No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R010C00 Command Reference

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
wapi msk

wapi msk

Function

The wapi msk command sets the interval for updating an MSK, and number of retransmissions of MSK negotiation packets.

The undo wapi msk command restores the default interval for updating an MCK, and number of retransmissions of MSK negotiation packets.

By default, the interval for updating an MSK is 86400s; the number of retransmissions of MSK negotiation packets is 3.

Format

wapi { msk-update-interval msk-interval | msk-retrans-count msk-count }

undo wapi { msk-update-interval | msk-retrans-count }

Parameters

Parameter

Description

Value

msk-update-interval msk-interval

Specifies the interval for updating an MSK. When the MSK update mode is set to time-based update using the wapi key-update command, the interval for updating an MSK needs to be set.

The value is an integer that ranges from 600 to 604800, in seconds.

msk-retrans-count msk-count

Specifies the number of retransmissions of MSK negotiation packets.

The value is an integer that ranges from 1 to 10.

Views

Security profile view

Default Level

2: Configuration level

Usage Guidelines

WAPI defines a dynamic key negotiation mechanism, but there are still security risks if a STA uses the same encryption key for a long time. Both the USK and MSK have a lifetime. The USK or MSK needs to be updated when its lifetime ends.

Example

# Set the interval for updating an MSK to 10000s, and number of retransmissions of MSK negotiation packets to 5.

<Huawei> system-view
[Huawei] wlan
[Huawei-wlan-view] security-profile name p1
[Huawei-wlan-sec-prof-p1] wapi msk key-update time-based
[Huawei-wlan-sec-prof-p1] wapi msk-update-interval 10000
[Huawei-wlan-sec-prof-p1] wapi msk-retrans-count 5
Related Topics
Translation
Download
Updated: 2019-11-21

Document ID: EDOC1100064352

Views: 207347

Downloads: 122

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next