Cisco WAP121 Administration Manual page 80

Wireless Settings
Networks
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE
• Key Strength Meter—The WAP device checks the key against complexity
criteria such as how many different types of characters (uppercase,
lowercase, numbers, and special characters) are used and how long the
string is. If the WPA-PSK complexity check feature is enabled, the key will
not be accepted unless it meets the minimum criteria. See
Complexity, page 111
• Broadcast Key Refresh Rate—The interval at which the broadcast (group)
key is refreshed for clients associated to this VAP. The default is 300
seconds and the valid range is from 0 to 86400 seconds. A value of 0
indicates that the broadcast key is not refreshed.
WPA Enterprise
WPA Enterprise with
802. 1 1i standard, which includes
Enterprise mode requires the use of a RADIUS server to authenticate users.
This security mode is backwards-compatible with wireless clients that support
the original WPA.
These parameters display for WPA Enterprise configuration:
• WPA Versions—The types of client stations to be supported:
- WPA—If all client stations on the network support the original WPA but
none support the newer WPA2, then select WPA.
- WPA2—If all client stations on the network support WPA2, we suggest
using WPA2 which provides the best security per the IEEE 802. 1 1i
standard.
- WPA and WPA2—If you have a mix of clients, some of which support
WPA2 and others which support only the original WPA, select both WPA
and WPA2. This lets both WPA and WPA2 client stations associate and
authenticate, but uses the more robust WPA2 for clients who support it.
This WPA configuration allows more interoperability, at the expense of
some security.
• Enable pre-authentication—If for WPA Versions you select only WPA2 or
both WPA and WPA2, you can enable pre-authentication for WPA2 clients.
Click Enable pre-authentication if you want WPA2 wireless clients to send
pre-authentication packet. The pre-authentication information will be
relayed from the WAP device the client is currently using to the target WAP
device. Enabling this feature can help speed up authentication for roaming
clients who connect to multiple APs.
for information on configuring the complexity check.
RADIUS is an implementation of the Wi-Fi Alliance IEEE
CCMP (AES), and
WPA-PSK
TKIP mechanisms. The
5
80