user manual

AT-TQ2403 Management Software User's Guide 241
Feature or Setting CLI Command
To enable pre-authentication for WPA2
clients:
Enable pre-authentication if you want
WPA2 wireless clients to send
pre-authentication packet. The
pre-authentication information will be
relayed from the access point the client
is currently using to the target access
point. Enabling this feature can help
speed up authentication for roaming
clients who connect to multiple access
points.
set bss wlan0bssInternal rsn-preauthentication on
To disable pre-authentication for
WPA2 clients:
set bss wlan0bssInternal rsn-preauthentication off
This option does not apply if you set the WPA Version to support "WPA" clients only because the
original
WPA does not support this pre-authentication
For our example, we’ll disable pre-authentication.
AT-TQ2403# set bss wlan0bssInternal rsn-preauthentication off
4. Set the Cipher Suites
Set the c
ipher suite you want to use. The options are:
Feature or Setting CLI Command
To set the cipher suite to TKIP only:
TKIP: Temporal Key Integrity Protocol
(TKIP), which is the default.
set bss wlan0bssInternal wpa-cipher-tkip on
set bss wlan0bssInternal wpa-cipher-ccmp off
To set the cipher suite to CCMP (AES)
only:
CCMP (AES) - Counter mode/CBC- MAC
Protocol (CCMP) is an encryption method
for IEEE 802.11i that uses the Advanced
Encryption Algorithm (AES).
set bss wlan0bssInternal wpa-cipher-tkip off
set bss wlan0bssInternal wpa-cipher-ccmp on