Configuring The Access Point As An Authenticator - Intermec WA21 System Manual

MobileLAN access WA2X System Manual
• The authentication server and end devices with supplicants need
certificates. A CA certificate is the root certificate or public key. A server
certificate (sometimes referred to as the client certificate) is the private
key. For more details, see "About Certificates" on page 164.
• The authentication server must have both a CA certificate and a
server certificate installed on it.
• An end device with an EAP-TTLS supplicant or a child access point
using secure IAPP-TTLS needs only the CA certificate.
• Any device with an EAP-TLS supplicant (end device or child access
point) needs both the CA certificate and the server certificate.
• If the child access point is using SWAP and is an authenticator, it
does not need any certificates loaded on it. Only the authentication
server and supplicants need certificates.
If the access point has two radios, or if the access point contains one
802.11g or 802.11a radio with multiple service sets, you can implement
802.1x security on one radio network or both radio networks, as long as
the radio supports 802.1x security.
For example, you have an access point with dual 802.11b radios and some
end devices that have a supplicant and some end devices that do not have a
supplicant. In the access point, you can configure one 802.11b radio to use
802.1x security and the other 802.11b radio to use an ACL.

Configuring the Access Point as an Authenticator

The access point, when acting as an authenticator, receives requests from
end devices that want to communicate with the network and forwards
these requests to the authentication server. It also distributes the WEP keys
to end devices that are communicating with it. Before you configure the
access point as an authenticator, the access point should be installed and
configured to communicate with the wireless end devices.
To configure the access point as an authenticator
1 From the main menu, click Security and then click the radio service set
that you are configuring. The appropriate radio screen appears.
2 In the Security Level field, select Dynamic WEP/802.1x.
Chapter 6 — Configuring Security
153