Synchronizing Security Features - Cisco CB21AG Installation And Configuration Manual

Chapter 5 Configuring the Client Adapter

Synchronizing Security Features

In order to use any of the security features discussed in this section, both your client adapter and the
access point to which it will associate must be set appropriately.
point settings required for each security feature. This chapter provides specific instructions for enabling
the security features on your client adapter. Refer to the documentation for your access point for
instructions on enabling any of these features on the access point.
Table 5-4
Security Feature
Static WEP with open
authentication
Static WEP with shared key
authentication
WPA passphrase
(or WPA Pre-Shared Key)
LEAP authentication
LEAP authentication with
WPA
EAP-TLS authentication
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide
OL-4211-02
Client and Access Point Security Settings
Client Setting
Choose Open authentication and
Pre-Shared Key (Static WEP) and
create a WEP key
Choose Shared authentication and
Pre-Shared Key (Static WEP) and
create a WEP key
Choose WPA Passphrase and enter
the passphrase
Choose 802.1x and LEAP; then set
LEAP settings
Choose WPA and LEAP; then set
LEAP settings
If using ADU to Choose 802.1x and EAP-TLS; then
configure card set EAP-TLS settings
If using Windows XP Choose Enable network access
to configure card control using IEEE 802.1X and
Smart Card or other Certificate as
the EAP Type
Setting Security Parameters
Table 5-4 indicates the client and access
Access Point Setting
Set up and enable WEP and enable
Open Authentication for the SSID
Set up and enable WEP and enable
Shared Key Authentication for the
SSID
Choose a cipher suite, enable Open
Authentication and WPA for the
SSID, and enter a WPA Pre-Shared
Key
To allow both WPA and
Note
non-WPA clients to use the
SSID, enable optional
WPA.
Set up and enable WEP and enable
Network-EAP for the SSID
Choose a cipher suite that includes
TKIP and enable Network-EAP
and WPA for the SSID
To allow both WPA and
Note
non-WPA clients to use the
SSID, enable optional
WPA.
Set up and enable WEP and enable
Open Authentication for the SSID
and specify the use of EAP
Set up and enable WEP and enable
Open Authentication for the SSID
and specify the use of EAP
5-19