Motorola WS2000 - Wireless Switch - Network Management Device System Reference Manual page 132

6-6 WS2000 Wireless Switch System Reference Guide
4. If TTLS is selected, specify a
are MD5, PAP and
• Message Digest 5 (MD5) is a secure hash function which converts a long data stream into a fixed
size digest. It uses a 128-bit hash value to do the conversion.
• Password Authentication Protocol (PAP) is a protocol where the user sends an identifier and
password pair to the server. This information is sent un-encrypted. It is used in case a remote server
does not support stronger authentication protocols such as EAP or CHAP.
• Microsoft CHAP (MSCHAP-V2) is an encrypted authentication method based on Microsoft's
challenge/response authentication protocol.
5. If you have a server certificate from a CA and wish to use it on the RADIUS server, select it from this pull-
down menu. Only certificates imported to the switch will be available in the menu. To create a server
certificate, select the
Creating Self
6. You can also choose an imported CA Certificate to use on the RADIUS server. If using a server certificate
signed by a CA, you will need to import that CA's root certificate using the CA certificates screen from
the Certificate Mgmt menu. After a valid CA root certificate has been imported, it will be available from
the CA Certificate
7. Use the RADIUS Client Authentication
host that is trying to authenticate against the RADIUS server. Use the
list.
Subnet/Host
Netmask
Shared Secret
8. Click Apply
Default Auth Type
MSCHAP-V2.
Self Certificates
Certificates).
pull-down menu.
This field contains the IP address of the subnet or host that will be authenticating with the
RADIUS server.
This field contains the netmask (subnet mask) of the subnet or host that will be
authenticating with the RADIUS server.
Set a shared secret to be used for each host or subnet that will be authenticating against
the RADIUS server. The shared secret can be up to 7 characters in length.
to save your changes.
for TTLS to use from the pull-down menu. The options
screen from Certificate Mgmt in the navigation menu (see
table to set up multiple shared secrets based on the subnet or
Add button to add entries to the