Cipher Suites and WEP
Configuring Cipher Suites
4
Cisco 3200 Series Wireless MIC Software Configuration Guide
This example shows how to create a 128-bit WEP key in slot 2 for VLAN 1 and sets the key as the
transmit key:
bridge# configure terminal
bridge(config)# interface dot11radio 0
bridge(config-if)# encryption vlan 1 key 2 size 128 12345678901234567890123456
transmit-key
bridge(config-if)# end
WEP Key Restrictions
Table 1
lists WEP key restrictions for various security configurations.
Example WEP Key Setup
Table 2
shows an example WEP key setup that would work for the root device and an associated non-root
bridge.
Step 4
encryption
[
vlan
vlan-id
]
mode wep
{ mandatory | optional }
Sets WEP as the encryption mode for this VLAN.
Step 5
end
Returns to privileged EXEC mode.
Step 6
copy running-config startup-config
(Optional) Saves your entries in the configuration file.
Command
Purpose
Table 1
WEP Key Restrictions
Security Configuration
WEP Key Restriction
CCKM or WPA authenticated key
management
Cannot configure a WEP in slot 1.
LEAP or EAP authentication
Cannot configure a WEP transmit-key in slot 4.
Cipher suite with 40-bit WEP
Cannot configure a 128-bit key.
Cipher suite with 128-bit WEP
Cannot configure a 40-bit key.
Cipher suite with TKIP
Cannot configure any WEP keys.
Cipher suite with AES
Cannot configure any WEP keys.
Cipher suite with TKIP and 40-bit WEP or
128-bit WEP
Cannot configure a WEP key in key slot 1 and 4
Static WEP with MIC or CMIC
Root devices and non-root bridges must use the
same WEP key as the transmit key, and the key
must be in the same key slot on both root devices
and non-root bridges.
