3com WXR100 3CRWXR10095A User Manual

C

HAPTER

 13: C

ONFIGURING

 U

SER

 E

NCRYPTION

Robust Security Network (RSN) provides 802.11i support. RSN uses AES 
encryption. 

You can configure a service profile to support RSN clients exclusively, or to 
support RSN with WPA clients, or even RSN, WPA and WEP clients. 

The configuration tasks for a service profile to use RSN are similar to the 
tasks for WPA:

1 Create a service profile for each SSID that will support RSN clients.

2 Enable the RSN IE in the service profile.

3 Enable the cipher suites you want to support in the service profile. (TKIP is 

enabled by default.) Optionally, you also can change the countermeasures 
timer value for TKIP.

4 Map the service profile to the radio profile that will control IEEE settings 

for the radios. 

5 Assign the radio profile to the radios and enable the radios.

If you plan to use PSK authentication, you also need to enable this 
authentication method and enter an ASCII passphrase or a hexadecimal 
(raw) key.

Encryption parameters apply to all users who use the SSID configured by 
a service profile. To create a service profile, use the following command:

set service-profile name

To create a new service profile named rsn, type the following command:

WX1200# set service-profile rsn
success: change accepted.

To enable RSN, you must enable the RSN information element (IE) in the 
service profile. To enable the RSN IE, use the following command:

set service-profile name rsn-ie {enable | disable}

To enable RSN in service profile wpa, type the following command:

WX1200# set service-profile rsn rsn-ie enable
success: change accepted.