Note
•
When you use WPA pre-shared key or WPA2 pre-shared key, the pre-shared key must be statically
set on the phone. These keys must match the keys that are on the AP.
•
When you use Auto (AKM), encryption options are automatically configured for WPA, WPA2,
WPA Pre-shared key, WPA2 Pre-shared key, or CCKM.
•
In AKM mode, the phone authenticates with LEAP if the phone is configured with WPA, WPA2,
or CCKM key management, or if 802.1x is used.
•
The Cisco Unified IP Phone does not support auto EAP negotiation; to use EAP-FAST mode, you
must specify it.
The following table provides a list of authentication and encryption schemes that are configured on the Cisco
Aironet APs that the Cisco Unified IP Phone supports. The table shows the network configuration option for
the phone that corresponds to the AP configuration.
Table 20: Authentication and Encryption Schemes
Cisco Unified IP Phone
Configuration
Cisco AP Configuration
AuthenticationCommon
encryption
Key managementAuthentication
OpenNoneOpen
Open+WEPWEPOpen (Static WEP)
Shared+WEPWEPShared key (Static WEP)
LEAP or Auto (AKM)WEPOptional CCKMLEAP
802.1x
LEAP or Auto (AKM)TKIPWPA with optional
CCKM
LEAP
WPA
LEAP or Auto (AKM)AESWPA2LEAP
WPA2
EAP-FASTWEPOptional CCKMEAP-FAST
802.1x
EAP-FASTTKIPWPA
Optional CCKM
EAP-FAST with WPA
EAP-FASTAESWPA2EAP-FAST with WPA2
Auto (AKM)TKIPWPA-PSKWPA-PSK
Cisco Unified IP Phone 8961, 9951, and 9971 Administration Guide for Cisco Unified Communications Manager
10.0
170
Supported Security Features