11-20-2013 01:19 PM - edited 07-04-2021 01:18 AM
I'm trying to configure a new Aironet2600 wireless access point with the web configuration utility. I only need a simple single SSID, no VLANs, and want to use WPA/WPA2 PSK security. Is there a way to configure the device this way in the web config? If not is there a basic config walkthru to use the IOS CLI? I have a basic understanding of CLI but it has been years since I've used it.
-Brian
Solved! Go to Solution.
11-20-2013 10:10 PM
Hi Brian,
It is easy to give you config example to do this via CLI.
If you configure your AP like below & connect it to a home DSL modem/router where DHCP already defined on it you should be able to get wireless user get connected on this SSID.
If you are connecting this to Cisco switch, then you need to configure DHCP pool on that switch (for vlan 1) & then connect this AP to a default switchport (should be on vlan 1).
hostname
!
dot11 ssid
authentication open
authentication key-management wpa version 2
guest-mode
wpa-psk ascii
!
interface Dot11Radio0
encryption mode ciphers aes-ccm
ssid
no shutdown
!
interface Dot11Radio1
encryption mode ciphers aes-ccm
ssid
no shutdown
!
interface BVI1
ip address dhcp
If you need any further assistance let us know.
HTH
Rasika
*** Pls rate all useful responses ***
11-20-2013 10:10 PM
Hi Brian,
It is easy to give you config example to do this via CLI.
If you configure your AP like below & connect it to a home DSL modem/router where DHCP already defined on it you should be able to get wireless user get connected on this SSID.
If you are connecting this to Cisco switch, then you need to configure DHCP pool on that switch (for vlan 1) & then connect this AP to a default switchport (should be on vlan 1).
hostname
!
dot11 ssid
authentication open
authentication key-management wpa version 2
guest-mode
wpa-psk ascii
!
interface Dot11Radio0
encryption mode ciphers aes-ccm
ssid
no shutdown
!
interface Dot11Radio1
encryption mode ciphers aes-ccm
ssid
no shutdown
!
interface BVI1
ip address dhcp
If you need any further assistance let us know.
HTH
Rasika
*** Pls rate all useful responses ***
11-21-2013 06:10 AM
Thankyou for the response! I've got the device working now.
How would I enable wpa1/tkip along with wpa2/aes with preshared key?
I'd guess that under each interface dot11radio(0 and 1) I'd use encryption mode ciphers aes-ccm tkip
But what do I have to change in the dot11 ssid section?
-Brian
11-21-2013 06:50 AM
HI Brain,
Here is the example to configure wpa and wpa2.
-----------------------------------------------------------------------------------
Enable
Conf t
Dot11 ssid two
Vlan 2
authentication open
authentication key-management wpa
wpa-psk ascii 7
Mbssid Guest-mode
End
-----------------------------------------------------------
Enable
Conf t
Dot11 ssid three
Vlan 3
authentication key-management wpa version 2
wpa-psk ascii 7
Mbssid Guest-mode
End
Hope it helps.
Reagrds
Dont forget to rate helpful posts.
11-21-2013 09:23 AM
Keep in mind, if you want to get 802.11n speeds (anything above 54Mbps), you have to use WPA2/AES (or open authentication). So I would stick with WPA2/AES, unless it is really necessary to have WPA/TKIP (if your clients are not supporting WPA2/AES)
HTH
Rasika
**** Please rate all useful responses ****
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide