Cisco 7921G Administration Guide - Page 45

Chapter 2 Overview of the VoIP Wireless Network Security for Voice Communications in WLANs Some authentication schemes require specific types of encryption. With Open authentication, you have the option to use static WEP for encryption for added security. But if you are using Shared Key authentication, you must set static WEP for encryption, and you must configure a WEP key on the phone. When using Authenticated Key Management (AKM) for the Cisco Unified Wireless IP Phone 7921G, several choices for both authentication and encryption can be set up on the APs with different SSIDs. When the phone attempts to authenticate, it chooses the AP that advertises the authentication and encryption scheme that the phone can support. Auto (AKM) mode can authenticate by using WPA, WPA2, WPA Pre-shared key, or CCKM. Note • When using WPA Pre-shared key or WPA2 Pre-shared key, the pre-shared key must be statically set on the phone. These keys must match the keys configured on the AP. • When using Auto (AKM), encryption options are automatically configured for WPA, WPA2, WPA Pre-shared key, WPA2 Pre-shared key, or CCKM. • In AKM mode, the phone will authenticate with LEAP if it is configured with WPA, WPA2, or CCKM key management. • The Cisco Unified Wireless IP Phone 7921G does not support auto EAP negotiation; to use EAP-FAST mode, you must specify it. • If AKM and 802.1x are used, the authentication method is LEAP. • The Cisco Unified Wireless IP Phone 7921G uses network EAP for 802.1x. Open EAP is also available. Table 2-6 provides a list of authentication and encryption schemes configured on the Cisco Aironet APs supported by the Cisco Unified Wireless IP Phone 7921G. The table shows the network configuration option for the phone that corresponds to the AP configuration. Table 2-6 Authentication and Encryption Schemes Cisco AP Configuration Authentication Open Open (Static WEP) Shared key (Static WEP) LEAP 802.1x LEAP WPA LEAP WPA2 EAP-FAST 802.1x EAP-FAST WPA EAP-FAST WPA2 EAP-TLS 802.1x Key Management Optional CCKM WPA with Optional CCKM WPA2 Optional CCKM WPA with Optional CCKM WPA2 Optional CCKM Common Encryption None WEP WEP WEP TKIP AES WEP TKIP AES WEP Cisco Unified Wireless IP Phone 7921G Security Mode Configuration Authentication Open Open+WEP Shared+WEP LEAP or Auto (AKM) LEAP or Auto (AKM) LEAP or Auto (AKM) EAP-FAST EAP-FAST EAP-FAST EAP-TLS OL-15985-01 Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0 2-17