Switching Encryption on Ruckus

[ninjabeaver]

Afternoon all,

 

I'd like to switch our Encryption Options in the Ruckus setup at school.

 

Currently running WPA and TKIP and was looking at putting this across to WPA2 and AES.

 

If I just switch these over I take it that the staff and student laptops would have to be reconnected to the wireless again.

 

Can anyone advise please?

 

Cheers,

 

Simon.

[neilmac]

First of all, know that by running WPA/TKIP you will not be getting 802.11n modulation.

 

if you change the encryption, you will have to delete and then add the profile again, this can get confusing.

 

The best way to handle this is to create a new SSID, WPA2/AES only, with a new name, and mapped to the same VLAN. Migrate the users to that one slowly. If, and it's a big IF, you have any devices that don't support WAP2 they can stay on the old SSID.

 

Either way, you will have to rejoin the laptops, but at least this way they will still have the old network while you move them to the new.

 

Expect to see performance improve also.

 

NM

[ninjabeaver]

Thanks Neilmac.

 

Sorry I have not replied. OFSTED have just been in over Thursday and Friday.

 

Feel stupid as why I did not think of this. I'll get onto that next week.

 

So, my apologies and thanks all in one.

 

Cheers,

 

Simon.

[Michael]

As above, create a new SSID and set the security to WPA2 + AES.

 

If you're running Windows Vista or later you can script the netsh wlan command (search the forum) and you can easily deploy a new wireless profile to all Windows devices.

 

Leave it a few days, then in time remove the old SSID and everything should transfer over smoothly. To the best of my knowledge, if Windows can connect to two SSIDs in range, it will choose the one with the strongest security.