Cisco 1200 Series + Dlink DWL-G510 PCI = No AES?

[MulLa]

Hi all,

I'm having a bit of a problem trying to use AES-CCMP together with a Dlink DWL-G510 PCI card. More info for the card can be found here:

http://www.dlink.com.au/Default.aspx?ArticleID=214

I can successfuly get WPA-TKIP working flawlessly but just not AES-CCMP encryption.

I'm also using PEAP authentication to a Windows 2003 RAIDUS server.

I'm using the latest drives and IOS and the WPA2 patch for Windows XP SP2 has been installed on the client PC. I've tried selecting both WPA and WPA2 encryption but to no avail. As soon as I switch the AP back to TKIP the client would immediately connect.

Just suspecting that maybe the crappy D-link card doesn't support AES? Since it's not mentioned in the documentations. If that's the case can anyone recommend a card that does support AES and won't break the bank?


Thanks heaps in advance

 

[MulLa]

Anyone?? No one??

 

[ScottMac]

What version of IOS are you running on the AP1200? I believe you need at least 12.3 to get any AES support, and the most recent 12.3(4)JA to support WPA2.

Next, the radio module(s) need to be at a certain level, I think the "A" radio has to be at least a xx21a, and the "G" radio needs to be xx31a .... something like that.

Here's a FAQ link

12.3(2) had a few problems, you'd probably do better to go directly to 12.3(4).

Good Luck

Scott

 

[MulLa]

Thanks ScottMac for the response.

I'm using the latest IOS 12.3(4)JA. I'm not sure what version of the 'G' radio I'm using tho. But I've only purchased the upgrade 'G' radio module like last week from Cisco so I suppose it's should be the latest edition.

Somhow I think it's the D-Link NIC that's holding me back. Have you used any consumer grade wireless NICs successfully with Cisco's AES?

 

[spidey07]

try forum.cisco.com

There have been reports of lots of trouble with 12.2(4)

 

[MulLa]

Thanks Spidey07 for a pointer in the right direction. Indeed many people on that forum are having difficulties in getting WPA2/AES working with their 1200AP and any non Centrino NICs.

Guess I'll just have to wait for now and settle for WPA/TKIP :brokenheart:

 

[ScottMac]

If you want to check your radio / hardware info, bring up the WebGUI, interfaces, radio 0, then hit the tab at the top for "Details."

Good Luck

Scott

 

[MulLa]

Thanks ScottMac for the tip there too. Guess I'll just put my wireless VLAN into production use this weekend. Nothing much I could do about WPA2 anymore.

Hey I saw your name a few times in the Cisco forums, is that the same you?

 

[ScottMac]

That's me!

I get around pretty good for an old fart ....


Good Luck

Scott