User's Manual

authentication between client wireless adapters and the wireless networks and
provides dynamic, individual user encryption keys to help protect the privacy
of transmitted data.
Cisco Rogue Access Point Security Feature
The Cisco Rogue Access Point feature provides security protection from an
introduction of a rogue access point that could mimic a legitimate access point
on a network in order to extract information about user credentials and
authentication protocols that could compromise security. This feature only
works with Cisco's LEAP authentication. Standard 802.11 technology does not
protect a network from the introduction of a rogue access point. Refer to
LEAP
Authentication for more information.
Fast Roaming (CCKM)
When a wireless LAN is configured for fast reconnection, a LEAP-enabled client
device can roam from one access point to another without involving the main
server. Using Cisco Centralized Key Management (CCKM), an access point
configured to provide Wireless Domain Services (WDS) takes the place of the
RADIUS server and authenticates the client without perceptible delay in voice
or other time-sensitive applications.
CKIP
Cisco Key Integrity Protocol (CKIP) is Cisco proprietary security protocol for
encryption in 802.11 media. CKIP uses the following features to improve
802.11 security in infrastructure mode:
● Key Permutation (KP)
● Message Sequence Number
802.11b and 802.11g Mixed Environment Protection
Protocol
Some access points, for example Cisco 350 or Cisco 1200, support
environments in which not all client stations support WEP encryption; this is
called Mixed-Cell Mode. When these wireless networks operate in "optional
encryption" mode, client stations that join in WEP mode, send all messages