--On 05 January 2010 10:11 -0500 Devin Akin <[email protected]> wrote:
Good info James. On the Win7/Vista comment, once a client is associated to an AP, it's supposed to use that cipher suite until it reassociates to another AP or is disconnected and reconnects (for whatever reason) to that same AP. Cipher suite selection is based on a per-association basis, and CCMP should always be preferred when the AP is announcing both in beacons and probes for Wi-Fi certified clients.
With Vista and Win 7, you can setup multiple wireless network profiles for the same SSID (as long as the profile names are different). So you could set up one SSID XYZ profile to be WPA/TKIP and one SSID XYZ profile with WPA2/AES. If you do this, then indeed, the client will decide based on what it can 'see' and should pick the WPA2/AES if it can see both.
My point was that, unless you have already setup the two profiles, the clients will only have a profile for the SSID as it is now. The client will not connect if you change the wireless encryption, without manual interaction from the user.
-James -- James J J Hooper Network Specialist Information Services University of Bristol http://www.wireless.bristol.ac.uk http://www.jamesjj.net -- ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
