Psion Teklogix 9160 G2 Manual do Utilizador descarregar pdf (Página 365)

Appendix B: Security Settings on Wireless Clients/RADIUS Server

Configuring IEEE 802.1x Security On A Client

Psion Teklogix 9160 G2 Wireless Gateway User Manual B-15

B.6 Configuring IEEE 802.1x Security On A Client

IEEE 802.1x is the standard defining port-based authentication and infrastructure for doing

key management. Extensible Authentication Protocol (EAP) messages are sent over an

IEEE 802.11 wireless network using a protocol called EAP Encapsulation Over LANs

(EAPOL). IEEE 802.1x provides dynamically-generated keys that are periodically re-

freshed. An RC4 stream cipher is used to encrypt the frame body and cyclic redundancy

checking (CRC) of each 802.11 frame.

B.6.1 IEEE 802.1x Client Using EAP/PEAP

The Built-In Authentication Server on the 9160 G2 Wireless Gateway uses Protected Exten-

sible Authentication Protocol (EAP) referred to here as “EAP/PEAP”.

• If you are using the Built-in Authentication server with “IEEE 802.1x” security mode

on the 9160 G2 Wireless Gateway, then you will need to set up wireless clients to use

PEAP.

• Additionally, you may have an external RADIUS server that uses EAP/PEAP. If so, you

will need to:

1. Add the 9160 G2 Wireless Gateway to the list of RADIUS server clients.

AND

2. Configure your IEEE 802.1x wireless clients to use PEAP.

Note: The following example assumes that you are using the Built-in Authentication server

that comes with the 9160 G2 Wireless Gateway. If you are setting up EAP/PEAP on a

client of an AP that is using an external RADIUS server, the client configuration pro-

cess will differ somewhat from this example, especially with regard to certificate

validation.

If you configured the 9160 G2 Wireless Gateway to use IEEE 802.1x security mode. . .

1 2 ... 360 361 362 363 364 365 366 367 368 369 370 ... 435 436

Sem comentários

Psion Teklogix 9160 G2 Manual do Utilizador Página 365