Wireless Network Security Configuration

About this task

Configure a wireless network's security details.

Procedure

  1. Select Wireless.
  2. Select a wireless network and navigate to the Security tab.
  3. Configure Authentication settings.
    Setting Description
    Select Authentication Choose an authentication method from the drop-down menu. You cannot configure AAA policy and Reauthentication if you select PSK/None.
    AAA policy Choose the AAA policy for the WLAN from the drop-down menu.
    Reauthentication Enter a value in the range 30 to 86400.
  4. Configure encryption settings.
    Table 1. Encryption details
    Encryption option Description
    Select encryption Choose an encryption type from the Select Encryption drop-down menu.

    You can select from 8 available encryption types. The encryption details are determined based on the encryption type selection.

    Table 2. Encryption options
    Encryption type Details
    TKIP-CCMP Set a pre-shared key that is either 64 HEX or 8-63 ASCII characters. Select HEX or ASCII based on the pre-shared key
    WEP 128 Generate keys that are 4 to 32 characters long in the Generate Keys field and select Generate. 4 keys are generated. The keys uses 26 HEX or 13 ASCII characters.
    1. Modify the key name in the field next to the key number.
    2. Select HEX or ASCII from the drop-down based on the number of key characters.
    3. Select Transmit Keys from the 4 available key choices.
    WEP 64 Generate keys that are 4 to 32 characters long in the Generate Keys field and select Generate. 4 keys are generated. The key uses 10 HEX or 5 ASCII characters.
    1. Modify the key name in the field next to the key number.
    2. Select HEX or ASCII from the drop-down based on the number of key characters.
    3. Select Transmit Keys from the 4 available key choices.
    Open Open encryption. Not secured or protected
    CCMP Set a pre-shared key that is either 64 HEX or 8-63 ASCII characters. Select HEX or ASCII based on the pre-shared key
    Key guard Generate keys that are 4 to 32 characters long in the Generate Keys field and select Generate. 4 keys are generated. The keys uses 26 HEX or 13 ASCII characters.
    1. Modify the key name in the field next to the key number.
    2. Select HEX or ASCII from the drop-down based on the number of key characters.
    3. Select Transmit Keys from the 4 available key choices.
    GCMP256 Set a pre-shared key that is either 64 HEX or 8-63 ASCII characters. Select HEX or ASCII based on the pre-shared key
    WEP128 + Key guard Combination of WEP128 and key guard encryption settings. Generate keys that are 4 to 32 characters long in the Generate Keys field and select Generate. 4 keys are generated. The keys uses 26 HEX or 13 ASCII characters.
    1. Modify the key name in the field next to the key number.
    2. Select HEX or ASCII from the drop-down based on the number of key characters.
    3. Select Transmit Keys from the 4 available key choices.
  5. Choose an existing policy from the Passpoint Policy drop-down menu to apply it to the WLAN. If no policy exists, you can create one. See Passpoint Policy.
  6. Choose an existing Wireless Network from the OWE Companion drop-down menu to enable Opportunistic Wireless Encryption (OWE) transition mode, which allows for a seamless transition from Open unencrypted WLANs to OWE WLANs.
  7. Select the SAE Hash to Element checkbox to enable use of the SAE hash algorithms with WPA and WPA2 encryption methods.
  8. Select the Allow checkbox to define the EAP Types allowed to be used for authentication on the WLAN.
  9. After you have completed configuring the settings, choose from the following actions:
    1. Select Apply to commit the configured settings.
      Note

      Note

      This does not save the settings you configured; it provides a preview of your applied settings. To undo the settings you applied, select Revert.
    2. Select Save to commit and save the configured settings.
      Note

      Note

      If you do not select Save, the settings that you configured are not saved when you move away from the configuration window.