topic Re: Encrypt traffic between bridges using WPA in Wireless

Encrypt traffic between bridges using WPA

cjkaufman@dmgov.org — Sat, 03 Jul 2021 23:03:16 GMT

I've been looking through a lot of Cisco documentation, but I can't seem to find a clear-cut answer.

How do I encrypt traffic between two 1310 bridges using WPA2?

THanks

Re: Encrypt traffic between bridges using WPA

dennischolmes — Thu, 19 Jun 2008 21:15:09 GMT

You don't. That's the answer. Cisco bridges do not support WPA2. WPA2 is only supported in access point roles. This is a big issue for some of my customers and I have to use other vendor solutions where WPA2 is required (Defense contractors and government use).

Re: Encrypt traffic between bridges using WPA

cjkaufman@dmgov.org — Thu, 19 Jun 2008 21:24:39 GMT

Thanks for clarifying that dennis. We are currently using WEP, but need the strongest encryption solution that is available on the 1310 bridges to encrypt the traffic between the bridges.

Could anyone inform me what the best solution would be and how to implement it?

Configuration examples and or links to documentation would be appreciated.

Thanks 🙂

Re: Encrypt traffic between bridges using WPA

dennischolmes — Thu, 19 Jun 2008 21:28:41 GMT

As much as I would love to help you I won't push someone else's product on the Cisco forum page. I would call Tessco or Gigawave and ask for assistance. They will tell you what bridges are out there that support WPA2 in bridge mode.

Re: Encrypt traffic between bridges using WPA

Georgios Nikitas — Wed, 25 Jun 2008 12:29:49 GMT

Try using WPA with TKIP.

It doesn't have any known vulnerabilities like WEP. WPA2 with AES is preferable, but TKIP should have to do unless you have specific requirements from your customers.

Re: Encrypt traffic between bridges using WPA

cjkaufman@dmgov.org — Wed, 25 Jun 2008 15:36:30 GMT

thanks nikitas - I have actually been working on that as a solution 🙂

Re: Encrypt traffic between bridges using WPA

dgroscost — Wed, 09 Jul 2008 12:32:31 GMT

This topic is related to my issue. I just verified w/ Cisco that WPA2/AES is supported on Cisco 1310 bridges, however, it is NOT supported on 1400 A radio bridges.

Re: Encrypt traffic between bridges using WPA

dennischolmes — Wed, 09 Jul 2008 14:44:07 GMT

I went back and checked as well and you are correct. There is also a new 1400 series bridge that will support WPA2 and AES. It will be available shortly.

Re: Encrypt traffic between bridges using WPA

srosenthal — Thu, 10 Jul 2008 15:02:35 GMT

Here is a base config from one of my bridges using AES encryption plus tkip.

Remember that when using WPA-PSK to use a strong PSK, at least 10 characters, numeric and special character to prevent against a dictionary attack.

Hope this helps.

dot11 ssid Wireless

authentication open

authentication key-management wpa

infrastructure-ssid

wpa-psk ascii xxx

username admin privilege 15 password xxx

bridge irb

interface Dot11Radio0

no ip address

no ip route-cache

encryption mode ciphers aes-ccm tkip

broadcast-key change 300

ssid Wireless

speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0

channel 2412

station-role root

cca 75

concatenation

infrastructure-client

bridge-group 1

bridge-group 1 spanning-disabled