Table of Contents
Advertisement
322
C
13: C
HAPTER
ONFIGURING
AAA
N
U
FOR
ETWORK
SERS
Table 34 Encryption Type Values and Associated Algorithms
Encryption-Type
Encryption Algorithm
Value
Assigned
1
Advanced Encryption Standard using Counter with Cipher
Block Chaining Message Authentication Code (CBC-MAC) —
or AES_CCM.
2
Reserved.
4
Temporal Key Integrity Protocol (TKIP).
8
Wired-Equivalent Privacy protocol using 104 bits of key
strength (WEP_104). This is the default.
16
Wired-Equivalent Privacy protocol using 40 bits of key strength
(WEP_40).
32
No encryption.
64
Static WEP
For example, the following command restricts the MAC user group
mac-fans to access the network by using only TKIP:
WX1200# set mac-usergroup mac-fans attr encryption-type 4
success: change accepted.
You can also specify a combination of allowed encryption types by
summing the values. For example, the following command allows
mac-fans to associate using either TKIP or WEP_104:
WX1200# set mac-usergroup mac-fans attr encryption-type 12
success: change accepted.
To clear an encryption type from the profile of a use or group of users in
the local WX database, use one of the following commands:
clear user username attr encryption-type
clear usergroup groupname attr encryption-type
clear mac-user username attr encryption-type
clear mac-usergroup groupname attr encryption-type
Assigning and Clearing Encryption Types on a RADIUS Server
To assign or delete an encryption algorithm as the Encryption-Type
authorization attribute in a user or group record on a RADIUS server, see
the documentation for your RADIUS server.
Advertisement
Table of Contents
