cisco WLC security options

Web Authentication

Layer 3 security feature for Guest LANs that prompts users for a username and password upon network connection.

Web Passthrough

Layer 3 security feature for Guest LANs that grants network access without requiring credentials.

802.1X

Layer 2 security feature for WLANs using EAP-based authentication and dynamic WEP keys.

Static WEP

Layer 2 security feature using manually configured WEP keys; legacy and less secure.

WPA+WPA2

Layer 2 security options providing encryption and integrity using WPA or WPA2 standards.

CKIP

Layer 2 security option using Cisco Key Integrity Protocol; legacy and Cisco-specific.

None (Layer 2) [settings option]

Disables Layer 2 security, allowing open authentication to the WLAN.

None + EAP Passthrough [settings option]

Allows open authentication but redirects EAP to external server; Layer 2 setting.

IPSec

Layer 3 security option (WLAN only) that encrypts traffic using Internet Protocol Security.

VPN Pass-Through

Allows Layer 3 VPN clients to establish connections through the WLC; used in WLANs.

Layer 2 Security tab

Tab in WLC GUI where WLAN Layer 2 authentication and encryption methods are set.

Layer 3 Security tab

Tab in WLC GUI used to configure Web Authentication, Web Passthrough, VPN, or IPSec.

Guest LAN Layer 2 restriction

Layer 2 security options are not configurable on a Guest LAN.

WLAN vs Guest LAN

Only WLANs allow Layer 2 security settings; Guest LANs are limited to Layer 3 options.