Motorola CB3000 User Manual page 41

Configuring WPA1 Enterprise - EAP-PEAP
Extensible Authentication Protocol (EAP) is an authentication framework that provides common functions
and a method to negotiate a desired authentication medium. EAP-Protected EAP (PEAP) is similar to EAP-
TTLS and uses a server side certificate to create a secured tunnel between the client and the server. It then
uses this tunnel to authenticate the client.
Validate Server
Certificate
WPA1 Algorithm
WPA1 User ID
WPA1 Password
Clean User ID and
Password
Figure 3.9 WPA1 Enterprise Type - EAP-PEAP
Check to force the CB3000 to validate the Server Certificate.
WPA1 uses TKIP algorithm:
• TKIP – Defines a 'wrapper' that goes around an existing WEP encryption
algorithm. TKIP comprises the same encryption engine and RC4 algorithm
defined for WEP. However, the key used for encryption in TKIP is 128 bits
long.
TKIP changes the key used for each packet. The key is created by mixing
together a combination of things, including a base key (called a Pairwise
Transient Key), the MAC address of the transmitting station, and the serial
number for the packet.
The User ID for authentication.
The WPA1 user password.
Check to prevent the CB3000 from saving the WPA user name and its
password in its cache.
3-17
Network Configuration