Configuring Kerberos Authentication - Motorola AP-51 series Product Reference Manual

6-8 AP-51xx Access Point Product Reference Guide
16.
• To define a security policy supporting KeyGuard, see,
on page
• To configure a security policy supporting WPA/TKIP, see
TKIP on page
• To create a security policy supporting WPA2/CCMP, see
(802.11i) on page
7. Click Cancel
within the New Security Policy screen.

6.4 Configuring Kerberos Authentication

Kerberos (designed and developed by MIT) provides strong authentication for client/server
applications using secret-key cryptography. Using Kerberos, a client must prove its identity to a server
(and vice versa) across an insecure network connection.
Once a client and server use Kerberos to prove their identity, they can encrypt all communications to
assure privacy and data integrity. Kerberos can only be used on the access point with Motorola
802.11b clients.
CAUTION Kerberos makes no provisions for host security. Kerberos assumes
Kerberos uses the Network Time Protocol (NTP) for synchronizing the clocks of its Key Distribution
Center (KDC) server(s). Use the
NTP servers. Kerberos requires the
function properly. See
server.
NOTE If 802.11a is selected as the radio used for a specific WLAN, the WLAN
To configure Kerberos on the access point:
1. Select Network Configuration
6-18.
6-21.
6-24.
to return to the target WLAN screen without keeping any of the changes made
that it is running on a trusted host with an untrusted network. If host
security is compromised, Kerberos is compromised as well
NTP Servers
Enable NTP on
Configuring Network Time Protocol (NTP) on page 4-43
cannot use a Kerberos supported security policy, as no Motorola 802.11a
clients can support Kerberos.
->
screen to specify the IP addresses and ports of available
checkbox be selected for authentication to
Wireless -> Security
Configuring KeyGuard Encryption
Configuring WPA/WPA2 Using
Configuring WPA2-CCMP
to configure the NTP
from the access point menu tree.