Configuring PAPI Enhanced Security

By default, the PAPI Process Application Programming Interface. PAPI controls channels for ARM and Wireless Intrusion Detection System (WIDS) communication to the master controller. A separate PAPI control channel connects to the local controller where the SSID tunnels terminate. Enhanced Security configuration is disabled. If there is no configured key, the default key is used for authentication.

The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. commands configure PAPI Process Application Programming Interface. PAPI controls channels for ARM and Wireless Intrusion Detection System (WIDS) communication to the master controller. A separate PAPI control channel connects to the local controller where the SSID tunnels terminate. Enhanced Security:

(host)[mynode] (config) #papi-security

(host)[mynode] (PAPI Security Profile) #?

enhanced-security Enable or disable the use of enhanced security mode

key Key used to authenticate messages between systems.

Length must be between 10 and 64 characters. Use 'no key' to revert to the default key.

no Delete Command

(host)[mynode] (PAPI Security Profile) #enhanced-security

(host)[mynode] (PAPI Security Profile) #write memory

Saving Configuration...

Partial configuration for /mm/mynode

------------------------------------

Contents of : /flash/config/partial/53/p=sc.cfg

papi-security

enhanced-security

!

Configuration Saved.

If PAPI Process Application Programming Interface. PAPI controls channels for ARM and Wireless Intrusion Detection System (WIDS) communication to the master controller. A separate PAPI control channel connects to the local controller where the SSID tunnels terminate. Enhanced Security is enabled with Layer 2 redundancy and VRRP Virtual Router Redundancy Protocol. VRRP is an election protocol that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN., a static route needs to be added on both the active and standby nodes to the master IP (virtual IP) address. The static route needs to be added via its conductor redundancy ipsec-map using the command ip route <destip> <mask> ipsec <map-name>.