Manual

Appendix D: Command Line Interface (CLI) for Access Point Configuration
318
wpa-allowed on
wpa2-allowed on
rsn-preauthentication
Set Security to WPA/WPA2 Enterprise (RADIUS)
Set the Security Mode
AT-WA7400#
set interface wlan0 security wpa-enterprise
Set the WPA Versions
Select the WPA version based on what types of client stations you want to
support, as shown in Table 18.
For this example, set the access point to support WPA client stations only:
AT-WA7400# set bss wlan0bssInternal wpa-allowed on
AT-WA7400# set bss wlan0bssInternal wpa2-allowed off
Enable Pre-Authentication
If you set WPA versions to “WPA2” or “Both,” you can enable pre-
Table 18. WPA Version Command
Function Command
WPA: If all client stations on the
network support the original WPA but
none support the newer WPA2, then
use WPA.
set bss wlan0bssIngernal wpa-allowed on
set bss wlan0bssIngernal wpa2-allowed off
WPA2: If all client stations on the
network support WPA2, use WPS2
which provides the best security based
on the IEEE 802.11i standard.
set bss wlan0bssIngernal wpa-allowed off
set bss wlan0bssIngernal wpa2-allowed on
Both: If you have a mix of clients, some
of which support WPS2 and others
which support only the original WPA,
use Both. This lets both WPA and
WPA2 client stations associate and
authenticate, but uses the more robust
WPA2 for clients that support it. This
WPA configuration allows more
interoperability at the expense of some
security.
set bss wlan0bssIngernal wpa-allowed on
set bss wlan0bssIngernal wpa2-allowed on