workgroup bridge in cisco unified wireless infrastructure

Unanswered Question
Jun 7th, 2007
User Badges:

Hi,


We want to use an 1131 AP with IOS version 12.4-3g as workgroup bridge in a Cisco unified wireless infrastructure. We prefer to use PEAP for authentication and AES for encryption (WPA2). If this is not possible EAP-Fast would be an acceptable alternative for authentication. Can someone tell me if this is possible and if so explain me how I need to configure the Access Point?

Thanks in advance.


Greetz,


Rob.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
sgossen Thu, 06/07/2007 - 21:09
User Badges:

The workgroup bridge must be configured as a client. This is off the top of my head, but should get you pointed in the right direction:


!

dot11 ssid my_wifi

authent open

authent network-eap 192.168.1.10

authent client usern MYAUTHUSERNAMEHERE password 0 MYPASSWORDHERE

infra

!

int D0

encryp key 1 size 12 0 MY26DIGITWEPKEYHERE transmit-key

encryption mode ciphers aes-ccm tkip wep128

ssid my_wifi

station-role workgroup-bridge

!


I believe the WEP key is still required

Later,


Go0se

rob.gaal Wed, 06/20/2007 - 03:14
User Badges:

In the configuration guide of version 4.1 I see the following:


These features are supported for use with a WGB:

? Guest N+1 redundancy

? Local EAP

? These features are not supported for use with a WGB:

? Cisco Centralized Key Management (CCKM)

? Hybrid REAP

? Idle timeout

? Web authentication


IS PEAP for authentication and AES for encryption supported in the unified infrastructure?


Greetz, Rob

Anders Marius J... Tue, 07/10/2007 - 12:42
User Badges:

Rob,


Unified Wireless does support PEAP combined with AES encryption.


If You however have to connect a WorkGroupBridge please keep in mind that LEAP, EAP-FAST and EAP-TLS are the only EAP authentication types supported.


You may have to upgrade to IOS 12.4(3g)JA


/Anders

Actions

This Discussion