Cisco 340 User Manual

Page 34

Advertising
background image

5-34

Cisco Aironet 340, 350, and CB20A Wireless LAN Client Adapters Installation and Configuration Guide for Windows

OL-1394-08

Chapter 5 Configuring the Client Adapter

Setting Network Security Parameters

EAP-SIM authentication with WPA

If using ACU to
configure card

Enable Wi-Fi Protected Access
(WPA), Host Based EAP (WPA),
and Dynamic WEP in ACU and
enable WPA and select Enable
network access control using IEEE
802.1X and SIM Authentication as
the EAP Type in Windows

Select a cipher suite that includes
TKIP; set up and enable WEP; and
enable WPA and Open
Authentication for the SSID and
specify the use of EAP

Note

To allow both WPA and
non-WPA clients to use the
SSID, enable optional
WPA.

If using Windows XP
to configure card

Enable WPA and select Enable
network access control using IEEE
802.1X and SIM Authentication as
the EAP Type

Select a cipher suite that includes
TKIP; set up and enable WEP; and
enable WPA and Open
Authentication for the SSID and
specify the use of EAP

Note

To allow both WPA and
non-WPA clients to use the
SSID, enable optional
WPA.

Fast roaming (CCKM)

Enable LEAP or EAP-FAST and
select Allow Fast Roaming
(CCKM)

Use firmware version 12.2(11)JA
or later, select a cipher suite that is
compatible with CCKM, and
enable Network-EAP and CCKM
for the SSID

Note

To allow both 802.1X
clients and non-802.1X
clients to use the SSID,
enable optional CCKM.

Reporting access points
that fail LEAP or
EAP-FAST authentication

No settings required; automatically
enabled in firmware version
5.02.20 or later (for LEAP) or
5.40.10 or later (for EAP-FAST)

No settings required; automatically
enabled in the following firmware
versions: 12.00T or later (340, 350,
and 1200 series access points) or
Cisco IOS Release 12.2(4)JA or
later (1100 series access points)

MIC

No settings required; automatically
enabled by the driver included in
the Install Wizard file

Set up and enable WEP with full
encryption, set MIC to MMH or
select Enable MIC check box, and
set Use Aironet Extensions to Yes

TKIP

No settings required; automatically
enabled by the firmware included
in the Install Wizard file

Set up and enable WEP, set TKIP to
Cisco or select Enable Per Packet
Keying check box, and set Use
Aironet Extensions to Yes

Broadcast key rotation

Enable LEAP, EAP-FAST,
EAP-TLS, PEAP, or EAP-SIM and
use the firmware included in the
Install Wizard file

Set up and enable WEP and set
Broadcast WEP Key Rotation
Interval to any value other than
zero (0)

Table 5-6

Client and Access Point Security Settings (continued)

Security Feature

Client Setting

Access Point Setting

Advertising