User's Manual
11-21
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-11350-01
Chapter 11 Configuring Authentication Types
 Matching Access Point and Client Device Authentication Types
802.1X authentication and 
WPA
Enable any 802.1X authentication 
method 
Select a cipher suite and enable 
Open authentication and WPA for 
the SSID (you can also enable 
Network-EAP authentication in 
addition to or instead of Open 
authentication)
Note To allow both WPA clients 
and non-WPA clients to use 
the SSID, enable optional 
WPA.
802.1X authentication and 
WPA-PSK
Enable any 802.1X authentication 
method
Select a cipher suite and enable 
Open authentication and WPA for 
the SSID (you can also enable 
Network-EAP authentication in 
addition to or instead of Open 
authentication). Enter a WPA 
pre-shared key.
Note To allow both WPA clients 
and non-WPA clients to use 
the SSID, enable optional 
WPA.
EAP-TLS authentication
If using ACU to 
configure card
Enable Host Based EAP and Use 
Dynamic WEP Keys in ACU and 
select Enable network access 
control using IEEE 802.1X and 
Smart Card or Other Certificate as 
the EAP Type in Windows 2000 
(with Service Pack 3) or 
Windows XP
Set up and enable WEP and enable 
EAP and Open authentication for 
the SSID
If using Windows XP 
to configure card
Select Enable network access 
control using IEEE 802.1X and 
Smart Card or other Certificate as 
the EAP Type
Set up and enable WEP and enable 
EAP and Open Authentication for 
the SSID
EAP-MD5 authentication
If using ACU to 
configure card
Create a WEP key, enable Host 
Based EAP, and enable Use Static 
WEP Keys in ACU and select 
Enable network access control 
using IEEE 802.1X and 
MD5-Challenge as the EAP Type 
in Windows 2000 (with Service 
Pack 3) or Windows XP
Set up and enable WEP and enable 
EAP and Open authentication for 
the SSID
If using Windows XP 
to configure card
Select Enable network access 
control using IEEE 802.1X and 
MD5-Challenge as the EAP Type
Set up and enable WEP and enable 
EAP and Open Authentication for 
the SSID
Table 11-2 Client and Access Point Security Settings (continued)
Security Feature Client Setting Access Point Setting










