CKIP versus WEP

[tarun.pahuja]

Folks,

I have an issue here need advice. I recently deployed 10 cisco access points in my office. The laptops that i have in our office have inbuilt wireless cards from DEll. I have uploaded the lated firmware on to these laptops. Here is the issue.

I want LEAP with WPA for maximum security.

I configured LEAP on the access-points and and the client with no problem, everything works perfectly fine.

but, i am unable to implement WPA on the client. Dell support on these wireless cards tell me that WPA can only be enabled if LEAP is not configured. I find it very strange as Cisco documentation for WPA assumes that a working EAP alread exists. I fail to understand why DEll would tell uses to disbale "Cisco Extensions" in order to configure WPA.

ok, Now i am stuck, i have LEAP and dynamic wep, so my network is still insure because of vunrabilities of Wep. The client adapter gives me another option other then WEP which is CKIP, is that any better than WEP???

Any advice would be highly appreciated.

Thanks,

[dominic.caron]

We have hundred's of toshiba centrino laptop and they work the same way.

If your radius can handle the charge, you can expire wireless sessions each 2 or 3 minutes to generate another web key.

I use optional ckip on my leap ssid for legacy support of old cards and a 250 second timeout on connections.