Eap-Fast - Honeywell MX8 User Manual

EAP-FAST

The SCU supports EAP-FAST with automatic or manual PAC provisioning. With automatic PAC provisioning, the user
credentials, whether entered on the saved credentials screen or the sign on screen, are sent to the RADIUS server. The
RADIUS server must have auto provisioning enabled to send the PAC provisioning credentials to the MX8.
For automatic PAC provisioning, once a username/password is authenticated, the PAC information is stored on the MX8.
The same username/password must be used to authenticate each time. See the note below for more details.
Note: When using Automatic PAC Provisioning, once authenticated, there is a file stored in the \System directory with the
PAC credentials. If the username is changed, that file must be deleted. The filename is autoP.00.pac.
For manual PAC provisioning, the PAC filename and Password must be entered.
To use EAP-FAST, make sure the following profile options are used.
1. Enter the SSID of the Access Point assigned to this profile.
2. Set EAP Type to EAP-FAST.
3. Set Encryption to WPA TKIP.
4. Set Auth Type to Open.
5. To use another encryption type, select WPA CCKM, WPA2 AES or WPA2 CCKM for encryption and complete other
entries as detailed in this section.
6. See Sign-On vs. Stored Credentials
screen are determined by the type of credentials (stored or sign on) and the type of PAC provisioning (automatic or
manual).
7. Click on the Credentials button.
8. To use Stored Credentials, click on the Credentials button. No entries are necessary for Sign-On Credentials with
automatic PAC provisioning as the user will be prompted for the Username and Password when connecting to the
network.
(page 10-17) for information on entering credentials. The entries on the Credentials
10 - 29