Hi,
When configuring a Guest access network which tunnels traffic from the access point to the controller and my Controlled Ap's - Client data tunnel is set to Less security better performance all is working fine. When I change the setting from Less Security Better performance to High Security Less Performance the client doesn't receive any ip address. The access point MSM320 and the controller MSM760 are in different ip subnets. On the VSC profile, the setting always tunnel client traffic is enabled, wireless security filters are disabled and the dhcp range is set.
Does somebody which setting I need to change to make it work with the higher security setting. Are possibly more information about this setting, the documentation on this is very limited:
For example the help file:
Less security/better performance: This option provides security using a secret key that is attached to each packet. The key is rotated every 200 seconds.
High security/less performance: This option uses HMAC (Hash based message authentication code) to ensure the data integrity and authenticity of each packet. Performance is reduced due to the overhead needed to calculate HMAC.
Regardless of the security method used, the client tunnel does not encrypt the data stream. To protect client traffic with encryption requires that client stations use WPA or VPN software.
Regards,
Edward Verweij