Advanced Wireless Communications MINI PRO Guide de l'utilisateur télécharger pdf (Page 184)

Step 3 of 3: EAP-FAST Server

Authenticated-TLS-Server Provisioning Mode is supported using a trusted CA certificate, a self-signed

server certificate, or server public keys and GTC as the inner EAP method.

1. Select one of the following credential retrieval methods:

Validate Server Certificate or Specify

Server or Certificate Name.

2. Click OK to close the security settings.

EAP-FAST User Settings

NOTE: If an Administrator Package to be exported to a user's computer does not include the Enable

CCXv4 Administrator Tool Application Setting, only EAP-FAST User Settings will be available for

configuration.

To set up a client with EAP-FAST authentication:

1. Click Profiles on the WiFi connection utility main window. Or if you are acting as the administrator,

open the

Administrator Tool.

2. On the Profile page, click Add to open the Create WiFi Profile General Settings.

3. WiFi Network Name (SSID): Enter the network identifier.

4. Profile Name: Enter a descriptive profile name.

5. Operating Mode: Click Network (Infrastructure). (This parameter is set to Infrastructure if you

are using the Administrator Tool.)

6. Administrator Profile Type: Select

Persistent or Pre-logon/Common. (This step applies only if you

are using the Administrator Tool.)

7. Click Next to open the Security Settings.

8. Click Enterprise Security.

9. Network Authentication: Select WPA-Enterprise or WPA2-Enterprise.

10. Data Encryption: Select one of the following:

❍ TKIP provides per-packet key mixing, a message integrity check and a rekeying mechanism.

❍ AES-CCMP (Advanced Encryption Standard - Counter CBC-MAC Protocol) is used as the data

encryption method whenever strong data protection is important.

AES-CCMP is recommended.

11. Enable 802.1X: Selected.

12. Authentication Type: Select EAP-FAST to be used with this connection.

13. Click Cisco Options to select Allow Fast Roaming (CCKM), which enables the client WiFi adapter

for fast secure roaming.

Step 1 of 3 EAP-FAST Provisioning (User Settings)

EAP-FAST uses a PAC key to protect the user credentials that are exchanged. All EAP-FAST authenticators

are identified by an authority identity (A-ID). The local authenticator sends its A-ID to an authenticating

client, and the client checks its database for a matching A-ID. If the client does not recognize the A-ID, it

requests a new PAC.

NOTE: If the provisioned Protected Access Credential (PAC) is valid, the WiFi connection utility does not

prompt the user for acceptance of the PAC. If the PAC is invalid, the WiFi connection utility fails the

provisioning automatically. A status message is displayed in the

Wireless Event Viewer that an

administrator can review on the user's computer.

1 2 ... 179 180 181 182 183 184 185 186 187 188 189 ... 284 285

Commentaires sur ces manuels

Pas de commentaire

Advanced Wireless Communications MINI PRO Guide de l'utilisateur Page 184

Commentaires sur ces manuels