Cisco Aironet CB20A Configuration Manual page 38

Setting Network Security Parameters
Enabling LEAP
Before you can enable LEAP authentication, your network devices must meet the following
requirements:
•
•
•
•
Note Cisco recommends the use of strong passwords for LEAP authentication in order to minimize the risk of
successful attacks by rogue access points. Refer to the
page 10-13
Follow these steps to enable LEAP authentication for this profile.
Check the Wi-Fi Protected Access (WPA) check box under Network Authentication on the Network
Step 1
Security screen if you want to enable WPA. This parameter enables the client adapter to associate to
access points using WPA.
Note
Note
Step 2 Choose LEAP or LEAP (WPA).
Note
Note
Click the Configure button. The LEAP Settings screen appears (see
Step 3
Cisco Aironet 340, 350, and CB20A Wireless LAN Client Adapters Installation and Configuration Guide for Windows
5-38
Client adapters must support WEP and use the firmware, drivers, utilities, and security modules
included in the Install Wizard file.
To use WPA, 350 series and CB20A client adapters must use the software included in Install Wizard
version 1.2 or later on a computer running Windows 2000 or XP.
Access points to which your client adapter may attempt to authenticate must use the following
firmware versions or later: 11.23T (340 and 350 series access points), 11.54T (1200 series access
points), or Cisco IOS Release 12.2(4)JA (1100 series access points).
To use WPA or fast roaming (CCKM), access points must use Cisco IOS Release 12.2(11)JA
Note
or later. To use the Reporting Access Points That Fail LEAP or EAP-FAST Authentication
and Fast Roaming features, access points must use the firmware versions listed on
All necessary infrastructure devices such as access points and servers must be properly configured
for LEAP authentication.
for tips on creating strong passwords.
WPA is not supported on Cisco Aironet 340 series client adapters.
Refer to the "Wi-Fi Protected Access (WPA)" section on page 5-27
This option is available only if you chose the LEAP security module during installation.
When you choose this option, dynamic WEP (if WPA is disabled) or TKIP (if WPA is enabled)
is set automatically.
Chapter 5 Configuring the Client Adapter
"Creating Strong Passwords" section on
for additional information.
Figure 5-7).
page 5-31.
OL-1394-08