Deployment question

[rwcrowe]

i am looking at deploying the following:

Access points: Cisco 1200's

Client adapters: Aironet a/b/g

AAA server: Cisco ACS

Authentication: LEAP (then EAP-FAST when out)

Encryption: WPA TKIP (is MIC included in TKIP?)

Management: WLSE

All access points will be in a single VLAN. No guest access.Same SSID on all access points for roaming.

Is there anything else I can do to make this more secure without using layer 3 VPN's.

[melisei]

MIC stands for Message Integrity Check and it is different from TKIP.

Here what Cisco says:

CKIP (Cisco Key Integrity Protocol, also known) - Cisco's WEP key permutation technique based on an early algorithm presented ni the 802.11i security task group.

CMIC (Cisco Message Integrity Check) - CMIC is Cisco's message integrity check mechanism designed to detect forgeries attracts

Also,use a strong username/password combination for LEAP - weak to dictionary atack.

I hope this helps,

ME

[vsarin78]

Hi I need some advice of a deployment!! We need to deploy only 6 no. 1200 series AP's with roaming feature in L2. I understand that one AP can be configured as WDS and local RADIUS server to provide basic management and authentiaction for clients.

Question is do we also need WLSE for we only want at this time L2 roaming?? RF management etc is not needed of now.

[kmuchida]

What I have here at my place of work, is 19 Air 1200. I also have 5 remote sites that I have at least 10 air 1200's running at the other sites as well. I do use WLSE to manage everything. Also on the Air 1200's I use IP Phones, everything here seems to roam and connect just fine. I basically did everything myself. Install, Site survey, updating and reprograming of at least 700 RF Radios. We seem to have it working here. So I dont wee a problem with what you want to do.

Keith