How do I deploy WAPs of different brands in a secured fashion in a single campus?

Question

I have a requirement to deploy Cisco and HP WAPs in the same campus, in a secured manner. The Cisco has a WLC (Wireless LAN Controller), and an ISE, but HP has no WLC. In this scenario, how do I deploy both brands of WAPs in the campus, without compromising the Security. For more clarity, I have old HP WAPs and new Cisco WAPs, a Cisco WLC, and an ISE (yet to be deployed).

Edit:

We only have HP now. Cisco is yet to be supplied. Any plan which secures the wireless with the described infrastructure is welcome. First of all, I would like to know whether such a multi-branded WAP solution will work and how to secure it. I have old HP ProCurve 530, MSM-420 and MSM-422 in the campus, and now I am getting Cisco 2702-i, along with a WLC and ISE. How do I integrate the old HP WAPs and deploy the new infrastructure. We don't have RADIUS/LDAP/AD, so far.

Answer 1

This will depend greatly on what "secured" is supposed to mean in this situation - RADIUS allowing you to use WPA2-enterprise is fairly decent, just slapping WPA2-personal on APs is generally kinda-low security, but may be adequate for some uses. Radius saves you from (and identifies) "password sharers."

My initial response was (and mostly remains) - Very tediously for the stuff without central control. Having moved from no central control to a system with central command/control (UniFi), the difference is night and day, even on a relatively small campus.

Multi-branded APs generally works fine so long as the SSIDs, security settings, and password or authentication method are exactly the same across any set that you want to work as a set, and you don't care about missing statistics, etc. from those that are not part of the centralized system.