Table of Contents
Advertisement
Security Tab
In the Client Utility, access the Security tab by clicking
tab. Click the Security tab in the Profile Management window.
Edit the fields in the Security tab of Profile Management to configure the profile. To define the
security mode, select the radio button of the desired security mode. Make sure to also edit the
General
and
Advanced
WPA/WPA2 Enables the use of Wi-Fi Protected Access (WPA).
tabs.
Choosing WPA/WPA2 opens the WPA/WPA2 EAP drop-down menu.
The options include:
EAP-FAST
(
Extensible Authentication Protocol-Flexible
Authentication via Secure Tunneling )
EAP-FAST is to support customers who cannot enforce a strong
password policy and wish to deploy an 802.1X EAP type that does not
require digital certificates, supports a variety of user and password
database types, supports password expiration and change, and is
flexible, easy to deploy, and easy to manage. For example, a customer
using Cisco LEAP who cannot enforce a strong password policy and
does not want to use certificates can migrate to EAP-FAST for protection
from dictionary attacks. (See help menu on configuration utility for more
details)
EAP-TLS
(Extensible Authentication Protocol-Transport Layer
Security) is a Point-to-Point Protocol (PPP) extension supporting
additional authentication methods within PPP. Transport Layer
Security (TLS) provides for mutual authentication, integrity-protected
cipher suite negotiation, and key exchange between two endpoints
EAP-TTLS
(Extensible Authentication Protocol-Tunneled
Transport Layer Security) An
authentication using a certificate for server authentication, and via a
secure
TLS
tunnel for the client
PEAP (EAP-GTC)
Protocol) authenticates
digital certificates
the client and the
subsequent user authentication exchange.
PEAP (EAP-MSCHAP V2)
Authentication Protocol)
security, the server must have WPA-PEAP certificates, and
the server properties must already be set. Check with the IT
New
or
Modify
EAP
variant that provides mutual
Protected Extensible Authentication
(
wireless LAN clients
by creating an
encrypted SSL/TLS
authentication
server. The tunnel then protects the
Protected Extensible
(
To use PEAP (EAP-MSCHAP V2)
on the Profile Management
using only server-side
tunnel between
.
17
Advertisement
Table of Contents
