Cisco CB21AG Installation And Configuration Manual page 100

Setting Security Parameters
Note
Note
From the Select a PAC Authority To Use with This Profile drop-down box, highlight the PAC authority
Step 9
that is associated with the network defined by the profile's SSID. The list contains the names of all the
authentication servers from which you have previously provisioned a PAC.
If the PAC authority drop-down box is empty or does not contain the name of a desired PAC authority,
go to Step 10
Note
Note
If necessary, follow these steps to import a PAC file:
Step 10
Click Select More. The Select EAP-FAST PAC window appears (see
a.
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide
5-34
LDAP user databases support only manual PAC provisioning while Cisco Secure ACS internal,
Cisco Secure ODBC, and Windows NT/2000/2003 domain user databases support both
automatic and manual PAC provisioning.
Provisioning occurs only upon initial negotiation of the PAC or upon PAC expiration. After the
PAC is provisioned, it serves as the per-user key by which authentication transactions are
secured.
to import a PAC file.
This step is required for manual PAC provisioning but optional for automatic PAC provisioning.
If automatic provisioning is enabled, automatic provisioning will be initiated during the
authentication process of the EAP-FAST profile if no PAC authority was selected, the PAC could
not be found, or the specified PAC does not match the server ID.
If you have multiple PACs for a given PAC authority, you can select a specific PAC from those
that have already been imported or auto-provisioned by following these steps:
a. Click Select More.
b. Choose the PAC store from which you want to select a PAC file.
c. Select the desired PAC from the Select the PAC list on the Select EAP-FAST PAC window.
d. Click OK.
e. Go to Step 11.
Chapter 5 Configuring the Client Adapter
Figure 5-9).
OL-4211-03