Cisco Systems OL-6415-04 manual Detects two MIC failures within 60 seconds, it blocks all

Chapter 6 Configuring Authentication Types

Matching Access Point and Client Device Authentication Types

	Command	Purpose
Step 6
	countermeasure tkip hold-time	Configure a TKIP MIC failure holdtime. If the access point
	seconds	detects two MIC failures within 60 seconds, it blocks all the
		TKIP clients on that interface for the holdtime period.
Step 7
	end	Return to privileged EXEC mode.
Step 8
	copy running-config startup-config	(Optional) Save your entries in the configuration file.

Use the no form of these commands to reset the values to default settings.

Matching Access Point and Client Device Authentication Types

To use the authentication types described in this section, the access point authentication settings must match the authentication settings on the client adapters that associate to the access point. Refer to the Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide for Windows for instructions on setting authentication types on wireless client adapters. Refer to Chapter 5, “Configuring Encryption Types,” for instructions on configuring encryption on the access point.

Table 6-2lists the client and access point settings required for each authentication type.

Note Some non-Cisco client adapters do not perform 802.1x authentication to the access point unless you configure Open authentication with EAP. To allow both the Cisco access point clients using LEAP and non-Cisco clients using LEAP to associate using the same SSID, you might need to configure the SSID for both Network EAP authentication and Open authentication with EAP.

Table 6-2	Client and Access Point Security Settings
Security Feature		Client Setting	Access Point Setting
Static WEP with open		Create a WEP key and enable Use	Set up and enable WEP and enable
authentication		Static WEP Keys and Open	Open Authentication for the SSID
		Authentication
Static WEP with shared key		Create a WEP key and enable Use	Set up and enable WEP and enable
authentication		Static WEP Keys and Shared Key	Shared Key Authentication for the
		Authentication	SSID
LEAP authentication		Enable LEAP	Set up and enable WEP and enable
			Network-EAP for the SSID1
EAP-FAST authentication		Enable EAP-FAST and enable	Set up and enable WEP and enable
		automatic provisioning or import a	Network-EAP for the SSID1
		PAC file

Cisco Wireless ISR and HWIC Access Point Configuration Guide

6-16 OL-6415-04