204 Configuring User Encryption320657-ATo enable or disable cipher suites, use the following commands:set service-profile name cipher-ccmp {enable | disable}set service-profile name cipher-tkip {enable | disable}set service-profile name cipher-wep104 {enable | disable}set service-profile name cipher-wep40 {enable | disable}To enable the 40-bit WEP cipher suite in service profile wpa, type the following command:23x0# set service-profile wpa cipher-wep40 enablesuccess: change accepted.After you type this command, the service profile supports TKIP and 40-bit WEP.Changing the TKIP Countermeasures Timer ValueBy default, WSS Software enforces TKIP countermeasures for 60,000 ms (60 seconds) after a second MIC failure withina one-minute interval. To change the countermeasures timer value, use the following command:set service-profile name tkip-mc-time wait-timeTo change the countermeasures wait time in service profile wpa to 30 seconds, type the following command:23x0# set service-profile wpa tkip-mc-time 30000success: change accepted.Enabling PSK AuthenticationBy default, WPA uses 802.1X dynamic keying. If you plan to use static keys, you must enable PSK authentication andconfigure a passphrase or the raw key. You can configure the passphrase or key globally. You also can configure keys onan individual MAC client basis.By default, 802.1X authentication remains enabled when you enable PSK authentication.Caution! AES (CCMP) encryption is not supported on models AP-101 and AP-122.Do not attempt to enable CCMP in a service profile that is mapped to a radio profile thatcontains AP model AP-101 or AP-122. Otherwise, the WSS switch’s configuration file canbe lost the next time the software is restarted. If your network contains model AP-101 orAP-122 APs, create a separate service profile for the other AP models that will run CCMPand enable CCMP only in that profile.Note. Microsoft Windows XP does not support WEP with WPA. To configure a serviceprofile to provide WEP for XP clients, leave WPA disabled and see “Configuring WEP” onpage 209.
