Authentication:
- 802.1X support, including Cisco LEAP, EAP-Flexible Authentication via Secure Tunneling (EAP-FAST), Protected EAP- Generic Token Card (PEAP-GTC), PEAP-Microsoft Challenge Authentication Protocol Version 2 (PEAP-MSCHAPv2), EAP-Transport Layer Security (EAP-TLS), EAP-Tunneled TLS (EAP-TTLS), and EAP-Subscriber Identity Module (EAP-SIM) to yield mutual authentication and dynamic, per-user, per-session encryption keys (WPA and WPA2)
- MAC address and standard 802.11 authentication mechanisms
Encryption:
- AES-CCMP encryption (WPA2)
- TKIP encryption enhancements: key hashing (per-packet keying), message integrity check (MIC) and broadcast key rotation via Cisco TKIP or WPA TKIP
- Support for static and dynamic IEEE 802.11 WEP keys of 40 bits and 128 bits