5-44
Cisco Wireless LAN Controller Configuration Guide
OL-17037-01
Chapter 5 Configuring Security Solutions
Configuring Local EAP
Figure 5-26 EAP-FAST Method Parameters Page
b.
In the Server Key and Confirm Server Key fields, enter the key (in hexadecimal characters) used to
encrypt and decrypt PACs.
c. In the Time to Live for the PAC field, enter the number of days for the PAC to remain viable. The
valid range is 1 to 1000 days, and the default setting is 10 days.
d. In the Authority ID field, enter the authority identifier of the local EAP-FAST server in hexadecimal
characters. You can enter up to 32 hexadecimal characters, but you must enter an even number of
characters.
e. In the Authority ID Information field, enter the authority identifier of the local EAP-FAST server in
text format.
f. If you want to enable anonymous provisioning, check the Anonymous Provision check box. This
feature allows PACs to be sent automatically to clients that do not have one during PAC
provisioning. If you disable this feature, PACS must be manually provisioned. The default setting is
enabled.
Note If the local and/or client certificates are required and you want to force all EAP-FAST clients
to use certificates, uncheck the Anonymous Provision check box.
g. Click Apply to commit your changes.
Step 8 Follow these steps to enable local EAP on a WLAN:
a. Click WLANs to open the WLANs page.
b. Click the ID number of the desired WLAN.
c. When the WLANs > Edit page appears, click the Security > AAA Servers tabs to open the WLANs
> Edit (Security > AAA Servers) page (see Figure 5-27).
To Next Page
Loading...
Need help?
General
