Protecting Your Wireless LAN
CLI Security Configuration Examples
This section provides example configurations for creating SSIDs and assigning security.
Example: No Security
This example shows part of the configuration that results from using the Express Security page to create
an SSID called no_security_ssid, including the SSID in the beacon, assigning it to VLAN 10, and
selecting VLAN 10 as the native VLAN:
Dot11 ssid no_security-ssid
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid no_security-ssid
!
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
rts threshold 4000
station-role root
infrastructure-client
bridge-group 1
!
interface Dot11Radio0.10
encapsulation dot1Q 10
no ip route-cache
bridge-group 10
bridge-group 10 spanning-disabled
!
interface FastEthernet0.10
encapsulation dot1Q 10
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
Example: Static WEP
This example shows part of the configuration that is used to create an SSID called static_wep_ssid,
excluding the SSID from the beacon, assigning the SSID to VLAN 20, selecting 3 as the key slot, and
specifying a 128-bit key:
encryption vlan 20 key 3 size 128bit 7 4E78330C1A841439656A9323F25A transmit-ke
y
encryption vlan 20 mode wep mandatory
!
ssid static_wep_ssid
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid no_security-ssid
Cisco 3200 Series Wireless MIC Software Configuration Guide
6
vlan 10
authentication open
guest-mode
vlan 20
authentication open
Configuring the WMIC for the First Time