Simultaneous LEAP and WPA-PSK?

[m.radulovic]

I'm trying to set-up LEAP (because 7920 WLAN ip phone only can use this authentication) and WPA-PSK (because other WLAN clients are not cisco-compatible but running WinXP) on the same ssid.

But web interface reports an error that simultaneous use of Network-EAP and WPA-PSK is not allowed. Intrestingly enogh I'm able to configure that thru IOS cli. I think this was possible on 12.2(15)JA...

I'm running 12.3(2)JA on AIR-AP1121G-E-K9.

Is this an error? Or it is not reccomended? Did anyone configured this sucesfully?

regards,

miodrag

[umedryk]

What is the exact error message it is throwing ?

[m.radulovic]

It is simple:

ERROR:

"Network EAP" and "WPA Pre-shared Key" cannot be set simultaneously with WPA

[dsidley]

LEAP uses WEP 40 or 128 bit encryption

WPA (or WPA-PSK) uses TKIP

You can only define one encryption type per radio interface so that is why both won't work simultaneously...

With multiple vlans setup, you can now assign encryption on a per vlan/ssid basis.

DaveFromPeg

[m.radulovic]

But I'm using TKIP + WEP128 encryption (so called WPA migration mode) where both encryptions could be used.

Even more, why IOS CLI accepts this setup without problems (it works properly - I've checked)?

miodrag

[BERNHARD FIEGLMUELLER]

thats working, im using it too, but not WPA-PSK just WPA. so with the config TKIP + WEP128 and WPA Optional you can user LEAP with WPA or LEAP with normal WEP.

so this is normal.

[binay.thakur1]

Hi i tried from the CLI and i get teh erro

(config-ssid)#authentication open eap eap_methods
Error : Both EAP and WPA-PSK cannot be configured on same ssid.To configure EAP disable WPA-PSK.

Our requirement is to have both WPA and EAP authentication like a dual authentication so can you help me with your config on these.

[dixho]

WPA-PSK and LEAP are mutual exclusive. WPA can either use 802.1x (also known as WPA Entreprise) or PSK (also known as WPA home). In WPA Enterprise, the AP and the wireless client generate a random PMK (pairwise master key) if the wireless client successfully authenticates. In WPA-PSK, the PMK is hard coded as PSK.