567890123<>?=+&% The quick
brown fox jumps over the lazy sl”
success: change accepted.
As an alternative to entering a passphrase, which MSS converts into a key, you can enter
the key itself in raw hexadecimal format. To enter a PSK key in raw format, use the following
command:
set service-profile
name
psk-raw
hex
For
hex
, type a 64-bit ASCII string representing a 32-digit hexadecimal number. Enter the
two-character ASCII form of each hexadecimal number.
Summary of Contents for DWS-1008
Page 1: ......
