encryption-type
Sets the WLAN's encryption
type
Supported in the following platforms:
- Access Points — AP505i, AP510i/e,
AP560i/h
- Service Platforms
— NX5500, NX7500, NX9500, NX9600, VX9000
Syntax
encryption-type [ccmp|gcmp256|keyguard|none|tkip-ccmp|wep128|web128-keyguard|wep64]
Parameters
encryption-type [ccmp|gcmp256|keyguard|none|tkip-ccmp|wep128|web128-keyguard|wep64]
encryption-type |
Configures the WLAN's data encryption parameters |
ccmp |
Configures Advanced
Encryption Standard Counter Mode CBC-MAC Protocol
(AES-128CCM/CCMP) |
gcmp256 |
Configures AES-GCM (Advanced Encryption Standard-Galois
Counter Mode) protocol (WPA3-Enterprise 192-bit) encryption mode.
GCMP-256 is a block cipher which works on 256-bit blocks.Note: GCMP encryption is only
supported with eap authentication-type. For more infromation, see authentication-type.
Note: GCMP encryption is only
supported with mandatory protected management frames. For more
information, see protected-mgmt-frames.
|
keyguard |
Configures Keyguard Mobile Computing Mode (MCM) |
tkip-ccmp |
Configures the TKIP and AES-CCM/CCMP encryption modes |
wep128 |
Configures WEP with 128 bit keys |
wep128-keyguard |
Configures WEP128 as well as Keyguard-MCM encryption modes |
wep64 |
Configures WEP with 64 bit keys. A WEP64 configuration is insecure when
two WLANs are mapped to the same VLAN, and one uses no encryption while the
other uses WEP. |
Examples
nx9500-6C8809(config-wlan-test)#encryption-type tkip-ccmp
nx9500-6C8809(config-wlan-test)#show context
wlan test
description TestWLAN
ssid test
bridging-mode local
encryption-type tkip-ccmp
authentication-type eap
accounting syslog host 172.16.10.4 port 2
data-rates 2.4GHz gn
client-load-balancing probe-req-intvl 5ghz 5
client-load-balancing band-discovery-intvl 2
captive-portal-enforcement fall-back
acl exceed-rate wireless-client-denied-traffic 20 disassociate
broadcast-dhcp validate-offer
nx9500-6C8809(config-wlan-test)#
ap505-13403B(config-wlan-test)#encryption-type gcmp256
ap505-13403B(config-wlan-test)#show context
wlan test
ssid test
vlan 1
bridging-mode local
encryption-type gcmp256
authentication-type eap
dynamic-vlan-assignment allowed-vlans 2-4
protected-mgmt-frames mandatory
protected-mgmt-frames sa-query attempts 1
use aaa-policy test
controller-assisted-mobility
dpi metadata http
ap505-13403B(config-wlan-test)#