Hi gstefanick,

so its mean we cannot run WPA2 PSK with TKIP.

if TKIP is enable, its the WPA,

if the AES is enable, its the WPA2.

Is that correct?

To build on gstefanick's post, there is a distinction between the WPA version and the encryption used. WPA1 can use AES, and WPA2 can use TKIP. The use of AES does not mean you're using WPA2, nor does using TKIP imply WPA1. You can see this on the controller GUI - specifying either WPA or WPA2 allows you to use TKIP or AES.

I'm not sure what every difference is, but I know that WPA2 addresses a handshake security exploit, which is there regardless of whether TKIP or AES is used. The exploit occurs before the keys are even exchanged, or maybe as they're exchanged. Sorry for the lack of details.

On IOS access points, you can configure all three encryption types (WEP, TKIP, and AES). With controllers, though, you can't run WEP alongside TKIP or AES, though TKIP and AES can still be run together.

I have following options available on my 1100 series ap.

WEP 128bit

WEP 40bit

TKIP

CKIP

CMIC

CKIP-CMIC

TKIP + WEP 128bit

TKIP + WEP 40bit

AES CCMP

AES CCMP + TKIP

AES CCMP + TKIP + WEP 128

AES CCMP + TKIP + WEP 40

Just tell me which option i have to select for WPA2-PSK and WPA-PSK.

I know that AES/TKIP can work with both WPA and WPA2. But there is no option to explicitly say to use WPA1 or WPA2.