Configuring Security Settings - Cisco WAP581 Administration Manual

Wireless
• It does not consider the n-bandwidth of the radio. Even if the 5-GHz radio happens to use 20 MHz bandwidth,
it tries to steer clients to that radio.
• Scheduler — Select a scheduler profile from the list, VAP0 can't be associated to a scheduler profile.
• Guest Access Instance — Associate a CP instance to a VAP. The associated CP instance settings applies to users
who attempt to authenticate on the VAP. Select the instance name for each VAP you want to associate an instance
with.
A VAP can associate to one Guest Access Instance in Access Control > Guest Access page. You must configure
Note
a Guest Access Instance first.
Step 5 Click Apply.
Caution After new settings are saved, the corresponding processes may be stopped and restarted. When this condition
happens, the WAP device may lose its connectivity. It is recommend that you change the WAP device settings
at this time.
To delete a VAP, check the VAP and click Delete. To edit a VAP, check the VAP and click Edit. To save your
Note
changes, click Apply when complete.

Configuring Security Settings

This section describes the security settings that can be configured on the WAP device on the Networks page.
There are three security setting options to choose from: None, WPA Personal and WPA Enterprise.
None
If you select None as your security mode, no additional security settings are required on the device. This mode
means that any data transferred to and from the WAP device is not encrypted. This security mode can be used
during initial network configuration or for troubleshooting, but the same is not recommended for a regular
use on the internal network as this mode is not secure.
WPA Personal
The WPA Personal is a Wi-Fi Alliance IEEE 802.11i standard, which includes AES-CCMP and TKIP
encryption. The WPA Personal uses a pre-shared key (PSK) instead of using IEEE 802.1X and EAP as is
used in the Enterprise WPA security mode. The PSK is used for an initial check of credentials only. WPA
Personal is also referred to as WPA-PSK.
This security mode is backwards-compatible for the wireless clients that support the original WPA.
To configure WPA Personal, configure the following:
• WPA Versions — Choose the types of client stations from the following:
• WPA-TKIP — This network has client stations that only support the original WPA and TKIP
security protocol. Note that selecting the WPA-TKIP only is not allowed as per the latest Wi-Fi
Alliance requirements.
Cisco WAP581 Wireless-AC/N Dual Radio Access Point with 2.5GbE LAN Administration Guide
Configuring Security Settings
53