Help with Security

[kellyrudnick]

I am new to Cisco and had several questions regarding wireless security. Any and all help is appreciated.

Is it correct to say there is two primary areas to be addressed: authentication and encryption?

Is it correct to say: authentication keeps unauthorized users off the network, and encryption codes all transmissions so only the intended target(s) can use the data?

Does WPA or WPA2 address both encryption and authentication?

Is EAP just an authentication method?

I have 7921 wireless phones that I need to deploy and am looking for the best security solution. We do have an ACS running in the organization.

Thanks.

[Scott Fella]

Well I get this right, but WPA or WPA2 would be considered the authentication with using either tkip or AES. Encrytion would be 802.1x, PSK, WEP.......

For the 7921 phones, I have had good luck with wpa-psk and EAP-FAST with CCKM. Cisco recommends EAP-FAST for better roaming, but I have tried both and don't see any difference.