Manualshelf

User's Manual

ManualsBrandsCisco Systems ManualsComputers & Accessories802.11a/g PCI adapter
111112113114115116117118119120
5-45
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide
OL-4211-05
Chapter 5 Configuring the Client Adapter
Setting Security Parameters
• Access points to which your client adapter may attempt to authenticate must use the following
firmware versions or later: 12.00T (access points running VxWorks), Cisco IOS Release 12.2(4)JA
(1100 series access points), Cisco IOS Release 12.2(8)JA (1200 series access points), Cisco IOS
Release 12.3(4)JA (1130 series and BR 1310 series access points), Cisco IOS Release 12.3(7)JA
(1240 series access points), or Cisco IOS Release 12.2(13)JA (350 series access points).
Note To use WPA or CCKM, access points must use Cisco IOS Release 12.2(11)JA or later. To
use WPA2, access points must use Cisco IOS Release 12.3(2)JA or later.
• All necessary infrastructure devices (such as access points, servers, gateways, user databases, etc.)
must be properly configured for the authentication type you plan to enable on the client.
Follow the instructions in one of the sections below to enable EAP-TLS or PEAP authentication for this
profile:
• Enabling EAP-TLS, 5-45
• Enabling PEAP (EAP-GTC), 5-48
• Enabling PEAP (EAP-MSCHAP V2), 5-52
• Enabling PEAP (EAP-MSCHAP V2) machine authentication with machine certificates, 5-55
Enabling EAP-TLS
Follow the steps below to enable EAP-TLS authentication for this profile.
Step 1 Perform one of the following on the Profile Management (Security) window:
• If you want to enable EAP-TLS without WPA or WPA2, choose 802.1x under Set Security Options
and EAP-TLS in the 802.1x EAP Type drop-down box.
• If you want to enable EAP-TLS with WPA or WPA2, choose WPA/WPA2/CCKM under Set
Security Options and EAP-TLS in the WPA/WPA2/CCKM EAP Type drop-down box.
Note If you want to enable CCKM on the client adapter, you must choose the WPA/WPA2/CCKM
security option, regardless of whether you want the adapter to use WPA or WPA2. The
configuration of the access point to which your client adapter associates determines whether
CCKM will be used with 802.1x, WPA, or WPA2.
Note Refer to the “WPA and WPA2” on page 5-19 for additional information.