4-17
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-01
Chapter 4 Security Setup
Enabling Additional WEP Security Features
Enabling Broadcast WEP Key Rotation
EAP authentication provides dynamic unicast WEP keys for client devices but
uses static multicast keys. With broadcast, or multicast, WEP key rotation
enabled, the access point provides a dynamic broadcast WEP key and changes it
at the interval you select. Broadcast key rotation is an excellent alternative to
TKIP if your wireless LAN supports wireless client devices that are not Cisco
devices or that cannot be upgraded to the latest firmware for Cisco client devices.
Note When you enable broadcast key rotation, only wireless client devices using LEAP
or EAP-TLS authentication can use the access point. Client devices using static
WEP (with open, shared key, or EAP-MD5 authentication) cannot use the access
point when you enable broadcast key rotation.
Tip You might not need to enable broadcast key rotation if you enable TKIP. You can
use both key rotation and key hashing, but these features provide similar
protection.
Follow these steps to enable broadcast key rotation:
Step 1 Follow the steps in the “Setting Up WEP” section on page 4-9 to set up and enable
WEP.
Step 2 Follow this link path to browse to the AP Radio Advanced page:
a. On the Summary Status page, click Setup.
b. On the Setup page, click Advanced in the AP Radio row under Network
Ports.
Step 3 On the AP Radio Advanced page, enter the rotation interval in seconds in the
Broadcast WEP Key rotation interval entry field. If you enter 900, for example,
the access point sends a new broadcast WEP key to all associated client devices
every 15 minutes. To disable broadcast WEP key rotation, enter 0.
Note You must set the rotation interval on every access point using broadcast key
rotation. You cannot enter the rotation interval on your RADIUS server.
To Next Page
Loading...
Need help?
General
