Express Security Types - Cisco C3201FESMIC-TP= - 3201 Fast EN Switch Mobile Interface Card Expansion Module Software Configuration Manual

Configuring the WMIC for the First Time

Express Security Types

Table 1
Table 1
Security Type
No Security
Static WEP Key
EAP Authentication
WPA
describes the four security types that you can assign to an SSID.
Security Types on Express Security Setup Page
Description
This is the least secure option. You
should use this option only for SSIDs
that are used in a public space. Assign
this option to a VLAN that restricts
access to your network.
This option is more secure than no
security. However, static WEP keys
are vulnerable to attack. If you
configure this setting, you should
consider limiting association to the
access point based on MAC address,
or, if your network does not have a
RADIUS server, consider using an
access point as a local authentication
server.
This option enables 802.1x extensible
authentication protocol (EAP) types,
including Lightweight EAP (LEAP),
Protected EAP (PEAP),
EAP-Transport Layer Security
(EAP-TLS), and EAP-GTC, and
requires you to enter the IP address
and shared secret for an
authentication server on your network
(server authentication port 1645).
Because 802.1x authentication
provides dynamic encryption keys,
you do not need to enter a WEP key.
Wi-Fi Protected Access (WPA)
permits wireless access to users
authenticated against a database
through the services of an
authentication server, and then
encrypts their IP traffic with stronger
algorithms than those used in WEP.
As with EAP authentication, you
must enter the IP address and shared
secret for an authentication server on
your network (server authentication
port 1645).
Security Features Enabled
None.
Mandatory WEP encryption, no key
management, and open
authentication. In Root AP mode,
client devices cannot associate by
using this SSID without a WEP key
that matches the access point key.
Mandatory 802.1x authentication. In
Root AP mode, client devices that
associate by using this SSID must
perform 802.1x authentication.
Mandatory WPA authentication. In
Root AP mode, client devices that
associate by using this SSID must be
WPA-capable.
Cisco 3200 Series Wireless MIC Software Configuration Guide
Protecting Your Wireless LAN
5