10-13-2005 08:37 PM - edited 07-04-2021 11:13 AM
Hi All,
What's the best wireless security method assuming I do not use an external Radius server? This is a small installation, with a few 1230 APs. I don't want to put in a separate Radius server (or run IPSec over the WLAN), but I would like something more secure than WEP.
What are my options? Is it possible to do some kind of EAP or 802.1x with the on board Radius server? What about authenticating to Windows AD? Sorry if I'm ignorant, but I don't do much wireless work.
Thanks, Randy
10-13-2005 09:02 PM
I think the onboard radius server on AP supports LEAP. Otherwise your best options are to use WEP, TKIP and MIC if clients do support that, have a WEP rotation policy (frequently), terminate the wireless lan vlan to a dmz of a firewall, to isolate it from your wired network, etc. You can additionally use mac-address filtering if the number of clients are not large in number.
11-14-2005 11:22 AM
Shanky,
I found this post from an earlier topic but I had a question for you! Do you think it would be wise for me to use the Windows built in option for IAS as a RADIUS server for all my 1200,1300,1400 AAA security? I'm trying to see if we can still use PEAP encryption from the Cisco AP / bridge to the Windows Server without having to purchase a new Cisco server / software / license agreement. I figure if we can get the same security from the in house OS's than why not utilize IAS ( Internet Authentication Service)
Thanks
-Alonzo
11-14-2005 11:39 AM
Alonzo,
That should work.
10-14-2005 01:22 PM
Hey
local radius server support eap-fast.
Or use wpav2 with a secure pre-shared key.
Oliver
11-02-2005 08:23 AM
Is possible to configure an EAP-FAST WLAN with the local RADIUS of one of the APs1230 if there is one that is in repeater mode?
03-06-2006 12:52 PM
the radius only allows you to enter the network, but the security is set by the encryption. I can capture wireless traffic just by cracking encryption not the radius validation
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide