what is the new ccna

what is the new ccna.In Figure 17.16, you can see that the AP first generates a random number and sends it to the client. The client then uses a generic passphrase along with this random number to obtain a key that is used to encrypt the data arriving at the AP. The client then sends the AP its own random number and the Message Integrity Code (MIC) used to ensure that the data has not been tampered with.0 The AP generates a key that is used to encrypt the unicast traffic arriving at the client. For confirmation, the AP again sends the random number that was encrypted using the resulting key. A final message is then sent indicating that the temporary key ( TK,TemporalKey) is in place at both ends.The two handshakes for the exchange of group keys involve the generation of the Group Master Key (GMK,GroupMasterKey), which is usually generated by a random number. After the AP generates the GMK, a group random number is generated. This is often used to generate a Group TemporalKey (GTK). o The GTK provides the group key and a MIC, which changes when a timeout occurs or when a client leaves the network.To configure WPA, select WLANs > Edit to set the Layer 2 security method. Then select the Security tab and choose WPA+WPA2 from the drop-down menu, as shown in Figure 17.17. To allow the use of WPA, ensure that TKIP is selected. TKIP will be automatically selected when the WPA PoUcy checkbox is selected.Figure 17-17 Configuring a WPA Policy 2.2. WAP2 Overview As the name implies, WPA2 is a second attempt at WPA. WPA is not just a firmware upgrade; instead, it is possible that AES is used for encryption. Advanced Encryption Standard-Cipher Block Chaining Message Authentication285 Chapter 17 Wireless Network Security Assurancerequire new hardware to use it. The reason higher-performance hardware is needed is that WAP2 uses AES encryption. WPA was designed based on the 802.11a draft and released in 2003, while 802.1H was released in 2004. By the time 802.11i was approved, it had more support for 802.1X and AES/CCMP for encryption. Then the Wi-Fi Alliance released the 802.1H-compatible WPA2OCodeProtocol (AES/CCMP) still uses IV and MIC, but the length of IV is increased after each cipher block. Comparing WPA and WPA2, the following features can be found. For WPA, TKIP is mandatory, while AES is optional. For WPA2, AES is mandatory and TKIPO is not allowed