Wireless Security & Methods

[jorge.s]

Hi,

I've some experience on WLAN Networks, but I would like to have your opinion around Wireless Security implemenations.

We have several sites where we have some Cisco Access points running IOS. We are currently doing WEP 128b, with Mac-Authentication against a central ACS Server.

But having fixed WEP, and mac registrations is not very practical.

Do you know about any method to have authentication against Active Directory (passing through the Cisco ACS), and Dynamic WEP Keys ?

Any recommendation is welcome.

Of course with this we would like to bring up our level of security.

Thanks a lot for all,

Best Regards,

Jorge

[gabrielsagredo]

An ACS server can be used to do authentication based on user logon to AD.

So it would only require a single login if your wireless adapter supports it.

You would just need to enable the wireless vlan to do 802.1x (EAP-FAST) authentication.

This document would answer some of your questions.

http://www.cisco.com/en/US/netsol/ns339/ns395/ns176/ns178/netqa09186a00802030dc.html