cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
410
Views
10
Helpful
2
Replies

Restrictions for Unencrypted VLANs in 1200

leonidas
Level 1
Level 1

Hi,

Is it possible to set simultaneously two unencrypted (Open/No WEP)VLANs/SSIDs in an AP?

I have an environment where VLAN 10 is "Open/No WEP" for BBSM authentication, but I also need to create a second "Open VLAN" that will have direct access to the Internet, without BBSM authentication for some specific and provisory situations (this VLAN would not be connected to BBSM).

Are there any restrictions for that? Is it possible to set two or more unencrypted SSIDs or an "Open/No WEP" SSID and a Guest SSID?

Rgds

2 Replies 2

dixho
Level 6
Level 6

It is OK to create two VLANs and SSID(s) in each VLAN is unencrypted.

The current restrictions for VLANs and encryption are as follows:

1. one and only one native VLAN

2. multiple SSIDs in the same VLAN is allowed, but all SSIDs have to same the encryption.

3. one and only one GUEST SSID (this is going to change in the future)

Hello KaSing,

Are the following combination of encryption methods compatible on a single Access Point:

1. LEAP with Broadcast Key Rotation

2. LEAP with Cisco WPA (CKIP/CMIC)

3. LEAP with WPA (TKIP/MIC)

4. Static WEP using any available Key Slot

The documentation states that you cannot use Broadcast Key Rotation concurrently with Static WEP, since WEP slots 2 and 3 are used by the rotating broadcast keys. It also states that LEAP/EAP uses slot 4.

If Broadcast Key Rotation uses slot 1 as the transmit "seed" key, permuted in slots 2 and 3, why can't this static key still be used in slot 1 by a static WEP client?

Does static WEP preclude the use of any other dynamic WEP encryption/cipher? What other encryption scheme can interoperate with static WEP?

Thanks Dixon!

Review Cisco Networking for a $25 gift card