WPA Migration Mode

[Scott Pazelt]

We have Cisco Aironet 1130AGs. We are going to transition our network to WPA, but now it's all WEP. I'd like to set up WPA Migration mode on all of our access points so WEP and WPA clients can access it, but I'm having problems setting it up. Does anyone have a step-by-step guide for this?

Thanks,

Scott

[andre.ortega · Accepted solution]

Hi Scott,

follow commands for this configuration:

ap1200# configure terminal

ap1200(config)# configure interface dot11radio 0

ap1200(config-if)# ssid migrate

ap1200(config-ssid)# authentication open

ap1200(config-ssid)# authentication network-eap adam

ap1200(config-ssid)# authentication key-management wpa optional

ap1200(config-ssid)# wpa-psk ascii batmobile65

ap1200(config-ssid)# end

ap1200(config-if)# encryption mode cipher tkip wep128

ap1200(config-if)# encryption key 3 size 128 12345678901234567890123456 transmit-key

ap1200(config-if)# end

More in this link: http://www.cisco.com/en/US/docs/wireless/access_point/12.2_11_JA/configuration/guide/s11auth_ps430_TSD_Products_Configuration_Guide_Chapter.html#wp1040844 

Regards.

[Scott Pazelt]

Thanks Andre.

The command - ap1200(config-if)# ssid migrate
Is "migrate" the name of the ssid?

Is there a way to do this through the web interface?

Thanks,

Scott

[andre.ortega]

Yes, migrate is SSID name.

I belive configure in web interface is possible, but I never try and have not Cisco guide.

But you can try this in web interface

SSID Manager

     Select SSID > Your SSID

     Open Authentication > NO ADDITION

     Key Management > Optional

     WPA PSK > Youer WPA PSK

     Apply

Encryptation Manager

     Set Encryption Mode and Keys for VLAN > Your VLAN

      Cypher > TKIP + WEP40 or WEP128

     Encryptation Keys

          Encryptation Key 3 > Your WEP Key

Can be necessary change some option...

[Scott Pazelt]

Thanks for your help.