Table of Contents
Advertisement
Configuring Authentication Types
3.
Configure the non-root bridge to act as a LEAP client.
Beginning in privileged EXEC mode, follow these steps to configure authentication types for SSIDs on
the non-root side:
Command
Step 1
configure terminal
Step 2
dot11 ssid ssid-string
Step 3
authentication network-eap
list-name
Step 4
authentication client username
username password password
Step 5
authentication key-management
{[wpa] [cckm]} [optional]
Step 6
end
Step 7
copy running-config startup-config (Optional) Saves your entries in the configuration file.
Cisco 3200 Series Wireless MIC Software Configuration Guide
22
Purpose
Enters global configuration mode.
Enters global SSID mode.
(Optional) Sets the authentication type for the SSID to use
LEAP for authentication and key distribution. Cisco bridges
support only LEAP, while other wireless clients may support
other EAP methods such as EAP, PEAP, or TLS.
Specifies the user name and password for the LEAP client.
(Optional) Sets the key management type for the SSID to WPA,
CCKM, or both. If you use the optional keyword, non-root
bridges not configured for WPA or CCKM can use this SSID.
If you do not use the optional keyword, only WPA or CCKM
bridges are allowed to use the SSID.
To enable CCKM for an SSID, you must also enable
Network-EAP authentication. To enable WPA for an SSID, you
must also enable open authentication or Network-EAP or both.
Only 802.11b and 802.11g radios support WPA and
Note
CCKM simultaneously.
Before you can enable CCKM or WPA, you must set
Note
the encryption mode for the SSID's VLAN to one of the
cipher suite options. To enable both CCKM and WPA,
you must set the encryption mode to a cipher suite that
includes TKIP. See the
document for instructions on configuring the VLAN
encryption mode.
If you enable WPA for an SSID without a pre-shared
Note
key, the key management type is WPA. If you enable
WPA with a pre-shared key, the key management type
is WPA-PSK. See the
Settings" section on page 23
configuring a pre-shared key.
To support CCKM, your root device must interact with
Note
the WDS device on your network. See the
the Root Device to Interact with the WDS Device"
section on page 23
root device to interact with your WDS device.
Returns to privileged EXEC mode.
Authentication Types
"Cipher Suites and WEP"
"Configuring Additional WPA
for instructions on
"Configuring
for instructions on configuring your
Hide quick links:
Advertisement
Table of Contents
