Cisco-WAP(config-ssid)#authentication key-management wpa Cisco-WAP(config-ssid)#guest-mode Cisco-WAP(config-ssid)#wpa-psk ascii 7 This-is-my-big-honking-insecure-passphrase Cisco-WAP(config)#int dot11Radio 0 isco-WAP(config-if)#encryption mode ciphers tkip To configure WPA2-PSK, I can issue the following commands. These commands are similar to the WPA configuration, except that I'm using AES encryption. Remember, AES encryption is only available on certain hardware, SO if this doesn't work for you, make sure you have a WPA2-capable device: Cisco-WAP(config)#dot11 ssid G Coolness Cisco-WAP(config-ssid)#authentication open Cisco-WAP(config-ssid)#authentication key-management wpa Cisco-WAP(config-ssid)#guest-mod Cisco-WAP(config-ssid)#wpa-psk ascii 7 This-is-my-big-honking-insecure-passphrase Cisco-WAP(config)#int dot11Radio 0 Cisco-WAP(config-if)#encryption mode ciphers aes-ccm Next, I'll assign the SSID Coolness to this Dot11Radio interface: Cisco-WAP(config-if)#ssid Coolness If you've purchased your WAP used, or you have an older model, you may see a com- mand like this in the configuration: speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 If this is configured incorrectly, the WAP may suffer from severely limited throughput. Luckily, you don't have to type any of that stuff to fix it. Instead, just use the com- mand speed default to reset it: Cisco-WAP(config-if)#speed default I need to include the wireless interface into bridge group 1 and, as always, turn up the interface: Cisco-WAP(config-if)#bridge-group 1 Cisco-WAP(config-if)#no shut Next, I'll configure the Ethernet interface. Since this WAP is configured as a bridge, there are no IP addresses on the physical interfaces. Instead, the command bridge-group 1 will include this interface in the bridge group that we will configure later: Chapter 29: Wireless Cisco-WAP(config)#int go Cisco-WAP(config-if)#no ip address Cisco-WAP(config-if)#bridge-group 1 Cisco-WAP(config-if)#no shut With the two physical interfaces configured, 