Cisco 8832, Руководство администратора

Страница: 88 / 190

AES
An encryption method used for WPA2 authentication. This national standard for encryption uses a
symmetrical algorithm that has the same key for encryption and decryption. AES uses Cipher Blocking
Chain (CBC) encryption of 128 bits in size, which supports key sizes of 128, 192 and 256 bits, as a
minimum. The Cisco IP Phone supports a key size of 256 bits.
The Cisco IP Phone does not support Cisco Key Integrity Protocol (CKIP) with CMIC. Note
Authentication and encryption schemes are set up within the wireless LAN. VLANs are configured in the
network and on the APs and specify different combinations of authentication and encryption. An SSID
associates with a VLAN and the particular authentication and encryption scheme. In order for wireless client
devices to authenticate successfully, you must configure the same SSIDs with their authentication and encryption
schemes on the APs and on the Cisco IP Phone.
Some authentication schemes require specific types of encryption. With Open authentication, you can use
static WEP for encryption for added security. But if you are using Shared Key authentication, you must set
static WEP for encryption, and you must configure a WEP key on the phone.
• When you use WPA pre-shared key or WPA2 pre-shared key, the pre-shared key must be statically set
on the phone. These keys must match the keys that are on the AP.
• The Cisco IP Phone does not support auto EAP negotiation; to use EAP-FAST mode, you must specify
it.
Note
The following table provides a list of authentication and encryption schemes that are configured on the Cisco
Aironet APs that the Cisco IP Phone supports. The table shows the network configuration option for the phone
that corresponds to the AP configuration.
Table 12: Authentication and Encryption Schemes
AP Configuration Cisco IP Phone
Configuration
Fast Roaming Encryption Key Management Security Security Mode
N/A None None None None
N/A WEP Static Static WEP WEP
None TKIP WPA PSK PSK
FT AES WPA2
CCKM WEP 802.1x EAP-FAST EAP-FAST
CCKM TKIP WPA
FT, CCKM AES WPA2
Cisco IP Conference Phone 8832 Administration Guide for Cisco Unified Communications Manager
78
Cisco IP Conference Phone Administration
WLAN Security