Configuring authentication types, Assigning authentication types to an ssid, Configuring – Rockwell Automation 1783-WAPxxx Stratix 5100 Wireless Access Point User Manual User Manual

Page 359

Advertising
background image

Rockwell Automation Publication 1783-UM006A-EN-P - May 2014

359

Configuring Authentication Types

Chapter 12

Configuring Authentication
Types

This section describes how to configure authentication types. You attach
configuration types to the access point’s SSIDs. See

Configuring Multiple SSIDs

on page 279

for details on setting up multiple SSIDs.

Assigning Authentication Types to an SSID

Beginning in privileged EXEC mode, follow these steps to configure
authentication types for SSIDs:

1. Enter global configuration mode.

configure terminal

2. Create an SSID and enter SSID configuration mode for the new SSID.

The SSID can consist of up to 32 alphanumeric characters. SSIDs are case
sensitive.

dot11 ssid ssid-string

Table 95 - Firmware and Software Requirements

Key Management and Encryption Protocol

Third Party Host
Supplicant

(1)

Required

(1) Such as Funk Odyssey Client supplicant version 2.2 or Meetinghouse Data Communications Aegis Client version 2.1.

Supported Platform Operating
Systems

LEAP with CKIP
This security combination requires 12.2(11)JA or
later.

No

pages 95/98, Me, NT, 2000, XP, pages
CE, Mac OS X, Linux, DOS

LEAP with CCKM and CKIP
This security combination requires 12.2(11)JA or
later.

No

pages 98, Me, NT, 2000, XP, pages CE

LEAP with CCKM and WPA-TKIP

No

pages XP and 2000

LEAP with WPA (no CCKM)

No

pages XP and 2000

Host-based EAP (such as PEAP, EAP-SIM, and
EAP-TLS) with WPA (no CCKM)

No

(2)

(2) pages XP does not require a third-party supplicant, but you must install pages XP Service Pack 1 and Microsoft support patch

815485.

pages XP

Host-based EAP (such as PEAP, EAP-SIM, and
EAP-TLS) with WPA (no CCKM)

Yes

pages 2000

WPA-PSK Mode

No

2

pages XP

WPA-PSK Mode

Yes

pages 2000

TIP

When you configure TKIP-only cipher encryption (not TKIP + WEP 128 or TKIP
+ WEP 40) on any radio interface or VLAN, every SSID on that radio or VLAN
must be set to use WPA or CCKM key management. If you configure TKIP on a
radio or VLAN but you don’t configure key management on the SSIDs, client
authentication fails on the SSIDs.

TIP

There are no default authentication SSIDs for the wireless router.

Advertising