topic Security Mode Cisco 7921 in Wireless

Security Mode Cisco 7921

justin.kornaga — Sat, 03 Jul 2021 23:16:00 GMT

What Security mode on the Cisco 7921 is recommended? EAP FAST?

Thanks

Justin

Re: Security Mode Cisco 7921

slapham — Thu, 31 Jul 2008 21:17:23 GMT

The preferred/recommended settings are truly based on the rest of your infrastructure and security policies. I have included a link to a page that lists the options for security.

http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7921g/6_0/english/administration/guide/7921wrnt.html#wpxref69276

I hope this helps.

Re: Security Mode Cisco 7921

migilles — Thu, 31 Jul 2008 22:31:20 GMT

Yes is based on customer requirements. If going the 802.1x route, would suggest EAP-FAST, PEAP or EAP-TLS. Can then use WPA or WPA2 depending on the level of security and encryption required. However, when using 802.1x, we recommend to implement CCKM (fast roaming), which is supported only with WPA(TKIP). Some customers rather go with the standards (i.e. PEAP vs EAP-FAST). In the future the 7921, will be able to do server validation as well by installing the authentication server certificate. For EAP-TLS, this requires higher management due to having to issue client certificates.