Configuring The Access Point As An Authenticator - Intermec MobileLAN access WA2XG System Manual

Chapter 6 — Configuring Security
140
• The authentication server and end devices with supplicants need
certificates. A CA certificate is the root certificate or public key. A server
certificate (sometimes referred to as the client certificate) is the private
key. For more details, see "About Certificates" on page 152.
• The authentication server must have both a CA certificate and a
server certificate installed on it.
• An end device with an EAP-TTLS supplicant or a child access point
using secure IAPP-TTLS needs only the CA certificate.
• Any device with an EAP-TLS supplicant (end device or child access
point) needs both the CA certificate and the server certificate.
• If the child access point is using SWAP and is an authenticator, it
does not need any certificates loaded on it. Only the authentication
server and supplicants need certificates.
If the access point has two radios, or if the access point contains one
802.11g radio with multiple service sets, you can implement 802.1x
security on one radio network or both radio networks, as long as the radio
supports 802.1x security.
For example, you have an access point with dual 802.11g radios and some
end devices that have a supplicant and some end devices that do not have a
supplicant. In the access point, you can configure one 802.11g radio to use
802.1x security and the other 802.11g radio to use an ACL.

Configuring the Access Point as an Authenticator

The access point, when acting as an authenticator, receives requests from
end devices that want to communicate with the network and forwards
these requests to the authentication server. It also distributes the WEP keys
to end devices that are communicating with it. Before you configure the
access point as an authenticator, the access point should be installed and
configured to communicate with the wireless end devices.
To configure the access point as an authenticator
1 In the Navigation Menu, click Security and then click the radio service
set that you are configuring. The appropriate radio screen appears.
2 In the Security Level field, select Dynamic WEP/802.1x.
MobileLAN access WA2XG System Manual