Cisco 2100 Series Configuration Manual page 232

Configuring Local EAP
Figure 5-26
b. In the Server Key and Confirm Server Key fields, enter the key (in hexadecimal characters) used to
encrypt and decrypt PACs.
c. In the Time to Live for the PAC field, enter the number of days for the PAC to remain viable. The
valid range is 1 to 1000 days, and the default setting is 10 days.
In the Authority ID field, enter the authority identifier of the local EAP-FAST server in hexadecimal
d.
characters. You can enter up to 32 hexadecimal characters, but you must enter an even number of
characters.
In the Authority ID Information field, enter the authority identifier of the local EAP-FAST server in
e.
text format.
If you want to enable anonymous provisioning, check the Anonymous Provision check box. This
f.
feature allows PACs to be sent automatically to clients that do not have one during PAC
provisioning. If you disable this feature, PACS must be manually provisioned. The default setting is
enabled.
Note
Click Apply to commit your changes.
g.
Step 8 Follow these steps to enable local EAP on a WLAN:
a. Click WLANs to open the WLANs page.
b. Click the ID number of the desired WLAN.
When the WLANs > Edit page appears, click the Security > AAA Servers tabs to open the WLANs
c.
> Edit (Security > AAA Servers) page (see
Cisco Wireless LAN Controller Configuration Guide
5-44
EAP-FAST Method Parameters Page
If the local and/or client certificates are required and you want to force all EAP-FAST clients
to use certificates, uncheck the Anonymous Provision check box.
Chapter 5
Figure 5-27).
Configuring Security Solutions
OL-17037-01