No. Data
3 WPA/WPA2 shared key
4
l WAPI shared key if shared key authentication is used
l AP certificate file and private key file, certificate of the
AP certificate issuer, ASU certificate file name, and ASU
server's IP address if certificate authentication is used
5 (Optional) Interval for updating a base key (BK), BK
lifetime percentage, time-based interval or packet count-
based interval for updating an MBMS service key (MSK),
number of retransmissions of MSK negotiation packets, and
number of retransmissions of certificate authentication
packets
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
wlan
The WLAN view is displayed.
Step 3 Run:
security-profile { id profile-id | name profile-name }
*
An access security profile is configured.
After an access security profile is configured, its default settings are:
l Open system authentication and empty key if WEP is used
l 802.1x+PEAP authentication and TKIP encryption if WPA1 is used
l 802.1x+PEAP authentication and CCMP encryption if WPA2 is used
l WAI authentication and WPI encryption if WAPI is used
Step 4 Configure security policies.
l WEP open system authentication
1. Run:
security-policy wep
The WEP security policy is configured.
2. Run:
wep authentication-method open-system [ data-encrypt ]
WEP open system authentication is configured.
l WEP shared key authentication
1. Run:
security-policy wep
Huawei AR1200 Series Enterprise Routers
Configuration Guide - WLAN 2 WLAN Security Configuration
Issue 03 (2012-01-06) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
28