Cisco Aironet CB20A Configuration Manual page 34

Setting Network Security Parameters
Table 5-6
Security Feature
EAP-SIM authentication with WPA
If using ACU to
configure card
If using Windows XP
to configure card
Fast roaming (CCKM)
Reporting access points
that fail LEAP or
EAP-FAST authentication
MIC
TKIP
Broadcast key rotation
Cisco Aironet 340, 350, and CB20A Wireless LAN Client Adapters Installation and Configuration Guide for Windows
5-34
Client and Access Point Security Settings (continued)
Client Setting
Enable Wi-Fi Protected Access
(WPA), Host Based EAP (WPA),
and Dynamic WEP in ACU and
enable WPA and select Enable
network access control using IEEE
802.1X and SIM Authentication as
the EAP Type in Windows
Enable WPA and select Enable
network access control using IEEE
802.1X and SIM Authentication as
the EAP Type
Enable LEAP or EAP-FAST and
select Allow Fast Roaming
(CCKM)
No settings required; automatically
enabled in firmware version
5.02.20 or later (for LEAP) or
5.40.10 or later (for EAP-FAST)
No settings required; automatically
enabled by the driver included in
the Install Wizard file
No settings required; automatically
enabled by the firmware included
in the Install Wizard file
Enable LEAP, EAP-FAST,
EAP-TLS, PEAP, or EAP-SIM and
use the firmware included in the
Install Wizard file
Chapter 5 Configuring the Client Adapter
Access Point Setting
Select a cipher suite that includes
TKIP; set up and enable WEP; and
enable WPA and Open
Authentication for the SSID and
specify the use of EAP
To allow both WPA and
Note
non-WPA clients to use the
SSID, enable optional
WPA.
Select a cipher suite that includes
TKIP; set up and enable WEP; and
enable WPA and Open
Authentication for the SSID and
specify the use of EAP
To allow both WPA and
Note
non-WPA clients to use the
SSID, enable optional
WPA.
Use firmware version 12.2(11)JA
or later, select a cipher suite that is
compatible with CCKM, and
enable Network-EAP and CCKM
for the SSID
To allow both 802.1X
Note
clients and non-802.1X
clients to use the SSID,
enable optional CCKM.
No settings required; automatically
enabled in the following firmware
versions: 12.00T or later (340, 350,
and 1200 series access points) or
Cisco IOS Release 12.2(4)JA or
later (1100 series access points)
Set up and enable WEP with full
encryption, set MIC to MMH or
select Enable MIC check box, and
set Use Aironet Extensions to Yes
Set up and enable WEP, set TKIP to
Cisco or select Enable Per Packet
Keying check box, and set Use
Aironet Extensions to Yes
Set up and enable WEP and set
Broadcast WEP Key Rotation
Interval to any value other than
zero (0)
OL-1394-08