D-Link DWS-1008 User Manual page 188

DWS-1008 User's Manual
set service-profile name tkip-mc-time wait-time
To change the countermeasures wait time in service profile wpa to 30 seconds, type the
following command:
DWS-1008# set service-profile wpa tkip-mc-time 30000
success: change accepted.
Enabling PSK Authentication
By default, WPA uses 802.1X dynamic keying. If you plan to use static keys, you must
enable PSK authentication and configure a passphrase or the raw key. You can configure the
passphrase or key globally. You also can configure keys on an individual MAC client basis.
By default, 802.1X authentication remains enabled when you enable PSK authentication.
To enable PSK authentication, use the following command:
set service-profile name auth-psk {enable | disable}
To enable PSK authentication in service profile wpa, type the following command:
DWS-1008# set service-profile wpa auth-psk enable
success: change accepted.
Configuring a Global PSK Passphrase or Raw Key for All Clients
To configure a global passphrase for all WPA clients, use the following command:
set service-profile name psk-phrase passphrase
The passphrase must be exactly 63 characters long, including blanks. If you use blanks,
you must enclose the string in quotation marks.
To configure service profile wpa to use passphrase 1234567890123<>?=+&% The quick
brown fox jumps over the lazy sl, type the following command:
DWS-1008# set service-profile wpa psk-phrase "1234567890123<>?=+&% The quick
brown fox jumps over the lazy sl"
success: change accepted.
As an alternative to entering a passphrase, which MSS converts into a key, you can enter
the key itself in raw hexadecimal format. To enter a PSK key in raw format, use the following
command:
set service-profile name psk-raw hex
For hex, type a 64-bit ASCII string representing a 32-digit hexadecimal number. Enter the
two-character ASCII form of each hexadecimal number.
D-Link Systems, Inc. D-Link Systems, Inc.
Configuring User Encryption
183 183