Cisco Aironet 1200 Series Software Configuration Manual page 148

Summary of Settings for Authentication Types
Table 4-5 Settings for Authentication Types (continued)
Authentication Types
EAP-TLS, EAP-MD5,
and static WEP under
802.11 Open
MAC-based
MAC-based and LEAP
Cisco Aironet 1200 Series Access Point Software Configuration Guide
4-36
Required Settings
The access point does not support this combination of authentication types.
When you select Require EAP on the Authenticator Configuration page to
authenticate clients using EAP-TLS and EAP-MD5, non-EAP client
devices are blocked from using the access point.
On the Address Filters page (shown in
• Select yes for the "Look up MAC address on authentication server if
not in existing filter list" setting.
On the Authenticator Configuration page (shown in
• Select an 802.1x protocol draft that matches the protocol draft used by
client devices that associate with the access point.
Enter the name or IP address, type, port, shared secret, and timeout
•
value for your RADIUS server.
Select the MAC Address Authentication check box under the server.
•
You can use the same server for both EAP authentication and
Note
MAC-based authentication.
On the AP Radio Advanced page (shown in
Select Disallowed from the pull-down menu for Default Unicast
•
Address Filter for each authentication type requiring MAC-based
authentication.
Enter the settings for LEAP.
•
Enter the settings for MAC-based authentication.
•
Chapter 4
Figure 4-10):
Figure 4-13):
Figure 4-12):
Security Setup
OL-2159-01