WPA2 security ... do I have it?

I just configured a new AirPort Express 802.11n and for the life of me I can't tell if it accepted the WPA2 security setting. How do I check to see that it's in use without totally messing up the configuration?

Mike,
Tesserax is truly awesome, isn't he!? He is my new best friend. Everytime I search the forum for answers, I end up seeing his name... your question about security was one I had too.
I went ahead and set my setting to the WPA2 Personal as well. I was wondering, have you noticed up in the top right hand of your monitor under the Airport (tornado) icon a lot of different networks (e.g. 2WIRE227, Hotta, Pascal, Lynksys, etc.) in addition to your own? I wonder if these are standard and we don't need to worry or if they should be deleted. Any thoughts?

Similar Messages

Setting up iPad, don't know what to select for security; WEP, WPA, WPA2, WPA Enterprise or WPA2 Enterprise. We have service through Charter cable.

Setting up iPad, don't know what to select for security; WEP, WPA, WPA2, WPA Enterprise or WPA2 Enterprise. We have service through Charter cable.
Thanks for your help!

Choose the strongest security available on your router, preferably WPA2 using AES encryption and a long complex passphrase with at least 14 characters (the maximum is 63 characters).

HP Wireless Printers cannot connect to WPA2-secured WiFi networks with Cisco/Meraki WAPs

In the last two months, I've had the displeasure of working with two very different HP printers and attempting to make them work on a WPA2-secured wireless network. All attempts to authenticate fail with "invalid phassphrase".
I'm not the first person to encounter this, it's a problem with many different HP wireless printers (I just happen to have physical access to the OfficeJet Pro 8610 & Deskjet 3511).
My equipment is a Cisco ASA 5505 Firewall running ASA 9.1x & Cisco Aironet 1142 running IOS 15.3.x.
What does work on the WPA2/AES SSID: Apple MacBook Air running OSX 10.10.2, Three Windows-Based laptops running Windows 8.1 Update 1, an iPhone 5s, Three Windows Phone 8.1 devices, Roku 2, PlayStation 4, PlayStation 3, Sharp Aquos TV, Amazon Streaming Stick, and an Android Tablet (Jellybean). Basically, everything.
What does not work on the WPA2 network: OfficeJet Pro 8610 & Deskjet 3511.
To test the theory there is a problem with HP's implementation of WPA2 with regard to Cisco Aironet IOS, I built out a second SSID that only works in WPA/TKIP mode. This solution works. Both HP printers will join the WPA/TKIP network.
So, I'm able to demonstrate there is a certain connectivity issue. When i look at AAA Debug on the WAP's console, I can observe the HPs attempt to authenticate "Bind I/F" on the WPA2 SSID, however they do not achieve authentication and do not pass the AAA phase. However, on the WPA SSID, they bind and authenticate successfully.
To help illustrate this, here is my WAP running config. It's about as simple as it can get. There is no relevant MAC filtering or ACLs bound to any interface. Noting that I have an ACL on remote access to the WAP (i.e. Locked down to SSH, disabling telnet). The main point being that the ASA firewall is not a factor in this problem as the issue is at the WAP before WPA2 authentication can complete, therefore the printers never reach the network / when the printers connect to the WPA network, the operate fully & correctly.
If anyone at HP can indicate why this particular config is somehow improper or broken, that would be fantastic. There should be no reason why Cisco / Meraki WAP owners have to lower wireless encryption standards just for a printer, be forced into wired, create separate SSIDs with lower encryption specifically for a device.
Building configuration...
Current configuration : 6064 bytes
! Last configuration change at 12:46:47 UTC Fri Aug 20 1993 by admin
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname 10-10-50-1
logging buffered 1024768
logging rate-limit console 9
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa session-id common
no ip source-route
no ip cef
ip domain name freedom.local
dot11 syslog
dot11 vlan-name inside vlan 50
dot11 vlan-name inside-wpa-only vlan 70
dot11 ssid inside
   vlan 50
   band-select
   authentication open
   authentication key-management wpa version 2
   mbssid guest-mode
   wpa-psk ascii 7 xxxxxx
   information-element ssidl
dot11 ssid inside-wpa-only
   vlan 70
   band-select
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7 xxxxxx
   information-element ssidl
dot11 band-select parameters
   cycle-count 3
   cycle-threshold 200
   expire-supression 20
   expire-dual-band 60
   client-rssi 75
dot11 wpa handshake timeout 500
dot11 network-map
username ADMIN privilege 15 secret 5 xxxxxx
ip ssh version 2
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 50 mode ciphers aes-ccm
encryption vlan 70 mode ciphers aes-ccm tkip
ssid inside
ssid inside-wpa-only
antenna gain 0
mbssid
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
channel 2412
station-role root
l2-filter bridge-group-acl
interface Dot11Radio0.50
encapsulation dot1Q 50 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
interface Dot11Radio0.70
encapsulation dot1Q 70
no ip route-cache
bridge-group 70
bridge-group 70 subscriber-loop-control
bridge-group 70 input-address-list 700
bridge-group 70 output-address-list 700
bridge-group 70 spanning-disabled
bridge-group 70 block-unknown-source
no bridge-group 70 source-learning
no bridge-group 70 unicast-flooding
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
interface GigabitEthernet0.50
encapsulation dot1Q 50 native
no ip route-cache
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
interface GigabitEthernet0.70
encapsulation dot1Q 70
no ip route-cache
bridge-group 70
bridge-group 70 spanning-disabled
no bridge-group 70 source-learning
interface BVI1
mac-address xxxx.xxxx.xxxx
ip address 10.10.50.1 255.255.255.0
no ip route-cache
ip forward-protocol nd
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip route 0.0.0.0 0.0.0.0 10.10.50.2
logging history size 100
access-list 111 permit tcp any any neq telnet
bridge 1 route ip
line con 0
access-class 111 in
line vty 0 4
access-class 111 in
length 0
transport input ssh
line vty 5 15
access-class 111 in
transport input ssh
end

I get the same behavior with a laserjet m451nw. I need to enable tkip to get the printer working, it doesn't support pure aes-ccm (every other device here supports pure aes-ccm, even cheap ones), although it's advertised as working.
The following snippet of config works, but I still think it should work without the tkip "hack".
dot11 ssid whatever
vlan 1
band-select
authentication open
authentication key-management wpa version 2
interface Dot11Radio0
encryption vlan 1 mode ciphers aes-ccm tkip

Hi i got a new airport express for christmas and i set it up as per instructions ,i even give a static ip and wpa2 security ..the problem is is when i come to want to use it it says its not on my network and a orange triangle shows .when i reboot it works

hi i got a new airport express for christmas and i set it up as per instructions ,i even give a static ip and wpa2 security ..the problem is is when i come to want to use it it says its not on my network and a orange triangle shows .when i reboot it works..then if i leave it a while and try iy agian its disapeared of my network...i have a bt hub 3 ....any help please ..im not sure if itsa faulty express

I really don't have an answer for that one. I guess that while trying to get things working correctly, I would use the most basic monitor I had which in your case would be the Eizon using the Thunderbolt port and adaptor.
When you boot into Safe Mode the startup is quite slow, but you should get the Apple logo and then the spinning gear below it (release the SHIFT key when it appears.) Then after a little more time you should see a gray progress bar appear below the spinning gear. When that disappears the computer will startup to a login screen.

Photosmart 2710 and WPA2 security question

I just bought a new router that uses WPA or WPA2 security. All of my devices run much faster using the WPA2, but the Photomart 2710 printer dosen't seem to be able to work with WPA2. Is there any way to upgrade the printer softare to use WPA2. I use the wireless printing with my laptop much more than the desktop with a cable connection to the printer. Going back to WPA security is not really an option because of the slower speed. I'm afraid the answer is going to be no, but I have to check. Thanks for any answers.

Wow it appears you are correct that this printer does not support WPA2-AES encryption. Must be an older printer. However since this has an Ethernet connection you can use the following to upgrade the wireless to use WPA2-AES.
Connect wireless printer anywhere, convert from wired, bypass failed radio, add WPA2 security.
http://h30434.www3.hp.com/t5/Printer-Networking-and-Wireless/Connect-your-wireless-printer-when-away...
Say thanks by clicking the Kudos Thumbs Up to the right in the post.
If my post resolved your problem, please mark it as an Accepted Solution ...
I worked for HP but now I'm retired!

Nokia 808 WPA/WPA2 secured wifi problems

I have a nokia 808 pureview with BELLE FP2. However i am not able to connect to WPA/WPA2 secured wifi connection in my college. It should ask for a username and password for authentication but it simply tries to connect automatically and does not connect saying authenticaton failed. Please help me over the issue.

try this out to see if it helps you: http://betalabs.nokia.com/trials/wlan-software-update

E71 - WPA2 security doesn't work with Netgear DG83...

I am unable to connect to wireless network running by Netgear DG834PN router under WPA/WPA2 security. My E61i connects perfectly however I get "No gateway reply" error with E71!

kontraband wrote:
Hi hadimassa...
Yeah, I'm not new to all this, so have looked at a while variety of options of router configuration, security configuration and handset configuration. Ive gone from g only, g&b, Auto108, variable channels, auto home page, no home page yadda yadda yadda.
I have tried all available WPA-PSK versions from WPA, WPA2 to WPA+WPA2. If there is any level of security above WEP then theres no action and the error returned from the handset is no gateway.
Ive editied IPv4 to fall into line manually, tired working with a proxy and its all the same result.
Basically when you start the browser, enter a webpage, the connection options pop up as normal, I select the router, the wifi icon comes on.. there is about a 5-10 second delay followed by an error tone and 'No Gateway' error message.
Turn off the security and there's lightening fast wifi. Very annoying.
If you have any ideas you think I might not have tried tho... Id be well happy to hear them
"No gateway reply" indicates that you're in fact connected. Turn off the powersaving in the WLAN settings. Tools-> settings-> connection-> WLAN-> options-> advanced settings->yes-> powersaving-> off.
‡Thank you for hitting the Blue/Green Star button‡
N8-00 RM 596 V:111.030.0609; E71-1(05) RM 346 V: 500.21.009

Hi . please help me to back my security question i have in my account 25$ i dont know if my account are acctive or unacctive please help me

hi . please help me to back my security question i have in my account 25$ i dont know if my account are acctive or unacctive please help me i dont know what i do

If you have a rescue email address (which is not the same thing as an alternate email address) set up on your account then go to https://appleid.apple.com/ and click 'Manage your Apple ID' on the right-hand side of that page and log into your account. Then click on 'Password and Security' on the left-hand side of that page and on the right-hand side you should see an option to send security question reset info to your rescue email address.
If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then you won't get the reset option - you will need to contact iTunes Support or Apple to get them reset.
e.g. you can try contacting iTunes Support : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page, then Account Management , and then 'Forgotten Apple ID security questions'
or try ringing Apple in your country and ask to talk to the Accounts Security Team : http://support.apple.com/kb/HE57
When they've been reset (and if you don't already have a rescue email address) you can then use the steps half-way down this page to add a rescue email address for potential future use : http://support.apple.com/kb/HT5312

Have been running version 4 for a week without problems. Today, downloaded MS live security update, and have had problems since. when I click on a favorite site, it takes 20 to 40 seconds before the page load's and the same if I click a link on the page.

been running version 4 for a week without problems. Today, downloaded MS live security update, and have had problems since. when I click on a favorite site, it takes 20 to 40 seconds before the page load's.'''bold text'''

http://portableapps.com/apps/internet/firefox_portable/localization#legacy36

Requests to change the security question but have not yet found an email

Requests to change the security question but have not yet found an email

If you aren't receiving the email on your rescue email account (and you've checked the spam folder on the account and tried clicking the reset link again) then you will need to contact iTunes Support / Apple to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699

Hi i have i problem with my iphone and the problem is the security question i have forgot the answers

Hi i have i problem with my iphone and the problem is the security question i have forgot the answers
I understand German and Italian i littlebit English

You need to ask Apple to reset your security questions; this can be done by phoning AppleCare and asking for the Account Security team, or clicking here and picking a method, or if your country isn't listed in either article, filling out and submitting this form.
They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
(106626)

HT201303 How do I get my security passwords I have forgotten them and can not get envy thing with out them

How do I get my security passwords I have forgotten them and can not get envy thing with out them

Fastest way is by contatcing support. This is because youc an't reset the questions on your end if you forgot the original answers.
https://expresslane.apple.com/
Follow these steps:
All Products and Services > iTunes > iTunes Store > Account Management > iTunes Store account security
Answer the questions and if required sign in with your Apple ID and password - same one you used to log in on this support forum.
You will find an option to send an email to Apple on that page. Indicate that you forgot the answers to your security questions and wait for iTunes support to reply.

I am trying to buy song but it is asking for me to answer the questions I chosen for my security but I have forgotten so what do I do

I am trying to buy song but it is asking for me to answer the questions I chosen for my security but I have forgotten so what do I do

If you have a rescue email address (which is not the same thing as an alternate email address) on your account then the steps on this page will give you a reset link on your account : http://support.apple.com/kb/HT6170
If you don't have a rescue email address (you won't be able to add one until you can answer your questions) then you will need to contact Support in your country to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset (and if you don't already have a rescue email address) you can then use the steps on this page to add a rescue email address for potential future use : http://support.apple.com/kb/HT5620

I can't remember my security questions and have used the maximum number of tries, how do I find out what my answers are so I can log in and buy some music?

I can't remember my security questions and have used the maximum number of tries, how do I find out what my answers are so I can log in and buy some music?

From a Kappy post
The Best Alternatives for Security Questions and Rescue Mail
1. Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
2. Call Apple Support in your country: Customer Service: Contact Apple support.
3. Rescue email address and how to reset Apple ID security questions.
An alternative to using the security questions is to use 2-step verification:
Two-step verification FAQ Get answers to frequently asked questions about two-step verification for Apple ID.

Possible 10.6 Internet Solution with Airport using WPA2 Security.

Go to System Preferences, Network, Airport, Advanced, TCP/IP, Click on Renew DHCP Lease. This seems to work for WPA2 security in Airport utilities. Try this and let me know if this works for you?

I forgot to mention to disconnect your Airport for 30 seconds before you renew DHCP Lease. This seems to be working for me. This also seems to clear-up wireless printing problems with HP wireless printers.

WPA2 security ... do I have it?

Similar Messages

Maybe you are looking for