6-21
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 6 Configuring WLANsWireless Device Access
Configuring WLANs
Static WEP Keys
Controllers can control static WEP keys across access points. Use these commands to configure static
WEP for WLANs:
•
Enter this command to disable 802.1X encryption:
config wlan security 802.1X
disable
wlan_id
•
Enter this command to configure 40/64, 104/128, or 128/152-bit WEP keys:
config wlan security static-wep-key encryption
wlan_id
{
40
|
104
|
128
} {
hex
|
ascii
}
key
key_index
–
Use the
40
,
104
, or
128
options to specify 40/64-bit, 104/128-bit, or 128/152-bit encryption.
The default setting is 104/128.
–
Use the
hex
or
ascii
option to specify the character format for the WEP key.
–
Enter 10 hexadecimal digits (any combination of 0-9, a-f, or A-F) or five printable ASCII
characters for 40-bit/64-bit WEP keys; enter 26 hexadecimal or 13 ASCII characters for
104-bit/128-bit keys; enter 32 hexadecimal or 16 ASCII characters for 128-bit/152-bit keys.
–
Enter a key index (sometimes called a
key slot
) of
1
through
4
.
Dynamic 802.1X Keys and Authorization
Controllers can control 802.1X dynamic WEP keys using Extensible Authentication Protocol (EAP)
across access points and support 802.1X dynamic key settings for WLANs.
Note
To use LEAP with lightweight access points and wireless clients, make sure to choose
Cisco-Aironet
as
the RADIUS server type when configuring the CiscoSecure Access Control Server (ACS).
•
Enter
show wlan
wlan_id
to check the security settings of each WLAN. The default security setting
for new WLANs is 802.1X with dynamic keys enabled. To maintain robust Layer 2 security, leave
802.1X configured on your WLANs.
•
To disable or enable the 802.1X authentication, use this command:
config wlan security 802.1X
{
enable
|
disable
}
wlan_id
After you enable 802.1X authentication, the controller sends EAP authentication packets between
the wireless client and the authentication server. This command allows all EAP-type packets to be
sent to and from the controller.
•
If you want to change the 802.1X encryption level for a WLAN, use this command:
config wlan security 802.1X encryption
wlan_id
[
40
|
104
|
128
]
–
Use the 40 option to specify 40/64-bit encryption.
–
Use the 104 option to specify 104/128-bit encryption. (This is the default encryption setting.)
–
Use the 128 option to specify 128/152-bit encryption.
