On AireOS WLCs a WPA2-Personal WLAN is enabled by configuring a PSK with the command security wpa akm psk set-key {ascii | hex}. The ascii keyword declares that the forthcoming string is an ASCII passphrase; index 0 specifies an unencrypted key entry. This single command both enables PSK authentication and stores the passphrase, satisfying the company policy that requires an ASCII key. No additional 802.1X or cipher commands are necessary for client authentication.

A. Disables 802.1X but does not define a PSK, so no client authentication key exists.

B. Merely enables DHCP proxy and is unrelated to WLAN security or authentication.

C. Selects AES cipher suites but provides no authentication method or passphrase.

1. Cisco Wireless Controller Command Reference, Release 8.10, “security wpa akm psk set-key” (WLAN Commands), pp. 1154-1155.

2. Cisco Wireless LAN Controller Configuration Guide, Release 8.10, Chap. 7 “Configuring WLAN Security (WPA2 Personal)”.