Alcatel-Lucent AOS-W 6.5.3.x - Enabling 802.1 X Supplicant Support on an AP

270| 802.1X Authentication AOS-W 6.5.3.x| User Guide
Machine Auth
Status
User
Auth
Status
Description VLAN Assigned
Passed Passed Both machine and user are successfully
authenticated.
Derived VLAN.
Otherwise, VLAN
configured in the virtual
AP profile.
The administrator can now associate a VLAN ID to a client data based on the authentication credentials in a bridge
mode.
Enabling 802.1X Supplicant Support on an AP
AOS-W provides 802.1X supplicant support on the Access Point (AP). The AP can be used as a 802.1X
supplicant where access to the wired Ethernet network is restricted to those devices that can authenticate
using 802.1X. You can provision an AP to act as an 802.1X supplicant and authenticate to the infrastructure
using the PEAP protocol.
Both Campus APs (CAPs) and Remote APs (RAPs) can be provisioned to use 802.1X authentication.
Prerequisites
n An AP has to be configured with the credentials for 802.1X authentication. These credentials are stored
securely in the AP flash.
n The AP must complete the 802.1X authentication before it sends or receives IP traffic such as DHCP.
If the AP cannot complete 802.1X authentication (explicit failure or reply timeout) within 1 minute, the AP will proceed
to initiate the IP traffic and attempt to contact the switch. The infrastructure can be configured to allow this. If the AP
contacts the switch it will be marked as unprovisioned so that the administrator can take corrective action.
Provisioning an AP as an 802.1X Supplicant
This section describes how an AP can be provisioned as an 802.1X supplicant using CLI or the WebUI.
In the WebUI
1. Navigate to the Configuration > Wireless > AP Installation > Provisioning window. The list of
discovered APs are displayed on this page.
2. Select the AP you want to provision.
3. Click Provision. The provisioning window opens.
4. Select the 802.1X Parameters using PEAP checkbox and enter the following credentials:
a. User Name: Enter the username of the AP in the User Name field.
b. Password: Enter the password of the AP in the Password field.
5. Enter the password again in the Confirm Password field and reconfirm it.
6. Click Apply and Reboot (at the bottom of the page).
In the CLI
(host) (config)# provision-ap
(host) (AP provisioning) # apdot1x-username <username>
(host) (AP provisioning) # apdot1x-passwd <password>