7925 Wireless Security

[fasteddye]

I am looking for best practice or recommendation on which Wireless Security to use for our IP 7925 phones.  We are only starting with about 10 total phones.  They will probably stay local to the building they are in, so they will not be roaming between too many APs.  We currently do not have a wireless controller.  We do have an ACS and Windows Radius servers.  As a test, I have a 7925 working on a test AP with Open Security.

Thanks.

[Leo Laohoo]

The 7925, depending on the firmware of the phone, will support up to WPA2/AES.

[fasteddye]

Does using WPA2/AES use ACS server or are the shared keys setup on AP and Phone?

[Leo Laohoo]

The WPA2 keys are found in the ACS.

[Leo Laohoo]

Cisco Unified Wireless IP Phone 7925G Deployment Guide

[fasteddye]

Thanks for the link, I had come across that.

What version of firmware offers wpa2/aes?

Thanks.

[Leo Laohoo]

1.3.4(SR1)

[fasteddye]

Looks like our 7925 is at 1.3.3.

Does WPA2 require a certificate to be installed on the ACS? When I go through the steps to enable EAP-FAST I am prompted with a certificate is needed. How else would I activate WPA2 on the ACS?

I have the 7925 set to "auto" and when I check status on the 7925 it looks like it is using WPA TKIP as wireless authentication.

Thanks.