Specifications

9-4
Cisco Aironet 1200 Series Access Point Installation and Configuration Guide
OL-3446-01
Chapter 9 Configuring WEP and WEP Features
Configuring WEP and WEP Features
Use the no form of the encryption command to disable WEP or to disable WEP features.
This example sets WEP to mandatory for VLAN 22 and enables MIC and TKIP.
ap1200# configure terminal
ap1200(config)# configure interface dot11radio 0
ap1200(config-if)# encryption vlan 22 mode wep mandatory mic key-hash
ap1200(config-ssid)# end
Enabling and Disabling Broadcast Key Rotation
Broadcast key rotation is disabled by default. Beginning in privileged EXEC mode, follow these steps
to enable broadcast key rotation:
Use the no form of the encryption command to disable broadcast key rotation.
This example enables broadcast key rotation on VLAN 22 and sets the rotation interval to 300 seconds:
ap1200# configure terminal
ap1200(config)# configure interface dot11radio 0
ap1200(config-if)# broadcast-key vlan 22 change 300
ap1200(config-ssid)# end
Step 3
encryption
[vlan vlan-id]
mode wep {optional [key-hash] |
mandatory [mic] [key-hash]}
Enable WEP, MIC, and TKIP.
• (Optional) Select the VLAN for which you want to enable
WEP and WEP features.
• Set the WEP level and enable TKIP and MIC. If you enter
optional, client devices can associate to the access point
with or without WEP enabled. You can enable TKIP with
WEP set to optional but you cannot enable MIC. If you
enter mandatory, client devices must have WEP enabled
to associate to the access point. You can enable both TKIP
and MIC with WEP set to mandatory.
Step 4
end Return to privileged EXEC mode.
Step 5
copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
interface dot11radio { 0 | 1 } Enter interface configuration mode for the radio interface. The
2.4-GHz radio is radio 0, and the 5-GHz radio is radio 1.
Step 3
broadcast-key
change seconds
[vlan vlan-id]
Enable broadcast key rotation.
• Enter the number of seconds between each rotation of the
broadcast key.
• (Optional) Enter a VLAN for which you want to enable
broadcast key rotation.
Step 4
end Return to privileged EXEC mode.
Step 5
copy running-config startup-config (Optional) Save your entries in the configuration file.