HP MSM7XX User Manual

Working with controlled APs
Provisioning APs
6-36
Country
Select the country in which the AP is operating.
Caution  Selecting the wrong country may result in illegal operation and may cause harmful
interference to other systems. Please consult with a professional installer who is trained
in RF installation and knowledgeable about local regulations to ensure that the service
controller is operating in accordance with channel, power, indoor/outdoor restrictions
and license requirements for the intended country.
 The Country option is not available on APs delivered with a fixed country setting.
802.1X
Enable this option when the AP is connected to a secured switch port that requires 802.1X
authentication. Once the AP is authenticated, controller discovery proceeds as usual.
Note  If this option is enabled and the AP is connected to a unsecured switch port, 802.1X is
ignored and discovery proceeds as usual.
 The switch port is expected to be multi-homed, so that once authentication is successful,
tagged and untagged traffic for any MAC addresses (including wireless clients) will be
accepted by the switch.
In this type of environment. deployment can be a challenge, since the AP must already be
configured with the correct 802.1X username and password before it is connected to the
secured switch port. There are three solutions to this problem:
 During AP deployment, 802.1X is deactivated on the switch ports. The APs are connected
and provisioned with the correct 802.1X settings by the controller. Once all APs are
synchronized, 802.1X authentication can be enabled on the switch ports.
 Before being deployed, the APs are first connected to a controller via a non-secure
switch. The APs are provisioned and synchronized with the correct 802.1X settings by the
controller. Next, the APs are deployed to their final location.
 For small deployments, the administrator could connect each AP in turn to a computer
and configure the appropriate 802.1X settings using the AP provisioning interface. This
solution is time consuming and is not a realistic option for a large deployments.
EAP method
Select the extensible authentication protocol method to use:
 PEAP version 0: Authentication occurs using MS-CHAP V2.
 PEAP version 1: Authentication occurs using EAP-GTC.
 TTLS: The Tunneled Transport Layer Security protocol requires that the switch first
authenticate itself to the AP by sending a PKI certificate. The AP authenticates itself
to the switch by supplying a username and password over the secure tunnel.
Username
Username that the AP will use inside the TLS tunnel.

HP MSM7XX Specifications

General

Brand	HP
Model	MSM7XX
Category	Controller
Language	English