Page 36 / 86
Scroll up to view Page 31 - 35
Configuring the WAP2000 Access Point
Configuring Wireless Settings
Cisco WAP2000 Wireless-G Access Point with Power Over Ethernet Administration Guide
31
6
Configuring WPA-Enterprise
This option features WPA used in coordination with a Remote Authentication Dial-
In User Service (RADIUS) server for client authentication.
Enterprise modes use a RADIUS server for authentication.
NOTE
Use WPA-Enterprise only when a RADIUS server is connected to the access point.
To configure the WPA-Enterprise wireless security settings for the access point,
follow these steps:
STEP 1
Click
Wireless > Security
.
STEP
2
From the Security Mode drop-down menu, select
WPA-Enterprise
.
STEP
3
To enable wireless isolation across SSIDs, select
Enabled
from the drop-down
menu. Otherwise, select
Disabled
.
Page 37 / 86
Configuring the WAP2000 Access Point
Configuring Wireless Settings
Cisco WAP2000 Wireless-G Access Point with Power Over Ethernet Administration Guide
32
6
STEP
4
To enable wireless isolation within SSID, select
Enabled
from the drop-down
menu. Otherwise, select
Disabled
.
STEP
5
Provide the following information:
•
RADIUS Server IP Address
—Enter the RADIUS server’s IP address.
•
RADIUS Server Port
—Enter the port number used by the RADIUS server.
The default is
1812
.
•
Encryption
—WPA offers you two encryption methods, TKIP and AES for
data encryption. Select the type of algorithm you want to use,
TKIP
or
AES
.
The default is
TKIP
.
•
Shared Secret
—Enter the shared secret key used by the access point and
RADIUS server.
•
Key Renewal Timeout
—Enter a key renewal timeout period, which instructs
the access point how often it should change the encryption keys. The default
is
3600
seconds.
STEP
6
Click
Save
.
Page 38 / 86
Configuring the WAP2000 Access Point
Configuring Wireless Settings
Cisco WAP2000 Wireless-G Access Point with Power Over Ethernet Administration Guide
33
6
Configuring WPA2-Enterprise
This option features WPA2 used in coordination with a RADIUS server for client
authentication.
NOTE
Use WPA2-Enterprise only when a RADIUS server is connected to the access
point.
To configure the WPA2-Enterprise wireless security settings for the access point,
follow these steps:
STEP 1
Click
Wireless > Security
.
STEP
2
From the Security Mode drop-down menu, select
WPA2-Enterprise
.
STEP
3
To enable wireless isolation
across SSIDs
select
Enabled
from the drop-down
menu. Otherwise select
Disabled
.
STEP
4
To enable wireless isolation
within
SSID
, select
Enabled
from the drop-down
menu. Otherwise select
Disabled
.
Page 39 / 86
Configuring the WAP2000 Access Point
Configuring Wireless Settings
Cisco WAP2000 Wireless-G Access Point with Power Over Ethernet Administration Guide
34
6
STEP
5
Provide the following information:
•
RADIUS Server IP Address
—Enter the RADIUS server’s IP address.
•
RADIUS Server Port
—Enter the port number used by the RADIUS server.
The default is
1812
.
•
Encryption
—WPA2 always uses
AES
for data encryption.
•
Shared Secret
—Enter the shared secret key used by the access point and
RADIUS server.
•
Key Renewal Timeout
—Enter a key renewal timeout period, which instructs
the access point how often it should change the encryption keys. The default
is
3600
seconds.
STEP
6
Click
Save
.
Page 40 / 86
Configuring the WAP2000 Access Point
Configuring Wireless Settings
Cisco WAP2000 Wireless-G Access Point with Power Over Ethernet Administration Guide
35
6
Configuring WPA2-Enterprise Mixed
This security mode supports the transition from WPA-Enterprise to WPA2-
Enterprise.
You can have client devices that use either WPA-Enterprise or WPA2-Enterprise.
The access point automatically chooses the encryption algorithm used by each
client device.
To configure the WPA2-Enterprise Mixed wireless security settings for the access
point, follow these steps:
STEP 1
Click
Wireless > Security
.
STEP
2
From the Security Mode drop-down menu, select
WPA2-Enterprise Mixed
.
STEP
3
To enable wireless isolation across SSIDs, select
Enabled
from the drop-down
menu. Otherwise, select
Disabled
.
STEP
4
To enable wireless isolation within SSID, select
Enabled
from the drop-down
menu. Otherwise, select
Disabled
.
19216811.live