Cisco 1242 Upgrade to support WPA2

johnlloyd_13 · ‎06-08-2017

hi,

i've got a bunch of 1242 (SKU: cisco AIR-AP1242AG-A-K9) standalone APs and would like to re-use for a client that requires WPA2 for their security requirement.

it currently doesn't support WPA version 2 although it supports AES CCM.

i did some searching and was pointed to use 12.3.8JEC. my question is would the IOS c1200-k9w7-tar.123-8.JEC3.tar will work or is it compatible with my 1242 AP?

the 12.3.8.JEC notes only specified to work on a 1232AG. was wondering if someone tried on the said AP and if it worked before i suggest buying new AP.

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/ios/release/notes/jec3_jda3etsi_rn.html

Table 1 Software Installation Guide
If your Cisco Access Point SKU is	Install this Cisco IOS Release
Cisco Aironet 1232AG (AIR-AP1232AG-E-K9)	12.3(8)JEC3
Cisco Aironet 1121AG (AIR-AP1121AG-E-K9) Cisco Aironet 1131AG (AIR-AP1131AG-E-K9) Cisco Aironet 1242AG (AIR-AP1242AG-E-K9) Cisco Aironet 1252AG (AIR-AP1252AG-E-K9)	12.4(10b)JDA3
Cisco Integrated Services Routers (CISCO892W-AGN-E-K9)	12.4(10b)JDA3 (The router software image name is ap801-k9w7-tar

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/ios/release/notes/jec3_jda3etsi_rn.html

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-4_10b_JA/command/reference/cr2410b/cr12410b-chap2.html#wpxref75622

authentication key-management

Use the authentication key-management SSID configuration mode command to configure the radio interface (for the specified SSID) to support authenticated key management. Cisco Centralized Key Management (CCKM) and Wi-Fi Protected Access (WPA) are the key management types supported on the access point.

authentication key-management {[wpa version] [cckm]} [optional]

Note This command is not supported on bridges.

Syntax Description


wpa version {1 \| 2}	Specifies WPA MFP version authenticated key management for the SSID •Version 1—WPAv1handshake for TKIP encryption •Version 2—WPAv2 handshake for AES-CCMP encryption
cckm	Specifies CCKM authenticated key management for the SSID
optional	Specifies that client devices that do not support authenticated key management can use the SSID

1242#sh ve
Cisco IOS Software, C1240 Software (C1240-K9W7-M), Version 12.3(7)JA1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Thu 06-Oct-05 09:45 by evmiller

ROM: Bootstrap program is C1240 boot loader
BOOTLDR: C1240 Boot Loader (C1240-BOOT-M) Version 12.3(7)JA1, RELEASE SOFTWARE (fc1)

1242 uptime is 4 weeks, 2 days, 19 hours, 14 minutes
System returned to ROM by power-on
System image file is "flash:/c1240-k9w7-mx.123-7.JA1/c1240-k9w7-mx.123-7.JA1"

1242(config)#interface Dot11Radio0
1242(config-if)#encryption vlan 1 mode ciphers ?
aes-ccm    WPA AES CCMP
ckip       Cisco Per packet key hashing
ckip-cmic Cisco Per packet key hashing and MIC (MMH)
cmic       Cisco MIC (MMH)
tkip       WPA Temporal Key encryption
wep128     128 bit key
wep40      40 bit key

1242(config-ssid)#authentication key-management wpa ?
cckm allow CCKM clients
optional allow legacy clients
<cr>