Cisco WAP121 Administration Manual page 77

Wireless Settings
Networks
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE
Dynamic WEP
Dynamic WEP refers to the combination of 802. 1 x technology and the Extensible
Authentication Protocol (EAP). With Dynamic WEP security, WEP keys are changed
dynamically.
EAP messages are sent over an
called EAP Encapsulation Over LANs (EAPOL). IEEE 802. 1 X provides dynamically-
generated keys that are periodically refreshed. An RC4 stream cipher is used to
encrypt the frame body and cyclic redundancy checking (CRC) of each 802. 1 1
frame.
This mode requires the use of an external RADIUS server to authenticate users.
The WAP device requires a RADIUS server that supports EAP, such as the
Microsoft Internet Authentication Server. To work with Microsoft Windows clients,
the authentication server must support Protected EAP (PEAP) and
You can use any of a variety of authentication methods that the IEEE 802. 1 X mode
supports, including certificates, Kerberos, and public key authentication. You must
configure the client stations to use the same authentication method the WAP
device uses.
These parameters display for Dynamic WEP configuration:
• Use Global RADIUS Server Settings—By default, each VAP uses the
global RADIUS settings that you define for the WAP device (see
Server, page 106). However, you can configure each VAP to use a different
set of RADIUS servers.
To use the global RADIUS server settings, ensure the check box is selected.
To use a separate RADIUS server for the VAP, clear the check box and enter
the RADIUS server IP address and key in these fields:
• Server IP Address Type—The IP version that the RADIUS server uses.
You can toggle between the address types to configure IPv4 and IPv6
global RADIUS address settings, but the WAP device contacts only the
RADIUS server or servers for the address type you select in this field.
• Server IP Address or Server IPv6 Address—The address for the primary
RADIUS server for this VAP.
When the first wireless client tries to authenticate with the WAP device, the
WAP device sends an authentication request to the primary server. If the
primary server responds to the authentication request, the WAP device
continues to use this RADIUS server as the primary server, and
authentication requests are sent to the address you specify.
IEEE 802. 1 1 wireless network using a protocol
5
MSCHAP V2.
RADIUS
77