Cisco Aironet CB21AG Installation And Configuration Manual page 118

Setting Security Parameters
Note
If you chose Token in
Step 7
• Check the Always Resume the Secure Session check box at the top of the window if you want the
PEAP (EAP-GTC) supplicant to always attempt to resume the previous session without prompting
you to re-enter your credentials whenever the client adapter becomes disassociated. The session
resumes after the client temporarily loses connection to the access point (such as by roaming in and
out of coverage) or wakes up from suspend or hibernate mode. This is the default setting.
Uncheck the Always Resume the Secure Session check box if you want to be prompted to re-enter
•
your PEAP (EAP-GTC) username and password whenever your client adapter temporarily loses
association by roaming out of coverage or wakes up from suspend or hibernate mode.
Note
Note
Perform one of the following to specify the username that will be used for inner PEAP tunnel
Step 8
authentication:
• If you want your Windows username to also serve as your PEAP username, check the Use Windows
User Name check box. This option gives you only one username to remember.
Note
• If you want to enter a separate PEAP username (which is registered with the RADIUS server) in
addition to your regular Windows username in order to start the PEAP authentication process, enter
your PEAP username in the User Name field.
Note
If you entered a PEAP username in the previous step and chose the Static Password option in
Step 9
enter your PEAP authentication password (which is registered with the RADIUS server) in both the
Password and Confirm Password fields.
If the Use Windows User Name and Password check box is unchecked and you want to implement added
Step 10
security by further refining the network certificate that will be accepted and controlling the string used to set
up the outer PEAP tunnel, follow the steps in
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide
5-50
If you choose Token, you must use a hardware token device or the Secure Computing SofToken
program (release 2.1 or later) to obtain the one-time password and enter the password when
prompted during the authentication process. Secure Computing PremierAccess release 3.1.1 or
later is the only supported token server.
Step 6, perform one of the following:
Checking this check box gives you the convenience of not having to re-enter your username and
password when your client adapter experiences momentary losses of association. However, if
you leave your device unattended during the period of time when the PEAP (EAP-GTC) session
can be resumed without re-entering user credentials, be aware that someone can resume your
PEAP (EAP-GTC) session and access the network.
The Always Resume the Secure Session check box is disabled if you chose Static Password in
Step 6.
If you chose the Static Password option in
Name and Password.
Your Windows username is filled in automatically. Simply delete your Windows username
and enter your separate PEAP username.
Chapter 5
Step 6, the check box reads Use Windows User
"Configuring Advanced Settings" on page
Configuring the Client Adapter
Step 6,
5-58.
OL-4211-05