Thanks Tim! However that does bring up an interesting point. If "WPA (AES) and CCKM work fine, but this is bad practice (so that's a no no, unless you are specifically asked for this awful combination, coz after all, it's a lab, not real life)" then isn't that technically stronger authentication and encryption than WPA/Tkip? There are plenty of other items that the test asks us to configure that aren't best practices...
Thanks, -Kara From: Silverline,Tim [mailto:[email protected]] Sent: Saturday, February 19, 2011 6:22 PM To: Kara Muessig (kmuessig); [email protected] Subject: RE: 7921 ver 1.2.1 WPA2 / CCKM Really good writeup about this on Jerome Henry's blog here: http://wirelessccie.blogspot.com/2010/07/7921-can-you-do-wpa2.html From: [email protected] [mailto:[email protected]] On Behalf Of Kara Muessig (kmuessig) Sent: Saturday, February 19, 2011 1:09 PM To: [email protected] Subject: [CCIE Wireless] 7921 ver 1.2.1 WPA2 / CCKM Hi all, On question 8.2, it asks you to run the most secure form of encryption that supports CCKM. On the solutions guide this says you must run wpa/tkip to support CCKM, but I seem to be running 1.2(1) software on my 7921 an am able to connect to my SSID that is running WPA2/AES CCKM. I thought if you have cckm enabled on the wlan that the clients connecting must support cckm. Has anybody else seen this? Am I missing something? Thanks, Kara Muessig CONSULTING SYSTEMS ENGINEER.SALES Wireless South Team [email protected] <mailto:[email protected]> Phone: 512-791-2870 Cisco.com <http://www.cisco.com> Think before you print. This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message. For corporate legal information go to: http://www.cisco.com/web/about/doing_business/legal/cri/index.html <http://www.cisco.com/web/about/doing_business/legal/cri/index.html>
<<image001.jpg>>
<<image002.gif>>
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
