Cisco AP541N Dual-band Single-radio Access Point Administration ...

4WirelessModifying Virtual Access Point SettingsDynamic WEPDynamic WEP mode uses IEEE 802.1X, the standard defining port-basedauthentication and infrastructure for doing key management. ExtensibleAuthentication Protocol (EAP) messages are sent over an IEEE 802.11 wirelessnetwork by using a protocol called EAP Encapsulation Over LANs (EAPOL).Dynamic WEP mode provides dynamically-generated keys that are periodicallyrefreshed. An RC4 stream cipher is used to encrypt the frame body and cyclicredundancy checking (CRC) of each 802.11 frame.This mode requires the use of an external RADIUS server to authenticate users.The AP requires a RADIUS server capable of EAP, such as the Microsoft InternetAuthentication Server. To work with Windows clients, the authentication servermust support Protected EAP (PEAP) and MSCHAP V2.You can use any of a variety of authentication methods that the Dynamic WEPmode supports, including certificates, Kerberos, and public key authentication.You must configure the client stations to use the same authentication method theaccess point uses.Table 14FieldDynamic WEPDescriptionUse GlobalRADIUS ServerSettingsBy default each VAP uses the global RADIUS settings thatyou define for the AP at the top of the VAP page. However,you can configure each VAP to use a different set of RADIUSservers.To use the global RADIUS server settings, make sure thecheck box is selected.To use a separate RADIUS server for the VAP, clear the checkbox and enter the RADIUS server IP address and key in thefollowing fields.RADIUS IPAddressRADIUS IPAddress 1–3Enter the address for the primary RADIUS server for this VAP.Enter up to three IPv4 addresses to use as the backupRADIUS servers for this VAP.If authentication fails with the primary server, eachconfigured backup server is tried in sequence.69 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide