topic Wireless Security? in Wireless

Wireless Security?

jorge.s — Sat, 03 Jul 2021 20:08:14 GMT

Hi,

we have an implementation of Wlan distributed throughout several plant's, where there security implemented is:

1. SSID Hidden

2. 128 Fixed WEP Key

3. Cisco ACS with registration of MacAddress's

And we are then doing authentication based on Mac-Address.

We know that this is really a not safe solution, but what you would recommend, considering that we are Running Microsoft Active Directory, but avoiding the use of Certificates.

Thanks for any recomendation,

Best Regards,

Jorge Sousa

Re: Wireless Security?

Stephen Rodriguez — Tue, 24 Oct 2006 16:21:53 GMT

well you could do LEAP. You get AD authentication, can do WPA instead of WEP, and there is no need for a certificate.

Re: Wireless Security?

ethiel — Tue, 24 Oct 2006 16:34:23 GMT

This will have to be driven by your clients and what they support. I have been focusing on WPA2/PEAP lately, for broad client support. PEAP uses a certificate, but only for the ACS server. If your clients support it you could do EAP-FAST, but some clients do not support it.

If you post more info about your client base (OS and hardware) we could probably give more specific reponses.

-Eric

Please remember to rate all helpful posts.

Re: Wireless Security?

jorge.s — Tue, 07 Nov 2006 23:28:43 GMT

My clients are basically Windows XP (sp1 and sp2), still some Windows 95, and some Intermec Scanners.

Re: Wireless Security?

m.sir — Wed, 08 Nov 2006 08:13:46 GMT

If you dont want use certificates EAP-FAST is best , fast and secure solution - its 802.1X EAP type authentication without using CA

check following Q&A

http://www.cisco.com/en/US/products/hw/wireless/ps430/products_qanda_item09186a00802030dc.shtml

ACS setting for EAP-FAST

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00804b9d57.shtml

EAP-FAST Deployment Guide (PDF)

http://www.cisco.com/application/pdf/en/us/guest/products/ps4076/c1067/ccmigration_09186a00802623a2.pdf

Hope that helps rate if it does