O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

3.3. Configure the WPA Preshared Key

Problem

You want to secure a wireless network using WPA with a preshared key. You don't have the infrastructure for 802.1x authentication, and would like to use WPA with a preshared key.

Solution

Define the SSID with the authentication type as WPA-Auto-PSK, and the encryption algorithm as auto, and then bind the SSID to the wireless interface:

	set ssid name Sunnyvale
	set ssid Sunnyvale client-isolation
	set ssid Sunnyvale authentication wpa-auto-psk passphrase JnPr!234
	   encryption auto
	set ssid Sunnyvale interface wireless1

Configure the infrastructure to enable traffic flow through the AP, create the zone, attach the wireless interface to the zone, configure the IP address, enable DHCP server service on the wireless interface, configure the security policy, and activate the wireless connection:

	set zone name "corp-wireless"

	set interface "wireless0/1" zone "corp-wireless"
	set interface wireless0/1 ip 172.17.200.1/24

	set interface wireless0/1 dhcp server service
	set interface wireless0/1 dhcp server auto
	set interface wireless0/1 dhcp server option gateway 172.17.200.1
	set interface wireless0/1 dhcp server option netmask 255.255.255.0
	set interface wireless0/1 dhcp server ip 172.17.200.10 to
	172.17.200.20

	set policy from "corp-wireless" to "trust" "Any" "Any"
	"ANY" permit

	exec wlan reactivate

Configure the client for WPA or WPA2 preshared key authentication to associate with this AP.

Discussion

WPA is a more secure authentication and encryption method ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required