Hand Held Products 9500 - Manual (Page 114)

7 - 12 Dolphin® 9500 Series User’s Guide
802.11b Wireless Security Supplement
AEGIS Client
®
offers the most comprehensive IEEE 802.1X supplicant for securing wired and wireless networks. The Client is a
standards-based implementation of IEEE 802.1X and can be configured to work with almost any network equipment - wired or
wireless - that supports the 802.1X authentication standard. The Client is interoperable with 802.1X-capable wireless access
points and authentication servers including Microsoft's IAS and Cisco's ACS.
The Client solves the problem of key distribution in wireless LANs by using public key authentication and encryption between
Wireless Access Points (WAP) and roaming stations to exchange dynamic Wired Equivalent Privacy (WEP) keys. In addition,
network managers can control 802.1X user profiles from a centralized RADIUS server or, in the case of TTLS, from a RADIUS
Diameter or other AAA servers. The Client supports both wireless (802.11a/b/g) and Ethernet interfaces.
System Requirements
You need the following equipment and software to run AEGIS Client software:
• A computer with a network interface card and/or wireless network interface card installed that support the NDIS 5.1 standard
for 802.11 WLAN object identifiers (OID). The AEGIS Client software installation routine expects to find your computer’s
wireless card properly installed, even if it isn’t connected to a network. If the card isn’t in the computer, the installation program
can’t make the proper program and protocol associations. Be sure your wireless card is installed!
• The appropriate version of the AEGIS Client software package for your operating system. Contact Hand Held Products for the
correct version for your company.
Platforms Supported
There are several versions of AEGIS Client software for computers using a wide variety of operating systems. Specific
capabilities of a particular version of AEGIS Client may vary according to the operating system. This is due to varying levels of
support for different EAP types by manufacturers. Drivers for some types of network hardware and operating system
combinations don’t support as many EAP types as others combinations.
The following platforms are supported:
• Windows Mobile Software 2003 [OS version "Pocket PC Version 4.20.1081 (Build 13100)"]
• Pocket PC 2002 [OS version "Pocket PC Version 3.0.11171 (Build 11178)"]
• CE.NET 4.1 [OS version "CE .NET Version 4.10 (Build 908)"]
• CE.NET 4.2 [OS version "CE .NET Version 4.20 (Build 1088)"]
Note: Verify the operating system version by tapping Start > Settings > System tab > About.
802.1X Supplicant Protocol Support
Support for the Extensible Authentication Protocol (EAP) - RFC 2284
Supported authentication methods are as follows:
• CHAP/MD5 - RFC 1994
• EAP TLS Authentication Protocol - RFC 2716
• EAP Tunneled TLS (TTLS) - Internet Draft February 2002
• Cisco LEAP and PEAP
• Microsoft PEAP
Tested against the following servers:
• Funk Odyssey 3.2 using TLS, LEAP and TTLS
• AEGIS Client 1.1.4 using MD5, TLS, TTLS, LEAP and PEAP
• Cisco ACS 3.2 using MD5, TLS, LEAP and PEAP
If you are using one of these authentication methodologies, you need to configure your 802.11b connection here, NOT
through 802.11b Settings. However, if you want to set the AP Search Threshold above the default setting of Low
Density, you do need to change that setting in 802.11b Settings; for details, see
Network Profile Tab on page 7-7.
!