To clarify my statement, Greg is correct when you are just switching encryption types. But if you are switching between WPA and WPA2, at least Windows XP does not seem to cooperate well. That probably depends largely on which supplicant you are using though.
Matt From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Greg Williams Sent: Wednesday, September 30, 2009 10:27 AM To: [email protected] Subject: Re: [WIRELESS-LAN] anyone still using TKIP >From the tests I did when we phased TKIP out a year ago, Windows just switches encryption types. Greg Williams IT Department University of Colorado at Colorado Springs From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Matt Ashfield Sent: Wednesday, September 30, 2009 8:25 AM To: [email protected] Subject: Re: [WIRELESS-LAN] anyone still using TKIP How do you go about phasing it out, if the user's SSID is already pre-configured to connect with WPA/TKIP? If you change it, will users have to manually go in and select AES, or is windows smart enough to sort that out on its own? Cheers Matt From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Barber, Matt Sent: September 30, 2009 11:16 AM To: [email protected] Subject: Re: [WIRELESS-LAN] anyone still using TKIP Hi Matt, We phased out two remaining WPA networks in the last couple months. We had a couple setup initially because we expected lots of clients that could not support WPA2, either because of hardware or because they were missing the necessary Windows updates. We did find quite a few people that were out of date, but not many with old 11b adapters or anything that couldn't support WPA2. Now that the WPA2 update is included in XP SP3 and that we had some time to get everyone caught up, WPA became unnecessary. We did most of that before the attacks on TKIP were published, so we just happened to already be on the right path for that. WPA was always just a stopgap between WEP and the 802.11i RSN mechanisms, so it was pretty much destined for obsolescence right from the start. WPA2 is certainly the way to go now, keeping in mind that there are still some gaming and handheld devices that can't support it. Take care, Matt From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Matt Ashfield Sent: Wednesday, September 30, 2009 10:07 AM To: [email protected] Subject: [WIRELESS-LAN] anyone still using TKIP In light of this article I'm wondering if anyone is still sticking with TKIP (for legacy system issues I would guess) as opposed to using AES solely? http://www.idgconnect.com/index.cfm?event=showarticle&cid=116&pk=9433 Thanks Matt Ashfield Network Analyst ITS - Communications and Network Services University of New Brunswick [email protected] ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
