Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Is PPK original TKIP or CKIP? AP1230 IOS

I'm trying to use original TKIP + WEP

When I enable PPK under Wep Encryption, I'm not sure if this is TKIP or CKIP.

Please advise.

Cheers

6 REPLIES
New Member

Re: Is PPK original TKIP or CKIP? AP1230 IOS

To use TKIP, you must use WPA. Make sure your AP IOS version, client and RADIUS server supports it. As far as I know, this is how you configure TKIP:

encryption mode ciphers tkip

ssid TESTSSID

authentication open eap eap_methods

authentication key-management wpa

CKIP would look something like:

encryption mode ciphers ckip

ssid TESTSSID

authentication network-eap eap_methods

authentication key-management cckm

You can also use ckip-cmic as a cipher with LEAP.

Serge

New Member

Re: Is PPK original TKIP or CKIP? AP1230 IOS

To use TKIP, you must use WPA. Make sure your AP IOS version, client and RADIUS server supports it. As far as I know, this is how you configure TKIP:

encryption mode ciphers tkip

ssid TESTSSID

authentication open eap eap_methods

authentication key-management wpa

CKIP would look something like:

encryption mode ciphers ckip

ssid TESTSSID

authentication network-eap eap_methods

authentication key-management cckm

You can also use ckip-cmic as a cipher with LEAP.

Serge

New Member

Re: Is PPK original TKIP or CKIP? AP1230 IOS

To use TKIP, you must use WPA. Make sure your AP IOS version, client and RADIUS server supports it. As far as I know, this is how you configure TKIP:

encryption mode ciphers tkip

ssid TESTSSID

authentication open eap eap_methods

authentication key-management wpa

CKIP would look something like:

encryption mode ciphers ckip

ssid TESTSSID

authentication network-eap eap_methods

authentication key-management cckm

You can also use ckip-cmic as a cipher with LEAP.

Serge

New Member

Re: Is PPK original TKIP or CKIP? AP1230 IOS

Actually, I believe that there is a way to enable TKIP+WEP without having to use EAP or LEAP for authentication.

Authentication must be open and WEP40 or 128 plus TKIP. This is will cause the AP to change the key every so often.

Thanks,

New Member

Re: Is PPK original TKIP or CKIP? AP1230 IOS

TKIP can be used on static WEP as well as on dynamic WEP (as offered by eg. LEAP).

Also TKIP can be used without WPA. The other way around, WPA includes TKIP (next to 802.1X authentication).

New Member

Re: Is PPK original TKIP or CKIP? AP1230 IOS

I'm trying to use PEAP. then, would your second solutions work? ckip + cckm + peap? as far as i understand the doc, it wouldn't.

in order to use PEAP with TKIP, do i have to use WPA? then i wouldn't have cisco secure roaming feature? right?

cheers,

258
Views
0
Helpful
6
Replies
CreatePlease to create content