Good info James. On the Win7/Vista comment, once a client is associated to an AP, it's supposed to use that cipher suite until it reassociates to another AP or is disconnected and reconnects (for whatever reason) to that same AP. Cipher suite selection is based on a per-association basis, and CCMP should always be preferred when the AP is announcing both in beacons and probes for Wi-Fi certified clients.
Hope this helps, Devin Devin K. Akin Chief Wi-Fi Architect Aerohive Networks E: de...@aerohive.com C: +1.404.483.2681 W: www.Aerohive.com --On Tuesday, January 05, 2010 09:21:35 AM -0500 Lee H Badman <lhbad...@syr.edu> wrote: > Has anyone made the move from WPA1/TKIP-only to WPA2/AES-only in the WLAN? > Did you find a significant (or insignificant) percentage of client > devices that couldn't make the change? Did you make any attempts to > otherwise accommodate the user devices that couldn't make the jump? Any > other details of the transition worth mentioning? Hi Lee, We have nearly completed this (we have a second SSID that is still WPA/TKIP, but that will be turned off in July. It has very few users.) * XP SP2 will need SP3 or hotfix KB917021 * Many laptops ship with very old wireless drivers. Many of these proved to be unstable or not support WPA2, so our helpdesk have local copies or direct links to all the common drivers. * We don't sell kit direct to users, but we keep a list of cheap and cheerful USB wireless adapters if a laptops lack of WPA2 can not be fixed with a driver update. * For the smaller mobile devices, we haven't had problems - All that support 802.1x, tended to support WPA2 as well. * Ubuntu / Mac OS / Blackberry / iPhone can auto detect the change from WPA/TKIP to WPA2/AES and just work (with the same SSID name), but Vista and Win 7 can't. ...I can see the advantages of being able to enforce WPA2/AES client side though. Regards, James -- James J J Hooper Network Specialist Information Services University of Bristol http://www.wireless.bristol.ac.uk http://www.jamesjj.net -- ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
