t_config_wlan_sec

Available Languages

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Configuring Security Settings for your WLAN/RLAN

Configuring Security Settings for your WLAN/RLAN

On the Configure > WLANs > Wireless Networks page, you can configure a security mode for your RLAN/WLAN, and update security settings for your WLAN.

To configure a security mode for your WLAN/RLAN:

  1. On the Configure > WLANs > Wireless Networks page, click Add. TheAdd Wireless Networks page is displayed.
  2. On the Security page, choose one of the following security modes for your WLAN, from the Mode drop-down list.
  • Open - To configure no security for the WLAN.
  • WPA2 Personal - Enter a pre-shared key and confirm the key.
  • WPA2 Enterprise - Specify the IP address of the authentication server. Enter the authentication password for the serve.
  • Web Authentication - Choose a webauth parameter map for configure web authentication for the WLAN.
  1. Click Next to go to the Access Policies page.

To update security settings for your WLAN:

  1. On the Configure > WLANs > Wireless Networks page, select the RLAN/WLAN you want to update. The Wireless Network Details section displays the configuration details for the selected WLAN/RLAN.
  2. On the Security page, to configure Layer 2 security for the WLAN/RLAN, choose a layer 2 security mode.
  3. Based on the layer 2 security mode you choose, configure your WLAN/RLAN layer 2 security using the information in the tables below. Click Done to save your changes, and click Apply.
ClosedTo configure layer 2
Parameters Description
Layer 2 Security Mode

Layer 2 security for the selected WLAN/RLAN. Choose one of the following values:

  • None—No Layer 2 security.
  • 802.1x—WEP 802.1X data encryption type.
  • WPA+WPA2—Wi-Fi Protected Access
  • WEP Static—Static WEP encryption parameters
  • WEP+802.1x—Both Static WEP and 802.1X parameters.

MAC Filtering

Select this check box to enable MAC filtering on your WLAN/RLAN. MAC Filtering is also known as MAC Authentication By Pass (MAB).
ClosedTo configure 802.1x parameters
Parameters Description  
WEP Key Size Choose the key size. The available values are None, 40 bits, and 104 bits.  

To configure WPA+WPA2 parameters:

Parameters Description  
WPA Policy Select the check box to enable WPA policy.  
WPA Encryption Choose the WPA encryption standard. This field is available only when the WPA Policy check box is selected.  
WPA+WPA Encryption Choose the WPA2 encryption standard. This field is available only when the WPA Policy check box is selected.  
Auth Key Mgmt

Choose the rekeying mechanism parameter. Values are the following:

  • 802.1X
  • CCKM
  • PSK
  • 802.1x + CCKM
  
Fast Transition Select this check box to enable fast transition between access points.  
Over the DS Select this check box to enable fast transition over a distributed system.  
Reassociation Timeout Enter the time, in seconds, after which a fast transition reassociation times out.  
ClosedTo configure Static WEP parameters
Parameters Description  
Key Size Choose the key size. Values are the following: Not set, 40 bits, and 104 bits  
Key Index Choose a key index from 1 to 4. One unique WEP key index can be applied to each WLAN. As there are only four WEP key indexes, only four WLANs can be configured for static WEP Layer 2 encryption.  
Key Format Choose the encryption key format. Valid values are ASCII or HEX.  
Encryption Key

Choose the rekeying mechanism parameter. Values are the following:

  • 802.1X
  • CCKM
  • PSK
  • 802.1x + CCKM
  
Shared Key Authentication Select this check box to enable key authentication.  

 

  1. To configure Web Authentication for the WLAN/RLAN, click the Layer 3 tab, and follow the instructions in the table below:
Parameter Description
Web Policy Select this check box to use a web policy.
Webauth Parameter Map Choose a webauth parameter map to associate with your network.
Authentication List Choose an authentication list to authenticate clients.
On MAC Filter Select this check box to enable MAC filtering for web authentication.
Conditional Web Redirect Set to Enable to conditionally redirect to a particular web page after 802.1x authentication is successfully completed.
Splash Web Redirect Set to Enable to conditionally redirect to a particular web page after 802.1x authentication is successfully completed.
Preauthentication ACL IPv4 To control access to an external web server using an ACL, choose a preauthentication ACL.
Preauthentication ACL IPv6 To control access to an external web server using an ACL, choose a preauthentication ACL.
  1. To configure a AAA server for the WLAN/RLAN, click the AAA Server tab, and follow the instructions in the table below:
Parameter Description
Authentication Method Choose the AAA authentication method
Accounting Method Choose the AAA accounting method.
Local EAP Authentication Select this check box to enable local EAP authentication on the WLAN.

 

Related Topics Link IconRelated Topics

 

 

© 2018 Cisco Systems, Inc. All rights reserved.

 

Was this Document Helpful?

FeedbackFeedback

Contact Cisco