Configuration Guide Configuring RSNA
Notes
When RSN authentication is used, the encryption mode and access authentication mode must also be configured.
If the access authentication mode is set to PSK, a PSK key must be configured.
In the security mode of a WLAN, RSN authentication cannot be configured with WEP authentication.
Configuration Steps
Configuring RSN Authentication
Mandatory.
Enable RSN authentication in WLAN security configuration mode on the AC.
security rsn { enable | disable }
enable: Enables RSN authentication.
disable: Disables RSN authentication.
RSN authentication is disabled by default.
WLAN security configuration mode
The encryption mode and access authentication mode can be configured in RSN authentication only after
RSN authentication is enabled; otherwise, the configuration does not take effect.
When RSN authentication is used, the encryption mode and access authentication mode must also be
configured. If either the encryption mode or the access authentication mode is configured or neither of them
is configured, STAs cannot access a WLAN.
Configuring the Encryption Mode of RSN Authentication
Mandatory.
It is configured in WLAN security configuration mode on the AP.
The encryption mode in RSN authentication can be configured only after RSN authentication is enabled. The AES and
TKIP encryption modes can be enabled at the same time in WLAN security configuration mode. After an encryption
mode is configured for a WLAN, communication data between an STA and the WLAN is protected by the corresponding
encryption mode.
security rsn ciphers { aes | tkip } { enable | disable }
aes: Configures the AES encryption mode.
tkip: Configures the TKIP encryption mode.
enable: Enables the encryption mode of RSN authentication.
disable: Disables the encryption mode of RSN authentication.
No encryption mode is configured by default.
WLAN security configuration mode
This command is used to enable an encryption mode of RSN authentication, which can be AES or TKIP.