About the exercise.

• It is common for equipment where both ends are controlled by the same party (a network operator) for the equipment to be configured using a mutually shared secret. (tcp md5 for example, radius clients nad servers for another)

• We are going to configure both ends of our radio link to use the same wpa2-tkip shared secret.

• We're also going to lock the mac addresses on both ends of the link not so much as a security feature but rather to prevent the APs from roaming if another radio with the same ssid came online.