User's Manual
8-7
Cisco 3200 Series Wireless MIC Software Configuration Guide
OL-7734-02
Chapter 8 Configuring Authentication Types
Configuring Authentication Types
Use the no form of the SSID commands to disable the SSID or to disable SSID features.
This example sets the authentication type for the SSID bridgeman to open with EAP authentication.
Bridges using the SSID bridgeman attempt EAP authentication using a server named adam.
bridge# configure terminal
bridge(config)# configure interface dot11radio 0
bridge(config-if)# ssid bridgeman
bridge(config-ssid)# authentication open eap adam
bridge(config-ssid)# end
Step 6
authentication network-eap
list-name
(Optional) Set the authentication type for the SSID to use
LEAP for authentication and key distribution. Cisco bridges
only support LEAP, while other wireless clients may support
other EAP methods such as EAP, PEAP, or TLS.
Step 7
authentication key-management
{[wpa][cckm]} [optional]
(Optional) Set the authentication type for the SSID to WPA,
CCKM, or both. If you use the optional keyword, non-root
bridges not configured for WPA or CCKM can use this SSID.
If you do not use the optional keyword, only WPA or CCKM
bridges are allowed to use the SSID.
To enable CCKM for an SSID, you must also enable
Network-EAP authentication. To enable WPA for an SSID, you
must also enable Open authentication or Network-EAP or both.
Note Only 802.11b and 802.11g radios support WPA and
CCKM simultaneously.
Note Before you can enable CCKM or WPA, you must set
the encryption mode for the SSID’s VLAN to one of the
cipher suite options. To enable both CCKM and WPA,
you must set the encryption mode to a cipher suite that
includes TKIP. See the “Enabling Cipher Suites and
WEP” section on page 7-5 for instructions on
configuring the VLAN encryption mode.
Note If you enable WPA for an SSID without a pre-shared
key, the key management type is WPA. If you enable
WPA with a pre-shared key, the key management type
is WPA-PSK. See the “Configuring Additional WPA
Settings” section on page 8-9 for instructions on
configuring a pre-shared key.
Note To support CCKM, your root bridge must interact with
the WDS device on your network. See the “Configuring
the Root Bridge to Interact with the WDS Device”
section on page 8-8 for instructions on configuring
your root bridge to interact with your WDS device.
Step 8
end Return to privileged EXEC mode.
Step 9
copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose