Cisco WAP551 Administration Manual page 110

Wireless
Networks
Cisco Small Business WAP551 and WAP561 Wireless-N Access Point
• Broadcast Key Refresh Rate—The interval at which the broadcast (group) key is
refreshed for clients associated with this VAP.
The default is 300. The valid range is from 0 to 86400 seconds. A value of 0 indicates
that the broadcast key is not refreshed.
• Session Key Refresh Rate—The interval at which the WAP device refreshes session
(unicast) keys for each client associated with the VAP.
The valid range is from 0 to 86400 seconds. A value of 0 indicates that the broadcast
key is not refreshed.
WPA Personal
WPA Personal
WPA Personal is a Wi-Fi Alliance IEEE 802.11i standard, which includes AES-CCMP and
TKIP encryption. The Personal version of WPA uses a pre-shared key (PSK) instead of using
IEEE 802.1X and EAP as is used in the Enterprise WPA security mode. The PSK is used for
an initial check of credentials only. WPA Personal is also referred to as WPA-PSK.
This security mode is backwards-compatible for wireless clients that support the original
WPA.
These parameters configure WPA Personal:
• WPA Versions—The types of client stations to be supported:
- WP-TKIP—The network has some client stations that only support original WPA
and TKIP security protocol. Note that selecting only WPA-TKIP for the access
point is not allowed as per the latest WiFi Alliance requirement.
- WPA-AES—All client stations on the network support WPA2 version and AES-
CCMP cipher/ security protocol. This WPA version provides the best security per
the IEEE 802.11i standard. As per the latest WiFi Alliance requirement, the AP has
to support this mode all the time.
If the network has a mix of clients, some of which support WPA2 and others which
support only the original WPA, select both of the check boxes. This lets both WPA and
WPA2 client stations associate and authenticate, but uses the more robust WPA2 for
clients who support it. This WPA configuration allows more interoperability in place
of some security.
WPA clients must have one of these keys to be able to associate with the WAP device:
- A valid TKIP key
- A valid AES-CCMP key
5
79