Specifications

802.1x Solution Cookbook 247
Chapter 11
!
interface vlan 60
ip address 10.1.60.1 255.255.255.0
ip helper-address 10.1.1.25
!
interface vlan 61
ip address 10.1.61.1 255.255.255.0
ip helper-address 10.1.1.25
!
interface vlan 62
ip address 10.1.62.1 255.255.255.0
ip helper-address 10.1.1.25
!
interface vlan 63
ip address 10.1.63.1 255.255.255.0
ip helper-address 10.1.1.25
!
ip default-gateway 10.1.1.254
Wireless Configuration
The following statements set up the default AP parameters for the entire
network. This establishes the encryption mode as dynamic TKIP (WPA) and
the default ESSID as “Wireless LAN-01”. In addition, a second ESSID called
“Wireless LAN-01-printer” is established with the encryption mode set to
static WEP, and the static WEP key is defined. The “Wireless LAN-01-printer”
ESSID does not respond to broadcast probe requests, preventing clients from
seeing it. Note that a hidden ESSID name is used for convenience and to
reduce confusion among the users – not as a security mechanism. Simple
attack tools are available that will quickly reveal a hidden ESSID name.
ap location 0.0.0
weptxkey 1
wepkey1 c4f32001f1c25ab20f838312f2
phy-type a
opmode dynamicWep
essid "Wireless LAN-01"
virtual-ap "Wireless LAN-01-printer" vlan-id 62 opmode
staticWep deny-bcast enable
virtual-ap “Guest” vlan-id 63 opmode opensystem deny-
bcast disable
phy-type g
opmode dynamicWep
essid "Wireless LAN-01"
virtual-ap "Wireless LAN-01-printer" vlan-id 62 opmode