Cisco Systems WAP121 Network Card User Manual


 
Wireless
Networks
Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 82
5
- WPA—The network has client stations that support the original WPA
and none that support the newer WPA2.
- WPA2—All client stations on the network support WPA2. This protocol
version provides the best security per the IEEE 802.11i standard.
If the network has a mix of clients, some of which support WPA2 and others
which support only the original WPA, select both of the check boxes. This
lets both WPA and WPA2 client stations associate and authenticate, but
uses the more robust WPA2 for clients who support it. This WPA
configuration allows more interoperability in place of some security.
Cipher Suites—The cipher suite you want to use:
- TKIP
- CCMP (AES)
You can select either or both. Both TKIP and AES clients can associate with
the WAP device. WPA clients must have one of these keys to be able to
associate with the WAP device:
- A valid TKIP key
- A valid AES-CCMP key
Clients not configured to use WPA Personal are not able to associate with
the WAP device.
Key—The shared secret key for WPA Personal security. Enter a string of at
least 8 characters to a maximum of 63 characters. Acceptable characters
include uppercase and lowercase alphabetic letters, the numeric digits, and
special symbols such as @ and #.
Key Strength Meter—The WAP device checks the key against complexity
criteria such as how many different types of characters (uppercase and
lowercase alphabetic letters, numbers, and special characters) are used
and how long the string is. If the WPA-PSK complexity check feature is
enabled, the key is not accepted unless it meets the minimum criteria. See
WPA-PSK Complexity for information on configuring the complexity check.
Broadcast Key Refresh Rate—The interval at which the broadcast (group)
key is refreshed for clients associated with this VAP. The default is 300
seconds and the valid range is from 0 to 86400 seconds. A value of 0
indicates that the broadcast key is not refreshed.