Use the Security Configuration page to modify Radius server information, as well as
related security and authentication parameters.
- In the Privacy Bit list, select one of the following:
- Auto: Privacy bit is determined by the security mode chosen. (See step 2
to set the security mode.)
- On: Turns on the privacy bit in the 802.11 beacon. Selecting this
option informs stations that they should use encryption before connecting to the
access point. If the privacy bit is enabled, clients that are not configured
for using encryption are not likely to associate with that access point. However,
enabling this setting by itself is not needed to, and does not, protect or secure
your network.
- Off: Turns off the privacy bit in the 802.11 beacon. If the privacy
bit is disabled, clients that are configured to use encryption are not likely to
associate with that access point.
By default, the privacy bit is set to Auto. You may need to change this setting if you
find that some clients do not want to enter the network, even when their choice of encryption
(on or off) is supported.
- In the Security Mode list, select one of the following as the security mode that access points use:
- Open: When selected, the Meru WLAN will not require a station to use 802.1x authentication
or encryption. 802.1x authentication and static WEP keys are both fully supported in this mode, and
the WLAN will secure traffic for those clients.
- 802.1x: Requires 802.11 encryption. If the privacy bit is set to Auto, above, then beacons
will also go out with the privacy bit set.
- In the Cypher Suite list, select one of the following:
- None: No encryption is used.
- WEP40: A 40-bit WEP key is used to encrypt packets.
- WEP104: A 104-bit key is used to encrypt packets.
By default, the security mode is set to None. If you select WEP40 or WEP104, you need to specify a WEP key, as
described in step 8.
- In the RADIUS IP box, type the IP address of the RADIUS server used for user authorization.
Use dotted decimal format to specify the IP address (for example, 10.1.2.3). After changing
the RADIUS IP address, you need to reboot the controller before the change takes effect.
- In the RADIUS Port box, specify the port number to use when connecting to the RADIUS server.
After changing the RADIUS port value, you need to reboot the controller before the change takes effect.
- In the RADIUS Secret box, type the RADIUS secret key for the RADIUS server specified in
step 4.
This value must match the RADIUS secret on the RADIUS server before the communications
between the controller and RADIUS server can be enabled. After changing the RADIUS secret value, you
need to reboot the controller before the change takes effect.
- In the Rekey Period box, type the duration that the WEP key is valid.
Specify a value from 0 to 2,147,483,647 seconds. The default rekey value is zero (0). Specifying 0
indicates that rekeying is disabled, which means that the key is valid for the entire session, regardless of the
duration. When changing the rekey value, you need to reboot the controller before the change takes effect.
- In the WEP Key box, specify a WEP key. If you selected WEP40 or WEP104 in
step 3, you need to specify a WEP key.
You must specify a WEP key in hexadecimal or text string format.
- A WEP-40 key must be 5 octets long, which you can specify as 10 hexadecimal digits
(the hexadecimal string must be preceded with 0x) or 5 printable alphanumeric characters.
For example, 0x619B947A3D is a valid hexadecimal value, and wpass is a valid alphanumeric string.
- A WEP-104 key must be 13 octets long, which you can specify as 26 hexadecimal digits
(the hexadecimal string must be preceded with 0x) or 13 printable alphanumeric characters.
For example, 0xB58CE2C2C75D73B298A36CDA6A is a valid hexadecimal value, and pass8Word7 is a valid
alphanumeric string.
- To save your changes, click Update.