Cisco 2100 Series Configuration Manual page 334

Configuring WLANs
If you chose PSK in
Step 8
a pre-shared key in the blank field. WPA pre-shared keys must contain 8 to 63 ASCII text characters or
64 hexadecimal characters.
Click Apply to commit your changes.
Step 9
Step 10 Click Save Configuration to save your changes.
Using the CLI to Configure WPA1+WPA2
Follow these steps to configure a WLAN for WPA1+WPA2 using the controller CLI.
Step 1 Enter this command to disable the WLAN:
config wlan disable wlan_id
Step 2 Enter this command to enable or disable WPA for the WLAN:
config wlan security wpa {enable | disable} wlan_id
Enter this command to enable or disable WPA1 for the WLAN:
Step 3
config wlan security wpa wpa1 {enable | disable} wlan_id
Enter this command to enable or disable WPA2 for the WLAN:
Step 4
config wlan security wpa wpa2 {enable | disable} wlan_id
Enter these commands to enable or disable AES or TKIP data encryption for WPA1 or WPA2:
Step 5
•
•
The default values are TKIP for WPA1 and AES for WPA2.
Enter this command to enable or disable 802.1X, PSK, or CCKM authenticated key management:
Step 6
config wlan security wpa akm {802.1X | psk | cckm} {enable | disable} wlan_id
The default value is 802.1X.
Step 7 If you enabled PSK in
config wlan security wpa akm psk set-key {ascii | hex} psk-key wlan_id
WPA pre-shared keys must contain 8 to 63 ASCII text characters or 64 hexadecimal characters.
If you enabled WPA2 with 802.1X authenticated key management or WPA1 or WPA2 with CCKM
Step 8
authenticated key management, the PMK cache lifetime timer is used to trigger reauthentication with the
client when necessary. The timer is based on the timeout value received from the AAA server or the
WLAN session timeout setting. To see the amount of time remaining before the timer expires, enter this
command:
show pmk-cache all
Information similar to the following appears:
PMK-CCKM Cache
Type
------
CCKM
Cisco Wireless LAN Controller Configuration Guide
6-24
Step 7, choose ASCII or HEX from the PSK Format drop-down box and then enter
config wlan security wpa wpa1 ciphers {aes | tkip} {enable | disable} wlan_id
config wlan security wpa wpa2 ciphers {aes | tkip} {enable | disable} wlan_id
Step 6, enter this command to specify a pre-shared key:
Station
------------------- --------
00:07:0e:b9:3a:1b
Chapter 6
Entry
Lifetime VLAN Override
------------------
150
Configuring WLANsWireless Device Access
IP Override
---------------
0.0.0.0
OL-17037-01