Is PPK original TKIP or CKIP? AP1230 IOS

[gilmo]

I'm trying to use original TKIP + WEP

When I enable PPK under Wep Encryption, I'm not sure if this is TKIP or CKIP.

Please advise.

Cheers

[s.vautour]

To use TKIP, you must use WPA. Make sure your AP IOS version, client and RADIUS server supports it. As far as I know, this is how you configure TKIP:

encryption mode ciphers tkip

ssid TESTSSID

authentication open eap eap_methods

authentication key-management wpa

CKIP would look something like:

encryption mode ciphers ckip

ssid TESTSSID

authentication network-eap eap_methods

authentication key-management cckm

You can also use ckip-cmic as a cipher with LEAP.

Serge

[s.vautour]

To use TKIP, you must use WPA. Make sure your AP IOS version, client and RADIUS server supports it. As far as I know, this is how you configure TKIP:

encryption mode ciphers tkip

ssid TESTSSID

authentication open eap eap_methods

authentication key-management wpa

CKIP would look something like:

encryption mode ciphers ckip

ssid TESTSSID

authentication network-eap eap_methods

authentication key-management cckm

You can also use ckip-cmic as a cipher with LEAP.

Serge

[s.vautour]

To use TKIP, you must use WPA. Make sure your AP IOS version, client and RADIUS server supports it. As far as I know, this is how you configure TKIP:

encryption mode ciphers tkip

ssid TESTSSID

authentication open eap eap_methods

authentication key-management wpa

CKIP would look something like:

encryption mode ciphers ckip

ssid TESTSSID

authentication network-eap eap_methods

authentication key-management cckm

You can also use ckip-cmic as a cipher with LEAP.

Serge

[gilmo]

Actually, I believe that there is a way to enable TKIP+WEP without having to use EAP or LEAP for authentication.

Authentication must be open and WEP40 or 128 plus TKIP. This is will cause the AP to change the key every so often.

Thanks,

[straman]

TKIP can be used on static WEP as well as on dynamic WEP (as offered by eg. LEAP).

Also TKIP can be used without WPA. The other way around, WPA includes TKIP (next to 802.1X authentication).

[uggie]

I'm trying to use PEAP. then, would your second solutions work? ckip + cckm + peap? as far as i understand the doc, it wouldn't.

in order to use PEAP with TKIP, do i have to use WPA? then i wouldn't have cisco secure roaming feature? right?

cheers,