Cisco C3201FESMIC-TP= - 3201 Fast EN Switch Mobile Interface Card Expansion Module Software Configuration Manual page 202

Configuring Authentication Types
Command
Step 5
authentication network-eap
list-name [mac-address list-name]
Step 6 authentication key-management
{[wpa] [cckm]} [optional]
Step 7 end
Step 8 copy running-config startup-config (Optional) Saves your entries in the configuration file.
Cisco 3200 Series Wireless MIC Software Configuration Guide
18
Purpose
Sets the authentication type for the SSID to use EAP for
authentication and key distribution.
Note One of the commands list in Step3, Step 4, or Step 5
must be used.
• (Optional) Set the SSID's authentication type to
Network-EAP with MAC address authentication. All client
devices that associate to the access point are required to
perform MAC address authentication. For list-name,
specify the authentication method list.
(Optional) Sets the key-management type for the SSID to WPA,
CCKM, or both. If you use the optional keyword, client
devices not configured for WPA or CCKM can use this SSID.
If you do not use the optional keyword, only WPA or CCKM
client devices are allowed to use the SSID.
To enable CCKM for an SSID, you must also enable
Network-EAP authentication. To enable WPA for an SSID, you
must also enable open authentication or Network-EAP or both.
Only 802.11b and 802.11g radios support WPA and
Note
CCKM simultaneously.
Before you can enable CCKM or WPA, you must set
Note
the encryption mode to a cipher suite that includes
TKIP/AES-CCMP. To enable both CCKM and WPA,
you must set the encryption mode to a cipher suite that
includes TKIP. See the
instructions on configuring the VLAN encryption
mode.
If you enable WPA for an SSID without a pre-shared
Note
key, the key management type is WPA. If you enable
WPA with a pre-shared key, the key management type
is WPA-PSK. See the
Settings" section on page 23
configuring a pre-shared key.
To support CCKM, your root device must interact with
Note
the WDS device on your network. See the
the Root Device to Interact with the WDS Device"
section on page 23
root device to interact with your WDS device.
Returns to privileged EXEC mode.
Authentication Types
"Cipher Suites and WEP"
"Configuring Additional WPA
for instructions on
"Configuring
for instructions on configuring your
for