Cisco Aironet 1200 Series - Setting a Session-Based WEP Key Timeout

4-25
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-01
Chapter 4 Security Setup
Setting Up EAP Authentication
Tip To save your changes and apply them later, click Submit. When you are ready to
implement the changes, select System Configuration > Service Control and
click Restart.
Note Restarting the service clears the Logged-in User Report, refreshes the Max
Sessions counter, and temporarily interrupts all Cisco Secure ACS services.
Setting a Session-Based WEP Key Timeout
You can set a timeout value for the session-based WEP key. When the timeout
value elapses, the server issues a new dynamic WEP key for authenticated client
devices.
Note If you enable TKIP on the access point, you do not need to set up a session-based
WEP key timeout. You can use both TKIP and a session key timeout, but these
features provide redundant protection.
You should consider several factors when determining the best session key
timeout value for your wireless network. Consult Product Bulletin 1515: Cisco
Wireless LAN Security Bulletin for guidelines on selecting timeout values. Use
this URL to browse to Product Bulletin 1515:
http://www.cisco.com/warp/public/cc/pd/witc/ao350ap/prodlit/1515_pp.htm
Follow these steps to set a timeout value for session-based WEP keys:
Step 1 On the ACS main menu, click Group Setup.
Step 2 In the Group drop-down menu, select the group for which you want to modify the
WEP key/session timeout. The Default group is usually the group you need to
modify.
Step 3 Click Edit Settings.
Step 4 Scroll down to the IETF RADIUS Attributes settings.