WPA2 on ISR Routers (871W or 1811W)

[clausonna]

It seems that WPA2 is not supported on ISR routers, only true Access Points:

http://www.ciscotaccc.com/wireless/showcase?case=K68400254

Anyone know if/when WPA2 will be supported? Is this just an IOS software issue, or will it require a hardware upgrade?

Thanks.

- Neil

[amit-singh]

Hi Neil,

According to the ISR Q&A 1800 fixed/800 configuration router supports WPA2 . As per the 870 router datasheet it also supports WPA2.

http://www.cisco.com/en/US/products/ps5853/products_qanda_item0900aecd8028a95b.shtml

http://www.cisco.com/en/US/products/hw/routers/ps380/products_data_sheet0900aecd8028a976.html

http://www.cisco.com/en/US/products/hw/routers/ps380/products_qanda_item0900aecd8028a982.shtml

HTH, Please rate if it does.

-amit singh

[clausonna]

Hi Amit,

Thanks for the research! However when I go onto the router (871W 12.4.9T1 AdvIPServices) and try to set the encryption mode, I don't see AES as an option:

871W-router(config)#int dot11radio0

871W-router(config-if)#encryption mode ciphers ?

tkip WPA Temporal Key encryption

wep128 128 bit key

wep40 40 bit key

But if I go onto an 1130AP, for example:

1130AP(config-if)#encryption mode ciphers ?

aes-ccm WPA AES CCMP

ckip Cisco Per packet key hashing

ckip-cmic Cisco Per packet key hashing and MIC (MMH)

cmic Cisco MIC (MMH)

tkip WPA Temporal Key encryption

wep128 128 bit key

wep40 40 bit key

Maybe I'm missing something here, but it seems that if I can't set the encryption to AES then I'm not really doing WPA2.

I'll keep researching as well and post anything that I find.

[clausonna]

Turns out WPA2 on ISR's is going to be supported in the next release of IOS, due out by the end of 2006.