Ap Authentication And Encryption Options - Cisco 8821 Administration Manual

VoIP Networks
For more information about encryption methods, see the "Wireless Security" section in the Cisco Wireless IP
Phone 8821 Series Deployment Guide.

AP Authentication and Encryption Options

Authentication and encryption schemes are set up within the wireless LAN. VLANs are configured in the
network and on the APs and specify different combinations of authentication and encryption. An SSID
associates with a VLAN and the particular authentication and encryption scheme. In order for wireless phones
to authenticate successfully, you must configure the same SSIDs with their authentication and encryption
schemes on the APs and on the phone.
• When you use WPA pre-shared key or WPA2 pre-shared key, the pre-shared key must be statically
Note
set on the phone. These keys must match the keys that are on the AP.
• The wireless phones do not support auto EAP negotiation; to use EAP-FAST mode, you must specify
it.
The following table provides a list of authentication and encryption schemes that are configured on the Cisco
Aironet APs that the phones support. The table shows the network configuration option for the device that
corresponds to the AP configuration.
Table 5: Authentication and Encryption Schemes
Cisco WLAN Configuration
Authentication
Open
Static WEP
EAP-FAST
PEAP-MSCHAPv2
PEAP-GTC
EAP-TLS
Key management
None
None
WPA or WPA2
with optional
CCKM
WPA or WPA2
with optional
CCKM
WPA or WPA2
with optional
CCKM
WPA or WPA2
with optional
CCKM
Cisco Wireless IP Phone 8821 and 8821-EX Administration Guide for Cisco Unified Communications Manager
Authentication Methods
Phone Configuration
Common Authentication
encryption
None None
WEP WEP
TKIP or AES 802.1x EAP > EAP-FAST
TKIP or AES 802.1x EAP > PEAP >
MSCHAPV2
TKIP or AES 802.1x EAP > PEAP > GTC
TKIP or AES 802.1x EAP > TLS
27