66
WLAN security commands
The term "AP" in this document refers to MSR routers that support WLAN.
WLAN is supported only on the MSR954(JH297A/JH298A/JH299A).
akm mode
Use akm mode to set an authentication and key management (AKM) mode.
Use undo akm mode to restore the default.
Syntax
akm mode { dot1x | private-psk | psk | anonymous-dot1x }
undo akm mode
Default
No AKM mode is set.
Views
WLAN service template view
Predefined user roles
network-admin
Parameters
dot1x: Specifies 802.1X as the AKM mode.
private-psk: Specifies private PSK as the AKM mode.
psk: Specifies PSK as the AKM mode.
anonymous-dot1x: Specifies WiFi alliance anonymous 802.1X as the AKM mode.
Usage guidelines
You must set the AKM mode for RSNA networks.
Each WLAN service template supports only one AKM mode. Set the AKM mode only when the
WLAN service template is disabled.
Set the WiFi alliance anonymous 802.1X AKM mode if the OSEN IE is used.
Each of the following AKM modes must be used with a specific authentication mode:
• 802.1X AKM—802.1X authentication mode.
• Private PSK AKM—MAC authentication mode.
• PSK AKM—MAC or bypass authentication mode.
• WiFi alliance anonymous 802.1X AKM—802.1X authentication mode.
For more information about the authentication mode, see "Configuring WLAN user access
authentication."
Examples
# Set the PSK AKM mode.
<Sysname> system-view
[Sysname] wlan service-template security
[Sysname-wlan-st-security] akm mode psk