Cisco Systems CISCO881SECK9 Router User Manual


 
4-7
Cisco 880 Series Integrated Services Router Software Configuration Guide
OL-22206-01
Chapter 4 Basic Wireless Device Configuration
Configuring Wireless Settings
Read Without VLANs, encryption settings (WEP and ciphers) apply to an interface, such as the
2.4-GHz radio, and you cannot use more than one encryption setting on an interface. For
example, when you create an SSID with static WEP with VLANs disabled, you cannot create
additional SSIDs with WPA authentication because the SSIDs use different encryption settings.
If you find that the security setting for an SSID conflicts with the settings for another SSID, you
can delete one or more SSIDs to eliminate the conflict.
Security Types
Table 4-1 describes the four security types that you can assign to an SSID.
Table 4-1 Types of SSID Security
Security Type Description Security Features Enabled
No security This is the least secure option. You should use this option
only for SSIDs in a public space and you should assign it to
a VLAN that restricts access to your network.
None.
Static WEP key This option is more secure than no security. However, static
WEP keys are vulnerable to attack. If you configure this
setting, you should consider limiting association to the
wireless device based on MAC address, see Cipher Suites
and WEP at:
http://www.cisco.com/en/US/docs/routers/access/wireless/
software/guide/SecurityCipherSuitesWEP.html.
Or
If your network does not have a RADIUS server, consider
using an access point as a local authentication server.
See Using the Access Point as a Local Authenticator for
instructions:
http://www.cisco.com/en/US/docs/routers/access/wireless/
software/guide/SecurityLocalAuthent.html.
Mandatory WEP. Client devices cannot
associate using this SSID without a WEP
key that matches the wireless device key.