Security - Cisco 8861 Deployment Manual

If using 802.11b in a high multipath environment, lower data rates should be used in those areas (e.g. 1 and 2 Mbps).
Use of antenna diversity can also help in such environments.

Security

When deploying a wireless LAN, security is essential.
The Cisco IP Phone 8861 and 8865 support the following wireless security features.
WLAN Authentication
•
WPA2 (802.1x authentication + AES or TKIP encryption)
•
WPA (802.1x authentication + TKIP or AES encryption)
•
WPA2-PSK (Pre-Shared key + AES encryption)
•
WPA-PSK (Pre-Shared key + TKIP encryption)
•
EAP-FAST (Extensible Authentication Protocol - Flexible Authentication via Secure Tunneling)
•
EAP-TLS (Extensible Authentication Protocol - Transport Layer Security)
•
PEAP-GTC (Protected Extensible Authentication Protocol - Generic Token Card)
•
PEAP-MSCHAPv2 (Protected Extensible Authentication Protocol - Microsoft Challenge Handshake Authentication
Protocol version 2)
•
802.11r / Fast Transition (FT)
•
CCKM (Cisco Centralized Key Management)
•
None
WLAN Encryption
•
AES (Advanced Encryption Standard)
•
TKIP / MIC (Temporal Key Integrity Protocol / Message Integrity Check)
•
WEP (Wired Equivalent Protocol) 40/64 and 104/128 bit
Note: Shared Key authentication is not supported.
The Cisco IP Phone 8861 and 8865 also support the following additional security features.
•
Image authentication
•
Device authentication
•
File authentication
•
Signaling authentication
•
Secure Cisco Unified SRST
•
Media encryption (SRTP)
•
Signaling encryption (TLS)
•
Certificate authority proxy function (CAPF)
•
Secure profiles
Cisco IP Phone 8861 and 8865 Wireless LAN Deployment Guide
27