Extreme Networks Summit WM User Manual page 120

Configuring the Altitude AP
Locality name (city) - The name of the city
Organization name - The name of the organization
Organizational Unit name - The name of the unit within the organization
Common name - Click the value you want to assign as the common name of the Altitude AP:
Name - The name of the Altitude AP, which is assigned on the WAP Properties tab. The
Altitude AP name can be edited.
Serial - The serial number of the Altitude AP. The Altitude AP serial number cannot be
edited.
MAC - The MAC address of the Altitude AP. The Altitude AP MAC address cannot be edited.
Other - Click to specify a custom value. A text box is displayed. In the text box, type the value
you want to assign as the common name of the Altitude AP.
Email address - The email address of the organization
6 Click Generate certificate request. A certificate request file is generated (.csr file extension). The
name of the file is the Altitude AP serial number. The File Download dialog is displayed.
7 Click Save. The Save as window is displayed.
8 Navigate to the location on your computer that you want to save the generated certificate request
file, and then click Save.
9 In the third-party Certificate Authentication application, use the content of the generated certificate
request file to generate the certificate file (.cer file extension).
10 On the 802.1X tab, click Browse. The Choose file window is displayed.
11 Navigate to the location of the certificate file, and click Open. The name of the certificate file is
displayed in the X509 DER / PKCS#12 file box.
12 To save your changes, click Save.
The 802.1X EAP-TLS (certificate and private key) authentication in proxy mode is assigned to the
Altitude AP. The Altitude AP can now be deployed to a 802.1X enabled switch port.
Pass through mode
In pass through mode, the certificate and private key is created by the third-party Certificate
Authentication application. To successfully configure 802.1X authentication of an Altitude AP, the
Altitude AP must first be configured for 802.1X authentication before the Altitude AP is deployed on a
802.1X enabled switch port.
Before you configure 802.1X using EAP-TLS authentication in pass through mode, you must first create
a certificate using the third-party Certificate Authentication application and save the certificate file in
PKCS #12 file format (.pfx file extension) on your system.
To configure 802.1X EAP-TLS authentication in pass through mode:
1 From the main menu, click Altitude AP Configuration. The Altitude APs page is displayed.
2 In the Altitude AP list, click the Altitude AP for which you want to configure 802.1X EAP-TLS
authentication.
3 Click the 802.1X tab.
4 Click Browse. The Choose file window is displayed.
5 Navigate to the location of the certificate file (.pfx) and click Open. The name of the certificate file is
displayed in the X509 DER / PKCS#12 file box.
120
Summit WM User Guide, Software Version 5.3