Rockwell Automation 1783-WAPxxx Stratix 5100 Wireless Access Point User Manual - Manual (Page 351)

Rockwell Automation Publication 1783-UM006A-EN-P - May 2014 351
Chapter
12
Configuring Authentication Types
This chapter describes how to configure authentication types on the access point.
Understanding
Authentication Types The authentication types are tied to the SSIDs that you configure for the access
point. If you want to serve different types of client devices with the same access
point, you can configure multiple SSIDs.
See Configuring Multiple SSIDs on page 279 for complete instructions on
configuring multiple SSIDs.
Before a wireless client device can communicate on your network through the
access point, it must authenticate to the access point by using open or shared-key
authentication. For maximum security, client devices must also authenticate to
your network by using MAC-address or EAP authentication, authentication
types that rely on an authentication server on your network.
The access point uses several authentication mechanisms or types and can use
more than one at the same time.
Topic Page
Understanding Authentication Types 351
Using WPA Key Management 357
Configuring Authentication Types 359
Configuring Additional WPA Settings 364
Configuring Authentication Hold-off, Timeout, and Interval 368
Creating and Applying EAP Method Profiles for the 802.1X Supplicant 370
Matching Access Point and Client Device Authentication Types 372
IMPORTANT By default, the access point sends reauthentication requests to the
authentication server with the service-type attribute set to authenticate-only.
However, some Microsoft IAS servers don’t support the authenticate-only
service-type attribute. Depending on the user requirements, set the service-
type attribute to: dot11 aaa authentication attributes service-type login-user
or dot11 aaa authentication attributes service-type framed-user. By default
the service type login is sent in the access request.