Wpa Personal - Cisco WAP131 Administration Manual

Wireless
Networks
Cisco WAP131 and WAP351 Administration Guide
• Active Server—Enables administratively selecting the active RADIUS
server, rather than having the WAP device attempt to contact each
configured server in sequence and choose the first server that is up.
Broadcast Key Refresh Rate—The interval at which the broadcast (group)
key is refreshed for clients associated with this VAP. The default is 300
seconds. The valid range is from 0 to 86400 seconds. A value of 0 indicates
that the broadcast key is not refreshed.
• Broadcast Key Refresh Rate—The interval at which the broadcast (group)
key is refreshed for clients associated with this VAP.
• Session Key Refresh Rate—The interval at which the WAP device
refreshes session (unicast) keys for each client associated with the VAP. The
valid range is from 0 to 86400 seconds. A value of 0 indicates that the
session key is not refreshed.

WPA Personal

WPA Personal is a Wi-Fi Alliance IEEE 802.11i standard, which includes AES-CCMP
and TKIP encryption. The Personal version of WPA uses a pre-shared key (PSK)
instead of using IEEE 802.1X and EAP as is used in the Enterprise WPA security
mode. The PSK is used for an initial check of credentials only. WPA Personal is also
referred to as WPA-PSK.
This security mode is backwards-compatible for the wireless clients that support
the original WPA.
These parameters configure WPA Personal:
• WPA Versions—Choose the types of client stations that you want to
support:
- WPA-TKIP—The network has some client stations that only support the
original WPA and TKIP security protocol. Note that choosing only WPA-
TKIP for access point is not allowed as per the latest WiFi Alliance
requirement.
- WPA2-AES—All client stations on the network support WPA2 and AES-
CCMP cipher/security protocol. This WPA version provides the best
security per IEEE 802.11i standard. As per the latest WiFi Alliance
requirement, the AP has to support this mode all the time.
5
93