Configuring 802.1x for WAP361
To configure the 802.1x settings for Cisco WAP361, do the following:
Step 1 Click Security > 802.1x.
Step 2 In the 802.1x area, check Enable to enable the port configuration.
Step 3 Select one of the following to configure the port:
• Supplicant—Enable the 802.1x supplicant functionality.
• Authenticator—Enable the 802.1x authenticator functionality.
Step 4 To configure using 802.1x Supplicant functionality, do the following:
a) Click More and use the following parameters as required:
• EAP Method — Choose the algorithm to be used for encrypting authentication user names and passwords. The
options are:
• MD5 — A hash function defined in RFC 3748 that provides basic security.
• PEAP — Protected Extensible Authentication Protocol, which provides a higher level of security than
MD5 by encapsulating it within a TLS tunnel.
• TLS — Transport Layer Security, as defined in RFC 5216, an open standard that provides a high level of
security.
• Username — Enter the username.
• Password — Enter the password. The password character length can be a range from 1-64.
Step 5 In the Certificate File Upload area, you can upload a certificate file to the WAP device:
a) Choose either HTTP or TFTP as the transfer method.
b) If you selected HTTP, click Browse to select the file. See Connect Session Settings/HTTP/HTTPS Service for more
information on configuring the HTTP server settings.
c) If you selected TFTP, enter the Filename and the TFTP Server IPv4 Address.
d) Click Upload. A confirmation window appears, followed by a progress bar to indicate the status of the upload.
e) Click OK to save and close the dialogue.
Step 6 To configure using the 802.1x Authenticator functionality, do the following:
a) Click More and use the following parameters as required:
• Use Global RADIUS Server Settings—By default, each Ethernet port uses the global RADIUS settings that
you define for the WAP device (see RADIUS Server). However, you can configure each port to use a different
set of RADIUS servers.
• Server IP Address Type—The IP version that the RADIUS server uses. You can toggle between the address
types to configure IPv4 and IPv6 global RADIUS address settings, but the WAP device contacts only the RADIUS
server or servers for the address type you select in this field.
• Server IP Address-1—The address for the primary RADIUS server for this Ethernet port.
When the first PC plugs in and tries to authenticate with the WAP device, the WAP device sends an authentication
request to the primary server. If the primary server responds to the authentication request, the WAP device
Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE
41
System Configuration
Configuring 802.1x for WAP361
To Next Page
Loading...
