Configuring WEP Keys on Cisco Wireless LAN

By Edward Tetz from Cisco Networking All-in-One For Dummies

Configuring security settings on Cisco WLAN is for your associated access points. You can configure either static WEP or WPA for wireless security. To configure static WEP keys , follow these steps based on a specific WLAN ID:

Disable 802.1x encryption:

config wlan security 802.1X disable wlan_id

Configure the WEP key as 40/64-, 104/128-, or 128/152-bit:
```
config wlan security static-wep-key encryption wlan_id {40 | 104 | 128} {hex | ascii} key key_index
```
The default key level is 104, which requires you to enter 26 hexadecimal or 13 ASCII characters for the key.

To configure WPA1 or WPA2, use the following commands:

config wlan disable wlan_id
config wlan security wpa {enable | disable} wlan_id
config wlan security wpa wpa1 {enable | disable} wlan_id

To enable WPA2, use the following command:

config wlan security wpa wpa2 {enable | disable} wlan_id

Choose Advanced Encryption Standard (AES) or Temporal Key Integrity Protocol (TKIP) for data encryption:
```
config wlan security wpa wpa1 ciphers {aes | tkip} {enable | disable} wlan_id
config wlan security wpa wpa2 ciphers {aes | tkip} {enable | disable} wlan_id
```
The default values are TKIP for WPA1 and AES for WPA2.
Choose a system for authenticated key management, which would be 802.1X, Pre-Shared Key (PSK), or Cisco Centralized Key Management (CCKM):
```
config wlan security wpa akm {802.1X | psk | cckm} {enable | disable} wlan_id
```
The default value is 802.1X.
When using PSK, set a preshared key:
```
config wlan security wpa akm psk set-key {ascii | hex} psk-key wlan_id
```
WPA preshared keys must be 8 to 63 ASCII text characters or 64 hexadecimal characters long.
Enable the WLAN:
```
config wlan enable wlan_id
```
Save your settings: