Psion Teklogix 9160 G2 Manual de usuario descargar pdf (Pagina 368)

B-18 Psion Teklogix 9160 G2 Wireless Gateway User Manual

Appendix B: Security Settings on Wireless Clients/RADIUS Server

IEEE 802.1x Client Using EAP/TLS Certificate

3. Click Properties to bring up the Protected EAP Properties dialog and configure the

following settings.

4. Click Configure to bring up the EAP MSCHAP v2 Properties dialog.

On this dialog, disable (click to uncheck) the option to Automatically use my Windows

logon name . . . etc.

Click OK on all dialogs (starting with the EAP MSCHAP v2 Properties dialog) to close

and save your changes.

Logging On To The Wireless Network With An IEEE 802.1x PEAP Client

IEEE 802.1x PEAP clients should now be able to associate with the access point. Client

users will be prompted for a user name and password to authenticate with the network.

B.6.2 IEEE 802.1x Client Using EAP/TLS Certificate

Extensible Authentication Protocol (EAP) Transport Layer Security (TLS), or EAP-TLS, is

an authentication protocol that supports the use of smart cards and certificates. You have the

option of using EAP-TLS with both WPA/WPA2 Enterprise (RADIUS) and IEEE 802.1x

modes if you have an external RADIUS server on the network to support it.

Note: If you want to use IEEE 802.1x mode with EAP-TLS certificates for authentication

and authorization of clients, you must have an external RADIUS server and a Public

Key Authority Infrastructure (PKI), including a Certificate Authority (CA), server

configured on your network. It is beyond the scope of this document to describe these

configuration of the RADIUS server, PKI, and CA server. Consult the documentation

for those products.

Some good starting points available on the Web for the Microsoft Windows PKI soft-

ware are:

“How to Install/Uninstall a Public Key Certificate Authority for Windows 2000” at

http://support.microsoft.com/default.aspx?scid=kb;en-us;231881 , and

Table B.6 Protected EAP Properties Settings

Validate Server Certificate

Disable

this option (click to uncheck the box).

Note: This example assumes you are using the Built-in Authentication server on

the AP. If you are setting up EAP/PEAP on a client of an AP that is using an

external RADIUS server, you might certificate validation and choose a certif-

icate, depending on your infrastructure.

Select Authentication Method

Choose

Secured password (EAP-MSCHAP v2)

1 2 ... 363 364 365 366 367 368 369 370 371 372 373 ... 435 436

Sin comentarios

Psion Teklogix 9160 G2 Manual de usuario Pagina 368