Configuring for Authenticating Users 69and how to configure it, see the Wireless LAN Switch and ControllerConfiguration Guide.)Configuring a Service ProfileA service profile controls advertisement and encryption for an SSID. Youcan specify the following:■ Whether SSIDs that use the service profile are beaconed■ Whether the SSIDs are encrypted or clear (unencrypted)■ For encrypted SSIDs, the encryption settings to use■ The fallthru authentication method for users that are notauthenticated with 802.1X or MAC authentication. The fallthrumethod can be Web, last-resort, or none. (See “Configuring forAuthenticating Users” on page 60.)Table 12 lists the parameters controlled by a service profile and theirdefault values.Table 12 Defaults for Service Profile ParametersParameterDefaultValueRadio Behavior When Parameter Set ToDefault Valueauth-dot1x enable When the Wi-Fi Protected Access (WPA)information element (IE) is enabled, uses 802.1Xto authenticate WPA clients.auth-fallthru web-auth Uses Web AAA for users who do not match an802.1X or MAC authentication rule for the SSIDrequested by the user.auth-psk disable Does not support using a preshared key (PSK) toauthenticate WPA clients.beacon enable Sends beacons to advertise the SSID managed bythe service profile.cipher-ccmp disable Does not use Counter with Cipher Block ChainingMessage Authentication Code Protocol (CCMP) toencrypt traffic sent to WPA clients.cipher-tkip enable When the WPA IE is enabled, uses Temporal KeyIntegrity Protocol (TKIP) to encrypt traffic sent toWPA clients.cipher-wep104 disable Does not use Wired Equivalent Privacy (WEP) with104-bit keys to encrypt traffic sent to WPA clients.