Configuring Data Encryption (Gui); Configuration Examples For Configuring Data Encryption; Displaying Data Encryption States For All Access Points: Examples - Cisco IOS XE Release 3SE Configuration Manual

Configuring Data Encryption
Command or Action
Step 5 show wireless dtls connections
Example:
Switch# show wireless dtls
connections

Configuring Data Encryption (GUI)

Step 1 Choose Configuration > Wireless > Access Points > All APs.
The All APs page is displayed.
Step 2 Click the name of the access point for which you want to enable data encryption.
The AP > Edit page is displayed.
Step 3 Click the Advanced tab.
Step 4 Select or unselect the Data Encryption check box.
Changing the data encryption mode requires the access points to reassociate with the
Note
switch.
Step 5 Click Apply.
Step 6 Click Save Configuration.

Configuration Examples for Configuring Data Encryption

Displaying Data Encryption States for all Access Points: Examples

This example shows how to display the encryption state of all access points or a specific access point. This
command also shows authentication errors, which track the number of integrity check failures and replay
errors. Relay errors help in tracking the number of times the access point receives the same packet:
Switch# show ap link-encryption
AP Name
------------------
3602a
This example shows how to display a summary of all active DTLS connections:
Switch# show wireless dtls connections
AP Name
--------------- ------------ ------------- ---------- --------------------
3602a
3602a
OL-28697-01
Purpose
Displays a summary of all active DTLS connections.
Note
Encryption Dnstream
State Count
---------- --------
Enabled
Local Port Peer IP
Capwap_Ctrl 10.10.21.213
Capwap_Data 10.10.21.213
Lightweight Access Point Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3650 Switches)
If you experience any problems with DTLS data encryption, enter
the debug dtls ap {all | event | trace} command to debug all
DTLS messages, events, or traces.
Upstream Last
Count Update
-------- ------
0 0 Never
Peer Port Ciphersuite
46075 TLS_RSA_WITH_AES_128_CBC_SHA
46075 TLS_RSA_WITH_AES_128_CBC_SHA
Configuring Data Encryption (GUI)
29