Matching Access Point And Client Device Authentication Types; Shared Key; Static Wep - Cisco ISR Configuration Manual

Matching Access Point and Client Device Authentication Types

Command
Step 6
countermeasure tkip hold-time
seconds
Step 7
end
Step 8
copy running-config startup-config (Optional) Save your entries in the configuration file.
Use the no form of these commands to reset the values to default settings.
Matching Access Point and Client Device Authentication Types
To use the authentication types described in this section, the access point authentication settings must
match the authentication settings on the client adapters that associate to the access point. Refer to the
Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide for Windows for
instructions on setting authentication types on wireless client adapters. Refer to
Encryption Types,"
Table 6-2
Note Some non-Cisco client adapters do not perform 802.1x authentication to the access point unless you
configure Open authentication with EAP. To allow both the Cisco access point clients using LEAP and
non-Cisco clients using LEAP to associate using the same SSID, you might need to configure the SSID
for both Network EAP authentication and Open authentication with EAP.
Table 6-2
Security Feature
Static WEP with open
authentication
Static WEP with shared key
authentication
LEAP authentication
EAP-FAST authentication
Cisco Wireless ISR and HWIC Access Point Configuration Guide
6-16
for instructions on configuring encryption on the access point.
lists the client and access point settings required for each authentication type.
Client and Access Point Security Settings
Client Setting
Create a WEP key and enable Use
Static WEP Keys and Open
Authentication
Create a WEP key and enable Use
Static WEP Keys and Shared Key
Authentication
Enable LEAP
Enable EAP-FAST and enable
automatic provisioning or import a
PAC file
Chapter 6
Purpose
Configure a TKIP MIC failure holdtime. If the access point
detects two MIC failures within 60 seconds, it blocks all the
TKIP clients on that interface for the holdtime period.
Return to privileged EXEC mode.
Configuring Authentication Types
Chapter 5, "Configuring
Access Point Setting
Set up and enable WEP and enable
Open Authentication for the SSID
Set up and enable WEP and enable
Shared Key Authentication for the
SSID
Set up and enable WEP and enable
Network-EAP for the SSID
Set up and enable WEP and enable
Network-EAP for the SSID
1
1
OL-6415-04