topic Re: Encryption on 1131AG in Wireless

Encryption on 1131AG

northtexasnetworks — Sun, 04 Jul 2021 00:37:46 GMT

Using WEP static now and need something better. Not using a RADIUS server. Whats the best we can do? Can we go to WPA without a RADIUS server? Can someone post a config please?

Re: Encryption on 1131AG

Scott Fella — Thu, 21 May 2009 10:55:58 GMT

Yes... you should go with WPA2-AES if possible. This way you don't have to worry about any radius server setup.

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008054339e.shtml

Re: Encryption on 1131AG

JASON BOYERS — Tue, 26 May 2009 02:21:09 GMT

In particular, WPA-PSK, or Personal mode, is what you are looking for. Here's how to configure it in the CLI (using whatever shared key you want to use in place of passphrase). If your client doesn't support AES, replace it with TKIP.

dot11 ssid Wireless

authentication open

authentication key-management wpa

wpa-psk ascii passphrase

interface Dot11Radio0

encryption mode ciphers aes-ccm

ssid Wireless

Re: Encryption on 1131AG

northtexasnetworks — Fri, 29 May 2009 15:50:38 GMT

Thank you, this is just wanted I needed to know!

Re: Encryption on 1131AG

George Stefanick — Fri, 29 May 2009 16:45:14 GMT

It's great to get away from WEP. Keep in mind PSK is vulnerable to static attacks at the work station, if you are using windows zero config. And a wireless dictionary attack from Co-Patty.

So I wouldn't use windows zero config and make sure you use a crazy key so not to match anything in a dictionary. Also the obvious, anyone who has the key and should they leave may leave with the key.

just 2 cents