Specifications

Configuring Access Points
9-36 Configuring Access Points
Encryption Options
Bydefault,MSSdoesnotencryptmanagementcommunicationbetweentheRoamAboutSwitch
andAPs,eveniftheAPmodelsupportsencryption.Thedefaultsettingisnone.
YoucanconfiguretheRoamAboutSwitchtouseencryptionbysettingsecuritytooptionalor
require:
• optional—APscanbemanagedbytheswitch
eveniftheydonothaveencryptionkeysor
theirkeyshavenotbeenverifiedbyanadministrator.
• require—AllAPsmusthaveencryptionkeys.TheRoamAboutSwitchdoesnotestablisha
managementsessionwithanAPunlesstheAPhasakey,andyouhaveverifiedthekey’s
fingerprintin
MSSusingthesetdapfingerprintcommand.
Table 9‐8liststheAPsecurityoptionsandwhetheranAPcanestablishamanagementsession
withaRoamAboutSwitchbasedontheoptionsettings.
Note: A change to AP security support does not affect management sessions that are already
established. To apply the new setting to an AP, restart the AP.
Table 9-8 AP Security Requirements
AP Security
Setting
AP Has
Fingerprint?
Fingerprint
Verified in MSS?
AP Can Establish Management Session
with Switch?
AP Security
Required
Yes Yes Yes
No No
No Not Applicable No
AP Security
Optional
Yes Yes Yes
1
1. MSS generates a log message listing the AP serial number and fingerprint so you can verify the AP’s identity.
(Refer to “Fingerprint Log Message” on page 9-38.)
No Yes
1
No Not Applicable Yes