Cisco 7925G - Unified Wireless IP Phone VoIP - Page 49

2-19
Cisco Unified Wireless IP Phone 7925G Administration Guide for Cisco Unified Communications Manager 7.0(1)
OL-15984-01
Chapter 2 Overview of the VoIP Wireless Network
Security for Voice Communications in WLANs
Some authentication schemes require specific types of encryption. With Open authentication, you have
the option to use static WEP for encryption for added security. But if you are using Shared Key
authentication, you must set static WEP for encryption, and you must configure a WEP key on the phone.
When using Authenticated Key Management (AKM) for the Cisco Unified Wireless IP Phone 7925G,
several choices for both authentication and encryption can be set up on the APs with different SSIDs.
When the phone attempts to authenticate, it chooses the AP that advertises the authentication and
encryption scheme that the phone can support. Auto (AKM) mode can authenticate by using WPA,
WPA2, WPA Pre-shared key, or CCKM.
Note • When using WPA Pre-shared key or WPA2 Pre-shared key, the pre-shared key must be statically
set on the phone. These keys must match the keys configured on the AP.
• When using Auto (AKM), encryption options are automatically configured for WPA, WPA2, WPA
Pre-shared key, WPA2 Pre-shared key, or CCKM.
• In AKM mode, the phone will authenticate with LEAP if it is configured with WPA, WPA2, or
CCKM key management.
• The Cisco Unified Wireless IP Phone 7925G does not support auto EAP negotiation; to use
EAP-FAST mode, you must specify it.
• If AKM and 802.1x are used, the authentication method is LEAP.
• The Cisco Unified Wireless IP Phone 7925G uses network EAP for 802.1x but you can enable open
EAP.
Table 2-7 provides a list of authentication and encryption schemes configured on the Cisco Aironet APs
supported by the Cisco Unified Wireless IP Phone 7925G. The table shows the network configuration
option for the phone that corresponds to the AP configuration.
Ta b l e 2-7 Authentication and Encryption Schemes
Cisco AP Configuration
Cisco Unified Wireless
IP
Phone 7925G Configuration
Authentication
Key
Management
Common
Encryption
Authentication
Open None Open
Open (Static WEP) WEP Open+WEP
Shared key (Static WEP) WEP Shared+WEP
LEAP
802.1x
Optional CCKM WEP LEAP or Auto (AKM)
LEAP
WPA
WPA with
Optional CCKM
TKIP LEAP or Auto (AKM)
LEAP
WPA2
WPA2 AES LEAP or Auto (AKM)
EAP-FAST
802.1x
Optional CCKM WEP EAP-FAST
EAP-FAST with WPA WPA
Optional CCKM
TKIP EAP-FAST