Cisco C3230ENC-1WMIC-K9 Software Guide - Page 31

Overview of the Cisco WMIC Features Features The WMIC running Cisco IOS offers these software features: • VLANs-Allow VLAN trunking on both wireless and Ethernet interfaces. • QoS-Use this feature to support quality of service (QoS) for prioritizing traffic on the wireless interface. The WMIC supports required elements of Wi-Fi Multimedia (WMM) for QoS, which improves the user experience for audio, video, and voice applications over a Wi-Fi wireless connection and is a subset of the IEEE 802.11e QoS standard. WMM supports QoS prioritized media access through the Enhanced Distributed Channel Access (EDCA) method. • Multiple Basic SSIDs-Support up to 8 basic service set identifiers (SSIDs) in access point mode. • RADIUS Accounting-Enable accounting on the WMIC to send accounting data about wireless client devices to a RADIUS server on your network. • TACACS+ administrator authentication-Enable TACACS+ for server-based, detailed accounting information and flexible administrative control over authentication and authorization processes. It provides secure, centralized validation of administrators attempting to gain access to your WMIC. • Enhanced security-Enable three advanced security features to protect against sophisticated attacks on your wireless network's WEP keys: Message Integrity Check (MIC) and WEP key hashing. Enhanced security for Wi-Fi Protected Access (WPA) with AES and Temporal Key Integrity Protocol (TKIP) encryption is also available. • Enhanced authentication services-Set up non-root bridges or workgroup bridges to authenticate to the network like other wireless client devices. After a network username and password for the non-root bridge or workgroup bridge are set, it authenticates to the network using Cisco Light Extensible Authentication Protocol (LEAP), and receives and uses dynamic WEP keys. • 802.1x supplicant-Support 802.1x, the standardized framework defined by the IEEE to provide port-based network access using information unique to the client and with credentials known only to the client. The supplicant refers to the client software that supports the 802.1x and EAP protocols. The 802.1x supplicant provides a secure method for accomplishing this authentication. Transport Layer Security (TLS) is an enhancement to SSL and provides data encryption in conjunction with EAP. • EAP-TLS and EAP-FAST-Support EAP-TLS and EAP-FAST in workgroup bridge and non-root device mode. • Advanced Encryption Standard (AES) -This feature supports Advanced Encryption Standard-Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (AES-CCMP). AES-CCMP is required for Wi-Fi Protected Access 2 (WPA2) and IEEE 802.11i wireless LAN security. • Enhanced authentication for Cisco Centralized Key Management (CCKM). • Roaming-Support fast, secure roaming of client devices, and radio management through wireless domain services (WDS) (See the "WDS, Fast Secure Roaming, and Radio Management" document for more information. • Universal workgroup bridge-Support interoperability with non-Cisco devices. • Prioritized Multiple Client Profiles. • Any SSID- May associate to any root device as long the encrption and authentication settings match. • Management Frame Protection (MFP)-Support management frame protection version 1 and 2. Cisco 3200 Series Wireless MIC Software Configuration Guide 7