4-7
Cisco 880 Series Integrated Services Router Software Configuration Guide
OL-22206-01
Chapter 4 Basic Wireless Device Configuration
Configuring Wireless Settings
Read
Without VLANs, encryption settings (WEP and ciphers) apply to an interface, such as the
2.4-GHz radio, and you cannot use more than one encryption setting on an interface. For
example, when you create an SSID with static WEP with VLANs disabled, you cannot create
additional SSIDs with WPA authentication because the SSIDs use different encryption settings.
If you find that the security setting for an SSID conflicts with the settings for another SSID, you
can delete one or more SSIDs to eliminate the conflict.
Security Types
Table 4-1
describes the four security types that you can assign to an SSID.
Table 4-1
Types of SSID Security
Security Type
Description
Security Features Enabled
No security
This is the least secure option. You should use this option
only for SSIDs in a public space and you should assign it to
a VLAN that restricts access to your network.
None.
Static WEP key
This option is more secure than no security. However, static
WEP keys are vulnerable to attack. If you configure this
setting, you should consider limiting association to the
wireless device based on MAC address, see C
ipher Suites
and WEP at:
http://www.cisco.com/en/US/docs/routers/access/wireless/
software/guide/SecurityCipherSuitesWEP.html
.
Or
If your network does not have a RADIUS server, consider
using an access point as a local authentication server.
See
Using the Access Point as a Local Authenticator
for
instructions:
http://www.cisco.com/en/US/docs/routers/access/wireless/
software/guide/SecurityLocalAuthent.html
.
Mandatory WEP. Client devices cannot
associate using this SSID without a WEP
key that matches the wireless device key.
