Table of Contents

Advertisement

Enterprise-level User Authentication via 802.1x and EAP
To strengthen user authentication, WPA uses 802.1x and the Extensible
Authentication Protocol (EAP). Used together, these protocols provide
strong user authentication via a central RADIUS authentication server
that authenticates each user on the network before they join it. WPA also
employs "mutual authentication" to prevent a wireless client from acci-
dentally joining a rogue network.
Example
HP420(if-wireless g)#wpa-client required
HP420(if-wireless g)#
Related Commands
wpa-mode (page 6-75)

wpa-mode

This command specifies whether Wi-Fi Protected Access (WPA) is to use
802.1x authentication and dynamic keying or a pre-shared key.
Syntax
wpa-mode <dynamic | pre-shared-key>
dynamic - WPA with 802.1x authentication and dynamic keys.
pre-shared-key - WPA with a pre-shared key.
Default Setting
dynamic
Command Mode
Interface Configuration (Wireless)
Command Usage
When the WPA mode is set to dynamic, clients are authenticated using
802.1x via a RADIUS server. Each client has to be WPA-enabled or
support 802.1x client software. A RADIUS server must also be config-
ured and be available in the wired network.
In the dynamic mode, keys are generated for each wireless client
associating with the access point. These keys are regenerated period-
ically, and also each time the wireless client is re-authenticated.
Command Line Reference
Interface Commands
6-75

Advertisement

Table of Contents
loading

Table of Contents