Software And Firmware Requirements For Wpa, Cckm, Ckip, And Wpa-Tkip - Cisco M10-RM Software Manual

Understanding Authentication Types
Figure 11-6
Figure 11-6
Client device
Client and server authenticate to each other, generating an EAP master key
Client and access point complete
a four-way handshake to:
Client and access point complete
a two-way handshake to securely
deliver the group transient key from
the access point to the client.

Software and Firmware Requirements for WPA, CCKM, CKIP, and WPA-TKIP

Table 11-1
client devices to support WPA and CCKM key management and CKIP and WPA-TKIP encryption
protocols.
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
11-8
shows the WPA key management process.
WPA Key Management Process
Confirm that a PMK exists and that
knowledge of the PMK is current.
Derive a pairwise transient key from
the PMK.
Install encryption and integrity keys into
the encryption/integrity engine, if necessary.
Confirm installation of all keys.
lists the firmware and software requirements required on access points and Cisco Aironet
Wired LAN
Access point
Server uses the EAP master key to
generate a pairwise master key (PMK)
to protect communication between the
client and the access point. (However,
if the client is using 802.1x authentication
and both the access point and the client
are configured with the same pre-shared key,
the pre-shared key is used as the PMK and
the server does not generate a PMK.)
Chapter 11 Configuring Authentication Types
Authentication
server
OL-14209-01