July 16, 2007: 12:19 pm: George StarcherCisco Security
If you are looking for a simple down and dirty procedure for setting up an SSID with WPA 1 or 2 preshared key on a Cisco 1200AP here ya go.
- This assumes you have a working Cisco 1200 AP with all other configuration done.
- This assumes you have setup a trunk port and have multiple vlans setup for your network
An example switch interface supporting this access point would look like below: This is a trunk port using dot1q trunking protocol to the Access Point with native vlan as vlan 15 where vlan18 may be the new SSID with WPA we are allowing
interface FastEthernet0/1
description FrontOffice AP
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk vlan 15
switchport trunk allowed vlan 15,18
no ip address
duplex full
speed 100
spanning-tree portfast
- Log into web interface of 1200 AP
- Click Security
- Click SSID Manager
- Click Define Vlan link next to the VLAN pull down box on the right
- <NEW> should be highlighted in the Current VLAN List box
- Enter the numerical vlan number in the VLAN ID: box to the right
- Enter a name if you wish it is optional. The VLAN Name: box to the right
- Click Apply
- Click Security
- Click SSID Manager
- <NEW> should be highlighted in the Current SSID List box
- Enter your new SSID in the SSID: box to the right
- Pull down the VLAN: Box and select the vlan you defined
- Check the box for Interace: Radio0-802.11G (or the radio you want if you have more than one)
- Scroll down and Click the First APPLY button.
- Click Security
- Click Encryption Manager
- Select the VLAN in the Set Encryption Mode and Keys for VLAN: pulldown box
- Select the Cipher radio button
- For WPA-PSK select TKIP in the Cipher pull down box
- For WPA2-PSK select AES CCMP in the Cipher pull down box
- If you want WPA Mixed mode select AES CCMP + TKIP in the Cipher pull down box. This allows clients to use the same SSID for either WPA2 or WPA1
- Leave Encryption Keys section blank
- Ensure Broadcast Key Rotation Interval is Disable Rotation under Global Properties
- Click the APPLY button
- Click Security
- Click SSID Manager
- Click the desired SSID we are setting up under the Current SSID List scroll box
- Scroll down to Authenticated Key Managent section leaving all other options default
- Select Mandatory in the Key Management pull down box
- Check the WPA check box to the right
- Enter your desired WPA preshared key in the WPA Pre-shared Key: text box
- Assuming you are using regular text leave ASCII selected.
- Scroll down and Click the First APPLY button.





Pingback: In the Trenches » The show that was not.