WPA
As noted in Chapter 4, "Wireless Security," Wi-Fi Protected Access (WPA) is the replacement for WEP. It uses keys that automatically change, which enhances WEP.
First, open the Encryption Manager from the AP's home page (Security > Encryption Manager) shown in Figure 8-5.
Note
This configuration assumes that you have a working LEAP, EAP, or PEAP configuration.
To configure WPA settings, follow these steps:
|
Step 1. |
Select the radio button next to Cipher and select TKIP from the drop-down menu.
|
|
Step 2. |
Clear the encryption key in Key 1.
|
|
Step 3. |
Enable Encryption Key 2 as the transmit key by selecting the Transmit Key radio button next to Encryption Key 2.
|
|
Step 4. |
Click the Apply-Radio# button.
|
|
Step 5. |
Next, you must set up the SSID manager. On the leftmost menu under SECURITY, select SSID Manager to bring up the screen shown in Figure 8-6.
|
|
Step 6. |
Select the appropriate SSID from Current SSID List. |
|
Step 7. |
Select the authentication method based on what type of clients you use. Use the authentication method listing in Table 8-1.
Table 8-1. Select an Authentication Method Based on Your Clients
|
Type of Clients |
Authentication Method |
|
Cisco clients |
Use Network-EAP |
|
Third-party clients, including Cisco Compatible Extension (CCX) clients |
Use Open Authentication with EAP |
|
Both Cisco and third-party clients |
Use both Network-EAP and Open Authentication with EAP |
Note
If EAP worked before you added WPA, you should not need to change this setting. |
|
Step 8. |
Under Authenticated Key Management, choose Mandatory from the drop-down menu, and then check the box to choose WPA. This is shown in Figure 8-7.
|
|
Step 9. |
Click Apply-Radio#, as shown in Figure 8-8.
You can verify your WPA configuration if you click Association from the leftmost menu on the AP's homepage, and click the client's MAC address. Under Key Management, you can see if WPA has been properly enabled and if TKIP is used. |
Sections
Archive
Syndication
