Protecting the Wireless LAN
Static WEP Security Example
This example shows part of the configuration for creating an SSID called static_wep_ssid, excluding the
SSID from the beacon, assigning the SSID to VLAN 20, selecting 3 as the key slot, and entering a 128-bit
key:
encryption vlan 20 key 3 size 128bit 7 4E78330C1A841439656A9323F25A transmit-key
encryption vlan 20 mode wep mandatory
!
Dot11 ssid static_wep_ssid
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid static_wep_ssid
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
rts threshold 4000
station-role root
infrastructure-client
bridge-group 1
!
interface Dot11Radio0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
!
interface FastEthernet0.20
encapsulation dot1Q 20
no ip route-cache
bridge-group 20
bridge-group 20 spanning-disabled
EAP Authentication Security Example
This example shows part of the configuration for creating an SSID called eap_ssid, excluding the SSID
from the beacon, and assigning the SSID to VLAN 30:
encryption vlan 30 mode wep mandatory
!
Dot11 ssid eap_ssid
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid eap_ssid
!
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0
rts threshold 2312
Cisco 3200 Series Wireless MIC Software Configuration Guide
16
vlan 20
authentication open
vlan 30
authentication open eap eap_methods
authentication network-eap eap_methods
Administering the WMIC