Cisco Cisco Aironet 350 Mini-PCI Wireless LAN Client Adapter Guia Do Desenho
11-11
Enterprise Mobility 4.1 Design Guide
OL-14435-01
Chapter 11 Mobile Access Router, Universal Bridge Client, and Cisco Unified Wireless
Security
Note
If you enable WPA for an SSID without a pre-shared key, the key management type is WPA.
If you enable WPA with a pre-shared key, the key management type is WPA-PSK.
If you enable WPA with a pre-shared key, the key management type is WPA-PSK.
Note
To support CCKM, your root device must interact with the WDS device on your network.
Configuring dot1x Credentials
The commands in this section cover the steps to configure dot1x credentials for use with EAP. Each
command is followed by a description of the commands components and any optional configuration
components.
command is followed by a description of the commands components and any optional configuration
components.
1.
eap profile profile-name-string
Creates the EAP profile.
2.
dot1x credentials profile
Creates a dot1x credentials profile and enters the dot1x credentials configuration submode.
3.
method [fast|gtc|leap|md5|mschapv2|tls]
Chooses an EAP authentication method for authentication purposes.
Note
A device configured for EAP authentication forces all root devices that associate to perform EAP
authentication. Root devices that do not use EAP cannot communicate with the device.
authentication. Root devices that do not use EAP cannot communicate with the device.
4.
dot11 ssid ssid-string
Description?
5.
authentication network-eap list-name
(Optional) Sets the authentication type for the SSID to use EAP for authentication and key
distribution.
distribution.
6.
dot1x credentials profile
Creates a dot1x credentials profile and enters the dot1x credentials configuration submode.
7.
dot1x eap profile profile-name-string
Specifies the EAP profile. This is the profile created in step 2 above.
8.
authentication key-management {[wpa] [cckm]} [optional]
(Optional) Sets the key-management type for the SSID to WPA, CCKM, or both. If you use the
optional keyword, client devices not configured for WPA or CCKM can use this SSID. If you do
not use the optional keyword, only WPA or CCKM client devices are allowed to use the SSID. To
enable CCKM for an SSID, you must also enable Network-EAP authentication. To enable WPA for
an SSID, you must also enable Open authentication or Network-EAP or both.
optional keyword, client devices not configured for WPA or CCKM can use this SSID. If you do
not use the optional keyword, only WPA or CCKM client devices are allowed to use the SSID. To
enable CCKM for an SSID, you must also enable Network-EAP authentication. To enable WPA for
an SSID, you must also enable Open authentication or Network-EAP or both.
Note
Only 802.11b and 802.11g radios support WPA and CCKM simultaneously.