WPA2 is only supported on APs that have the 802.11g radio modules installed. This is because the older radios do not support AES encryption. You can upgrade almost all of the 1200 series APs with a module upgrade if necessary.

They're 1231Gs. How would I enable it under the cli?

config t

ssid [ssid name]

authentication open

authentication key-management wpa [version 2]

wpa-psk ascii [password]

interface Dot11Radio

encryption mode ciphers aes

ssid [ssid name]

NOTE: My previous syntax was wrong, I believe. I'm going on memory here, so hopefully this is correct. Please post if this doesn't work.

Also, the "version 2" is not supported by all IOS versions, so it may or may not be available.

Thank you for the response Jeff. I don't have that option under the ssid. I only have cckm or wpa, and no option to set the version.

I do have encryption mode ciphers aes-ccm under the radio interface. I'll play around with these and let you know what happens. I'm just going to change the ciphers from tkip to aes-ccm and see what happens.

--John

Why don't you upgrade the code on the AP?

I just updated it yesterday. It's at 12.3.8-JEB1.

Gotcha.

Hi John, I see the same issues, did you get this to work?