Configuring Crypto Type Wireless Service - HP MSR SERIES Configuration Manual

Item
Authentication Method
Handshake
Multicast Trigger
MAC Authentication
Domain

Configuring crypto type wireless service

Configuring basic settings for crypto type wireless service
1. Select Interface Setup > Wireless > Access Service from the navigation tree.
2. Click the
Description
•
EAP—Use EAP. With EAP authentication, the authenticator encapsulates 802.1X
user information in the EAP attributes of RADIUS packets and sends the packets
to the RADIUS server for authentication. It does not need to repackage the EAP
packets into standard RADIUS packets for authentication.
•
CHAP—Use CHAP. By default, CHAP is used. CHAP transmits only usernames
but not passwords over the network. Therefore this method is safer.
•
PAP—Use PAP. PAP transmits passwords in plain text.
•
Enable—Enable the online user handshake function so that the device can
periodically send handshake messages to a user to check whether the user is
online. By default, the function is enabled.
•
Disable—Disable the online user handshake function.
•
Enable—Enable the multicast trigger function of 802.1X to send multicast trigger
messages to the clients periodically for initiating authentication. By default, the
multicast trigger function is enabled.
•
Disable—Disable the 802.1X multicast trigger function.
IMPORTANT:
For a WLAN, the clients can actively initiate authentication, or the AP can discover
users and trigger authentication. Therefore, the ports do not need to send 802.1X
multicast trigger messages periodically for initiating authentication. You are
recommended to disable the multicast trigger function in a WLAN because the
multicast trigger messages consume bandwidth.
Select the MAC Authentication option.
Select an existing domain from the list.
The default domain is system. To create a domain, select Authentication > AAA from
the navigation tree, click the Domain Setup tab, and type a new domain name in the
Domain Name field.
•
The selected domain name applies to only the current wireless service, and all
clients accessing the wireless service use this domain for authentication,
authorization, and accounting.
•
Do not delete a domain name in use. Otherwise, the clients that access the
wireless service are logged out.
icon for the target crypto type wireless service.
71