Eap Security & Server Certificates - Overview; Eap-Leap - AMX MVP-9000i Operation And Reference Manual

Protected Setup Pages
EAP Security & Server Certificates - Overview
The following EAP types all support a server certificate:



All three of these certificate-using security methods are documented in the following sections. EAP Authentication goes
a step beyond simply encrypting data transfers, but also requires that a set of credentials be validated before the client
(panel) is allowed to connect to the rest of the network (FIG. 81). Please note that no user intervention is necessary
during this process, as it proceeds automatically based on the configuration parameters entered into the panel.
Client - Panel
(supplicant)
FIG. 81 EAP security method in process
A server certificate file uses a certificate installed in a panel so that the RADIUS server can be validated before the panel
tries to connect to it. The field name associated with this file is Certificate Authority.
If a server certificate is used, it should first be downloaded into the panel and the Certificate Authority field should then
be set to the name of that certificate file. No file path should be used for this setting, as all certificates are stored in a
specific directory that the user cannot control or change. The most secure connection method uses a server certificate.
If no server certificate will be used, this field should be left blank. If the field contains a file name, then a valid certificate
file with the same file name must be previously installed on the panel. Otherwise the authentication process will fail.

EAP-LEAP

From the Security Modes options, press the Enterprise button to open the Wireless Security: Enterprise Mode page.
Scroll through the Security Type options to select EAP-LEAP (FIG. 82).
FIG. 82 Wireless Security: Enterprise Mode - EAP-LEAP
EAP (Extensible Authentication Protocol) is an Enterprise authentication protocol that can be used in both wired and
wireless network environments. EAP requires the use of an 802.1x Authentication Server, also known as a Radius server.
The configuration fields described below take variable length strings as inputs. An on-screen keyboard is opened when
these fields are selected.
LEAP (Lightweight Extensible Authentication Protocol) was developed to transmit authentication information securely
in a wireless network environment.
72
EAP-PEAP
EAP-TTLS
EAP-TLS
802.1x
(EAP over Wireless)
(Wireless Access Point)
LAN
Authentication Server
Authenticator
MVP-9000i 9" Modero® ViewPoint® Touch Panel with Intercom
(RADIUS Server)