I'm using a Cisco AIR-1252AG (IOS 12.4(10b)JDA3) and I must provide both a WEP128 wlan (for compatibility with older embedded devices, this will go to a firewalled vlan) and a WPA2 (WPA1 would be ok too) wlan on the same 2.4GHz radio. Both with pre shared keys.
While I can set WPA options in the SSID, the WEP encryption seems to apply to the whole radio interface. I've built the WEP config using the 'express security' (lol) wizard and then proceeded to add WPA. WPA is already working on the 5GHz radio (I don't need wep there) but I need to also support 2.4GHz devices, and I can't even understand if this should be possible at all!
This will probably apply to many Cisco AIR-* access points (but some of them are limited to WPA1 and/or a single radio).
Relevant config so far:
dot11 ssid my_wpa_network authentication open authentication key-management wpa version 2 guest-mode infrastructure-ssid optional wpa-psk ascii 7 [...cut...] ! dot11 ssid my_wep_network authentication open ! interface Dot11Radio0 encryption key 1 size 128bit 7 [...cut...] transmit-key encryption mode wep mandatory ssid my_wep_network [... other stuff here ...] ! interface Dot11Radio1 encryption mode ciphers aes-ccm ssid my_wpa_network [... other stuff here ...]
I want to get a WEP ssid with psk on Radio0 (not broadcasted) and a WPA2 (or WPA+WPA2, or WPA) ssid with psk on both Radio0 and Radio1 (broadcasted).