Can I configure WPA with TKIP & CCKM on the same interface??

[ajithtr2000]

I have 80 APs(1231AG) deployed in a location. Normal users are given PEAP+WPA+TKIP security. I have also deployed wireless IP Phones. I want to enable FSR(layer2) for these phones now. I tried CCKM configs on my dot11Radio0, but as I enter the commands it removes my TKIP commands thus dirupting my normal users. Is it possible for me give CCKM for my phones & WPA-TKIP for my users on the same dot11radio???

[dominic.caron]

Work for me...and I have over 900(1131-1231), here's a config sample...

dot11 ssid xxxx

vlan xxx

authentication open eap eap_methods

authentication network-eap eap_methods

authentication key-management wpa cckm optional

accounting acct_methods

mbssid guest-mode

mobility network-id 2

encryption vlan xxx mode ciphers tkip

[dominic.caron]

But it's not best pratice to put user and voice on the same network. I use 2 different SSID on 2 different VLAN.