Alcatel OmniAccess Wireless System 2.1 Product Manual page 170

The Alcatel OmniAccess Switch or Appliance completes the bootup process as described in
Step 4: Connecting and Using the CLI Console
Quick Installation
•
Make sure that client operators know that they may securely associate with the Alcatel
OmniAccess Wireless System.
Refer to the Transferring Files To and From an Alcatel OmniAccess Switch or Appliance
file upload and download instructions.
Externally-Generated Certificate
Should you desire to use your own WebAuth SSL certificates, complete the following:
•
Make sure you have a TFTP server available for the Alcatel OmniAccess Operating System
software download:
-
If you are downloading through the Service port, the TFTP server MUST be on the same
subnet as the Service port, because the Service port is not routable.
-
If you are downloading through the DS (Distribution System) network port, the TFTP
server can be on the same or a different subnet, because the DS port is routable.
Note:
Control System
same communication port.
CAUTION:
can be from 512 bits, which is relatively insecure, through thousands of bits, which is
very secure. When you are obtaining a new certificate from a Certificate Authority
(such as the Microsoft CA), MAKE SURE the RSA key embedded in the certificate is
AT LEAST 768 Bits.
•
Buy or create your own WebAuth SSL key and certificate. If not already done, encode the key
and certificate, virtual gateway IP Address, and a password, <private_key_password>, in
a .PEM formatted file. The PEM-encoded file is called a WebAuth Site Certificate file
(<webauthcert_name>.pem).
•
Move the <webadmincert_name>.pem file to the default directory on your TFTP server.
•
Refer to the Using the Alcatel OmniAccess Wireless System CLI
CLI.
•
In the CLI, use the transfer download start command, and answer 'n' to the prompt, to view
the current download settings:
transfer download start
>
Mode........................................... TFTP
Data Type...................................... Site Cert
TFTP Server IP................................. xxx.xxx.xxx.xxx
TFTP Path...................................... <directory path>
TFTP Filename..................................
Are you sure you want to start? (y/n)
Transfer Canceled
•
To change the download settings, use the following:
transfer download mode tftp
>
transfer download datatype webauthcert
>
transfer download serverip <TFTP server IP address>
>
11/5/04
90-100831-300 Rev 2Alcatel OmniAccess Wireless Access Point Quick Installation Guide 129
Guide.
Externally-Generated Certificate
The TFTP server cannot run on the same computer as the
Software, because the ACS Software and the TFTP server use the
Each certificate has a variable-length embedded RSA Key. The RSA key
in the Alcatel OmniAccess Switch and Appliance
n
Adding SSL to the 802.11 Interface
section for other
Alcatel OmniAccess
section to connect and use the