Cisco 2100 Series Configuration Manual page 229

Chapter 5 Configuring Security Solutions
Follow these steps to specify values for the local EAP timers:
Step 5
Click Security > Local EAP > General to open the General page (see
a.
Figure 5-23
In the Local Auth Active Timeout field, enter the amount of time (in seconds) in which the controller
b.
attempts to authenticate wireless clients using local EAP after any pair of configured RADIUS
servers fails. The valid range is 1 to 3600 seconds, and the default setting is 100 seconds.
c. In the Identity Request Timeout field, enter the amount of time (in seconds) in which the controller
attempts to send an EAP identity request to wireless clients using local EAP. The valid range is 1 to
120 seconds, and the default setting is 30 seconds.
In the Identity Request Max Retries field, enter the maximum number of times that the controller
d.
attempts to retransmit the EAP identity request to wireless clients using local EAP. The valid range
is 1 to 20 retries, and the default setting is 20 retries.
In the Dynamic WEP Key Index field, enter the key index used for dynamic wired equivalent privacy
e.
(WEP). The default setting is 0.
In the Request Timeout field, enter the amount of time (in seconds) in which the controller attempts
f.
to send an EAP request to wireless clients using local EAP. The valid range is 1 to 120 seconds, and
the default setting is 30 seconds.
g. In the Request Max Retries field, enter the maximum number of times that the controller attempts
to retransmit the EAP request to wireless clients using local EAP. The valid range is 1 to 120 retries,
and the default setting is 20 retries.
From the Max-Login Ignore Identity Response drop-down box, choose Enable to limit the number
h.
of devices that can be connected to the controller with the same username. You can log in up to eight
times from different devices (PDA, laptop, IP phone, and so on) on the same controller. The default
value is enabled.
In the EAPOL-Key Timeout field, enter the amount of time (in seconds) in which the controller
i.
attempts to send an EAP key over the LAN to wireless clients using local EAP. The valid range is 1
to 5 seconds, and the default setting is 1 second.
In the EAPOL-Key Max Retries field, enter the maximum number of times that the controller
j.
attempts to send an EAP key over the LAN to wireless clients using local EAP. The valid range is 0
to 4 retries, and the default setting is 2 retries.
Click Apply to commit your changes.
k.
Follow these steps to create a local EAP profile, which specifies the EAP authentication types that are
Step 6
supported on the wireless clients:
Click Security > Local EAP > Profiles to open the Local EAP Profiles page (see
a.
OL-17037-01
General Page
Figure
Cisco Wireless LAN Controller Configuration Guide
Configuring Local EAP
5-23).
Figure 5-24).
5-41