No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S12700 V200R013C00 Command Reference

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
wapi usk

wapi usk

Function

The wapi usk command sets the interval for updating a USK, and number of retransmissions of USK negotiation packets.

The undo wapi usk command restores the default interval for updating a USK, and number of retransmissions of USK negotiation packets.

By default, the interval for updating a USK is 86400s; the number of retransmissions of USK negotiation packets is 3.

Format

wapi { usk-update-interval usk-interval | usk-retrans-count usk-count }

undo wapi { usk-update-interval | usk-retrans-count }

Parameters

Parameter

Description

Value

usk-update-interval usk-interval

Specifies the interval for updating a USK. When the USK update mode is set to time-based update using the wapi key-update command, the interval for updating a USK needs to be set.

The value is an integer that ranges from 600 to 604800, in seconds.

usk-retrans-count usk-count

Specifies the number of retransmissions of USK negotiation packets.

The value is an integer that ranges from 1 to 10.

Views

Security profile view

Default Level

2: Configuration level

Usage Guidelines

WAPI defines a dynamic key negotiation mechanism, but there are still security risks if a STA uses the same encryption key for a long time. Both the USK and MSK have a lifetime. The USK or MSK needs to be updated when its lifetime ends.

Example

# Set the interval for updating a USK to 10000s, and number of retransmissions of USK negotiation packets to 5.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] security-profile name p1
[HUAWEI-wlan-sec-prof-p1] wapi usk key-update time-based
[HUAWEI-wlan-sec-prof-p1] wapi usk-update-interval 10000
[HUAWEI-wlan-sec-prof-p1] wapi usk-retrans-count 5
Related Topics
Translation
Download
Updated: 2019-04-09

Document ID: EDOC1100065659

Views: 123254

Downloads: 88

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next