User's Manual

7-4
Cisco 3200 Series Wireless MIC Software Configuration Guide
OL-7734-02
Chapter 7 Configuring WEP and WEP Features
Configuring Cipher Suites and WEP
WEP Key Restrictions
Table 7-1 lists WEP key restrictions based on your security configuration.
Example WEP Key Setup
Table 7-2 shows an example WEP key setup that would work for the root bridge and an associated
non-root bridge:
Because the root bridge’s WEP key 1 is selected as the transmit key, WEP key 1 on the non-root bridge
must have the same contents. WEP key 4 on the non-root bridge is set, but because it is not selected as
the transmit key, WEP key 4 on the root bridge does not need to be set at all.
Note If you enable MIC but you use static WEP (you do not enable any type of EAP authentication),
both the root bridge and any non-root bridges with which it communicates must use the same
WEP key for transmitting data. For example, if the MIC-enabled root bridge uses the key in slot
1 as the transmit key, a non-root bridge associated to the root bridge must use the same key in
its slot 1, and the key in the non-root bridge’s slot 1 must be selected as the transmit key.
Table 7-1 WEP Key Restrictions
Security Configuration WEP Key Restriction
CCKM or WPA authenticated key
management
Cannot configure a WEP key in key slot 1
LEAP or EAP authentication Cannot configure a WEP key in key slot 4
Cipher suite with 40-bit WEP Cannot configure a 128-bit key
Cipher suite with 128-bit WEP Cannot configure a 40-bit key
Cipher suite with TKIP Cannot configure any WEP keys
Cipher suite with TKIP and 40-bit WEP or
128-bit WEP
Cannot configure a WEP key in key slot 1 and 4
Static WEP with MIC or CMIC Root and non-root bridges must use the same WEP
key as the transmit key, and the key must be in the
same key slot on both root and non-root bridges
Table 7-2 WEP Key Setup Example
Key
Slot
Root Bridge Associated Non-Root Bridge
Transmit? Key Contents Transmit? Key Contents
1 x 12345678901234567890abcdef
–
12345678901234567890abcdef
2
–
09876543210987654321fedcba x 09876543210987654321fedcba
3
–
not set
–
not set
4
–
not set
–
FEDCBA09876543211234567890