Specifications

2-135
Cisco IOS Command Reference for Cisco Aironet Access Points and Bridges
0L-24115-01
Chapter 2 Cisco IOS Commands for Access Points and Bridges
encryption mode ciphers
Command History
Usage Guidelines If you configure your access point to use WPA or CCKM authenticated key management, you must
select a cipher suite compatible with the authenticated key management type.
Table 2-10 lists the
cipher suites that are compatible with WPA and CCKM.
Note You must enable Aironet extensions to include CKIP, CMIC, or CKIP-CMIC in a cipher suite.
Use the dot11 extension aironet command to enable Aironet extensions.
Refer to the Cisco IOS Software Configuration Guide for Cisco Aironet Access Points for a complete
description of WPA and CCKM and instructions for configuring authenticated key management.
Examples This example sets up a cipher suite for VLAN 22 that enables CKIP, CMIC, and 128-bit WEP.
ap(config-if)# encryption vlan 22 mode ciphers ckip-cmic wep128
Related Commands
Release Modification
12.2(4)JA This command was introduced.
12.2(15)JA This command was modified to include support for AES-CCMP.
Ta b l e 2-10 Cipher Suites Compatible with WPA and CCKM
Authenticated Key Management Types Compatible Cipher Suites
CCKM • encryption mode ciphers wep128
• encryption mode ciphers wep40
• encryption mode ciphers ckip
• encryption mode ciphers cmic
• encryption mode ciphers ckip-cmic
• encryption mode ciphers tkip
• encryption mode ciphers tkip wep128
• encryption mode ciphers tkip wep40
WPA • encryption mode ciphers tkip
• encryption mode ciphers tkip wep128
• encryption mode ciphers tkip wep40
Command Description
encryption mode wep Configures the access point for WEP encryption
authentication open (SSID
configuration mode)
Configures the client authentication type for an SSID,
including WPA and CCKM authenticated key management