encryption mode ciphers aes-ccm
Set the radio's data cipher to AES-CCMP, the cipher WPA2 is built on. Typed under interface Dot11Radio0.
Example
AP-Lobby(config)# interface Dot11Radio0
AP-Lobby(config-if)# encryption mode ciphers aes-ccmConfiguration-only in this lab: association checks the SSID's key, not the cipher, so leaving it out won't break a ping here. Real autonomous APs pair WPA2 key management with it, so type it before you bind the SSID. Avoid tkip and wep: both are obsolete.
Don't just read it — type encryption mode ciphers aes-ccm in a real network simulator in your browser and watch it take effect. No install, no account needed to start.
Frequently asked
What does the "encryption mode ciphers aes-ccm" command do?
Set the radio's data cipher to AES-CCMP, the cipher WPA2 is built on. Typed under interface Dot11Radio0.
What's the common gotcha with "encryption mode ciphers aes-ccm"?
Configuration-only in this lab: association checks the SSID's key, not the cipher, so leaving it out won't break a ping here. Real autonomous APs pair WPA2 key management with it, so type it before you bind the SSID. Avoid tkip and wep: both are obsolete.
Example of "encryption mode ciphers aes-ccm"
AP-Lobby(config)# interface Dot11Radio0 AP-Lobby(config-if)# encryption mode ciphers aes-ccm