User's Manual

Wireless Configuration for ISA550W and ISA570W
Configuring the Access Points
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 166
5
• Encryption: Choose the encryption type: 64 bits (10 hex digits), 64 bits (5
ASCII), 128 bits (26 hex digits), or 128 bits (13 ASCII). The default is 64 bits
(10 hex digits). The larger size keys provide stronger encryption, thus making
the key more difficult to crack.
• Passphrase: If you want to generate WEP keys by using a Passphrase, enter
any alphanumeric phrase (longer than 8 characters for optimal security) and
then click Generate to generate four unique WEP keys. Select one key to use
as the key that devices must have to use the wireless network.
• Key 1-4: If a WEP Passphrase is not specified, a key can be entered directly
into one of the Key boxes. The length of the key should be 5 ASCII characters
(or 10 hex characters) for 64-bit WEP and 13 ASCII characters (or 26 hex
characters) for 128-bit WEP.
STEP 6 If you choose WPA-Personal as the security mode, enter the following
information:
• Encryption: Choose either TKIP or AES as the encryption algorithm for data
encryption. The default is TKIP.
• Shared Secret: The Pre-shared Key (PSK ) is the shared secret key for WPA.
Enter a string of at least 8 characters to a maximum of 63 characters.
• Key Renewal Timeout: Enter a value to set the interval at which the key is
refreshed for clients associated to this SSID. The valid range is 0 to 86400
seconds. A value of 0 indicates that the key is not refreshed. The default is
3600 seconds.
STEP 7 If you choose WPA2-Personal as the security mode, enter the following
information:
• Encryption: WPA2-Personal always uses AES for data encryption.
• Shared Secret: The Pre-shared Key (PSK ) is the shared secret key for WPA.
Enter a string of at least 8 characters to a maximum of 63 characters.
• Key Renewal Timeout: Enter a value to set the interval at which the key is
refreshed for clients associated to this SSID. The valid range is 0 to 86400
seconds. A value of 0 indicates that the key is not refreshed. The default is
3600 seconds.
STEP 8 If you choose WPA/WPA2-Personal Mixed as the security mode, enter the
following information:
• Encryption: WPA/WPA2-Personal Mixed automtically choose TKIP or AES
for data encryption.