Cisco LEAP is an 802.1X authentication type for Wireless LANs (WLANs) that supports strong mutual authentication between the client and a RADIUS server, with a logon password as the shared secret. It provides dynamic per-user, per-session encryption keys. LEAP is based on EAP, an extension to Point-to-Point Protocol (PPP).
LEAP is only supported on client adapters that support WEP, and use either the PCM, LMC, or PCI cards with firmware version 4.13 or later, or mini PCI card firmware version 5.0 or later. To use LEAP, the client adapter and Cisco Access Point (AP) firmware must have matching IEEE 802.1x draft standards.
Special attention must be paid to the use of strong passwords. Cisco LEAP is a password-based algorithm. To minimize the possibility of a successful dictionary attack, use strong passwords, which are difficult to guess. Strong passwords are:
A minimum of ten characters
A mixture of uppercase and lowercase letters
Comprised of at least one numeric character or one non-alphanumeric character (example: !#@$%)
No form of the user's name or user ID
A word that is not found in the dictionary (domestic or foreign)
For more information about Cisco LEAP, an EAP type, refer to Cisco LEAP.
Hi, I have the WLC C9800-L-F-K9 . The Aps AP C9115AXI-E and AIR-AP1562E-E-K9 are not getting registered to the WLC.The Ap is pingable from wlc and WLC is pingable from AP. On console, I am getting teh below logs. ipv6 gw config lo...
Hi Communityi've a use case where i have to assign different accesses for for clients of locally switched SSID. dACL r known not supported on non central SSIDs on C9800, so my only option remains AirSpaceACL, but i ran off my feets searching for this opti...
Hello Experts!I'm trying to connect a laptop with Windows 10 to AIR-AP2802I using a native sapplicant.Security Policy - WPA2Enterprise. Radius Server - External.In all cases, after authentication on the Radius server, I receive the same error:"Received EA...
Hi all, This is a question about Mobility Groups and authentication process. I have 2 WLC's in the same mobility group running Flexconnect. WLC-1 is active and providing services but WLC-2 even though it is part of the same Mobility Group is not in p...