Keys used in LEAP

[jmerchut]

When and where are used keys :

- session

- broadcast

- WEP

- unicast

- global ?

Which keys are generated, which are transmited and when?

Which keys are activated during transmission ?

[tepatel]

Here are couple of good place to start with for answers

http://www.cisco.com/warp/public/cc/so/cuso/epso/sqfr/safwl_wp.htm

http://www.cisco.com/warp/public/cc/pd/witc/ao1200ap/prodlit/wswpf_wp.htm

[tepatel]

One more..This doc covers EAP and LEAP in detail

http://www.cisco.com/univercd/cc/td/doc/product/wireless/airo_350/accsspts/ap350scg/ap350ch4.htm

[ndoshi]

http://www.cisco.com/warp/public/779/smbiz/wireless/wlan_security.shtml

above link is gateway to all wireless security document

In the leap process there are two keys

a) Session key ( unicast key )

b) broadcast key

Session key is independently generated by client and AP . It is important to note that this session key is dynamic in nature and this session timeout can be configured on the radius server ( 27 parameter )

Now broadcast key is static in nature . If you want to make is dynamic than on

Ap go to setup->Radio advance

You can turn on Bkey rotation here .

Now if you turn on Bkey rotation your wep client will break . Also keep in mind that when you enable leap either turn on Bkey rotation or define key 1 in slot Key1

I hope this helps

Nilesh