Cisco 2100 Series Configuration Manual page 333

Chapter 6 Configuring WLANsWireless Device Access
On a single WLAN, you can allow WPA1, WPA2, and 802.1X/PSK/CCKM/802.1X+CCKM clients to
join. All of the access points on such a WLAN advertise WPA1, WPA2, and 802.1X/PSK/CCKM/
802.1X+CCKM information elements in their beacons and probe responses. When you enable WPA1
and/or WPA2, you can also enable one or two ciphers, or cryptographic algorithms, designed to protect
data traffic. Specifically, you can enable AES and/or TKIP data encryption for WPA1 and/or WPA2.
TKIP is the default value for WPA1, and AES is the default value for WPA2.
You can configure WPA1+WPA2 through either the GUI or the CLI.
Using the GUI to Configure WPA1+WPA2
Follow these steps to configure a WLAN for WPA1+WPA2 using the controller GUI.
Click WLANs to open the WLANs page.
Step 1
Click the ID number of the desired WLAN to open the WLANs > Edit page.
Step 2
Click the Security and Layer 2 tabs to open the WLANs > Edit (Security > Layer 2) page (see
Step 3
Figure
Figure 6-11
Choose WPA+WPA2 from the Layer 2 Security drop-down box.
Step 4
Under WPA+WPA2 Parameters, check the WPA Policy check box to enable WPA1, check the WPA2
Step 5
Policy check box to enable WPA2, or check both check boxes to enable both WPA1 and WPA2.
Note
Check the AES check box to enable AES data encryption or the TKIP check box to enable TKIP data
Step 6
encryption for WPA1, WPA2, or both. The default values are TKIP for WPA1 and AES for WPA2.
Choose one of the following key management methods from the Auth Key Mgmt drop-down box:
Step 7
802.1X, CCKM, PSK, or 802.1X+CCKM.
OL-17037-01
6-11).
WLANs > Edit (Security > Layer 2) Page
The default value is disabled for both WPA1 and WPA2. If you leave both WPA1 and WPA2
disabled, the access points advertise in their beacons and probe responses information elements
only for the authentication key management method you choose in Step
Cisco Wireless LAN Controller Configuration Guide
Configuring WLANs
7.
6-23