Specifications

9-5
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-5260-01
Chapter 9 Configuring Cipher Suites and WEP
Configuring Cipher Suites and WEP
Example WEP Key Setup
Table 9-2 shows an example WEP key setup that would work for the access point and an associated
device:
Because the access points WEP key 1 is selected as the transmit key, WEP key 1 on the other device
must have the same contents. WEP key 4 on the other device is set, but because it is not selected as the
transmit key, WEP key 4 on the access point does not need to be set at all.
Note If you enable MIC but you use static WEP (you do not enable any type of EAP authentication),
both the access point and any devices with which it communicates must use the same WEP key
for transmitting data. For example, if the MIC-enabled access point uses the key in slot 1 as the
transmit key, a client device associated to the access point must use the same key in its slot 1,
and the key in the clients slot 1 must be selected as the transmit key.
Cipher suite with TKIP and 40-bit WEP or
128-bit WEP
Cannot configure a WEP key in key slot 1 and 4
Static WEP with MIC or CMIC Access point and client devices must use the same
WEP key as the transmit key, and the key must be
in the same key slot on both access point and
clients
Broadcast key rotation Keys in slots 2 and 3 are overwritten by rotating
broadcast keys
Note Client devices using static WEP cannot
use the access point when you enable
broadcast key rotation. When you enable
broadcast key rotation, only wireless
client devices using 802.1x authentication
(such as LEAP, EAP-TLS, or PEAP) can
use the access point.
Table 9-1 WEP Key Restrictions (continued)
Security Configuration WEP Key Restriction
Table 9-2 WEP Key Setup Example
Key
Slot
Access Point Associated Device
Transmit? Key Contents Transmit? Key Contents
1 x 12345678901234567890abcdef
12345678901234567890abcdef
2
09876543210987654321fedcba x 09876543210987654321fedcba
3
not set
not set
4
not set
FEDCBA09876543211234567890