Cisco M10-RM Software Manual page 233

Chapter 11 Configuring Authentication Types
Command
Step 3
authentication open
[mac-address list-name [alternate]]
[[optional] eap list-name]
Step 4 authentication shared
[mac-address list-name]
[eap list-name]
OL-14209-01
Purpose
(Optional) Set the authentication type to open for this SSID.
Open authentication allows any device to authenticate and then
attempt to communicate with the access point.
(Optional) Set the SSID's authentication type to open with
•
MAC address authentication. The access point forces all
client devices to perform MAC-address authentication
before they are allowed to join the network. For list-name,
specify the authentication method list. Click this link for
more information on method lists:
http://www.cisco.com/univercd/cc/td/doc/product/softwar
e/ios122/122cgcr/fsecur_c/fsaaa/scfathen.htm#xtocid2
Use the alternate keyword to allow client devices to join
the network using either MAC or EAP authentication;
clients that successfully complete either authentication are
allowed to join the network.
• (Optional) Set the SSID's authentication type to open with
EAP authentication. The access point forces all client
devices to perform EAP authentication before they are
allowed to join the network. For list-name, specify the
authentication method list.
Use the optional keyword to allow client devices using
either open or EAP authentication to associate and become
authenticated. This setting is used mainly by service
providers that require special client accessibility.
An access point configured for EAP authentication
Note
forces all client devices that associate to perform EAP
authentication. Client devices that do not use EAP
cannot use the access point.
(Optional) Set the authentication type for the SSID to shared
key.
Because of shared key's security flaws, Cisco
Note
recommends that you avoid using it.
You can assign shared key authentication to only one
Note
SSID.
(Optional) Set the SSID's authentication type to shared
•
key with MAC address authentication. For list-name,
specify the authentication method list.
(Optional) Set the SSID's authentication type to shared
•
key with EAP authentication. For list-name, specify the
authentication method list.
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
Configuring Authentication Types
11-11