Table of Contents
Advertisement
Backup KDC
Remote KDC
Port
6. Click the
Apply
Kerberos Configuration field of the New Security Policy screen.
7. Click the
Cancel
and return to the
to the last saved configuration.
6.5 Configuring 802.1x EAP Authentication
The IEEE 802.1x standard ties the 802.1x EAP authentication protocol to both wired and wireless LAN
applications.
The EAP process begins when an unauthenticated supplicant (client device) tries to connect with an
authenticator (in this case, the authentication server). The access point passes EAP packets from the
client to an authentication server on the wired side of the access point. All other packet types are
blocked until the authentication server (typically, a Radius server) verifies the MU's identity.
To configure 802.1x EAP authentication on the access point:
1. Select
Network Configuration
If security policies supporting 802.1x EAP exist, they appear within the
Configuration
by clicking the
continue to step 2.
2. Click the
Create
The
New Security Policy
selected.
Optionally, specify a numerical (non-DNS) IP address and port for a
backup KDC. Backup KDCs are referred to as slave servers. The
slave server periodically synchronizes its database with the
primary (or master) KDC.
Optionally, specify a numerical (non-DNS) IP address and port for a
remote KDC. Kerberos implementations can use an administration
server allowing remote manipulation of the Kerberos database.
This administration server usually runs on the KDC.
Specify the ports on which the Primary, Backup and Remote KDCs
reside. The default port number for Kerberos Key Distribution
Centers is Port 88.
button to return to the
button to undo any changes made within the Kerberos Configuration field
WLAN
screen. This reverts all settings for the Kerberos Configuration field
->
Wireless
screen. These existing policies can be used as is, or their properties edited
Edit
button. To configure a new security policy supporting 802.1x EAP,
button to configure a new policy supporting 802.1x EAP.
screen displays with no authentication or encryption options
WLAN
screen to save any changes made within the
->
Security
from the access point menu tree.
Configuring Access Point Security
Security
6-11
Advertisement
Table of Contents
