Cisco AIR-AP521G-A-K9 Configuration Guide - Page 122

Creating a New SSID for the Voice VLAN Chapter 9 Adding Voice Access with Web Authentication - If you click the Add VLAN button, Figure 9-11 appears indicating the maximum number of VLANs has been reached. Figure 9-11 Add VLAN Pop-Up Message Step 4 Step 5 Step 6 Check Web Authentication. Click the Security Type drop-down arrow and choose one of these security options: • No Security-This is the least secure option. Select it only for an SSID that is used in a public place (guest SSID), and associate it with a VLAN that restricts access to your network. There is no encryption, and the authentication type is open authentication. • WEP-This security setting requires that the access point and the client device (a device that connects to the wireless device such as a laptop or a PC) share the same WEP key to keep the communication private. • EAP-This security setting enables IEEE 802.1X authentication and requires you to select the IP address of a RADIUS server. The encryption type is WEP, and the authentication type is IEEE 802.1x. • WPA-This security setting is more secure than the EAP setting. It enables WPA authentication and requires you to select the IP address of a RADIUS server. Client devices that associate with the access point by using this SSID must be WPA-capable. • WPA-PSK-Select this security setting when you want to use the WPA encryption and you do not have access to a RADIUS server. It requires that the access point and the client device share the same WPA-PSK. The key can be from 8 to 63 characters long. • WPA2-This security setting is more secure than the WPA setting. It enables WPA2 authentication and requires you to select the IP address of a RADIUS server. Client devices that associate with the access point by using this SSID must be WPA2-capable. • WPA2-PSK-Select this security setting when you want to use WPA2 encryption and you do not have access to a RADIUS server. It requires that the access point and the client device share the same WPA2-PSK. The key can be from 8 to 63 characters long. The authentication type is WPA2-PSK. • MAC-Select this security setting when you want to authenticate client devices by using MAC address-based authentication. There is no encryption, and the authentication type is IEEE 802.1x. If you choose WEP security, perform these steps: a. In the Authentication field, click the drop-down arrow and choose open or shared key. - Open authentication-an authentication method that allows any device to authenticate and then attempts to communicate with the access point. - Shared key authentication-an authentication method in which the access point sends an unencrypted challenge text string to any device attempting to communicate with it. If the challenge text is correctly encrypted, the access point allows the requesting device to authenticate. b. In the Key Format field, click the drop-down arrow and choose Hex or ASCII. Cisco 500 Series Wireless Express Mobility Controller Configuration Guide 9-8 OL-15283-01