Cisco Unified Wireless IP Phone 7925G Series Deployment Guide
20
PEAP (MS-CHAPv2) requires that a user account be created on the authentication server.
The authentication server can be validated via importing a certificate into the Cisco Unified Wireless IP Phone 7925G Series.
See the “
Installing Certificates
” section for more information.
Cisco Centralized Key Management (CCKM)
When using 802.1x type authentication, it is recommended to implement CCKM to enable fast roaming. 802.1x can introduce
delay during roaming due to its requirement for full re-authentication. CCKM centralizes the key management and reduces the
number of key exchanges. WPA and WPA2 introduce additional transient keys and can lengthen roaming time.
When CCKM is utilized, roaming times can be reduced from 400-500 ms to less than 100 ms, where that transition time from
one access point to another will not be audible to the user.
As of the 1.3(4) release, the Cisco Unified Wireless IP Phone 7925G Series supports CCKM with WPA2 (AES or TKIP), WPA
(TKIP or AES) and 802.1x (WEP) authentication.
Authentication
Key Management
Encryption
EAP-FAST
802.1x, WPA, WPA2
AES, TKIP, WEP (40 or 128 bit)
EAP-TLS
802.1x, WPA, WPA2
AES, TKIP, WEP (40 or 128 bit)
