Configuring Internet Connection Settings - Nokia 9500 User Manual

C o n t r o l p a n e l
Define the following:
• Use manual user name — This setting overrides the user name in the initial identity response in a case when the server
requires that the user performs the initial identification with a predefined user name, for example, with a Windows user
name. If you select Yes
• Use manual realm — This setting overrides the realm of the initial identity response in a case when the server requires
that the user performs the initial identification with a predefined realm. If you select No, the realm is derived from the
IMSI (international mobile subscriber identity).
• Use identity privacy — The EAP-SIM can have the server send a pseudonym identity for future authentications. This identity
prevents the user's IMSI from being sent.
• Maximum reauthentication
that can be used to speed up the upcoming authentications. You can specify how many times a single reauthentication
mechanism can be used until full authentication must be performed. If the reauthentications mechanisms are used too
many times, security may be compromised because the SIM card is not used in reauthentication.
Modifying the EAP-TLS settings
To modify the EAP-TLS settings for an Internet access point, select
Internet access point from the list, and press
Configure.
On the User certificates page, select which personal certificates are used for user authentication when using this Internet
access point. This page shows all the installed personal certificates on the device. The certificates are enabled by default. To
disable a certificate, select the certificate, and press Disable.
On the CA certificates page, select which authority certificates are valid for server verification in wireless LAN authentication
when using this Internet access point. This page shows all the installed authority certificates on the device. All certificates
are enabled by default. To disable a certificate, select the certificate, and press Disable.
On the Cipher suites page, select which TLS (transport layer security) cipher suites you want to use with this Internet access
point. To enable a selected cipher suite, press Enable.
On the Settings page, you can define additional settings related to EAP-TLS. For instructions on modifying these settings, see
the Help function in the device.
Modifying the EAP-PEAP settings
To modify the EAP-PEAP settings for an Internet access point, select
Internet access point from the list, and press
Configure.
On the User certificates page, select the personal certificates for user authentication when using this Internet access point.
This page lists all personal certificates installed on the device. The certificates are enabled by default. To disable a certificate,
select the certificate, and press Disable. On the
verification in wireless LAN authentication when using this Internet access point. This page shows all the installed authority
certificates on the device. All certificates are enabled by default. To disable a certificate, select the certificate, and press Disable.
On the Cipher suites page, select which TLS (transport layer security) cipher suites you want to use with this Internet access
point. To enable a selected cipher suite, press Enable.
On the EAP types page, select and configure the authentication methods you want to run inside the EAP-PEAP method. Press
Priority, and then Move up
On the Settings page, you can define additional settings related to EAP-PEAP. For instructions on modifying these settings,
see the Help function in the device.
Modifying the EAP-LEAP settings
To modify the EAP-LEAP settings for an Internet access point, select
Internet access point from the list, and press
Configure. If you enter your user name in the
session. If you do not want to be asked for the password, select
the Password field.
Note that if you select No
security.

Configuring Internet connection settings

These settings affect all Internet connections.
To configure common Internet connection settings, select
time period after which the connection ends automatically and returns to standby mode if not used. You can specify a
different time for each connection type, but the setting affects all Internet access points using that connection type.
Copyright © 2004 Nokia. All Rights Reserved.
but leave the User name field empty, a random user name is generated for initial identity response.
count — The EAP-SIM can have the server send the wireless device a reauthentication identity
→ Advanced. Select the
Edit
→ Advanced. Select the
Edit
CA certificates
and Move down to change the priority order of the tunneled EAP types.
→ Advanced. Select the
Edit
Username
in the Password prompt field, the password is stored in the device, and this decreases the level of
→
Connections
EAP page. Select EAP-TLS from the list, and press
Connections
EAP page. Select EAP-PEAP from the list, and press
page, select which authority certificates are valid for server
Connections
EAP page. Select EAP-LEAP from the list, and press
field, you need not give the user name during an authentication
No in the Password prompt
→
Connections Internet
70
Internet setup. Select a wireless LAN
→
Internet setup. Select a wireless LAN
→
Internet setup. Select a wireless LAN
field, and enter the password in
setup. Select the Idle page, and define the