Wep Key Restrictions; Example Wep Key Setup - Cisco M10-RM Software Manual

Chapter 10 Configuring Cipher Suites and WEP

WEP Key Restrictions

Table 10-1
Table 10-1
Security Configuration
CCKM or WPA authenticated key
management
LEAP or EAP authentication
Cipher suite with 40-bit WEP
Cipher suite with 128-bit WEP
Cipher suite with TKIP
Cipher suite with TKIP and 40-bit WEP or
128-bit WEP
Static WEP with MIC or CMIC
Broadcast key rotation

Example WEP Key Setup

Table 10-2
device:
Table 10-2
Key
Slot
1
2
3
4
Because the access point's WEP key 1 is selected as the transmit key, WEP key 1 on the other device
must have the same contents. WEP key 4 on the other device is set, but because it is not selected as the
transmit key, WEP key 4 on the access point does not need to be set at all.
OL-14209-01
lists WEP key restrictions based on your security configuration.
WEP Key Restrictions
shows an example WEP key setup that would work for the access point and an associated
WEP Key Setup Example
Access Point
Transmit? Key Contents
x 12345678901234567890abcdef
–
09876543210987654321fedcba
–
not set
– not set
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
WEP Key Restriction
Cannot configure a WEP key in key slot 1
Cannot configure a WEP key in key slot 4
Cannot configure a 128-bit key
Cannot configure a 40-bit key
Cannot configure any WEP keys
Cannot configure a WEP key in key slot 1 and 4
Access point and client devices must use the same WEP
key as the transmit key, and the key must be in the same
key slot on both access point and clients
Keys in slots 2 and 3 are overwritten by rotating
broadcast keys
Client devices using static WEP cannot use the
Note
access point when you enable broadcast key
rotation. When you enable broadcast key
rotation, only wireless client devices using
802.1x authentication (such as LEAP, EAP-TLS,
or PEAP) can use the access point.
Associated Device
Transmit? Key Contents
– 12345678901234567890abcdef
x 09876543210987654321fedcba
–
not set
– FEDCBA0987654321123456789
0
Configuring Cipher Suites and WEP
10-5