cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3929
Views
10
Helpful
4
Replies

Aironet 2600 WPA PSK

Dalgrim001
Level 1
Level 1

I'm trying to configure a new Aironet2600 wireless access point with the web configuration utility. I only need a simple single SSID, no VLANs, and want to use WPA/WPA2 PSK security. Is there a way to configure the device this way in the web config? If not is there a basic config walkthru to use the IOS CLI? I have a basic understanding of CLI but it has been years since I've used it.

-Brian

1 Accepted Solution

Accepted Solutions

Hi Brian,

It is easy to give you config example to do this via CLI.

If you configure your AP like below & connect it to a home DSL modem/router where DHCP already defined on it you should be able to get wireless user get connected on this SSID.

If you are connecting this to Cisco switch, then you need to configure DHCP pool on that switch (for vlan 1) & then connect this AP to a default switchport (should be on vlan 1).

hostname

!

dot11 ssid

   authentication open

   authentication key-management wpa version 2

   guest-mode

   wpa-psk ascii

!

interface Dot11Radio0

encryption mode ciphers aes-ccm

ssid

no shutdown

!

interface Dot11Radio1

encryption mode ciphers aes-ccm

ssid

no shutdown

!

interface BVI1

ip address dhcp

If you need any further assistance let us know.

HTH

Rasika

*** Pls rate all useful responses ***

View solution in original post

4 Replies 4

Hi Brian,

It is easy to give you config example to do this via CLI.

If you configure your AP like below & connect it to a home DSL modem/router where DHCP already defined on it you should be able to get wireless user get connected on this SSID.

If you are connecting this to Cisco switch, then you need to configure DHCP pool on that switch (for vlan 1) & then connect this AP to a default switchport (should be on vlan 1).

hostname

!

dot11 ssid

   authentication open

   authentication key-management wpa version 2

   guest-mode

   wpa-psk ascii

!

interface Dot11Radio0

encryption mode ciphers aes-ccm

ssid

no shutdown

!

interface Dot11Radio1

encryption mode ciphers aes-ccm

ssid

no shutdown

!

interface BVI1

ip address dhcp

If you need any further assistance let us know.

HTH

Rasika

*** Pls rate all useful responses ***

Thankyou for the response! I've got the device working now.

How would I enable wpa1/tkip along with wpa2/aes with preshared key?

I'd guess that under each interface dot11radio(0 and 1) I'd use encryption mode ciphers aes-ccm tkip

But what do I have to change in the dot11 ssid section?

-Brian

HI Brain,

Here is the example to configure wpa and wpa2.

-----------------------------------------------------------------------------------

Enable

Conf t

Dot11 ssid two

Vlan 2

   authentication open

   authentication key-management wpa

   wpa-psk ascii 7

Mbssid Guest-mode

End

-----------------------------------------------------------

Enable

Conf t

Dot11 ssid three

Vlan 3

authentication key-management wpa version 2

wpa-psk ascii 7

Mbssid Guest-mode

End

Hope it helps.

Reagrds

Dont forget to rate helpful posts.

Keep in mind, if you want to get 802.11n speeds (anything above 54Mbps), you have to use WPA2/AES (or open authentication). So I would stick with WPA2/AES, unless it is really necessary to have WPA/TKIP (if your clients are not supporting WPA2/AES)

HTH

Rasika

**** Please rate all useful responses ****

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: