Print this pagePrint this page

Email this topicEmail this topic

View PDFView PDF

Download EPUBDownload EPUB

encryption-type

Sets the WLAN's encryption type

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

encryption-type [ccmp|gcmp256|keyguard|none|tkip-ccmp|wep128|web128-keyguard|wep64]

Parameters

encryption-type [ccmp|gcmp256|keyguard|none|tkip-ccmp|wep128|web128-keyguard|wep64]
encryption-type Configures the WLAN's data encryption parameters
ccmp Configures Advanced Encryption Standard Counter Mode CBC-MAC Protocol (AES-128CCM/CCMP)
gcmp256 Configures AES-GCM (Advanced Encryption Standard-Galois Counter Mode) protocol (WPA3-Enterprise 192-bit) encryption mode. GCMP-256 is a block cipher which works on 256-bit blocks.
Note: GCMP encryption is only supported with eap authentication-type. For more infromation, see authentication-type.
Note: GCMP encryption is only supported with mandatory protected management frames. For more information, see protected-mgmt-frames.
keyguard Configures Keyguard Mobile Computing Mode (MCM)
tkip-ccmp Configures the TKIP and AES-CCM/CCMP encryption modes
wep128 Configures WEP with 128 bit keys
wep128-keyguard Configures WEP128 as well as Keyguard-MCM encryption modes
wep64 Configures WEP with 64 bit keys. A WEP64 configuration is insecure when two WLANs are mapped to the same VLAN, and one uses no encryption while the other uses WEP.

Examples

nx9500-6C8809(config-wlan-test)#encryption-type tkip-ccmp
nx9500-6C8809(config-wlan-test)#show context
wlan test
 description TestWLAN
 ssid test
 bridging-mode local
encryption-type tkip-ccmp
 authentication-type eap
 accounting syslog host 172.16.10.4 port 2
 data-rates 2.4GHz gn
 client-load-balancing probe-req-intvl 5ghz 5
 client-load-balancing band-discovery-intvl 2
 captive-portal-enforcement fall-back
 acl exceed-rate wireless-client-denied-traffic 20 disassociate
 broadcast-dhcp validate-offer
nx9500-6C8809(config-wlan-test)#

ap505-13403B(config-wlan-test)#encryption-type gcmp256

ap505-13403B(config-wlan-test)#show context
wlan test
 ssid test
 vlan 1
 bridging-mode local
 encryption-type gcmp256
 authentication-type eap
 dynamic-vlan-assignment allowed-vlans 2-4
 protected-mgmt-frames mandatory
 protected-mgmt-frames sa-query attempts 1
 use aaa-policy test
 controller-assisted-mobility
 dpi metadata http
ap505-13403B(config-wlan-test)#

Related Commands

no (wlan-config-mode) Resets the WLAN‘s encryption type to default (none)
Published July 2019prev | next

Email this topicEmail this topic

Print this pagePrint this page