User Manual

displaying a dialog box that prompts the user to enter the expired password and a new password. Summit
software then uses the entered information to respond to the RFC 2759 message. If EAP authentication
succeeds and the expired password was saved in the profile, then Summit software updates the profile with
the new password.
Any password provided for EAP authentication, whether in a profile or in an authentication dialog box,
should not contain parentheses. Neither SCU nor the dialog box flags a parenthesis as an invalid character,
but the integrated supplicant treats parentheses as delimiters and interprets the characters between a left
parenthesis and a right parenthesis as the "true" password.
3.3.3 Encryption
Cisco TKIP
If the active profile has an Encryption setting of CKIP Manual or CKIP Auto, then the Summit radio will
associate or roam successfully to an AP is configured with:
The SSID and other RF settings of the active profile
The authentication method of the active profile
For Manual WEP, the static WEP keys of the active profile
Any of the following encryption settings:
WEP only (no CKIP or CMIC)
WEP with CKIP
WEP with CMIC
WEP with CKIP and CMIC
WPA Migration Mode and WPA2 Mixed Mode
Summit radios support two special AP settings: WPA Migration Mode and WPA2 Mixed Mode. WPA Migration
Mode is a setting on Cisco APs that enables both WPA and non-WPA clients to associate to an AP using the same
SSID, provided that the AP is configured for Migration Mode (WPA optional with TKIP+WEP128 or
TKIP+WEP40 cipher). In other words, WPA Migration Mode means WPA key management with TKIP for the
pairwise cipher and TKIP, 128-bit WEP, or 40-bit WEP for the group cipher. When WPA Migration Mode in use,
you can select WPA TKIP or Auto WEP for your Summit radio encryption type.
WPA2 Mixed Mode operation enables both WPA and WPA2 clients to associate to an AP using the same SSID.
WPA2 Mixed Mode is defined by the Wi-Fi Alliance, and support for the feature is a part of Wi-Fi certification
testing. When WPA2 Mixed Mode is configured, the AP advertises the encryption ciphers (TKIP, CCMP, other)
that are available for use, and the client selects the encryption cipher it wants to use. In other words, WPA Mixed
Mode means WPA key management with AES for the pairwise cipher and AES or TKIP for the group cipher.
When WPA2 Mixed Mode in use, you can select WPA2 AES or WPA TKIP for your Summit radio encryption
type.
3.3.4 ThirdPartyConfig
If the profile named “ThirdPartyConfig” is selected as the active profile, then SCU works in tandem with WZC or
another third-party application for configuration of all radio and security settings for the radio. The third-party
application must be used to define the SSID, Auth Type, EAP Type, and Encryption settings. SCU can be used to
define the Client Name, Power Save, Tx Power, Bit Rate, and Radio Mode settings. Those SCU profile settings,
all SCU global settings, and the third-party application settings are applied to the radio when ThirdPartyConfig is
selected as the active profile and a power cycle is performed.
On some devices that run Pocket PC or Windows Mobile, the radio will not associate if WPA with pre-shared
keys, or WPA-PSK, is used with WZC. If that is the case for your device, then to use WPA-PSK you must use an
SCU profile other than ThirdPartyConfig.
3.3.5 EAP-FAST