Cisco 7921G Administration Guide - Page 80

Configuring Network Profiles Chapter 4 Using the Cisco Unified Wireless IP Phone 7921G Web Pages Table 4-2 Network Profile Settings Items (continued) Item WLAN Security Security Mode Description For More Information, See... Sets the authentication and encryption methods for this profile: Configuring Wireless LAN Security, page 4-14 • Open-Open access to APs • Open+WEP-Open access with WEP encryption (requires an encryption key) Configuring the Authentication Mode, page 4-15 • Shared Key+WEP-Shared key authentication with WEP (requires an encryption key) • LEAP-Cisco proprietary authentication and encryption using a RADIUS server (requires a username and password) • EAP-FAST-Authentication and encryption using TLS and RADIUS server (requires a username and password) • EAP-TLS-Uses Public Key Certificates (PKI) to secure communication to the RADIUS authentication server. A dynamic session-based key is derived from the Cisco Unified Wireless IP Phone 7921G and RADIUS server to encrypt data using a client certificate for authentication. • PEAP-This method uses name and password authentication based on Microsoft MSCHAP V2 authentication. • PEAP with Server Certificate Authentication-The Cisco Unified IP Phone can validate the server certificate during the authentication handshake over an 802.11 wireless link. This functionality is disabled by default and is enabled in Cisco Unified CallManager Administration. • Auto (AKM)-Automatic authenticated key management using: - WPA, WPA2 (requires a username and password) - WPA-Pre-shared key, WPA2-Pre-shared key (requires a passphrase/pre-shared key) - CCKM (requires a username and password) 4-10 Cisco Unified Wireless IP Phone 7921G Administration Guide for Cisco Unified Communications Manager Release 7.0 OL-15985-01