Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Silver

Configuring APs for Cisco LEAP

I am configuring a number of Cisco AP 350s for Cisco LEAP. If "Rotate Broadcast Key" is enabled, is it necessary to enter a static WEP key to be used to encrypt broadcast/multicast packets? If Cisco LEAP only is required (Network EAP is enabled as an authentication method), is it recommended to disable "open" authetication. With a static WEP key and "open" authentication enabled, it did occur to me that a user could connect to the AP using the static WEP key as opposed to Cisco LEAP.

2 REPLIES
New Member

Re: Configuring APs for Cisco LEAP

You can leave open auth enabled, but you should then check "require EAP" on the radio hardware advanced setup page.

You would do this (and some other things) to allow non-Leap capable clients to authenticate to the ACS via MAC-address, and then use static WEP, which is better than nothing.

Cisco Employee

Re: Configuring APs for Cisco LEAP

If only Cisco LEAP is required, disable/uncheck the open authentication. Here is the step-by-step config guide for LEAP

http://www.cisco.com/warp/public/cc/pd/witc/ao1200ap/prodlit/wrsec_an.htm

229
Views
0
Helpful
2
Replies
CreatePlease to create content