Примечания к выпуску для Cisco Cisco 2000 Series Wireless LAN Controller
9
Release Notes for Cisco wireless LAN controller and Cisco Aironet Lightweight Access Point for Software Release 3.1.59.24
Important Notes
Rekeys Not Supported with Cisco VPN Client
If a rekey occurs clients must reauthenticate. To solve this problem, log into the Web user interface,
navigate to the WLANs page, select Edit to display the WLANs > Edit page, choose Advanced
Configuration, and change Lifetime (seconds) to a large value, such as 28800 seconds (this is the
default), depending upon your security requirements.
navigate to the WLANs page, select Edit to display the WLANs > Edit page, choose Advanced
Configuration, and change Lifetime (seconds) to a large value, such as 28800 seconds (this is the
default), depending upon your security requirements.
RADIUS Servers
This product has been tested with the following RADIUS servers:
•
Odyssey Server and Odyssey Client v1.1 and 2.0 from Funk Software.
•
Steel-Belted RADIUS from Funk Software release 4.40.337 Enterprise Edition.
•
Microsoft Internet Authentication Service (IAS) release 5 on Windows 2000 Server/SP4; Microsoft
Internet Authentication Service (IAS) release 5.2.3790.0 on Windows 2003 server.
Internet Authentication Service (IAS) release 5.2.3790.0 on Windows 2003 server.
•
CiscoSecure ACS, v3.2.
•
FreeRADIUS release 0.9.3, with OpenSSL 0.9.7B.
Management Usernames and Local Netuser Names
Management usernames and local netuser names must be unique because they are stored in the same
database. That is, you cannot assign the same name to a Management User and a Local Netuser.
database. That is, you cannot assign the same name to a Management User and a Local Netuser.
802.1x and Microsoft Windows Zero-Config Supplicant
Clients using Windows Zero-Config and 802.1x MUST use wireless LANs configured for 40- or 104-bit
key length. Configuring for 128-bit key length results in clients that can associate but not authenticate.
key length. Configuring for 128-bit key length results in clients that can associate but not authenticate.
Cisco Aironet 1030 Remote Edge Lightweight Access Point Default Operation
When a wireless LAN controller reboots, dropped Cisco Aironet 1030 remote edge lightweight access
points attempt to associate with any available wireless LAN controller. If the Cisco Aironet 1030 remote
edge lightweight access points cannot contact a wireless LAN controller, they continue to offer
802.11a/b/g service on wireless LAN 1 only.
points attempt to associate with any available wireless LAN controller. If the Cisco Aironet 1030 remote
edge lightweight access points cannot contact a wireless LAN controller, they continue to offer
802.11a/b/g service on wireless LAN 1 only.
WEP Keys
This release supports four separate WEP index keys. These keys cannot be duplicated between wireless
LANs. At most four WEP wireless LANs can be configured on a wireless LAN controller. Each of these
wireless LANs must use a different key index.
LANs. At most four WEP wireless LANs can be configured on a wireless LAN controller. Each of these
wireless LANs must use a different key index.