Chapter 4 Basic Wireless Device Configuration

Configuring Wireless Settings

Table 4-1

Types of SSID Security (continued)

 

 

 

 

 

Security Type

 

Description

Security Features Enabled

 

 

 

 

EAP1

 

This option enables 802.1X authentication (such as LEAP2,

Mandatory 802.1X authentication. Client

authentication

 

PEAP3, EAP-TLS4, EAP-FAST5, EAP-TTLS6, EAP-GTC7,

devices that associate using this SSID must

 

 

EAP-SIM8, and other 802.1X/EAP-based products)

perform 802.1X authentication.

 

 

This setting uses mandatory encryption, WEP, open

If radio clients are configured to

 

 

authentication plus EAP, network EAP authentication, no

authenticate using EAP-FAST, open

 

 

key management, and RADIUS server authentication port

authentication with EAP should also be

 

 

1645.

configured. If you do not configure open

 

 

You are required to enter the IP address and shared secret

authentication with EAP, the following

 

 

warning message appears:

 

 

for an authentication server on your network (server

 

 

 

 

 

authentication port 1645). Because 802.1X authentication

SSID CONFIG WARNING: [SSID]: If radio

 

 

provides dynamic encryption keys, you do not need to enter

clients are using EAP-FAST, AUTH OPEN

 

 

a WEP key.

with EAP should also be configured.

 

 

 

 

 

 

 

WPA9

 

This option permits wireless access to users who are

Mandatory WPA authentication. Client

 

 

authenticated against a database. Access is through the

devices that associate using this SSID must

 

 

services of an authentication server. Users’ IP traffic is then

be WPA capable.

 

 

encrypted with stronger algorithms than those used in WEP.

If radio clients are configured to

 

 

This setting uses encryption ciphers, TKIP10, open

authenticate using EAP-FAST, open

 

 

authentication plus EAP, network EAP authentication, key

authentication with EAP should also be

 

 

management WPA mandatory, and RADIUS server

configured. If you don’t configure open

 

 

authentication port 1645.

authentication with EAP, the following

 

 

As with EAP authentication, you must enter the IP address

warning message appears:

 

 

and shared secret for an authentication server on your

SSID CONFIG WARNING: [SSID]: If radio

 

 

network (server authentication port 1645).

clients are using EAP-FAST, AUTH OPEN

 

 

 

 

 

 

with EAP should also be configured.

 

 

 

 

1.EAP = Extensible Authentication Protocol.

2.LEAP = Lightweight Extensible Authentication Protocol.

3.PEAP = Protected Extensible Authentication Protocol.

4.EAP-TLS = Extensible Authentication Protocol—Transport Layer Security.

5.EAP-FAST = Extensible Authentication Protocol—Flexible Authentication via Secure Tunneling.

6.EAP-TTLS = Extensible Authentication Protocol—Tunneled Transport Layer Security.

7.EAP-GTC = Extensible Authentication Protocol—Generic Token Card.

8.EAP-SIM = Extensible Authentication Protocol—Subscriber Identity Module.

9.WPA = Wi-Fi Protected Access.

10. TKIP = Temporal Key Integrity Protocol.

Configuring Wireless Quality of Service

Configuring quality of service (QoS) can provide preferential treatment to certain traffic at the expense of other traffic. Without QoS, the device offers best-effort service to each packet, regardless of the packet contents or size. It sends the packets without any assurance of reliability, delay bounds, or throughput. To configure quality of service (QoS) for your wireless device, see Quality of Service in a Wireless Environment at: http://www.cisco.com/en/US/docs/routers/access/wireless/software/guide/QualityOfService.html.

Cisco 880 Series Integrated Services Router Software Configuration Guide

 

4-8

OL-22206-01

 

 

 

Page 51 Page 53
Page 52
Image 52
Cisco Systems CISCO881SECK9 Configuring Wireless Quality of Service, EAP1, PEAP3, EAP-TLS4, EAP-FAST5, EAP-TTLS6, EAP-GTC7
Page 51 Page 53

CISCO881SECK9 specifications

The Cisco Systems CISCO881SECK9 is a robust and flexible router designed to cater to the needs of small to medium-sized businesses and branch offices. It is part of the Cisco 8800 series, known for its powerful performance, security features, and advanced functionalities, making it suitable for various networking applications.

One of the standout features of the CISCO881SECK9 is its integrated security capabilities. With a built-in Cisco IOS Firewall and comprehensive security features such as intrusion prevention systems (IPS), secure virtual private network (VPN) services, and support for advanced encryption protocols, businesses can confidently protect their data and communications. This level of security is crucial in today’s cyber threat landscape, where data breaches and cyberattacks can have severe implications.

Another key characteristic of the CISCO881SECK9 is its support for multiple WAN connectivity options, including Ethernet, DSL, and 3G/4G cellular connections. This versatility allows organizations to choose their preferred internet connection method, providing reliable and continuous connectivity. The device also supports load balancing across multiple WAN links, which helps optimize bandwidth utilization and enhance the overall network performance.

The router also features a range of integrated services, including voice, video, and data services, which are essential for modern business operations. With support for Voice over IP (VoIP) and video conferencing, the CISCO881SECK9 ensures that organizations can maintain effective communication and collaboration among employees, partners, and clients. This dual functionality enhances productivity while simplifying network management.

In terms of performance, the CISCO881SECK9 is equipped with advanced Quality of Service (QoS) features that prioritize critical applications and ensure optimal performance even during peak traffic periods. This capability is particularly important for businesses that rely on real-time applications such as video conferencing and VoIP, ensuring high-quality service delivery.

Moreover, the router's scalability allows organizations to grow without needing to overhaul their entire network infrastructure. It supports various expansion modules, providing flexibility to add additional features and capabilities as business needs evolve.

With its combination of security, performance, and integrated services, the Cisco Systems CISCO881SECK9 stands out as a reliable choice for enterprises looking to enhance their networking capabilities while ensuring a secure and scalable infrastructure. Its thoughtful design, robust features, and adaptability make it suitable for a wide range of business applications, enabling companies to thrive in a fast-paced digital landscape.
Top Page Image Contents