R2511-HP MSR Router Series Security Command Reference(V5)

176
• If neither cipher nor simple is specified, you set a plaintext key to be displayed in cipher text. The
key can be a character string of 8 to 63 displayable characters or a hexadecimal string of 64
characters.
• For security purposes, all PSKs, including PSKs configured in plain text, are saved in cipher text to
the configuration file.
Examples
# Configure the plaintext PSK abcdefgh on port WLAN-BSS 1.
<Sysname> system-view
[Sysname] interface wlan-bss 1
[Sysname-WLAN-BSS1] port-security preshared-key pass-phrase simple abcdefgh
# Configure the plaintext, hexadecimal string
123456789abcdefg123456789abcdefg123456789abcdefg123456789abcdefg as the PSK on port
WLAN-BSS 1.
<Sysname> system-view
[Sysname] interface wlan-bss 1
[Sysname-WLAN-BSS1] port-security preshared-key raw-key
1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef
# Configure ciphertext PSK wrWR2LZofLzlEY9ZdYsidw== on port WLAN-BSS 1.
<Sysname> system-view
[Sysname] interface wlan-bss 1
[Sysname-WLAN-BSS1] port-security preshared-key raw-key cipher wrWR2LZofLzlEY9ZdYsidw==
port-security timer disableport
Use port-security timer disableport to set the silence period during which the port remains disabled.
Use undo port-security timer disableport to restore the default.
Syntax
port-security timer disableport time-value
undo port-security timer disableport
Default
The silence period is 20 seconds.
Views
System view
Default command level
2: System level
Parameters
time-value: Specifies the silence period in seconds during which the port remains disabled. The value is
in the range of 20 to 300.
Usage guidelines
If you configure the intrusion protection policy as disabling the port temporarily whenever it receives an
illegal frame, use this command to set the silence period.