Cisco Aironet Installation And Configuration Manual page 91

Chapter 5 Configuring the Client Adapter
Note
• Host Based EAP—Selecting this option enables you to use any 802.1X authentication type for
which your operating system has support. For example, Windows 2000 (with Service Pack 3 or
greater and the Windows 2000 Wireless 802.1X hot fix) and Windows XP provide native support for
EAP-TLS and EAP-MD5 authentication and general support for PEAP and EAP-SIM
authentication.
Note
Note
Note
–
–
OL-1394-04
If LEAP was not selected during installation, the LEAP option is unavailable in ACU. If you
want to be able to enable and disable LEAP, you must run the installation program again and
select Modify and LEAP.
To use EAP-TLS, EAP-MD5, PEAP, or EAP-SIM with Windows 2000, you must install
Windows Service Pack 3, the Windows 2000 Wireless 802.1X hot fix, and ACU; configure
your client adapter using ACU; and enable Network-EAP on the access point.
To use PEAP or EAP-SIM authentication, you must also install either the PEAP or EAP-SIM
supplicant during ACU installation.
PC-Cardbus cards do not support PEAP and EAP-SIM authentication.
EAP-TLS—EAP-TLS is enabled or disabled through the operating system and uses a dynamic
session-based WEP key, which is derived from the client adapter and RADIUS server, to encrypt
data. Once enabled, a few configuration parameters must be set within the operating system.
RADIUS servers that support EAP-TLS include Cisco Secure ACS version 3.0 or greater and
Cisco Access Registrar version 1.8 or greater.
EAP-TLS requires the use of a certificate. Refer to Microsoft's documentation for
Note
information on downloading and installing the certificate.
EAP-MD5—EAP-MD5 is enabled or disabled through the operating system and uses static
WEP to encrypt data. EAP-MD5 requires you to enter a separate EAP username and password
(in addition to your standard Windows network login) in order to start the EAP authentication
process and gain access to the network.
RADIUS servers that support EAP-MD5 include Cisco Secure ACS version 3.0 or greater and
Cisco Access Registrar version 1.8 or greater.
Note If you want to authenticate without encrypting the data that is transmitted over your
network, you can use EAP-MD5 without static WEP.
Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide for Windows
Setting Network Security Parameters
5-23