14.04.2014 Views

Cisco IOS Software Configuration Guide for Cisco Aironet Access ...

Cisco IOS Software Configuration Guide for Cisco Aironet Access ...

Cisco IOS Software Configuration Guide for Cisco Aironet Access ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Chapter 11<br />

Configuring Authentication Types<br />

Matching <strong>Access</strong> Point and Client Device Authentication Types<br />

Table 11-2<br />

Client and <strong>Access</strong> Point Security Settings (continued)<br />

Security Feature Client Setting <strong>Access</strong> Point Setting<br />

802.1X authentication and<br />

WPA<br />

802.1X authentication and<br />

WPA-PSK<br />

EAP-TLS authentication<br />

If using ACU to<br />

configure card<br />

If using Windows XP<br />

to configure card<br />

EAP-MD5 authentication<br />

If using ACU to<br />

configure card<br />

If using Windows XP<br />

to configure card<br />

Enable any 802.1X authentication<br />

method<br />

Enable any 802.1X authentication<br />

method<br />

Enable Host Based EAP and Use<br />

Dynamic WEP Keys in ACU and<br />

select Enable network access<br />

control using IEEE 802.1X and<br />

Smart Card or Other Certificate as<br />

the EAP Type in Windows 2000<br />

(with Service Pack 3) or<br />

Windows XP<br />

Select Enable network access<br />

control using IEEE 802.1X and<br />

Smart Card or other Certificate as<br />

the EAP Type<br />

Create a WEP key, enable Host<br />

Based EAP, and enable Use Static<br />

WEP Keys in ACU and select<br />

Enable network access control<br />

using IEEE 802.1X and<br />

MD5-Challenge as the EAP Type<br />

in Windows 2000 (with Service<br />

Pack 3) or Windows XP<br />

Select Enable network access<br />

control using IEEE 802.1X and<br />

MD5-Challenge as the EAP Type<br />

Select a cipher suite and enable<br />

Open authentication and WPA <strong>for</strong><br />

the SSID (you can also enable<br />

Network-EAP authentication in<br />

addition to or instead of Open<br />

authentication)<br />

Note<br />

To allow both WPA clients<br />

and non-WPA clients to use<br />

the SSID, enable optional<br />

WPA.<br />

Select a cipher suite and enable<br />

Open authentication and WPA <strong>for</strong><br />

the SSID (you can also enable<br />

Network-EAP authentication in<br />

addition to or instead of Open<br />

authentication). Enter a WPA<br />

pre-shared key.<br />

Note<br />

To allow both WPA clients<br />

and non-WPA clients to use<br />

the SSID, enable optional<br />

WPA.<br />

Set up and enable WEP and enable<br />

EAP and Open authentication <strong>for</strong><br />

the SSID<br />

Set up and enable WEP and enable<br />

EAP and Open Authentication <strong>for</strong><br />

the SSID<br />

Set up and enable WEP and enable<br />

EAP and Open authentication <strong>for</strong><br />

the SSID<br />

Set up and enable WEP and enable<br />

EAP and Open Authentication <strong>for</strong><br />

the SSID<br />

OL-8191-01<br />

<strong>Cisco</strong> <strong>IOS</strong> <strong>Software</strong> <strong>Configuration</strong> <strong>Guide</strong> <strong>for</strong> <strong>Cisco</strong> <strong>Aironet</strong> <strong>Access</strong> Points<br />

11-21

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!