encryption-type [ccmp|gcmp256|keyguard|none|tkip-ccmp|wep128|web128-keyguard|wep64]
encryption-type [ccmp|gcmp256|keyguard|none|tkip-ccmp|wep128|web128-keyguard|wep64]
| encryption-type | Configures the WLAN's data encryption parameters |
| ccmp | Configures Advanced Encryption Standard Counter Mode CBC-MAC Protocol (AES-128CCM/CCMP) |
| gcmp256 | Configures AES-GCM (Advanced Encryption Standard-Galois
Counter Mode) protocol (WPA3-Enterprise 192-bit) encryption mode.
GCMP-256 is a block cipher which works on 256-bit blocks. Note: GCMP encryption is only
supported with eap authentication-type. For more infromation, see authentication-type.
Note: GCMP encryption is only
supported with mandatory protected management frames. For more
information, see protected-mgmt-frames.
|
| keyguard | Configures Keyguard Mobile Computing Mode (MCM) |
| tkip-ccmp | Configures the TKIP and AES-CCM/CCMP encryption modes |
| wep128 | Configures WEP with 128 bit keys |
| wep128-keyguard | Configures WEP128 as well as Keyguard-MCM encryption modes |
| wep64 | Configures WEP with 64 bit keys. A WEP64 configuration is insecure when two WLANs are mapped to the same VLAN, and one uses no encryption while the other uses WEP. |
nx9500-6C8809(config-wlan-test)#encryption-type tkip-ccmp
nx9500-6C8809(config-wlan-test)#show context wlan test description TestWLAN ssid test bridging-mode local encryption-type tkip-ccmp authentication-type eap accounting syslog host 172.16.10.4 port 2 data-rates 2.4GHz gn client-load-balancing probe-req-intvl 5ghz 5 client-load-balancing band-discovery-intvl 2 captive-portal-enforcement fall-back acl exceed-rate wireless-client-denied-traffic 20 disassociate broadcast-dhcp validate-offer nx9500-6C8809(config-wlan-test)#
ap505-13403B(config-wlan-test)#encryption-type gcmp256
ap505-13403B(config-wlan-test)#show context wlan test ssid test vlan 1 bridging-mode local encryption-type gcmp256 authentication-type eap dynamic-vlan-assignment allowed-vlans 2-4 protected-mgmt-frames mandatory protected-mgmt-frames sa-query attempts 1 use aaa-policy test controller-assisted-mobility dpi metadata http ap505-13403B(config-wlan-test)#
| no (wlan-config-mode) | Resets the WLAN‘s encryption type to default (none) |