Cisco 8821

For more information about encryption methods, see the “Wireless Security” section in the Cisco Wireless IP
Phone 8821 Series Deployment Guide.
AP Authentication and Encryption Options
Authentication and encryption schemes are set up within the wireless LAN. VLANs are configured in the
network and on the APs and specify different combinations of authentication and encryption. An SSID
associates with a VLAN and the particular authentication and encryption scheme. In order for wireless phones
to authenticate successfully, you must configure the same SSIDs with their authentication and encryption
schemes on the APs and on the phone.
Note
•
When you use WPA pre-shared key or WPA2 pre-shared key, the pre-shared key must be statically
set on the phone. These keys must match the keys that are on the AP.
•
The wireless phones do not support auto EAP negotiation; to use EAP-FAST mode, you must specify
it.
The following table provides a list of authentication and encryption schemes that are configured on the Cisco
Aironet APs that the phones support. The table shows the network configuration option for the device that
corresponds to the AP configuration.
Table 5: Authentication and Encryption Schemes
Phone ConfigurationCisco WLAN Configuration
AuthenticationCommon
encryption
Key managementAuthentication
NoneNoneNoneOpen
WEPWEPNoneStatic WEP
802.1x EAP > EAP-FASTTKIP or AESWPA or WPA2
with optional
CCKM
EAP-FAST
802.1x EAP > PEAP >
MSCHAPV2
TKIP or AESWPA or WPA2
with optional
CCKM
PEAP-MSCHAPv2
802.1x EAP > PEAP > GTCTKIP or AESWPA or WPA2
with optional
CCKM
PEAP-GTC
802.1x EAP > TLSTKIP or AESWPA or WPA2
with optional
CCKM
EAP-TLS
Cisco Wireless IP Phone 8821 and 8821-EX Administration Guide for Cisco Unified Communications Manager
27
VoIP Networks
Authentication Methods