Cisco ISA500 Series Administration Manual page 173

Wireless Configuration for ISA550W and ISA570W
Configuring the Access Points
STEP 9
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
• Shared Secret: The Pre-shared Key (PSK ) is the shared secret key for WPA.
Enter a string of at least 8 characters to a maximum of 63 characters.
• Key Renewal Timeout: Enter a value to set the interval at which the key is
refreshed for clients associated to this SSID. The valid range is 0 to 86400
seconds. A value of 0 indicates that the key is not refreshed. The default is
3600 seconds.
If you choose WPA-Enterprise as the security mode, enter the following
information:
• Encryption: Choose either TKIP or AES as the encryption algorithm for data
encryption. The default is TKIP.
• Key Renewal Timeout: Enter a value to set the interval at which the key is
refreshed for clients associated to this AP. The valid range is 0 to 86400
seconds. A value of 0 indicates that the key is not refreshed. The default is
3600 seconds.
• RADIUS Server ID: The security appliance predefines three RADIUS
groups, choose an existing RADIUS group for client authentication. The
following RADIUS server settings of the selected group are displayed.
- Primary RADIUS Server IP Address: The IP address for the primary
RADIUS server.
- Primary RADIUS Server Port: The port number for the primary RADIUS
server.
- Primary RADIUS Server Shared Secret: The shared secret key for the
primary RADIUS server.
- Secondary RADIUS Server IP Address: The IP address for the
secondary RADIUS server.
- Secondary RADIUS Server Port: The port number for the secondary
RADIUS server.
- Secondary RADIUS Server Shared Secret: The shared secret key for
the secondary RADIUS server.
5
167