A modern municipal SSID's client profile shows AES/CCMP for encrypt…

Question

A modern municipal SSID's client profile shows AES/CCMP for encryption and integrity. How should the technician treat that setting?

Accepted Answer

Accept contemporary AES/CCMP-class ciphers on the client rather than preferring legacy TKIP — AES/CCMP is the modern padlock—leave it on. Dragging the city back to TKIP or WEP for one dusty scanner is the wrong default. MAC lists aren't integrity crypto.

Answer

Force TKIP-only so older barcode scanners dictate citywide crypto

Answer

Clear the cipher suite so the client negotiates WEP for maximum compatibility

Answer

Replace CCMP with MAC ACL entries as the primary integrity mechanism

A modern municipal SSID's client profile shows AES/CCMP for encryption and integrity. How should the technician treat that setting?

Short Explanation

Full Explanation