Specifications

Configuring WPA
RoamAbout Mobility System Software Configuration Guide 10-7
Client Support
TousetheTKIPorCCMPciphersuiteforencryption,aclientmustsupportWPA.However,anAP
radioconfiguredforWPAcansupportnon‐WPAclientswhousedynamicWEPorstaticWEP.If
theWPAIEisenabledintheserviceprofile usedbyanSSIDsupportedbythe
radio,andthe40‐bit
WEPor104‐bitWEPciphersuitealsoisenabledintheserviceprofile,MSSallowsanon‐WPA
clienttoauthenticateusingWEPunderthefollowingcircumstances:
•IfaclientwantstoauthenticateusingdynamicWEP,MSSuses802.1Xtoauthenticatethe
clientifeither
theWEP40orWEP104ciphersuiteisenabledforWPA.
•IfaclientwantstoauthenticateusingstaticWEP,theradiochecksforthestaticWEPkey
presentedbytheclient.Ifthekeysmatch,MSSauthenticatestheclient.BecausetheWEPkey
isstatic,MSSdoesnotuse802.1X 
toauthenticatetheclient.
Toallowanon‐WPAclientthatusesdynamicWEPtobeauthenticatedbyaradioonwhichWPA
IEisenabled,enabletheWEP40orWEP104ciphersuiteintheserviceprofilefortheSSIDthe
clientwillaccess.Topreventnon‐WPAclientsthatuse
dynamicWEPfrombeingauthenticated,
donotenabletheWEP40orWEP104ciphersuiteintheserviceprofile.
ToallowaclientthatusesstaticWEPtobeauthenticated,configurethesameWEPkeysonthe
clientandtheserviceprofile.
Table 10‐2onpage 10‐7liststheencryptionsupport
forWPAandnon‐WPAclients.
Configuring WPA
ToconfigureAPradiostosupportWPA:
1. CreateaserviceprofileforeachSSIDthatwillsupportWPAclients.
2. EnabletheWPAIEintheserviceprofile.
3. Enabletheciphersuitesyouwanttosupportintheserviceprofile.(TKIPisenab ledby
default.)Optionally,youalsocanchangethe countermeasurestimer
valueforTKIP.
4. Maptheserv iceprofiletotheradioprofilethatwillcontrolIEEEsettingsfortheradios.
5. Assigntheradioprofiletotheradiosandenabletheradios.
IfyouplantousePSKauthentication,youalsoneedtoenablethisauthenticati onmethodand
enteranASCIIpassphraseora
hexadecimal(raw)key.
Table 10-2 Encryption Support for WPA and Non-WPA Clients
MSS Encryption Type
Client Encryption Type
WPA—
CCMP
WPA—
TKIP
WPA—
WEP40
WPA—
WEP104
Dynamic
WEP
Static
WEP
WPA—CCMP Supported
WPA—TKIP Supported
WPA—WEP40 Supported Supported
WPA—WEP104 Supported Supported
Dynamic WEP Supported
Static WEP Supported