User Guide

Radio Interface
6-55
6
WPA2 PMKSA Life Time – WPA2 provides fast roaming for authenticated clients by
retaining keys and other security settings in a cache for each VAP. In this way, when
clients roam back into a VAP they had previously been using, re-authentication is
not required. When a WPA2 client is first authenticated, it receives a Pairwise
Master Key (PMK) that is used to generate the other keys used for unicast data
encryption. This key and other client information form a client Security Association
(SA) that the VAP holds in a cache. When the lifetime expires, the security
association and keys are deleted from the cache. If the client returns to an access
point after the association has been deleted, it will require full re-authentication.
(Range: 1-1440 minutes; Default: 720 minutes)
CLI Commands for the Configuring the VAPs – From the global configuration mode,
enter the interface wireless g command to access the 802.11b/g radio interface.
From the 802.11b/g interface mode, you can access radio settings that apply to all
VAP interfaces. To access a specific VAP interface (numbered 0 to 7), use the vap
command. You can configure a name for each interface using the description
command. You can also use the closed-system command to stop sending the
SSID in beacon messages. Set any other VAP parameters and radio setting as
required before enabling the VAP interface (with the no shutdown command). To
view the current 802.11b/g radio settings for the VAP interface, use the show
interface wireless g 0 command as shown on 7-95.
Configuring Rogue AP Detection
To configure Rouge AP detection, select the Radio Settings page, and scroll down to
the “Rouge AP” section.
Enterprise AP(if-wireless g)#vap 0 7-95
Enterprise AP(if-wireless g: VAP[0])#description RD-AP#3 7-104
Enterprise AP(if-wireless g: VAP[0])#vlan-id 1 7-129
Enterprise AP(if-wireless g: VAP[0])#closed-system 7-105
Enterprise AP(if-wireless g: VAP[0])#authentication-timeout-
interval 30 7-107
Enterprise AP(if-wireless g: VAP[0])#association-timeout-
interval 20 7-106
Enterprise AP(if-wireless g: VAP[0])#max-association 32 7-106
Enterprise AP(if-wireless g: VAP[0])#pmksa-lifetime 900 7-121
Enterprise AP(if-wireless g: VAP[0])#