Cisco Cisco Aironet 350 Access Points Release Notes
9
Release Notes for Cisco Aironet 340 and 350 Series Access Points and 350 Series Bridges Running Firmware Version 12.00T
OL-3346-01
Limitations and Restrictions
EAP Authentication Requires Matching 802.1x Protocol Drafts
Note
This section applies to wireless networks set up to use LEAP. If you do not use LEAP on your wireless
network, you can skip this section.
network, you can skip this section.
Wireless client devices use Extensible Authentication Protocol (EAP) to log onto a network and generate
a dynamic, client-specific WEP key for the current logon session. If your wireless network uses WEP
without EAP, client devices use the static WEP keys entered in the Aironet Client Utilities.
a dynamic, client-specific WEP key for the current logon session. If your wireless network uses WEP
without EAP, client devices use the static WEP keys entered in the Aironet Client Utilities.
If you use Network-EAP authentication on your wireless network, your client devices and access points
must use the same 802.1x protocol draft. For example, if the radio firmware on the client devices that
will associate with an access point is 4.16, the access point should be configured to use Draft 8 of the
802.1x protocol.
must use the same 802.1x protocol draft. For example, if the radio firmware on the client devices that
will associate with an access point is 4.16, the access point should be configured to use Draft 8 of the
802.1x protocol.
lists firmware versions for Cisco Aironet products and the draft with which they
comply.
Note
Draft standard 8 is the default setting in firmware version 11.05 and earlier, and it might remain in effect
when you upgrade the firmware to version 11.06 or later. Check the setting on the Authenticator
Configuration page in the management system to make sure the best draft standard for your network is
selected.
when you upgrade the firmware to version 11.06 or later. Check the setting on the Authenticator
Configuration page in the management system to make sure the best draft standard for your network is
selected.
Use the Authenticator Configuration page in firmware version 11.06 or later to select the draft of the
802.1x protocol the access point or bridge radio should use. Follow these steps to set the draft for your
access point or bridge:
802.1x protocol the access point or bridge radio should use. Follow these steps to set the draft for your
access point or bridge:
Table 1
802.1x Protocol Drafts and Compliant Client Firmware
Firmware Version
Draft 7
Draft 8
Draft 10
1
1.
The functionality in Draft 10 is equivalent to the functionality in Draft 11, the
ratified draft of the 802.1x standard.
ratified draft of the 802.1x standard.
PC/PCI cards 4.13
—
x
—
PC/PCI cards 4.16
—
x
—
PC/PCI cards 4.23
—
x
—
PC/PCI cards 4.25 and later
—
—
x
WGB34x/352 8.58
—
x
—
WGB34x/352 8.61 or later
—
—
x
AP34x/35x 11.05 and earlier
—
x
—
AP34x/35x 11.06 and later
2
2.
The default draft setting in access point and bridge firmware version 11.06 and
later is Draft 10.
later is Draft 10.
—
x
x
AP34x/35x 11.07 and later
—
x
x
AP34x/35x and BR35x 11.21
through 12.00T
through 12.00T
—
x
x