default security policy 802.1x

NAVIN PARWAL · ‎07-26-2009

Folks,

I just installed a 2100 controller and added a WLAN. I noticed that the default L2 security policy is 802.1x which is using WEP 104 keys. My question is where do we define the wep key on the controller. does that mean no client will be able to connect to the AP, unless he adds the key to the SSID?

Roman Rodichev · ‎07-26-2009

with 802.1x, you don't define wep keys manually. 802.1x authentication requires a RADIUS server. Client and RADIUS will use one of these authentication methods: LEAP, EAP-FAST, EAP-TLS, or PEAP (controller doesn't care about these methods). Once authenticated, dynamic WEP keys will be generated.

Regards,

Roman

jfraasch · ‎07-29-2009

Does 802.1x always require a radius server? With a fully redundant network implementation I could see a Windows Radius server being the weakest link.

For port security for a project I am working on I am searching for the best solution. I will shutdown unused ports. Allow only one mac-address (need to learn how to do this). I am also researching the cost effectiveness of implementing 802.1x security.

James