238 Configuring Wireless ParametersNN47250-102 (320666-G Version 02.01)The exception is the shared-key authentication setting, which appears only on the Static WEP tab. Normally,you should enable shared-key authentication only if advised to do so by Nortel. If you want to enableshared-key authentication in a service profile, click the checkbox next to Shared Key Auth on the Static WEPtab.Note that if you enable shared-key authentication, RSN, WPA, TKIP, and CCMP must be disabled in theservice profile. By default, RSN, WPA, and CCMP are already disabled, but TKIP is enabled; you mustmanually disable TKIP. To disable TKIP, go to the WPA, RSN tab and de-select the checkbox next to TKIP.Authorization Attributes TabThe Authorization Attributes tab lists the default authorization attributes for the SSID. When a user is autho-rized for the SSID, the switch applies the default attributes to the user unless those attributes are otherwisespecified. For example, if a default session-timeout is set for the SSID, and the session-timeout attribute is notdefined as part of the individual user or the user’s group, the switch assigns the SSID’s default session-timeoutto the user.Where applicable, the service profile wizards allow you to specify the SSID’s default VLAN but do not allowconfiguration of the other default attributes.To change the default VLAN, select it from the VLAN-Name box. To set other default attributes, click in thevalue column and type the values.(For more information about attributes and how they are selected, see the “Assigning AuthorizationAttributes” section in the “Configuring AAA for Network Users” chapter of the Nortel WLAN Security Switch2300 Series Configuration Guide.)Broadcast Settings TabThe Broadcast Settings tab lists the settings for the following broadcast control features. These features helpenhance throughput for client data by reducing the amount of bandwidth used by broadcast traffic.• Proxy ARP—WSS responds on behalf of wireless clients to ARP requests for their IP addresses.• DHCP Restrict—WSS captures and does not forward any traffic except DHCP traffic for a wireless clientwho is still being authenticated and authorized.• No Broadcast—Sends unicasts to clients for ARP requests and DHCP Offers and Acks instead offorwarding them as multicasts.All these broadcast control options are disabled by default.Radio Profile Selection TabThe Radio Profile Selection tab lists the radio profiles mapped to the service profiles. Service profile wizardsmap the service profiles to the default radio profile by default.To map another radio profile to the service profile, select the radio profile in the Available Radio Profiles list,then click Add.To unmap a radio profile from the service profile, select the radio profile in the Current Radio Profiles list,then click Remove.
