Avaya MC3000 AP208 Manual Do Utilizador

Página de 3
 
 
Configuration Note 
© Copyright 2007 Avaya Inc. All rights reserved  
PN: Meru AP Configuration Note for 3631 phone.doc 
 
Page 2
 
•  WEP (64 or 128) 
•  WPA PSK (WPA Personal) 
•  WPA2 PSK (WPA2 Personal) 
•  WPA  (WPA Enterprise with 802.1X) 
•  WPA2 (WPA2 Enterprise with 802.1X) 
4.1.1 WPA2 
Sample WPA2 security profile with 802.1X authentication and AES data encryption: 
•  L2 Modes Allowed - WPA2 
•  Data Encrypt – CCMP-AES 
•  Primary RADIUS Profile Name – Select Primary Server 
•  Secondary RADIUS Profile Name– Select Backup Server 
•  802.1X Network Initiation – On 
•  MAC Filtering - Off 
4.1.2 WPA 
Sample WPA security profile with 802.1X authentication and TKIP data encryption: 
•  L2 Modes Allowed - WPA 
•  Data Encrypt – TKIP 
•  Primary RADIUS Profile Name – Select Primary Server 
•  Secondary RADIUS Profile Name – Select Backup Server 
•  802.1X Initiation – On 
•  MAC Filtering – Off 
4.1.3 WPA 
PSK 
Sample WPA-PSK security profile with TKIP data encryption: 
•  L2 Modes Allowed – WPA PSK 
•  Data Encrypt – TKIP 
•  802.1X Initiation – Off 
•  Pre-Shared Key – specify Key Value 
•  MAC Filtering – On (If this is on, MAC Addresses for phones must be defined in the 
MAC Filtering Permit list) 
 
Note that you may enter the WPA PSK key as either a string or the hexadecimal representation 
of the string.  Note that on the 3631 Wireless Telephones you also may enter the key in ASCII 
string or hex format. 
4.2 VLAN 
Configuration 
It is often desirable to separate voice packets from other data streams once the traffic enters the 
wired network.  In the Meru solution, creating a VLAN entry in the controller and assigning it to 
the wireless telephone ESSID achieves this.  This is an optional configuration component. 
4.3 Deployment 
Modes 
The Meru Networks Air Traffic Control system supports two modes of deployment: Virtual Cell 
and non-Virtual Cell.  In Virtual Cell mode, all of the access points on the same channel will 
utilize a single BSSID.  This allows the system to perform client handoffs between access points 
without the client devices needing to perform 802.11 or 802.1X re-association procedures to the 
new access point.