Chapter 6 Configuring Authentication Types

Matching Access Point and Client Device Authentication Types

 

 

Table 6-2

Client and Access Point Security Settings (continued)

 

 

 

 

 

 

 

Security Feature

Client Setting

Access Point Setting

 

 

 

 

 

 

 

EAP-FAST authentication

Enable EAP-FAST and Wi-Fi

Select a cipher suite that includes

 

 

with WPA

 

Protected Access (WPA) and

TKIP, set up and enable WEP, and

 

 

 

 

enable automatic provisioning or

enable Network-EAP and WPA for

 

 

 

 

import a PAC file.

the SSID.

 

 

 

 

To allow the client to associate to

Note To allow both WPA and

 

 

 

 

both WPA and non-WPA access

non-WPA clients to use the

 

 

 

 

points, enable Allow Association to

SSID, enable optional

 

 

 

 

both WPA and non-WPA

WPA.

 

 

 

 

authenticators.

 

 

 

 

 

 

 

 

 

 

 

802.1x authentication

Enable LEAP

Select a cipher suite and enable

 

 

 

 

 

Network-EAP for the SSID

 

 

 

 

 

 

 

802.1x authentication and

Enable any 802.1x authentication

Select a cipher suite and enable

 

 

WPA

 

method

Open authentication and WPA for

 

 

 

 

 

the SSID (you can also enable

 

 

 

 

 

Network-EAP authentication in

 

 

 

 

 

addition to or instead of Open

 

 

 

 

 

authentication)

 

 

 

 

 

Note To allow both WPA clients

 

 

 

 

 

and non-WPA clients to use

 

 

 

 

 

the SSID, enable optional

 

 

 

 

 

WPA.

 

 

 

 

 

 

 

802.1x authentication and

Enable any 802.1x authentication

Select a cipher suite and enable

 

 

WPA-PSK

 

method

Open authentication and WPA for

 

 

 

 

 

the SSID (you can also enable

 

 

 

 

 

Network-EAP authentication in

 

 

 

 

 

addition to or instead of Open

 

 

 

 

 

authentication). Enter a WPA

 

 

 

 

 

pre-shared key.

 

 

 

 

 

Note To allow both WPA clients

 

 

 

 

 

and non-WPA clients to use

 

 

 

 

 

the SSID, enable optional

 

 

 

 

 

WPA.

 

 

 

 

 

 

 

 

 

 

EAP-TLS authentication

 

 

 

 

 

 

 

 

 

 

 

 

If using ACU to

Enable Host Based EAP and Use

Set up and enable WEP and enable

 

 

configure card

Dynamic WEP Keys in ACU and

EAP and Open authentication for

 

 

 

 

select Enable network access

the SSID

 

 

 

 

control using IEEE 802.1X and

 

 

 

 

 

 

 

 

Smart Card or Other Certificate as

 

 

 

 

 

 

 

 

the EAP Type in Windows 2000

 

 

 

 

 

 

 

 

(with Service Pack 3) or

 

 

 

 

 

 

 

 

Windows XP

 

 

 

 

 

 

 

 

 

 

 

If using Windows XP

Select Enable network access

Set up and enable WEP and enable

 

 

to configure card

control using IEEE 802.1X and

EAP and Open Authentication for

 

 

 

 

Smart Card or other Certificate as

the SSID

 

 

 

 

the EAP Type

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Cisco Wireless ISR and HWIC Access Point Configuration Guide

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

OL-6415-04

 

 

 

 

6-17

 

 

 

 

 

 

 

Page 105
Image 105
Cisco Systems OL-6415-04 manual Wpa-Psk