Moxa Technologies AWK-1100, MOXA AirWorks Ieee 802.1X/RADIUS AP mode only, Click Download

Page 35

MOXA AirWorks AWK-1100 User’s Manual		Web Console Configuration

Sample MAC ACL file

To download a MAC ACL file from a TFTP server:

1.Specify the IP address of the TFTP server in the TFTP server IP address text box.

2.Specify the name of the MAC ACL file on the TFTP server in the MAC ACL file name text box.

3.Click Download.

IEEE 802.1X/RADIUS (AP mode only)

IEEE 802.1X Port-Based Network Access Control is a new standard for solving some security issues associated with IEEE 802.11, such as lack of user-based authentication and dynamic encryption key distribution. With IEEE 802.1X and the help of a RADIUS (Remote Authentication Dial-In User Service) server and a user account database, an enterprise or ISP (Internet Service Provider) can manage its mobile users’ access to its wireless LANs. Before being granted access to a wireless LAN supporting IEEE 802.1X, a user needs to issue his or her user name and password or digital certificate to the backend RADIUS server by EAPOL (Extensible Authentication Protocol Over LAN). The RADIUS server can record accounting information, such as when a user logs on to the wireless LAN and logs off from the wireless LAN for monitoring or billing purposes.

The IEEE 802.1X functionality of the access point is controlled by the security mode. So far, the wireless access point supports two authentication mechanisms—EAP-MD5 (Message Digest version 5), EAP-TLS (Transport Layer Security). If EAP-MD5 is used, the user must give his or her user name and password for authentication. If EAP-TLS is used, the wireless client computer automatically gives the user’s digital certificate that is stored in the computer hard disk or a smart card for authentication. And after a successful EAP-TLS authentication, a session key is generated automatically for encrypting wireless packets sent between the wireless client computer and the associated wireless access point. In short, EAP-MD5 only supports user authentication, whereas EAP-TLS supports both user authentication and dynamic encryption key distribution.

3-19

Image 35

Contents First Edition, July Moxa AirWorks AWK-1100 User’s ManualDisclaimer Copyright NoticeTrademarks Table of Contents Page Introduction Overview Package ChecklistProduct Features Product SpecificationsMechanical Page Getting Started ‰ Confirming the Settings of the AP and Client ComputersFirst-Time Installation and Configuration AP Client Select the Operational Mode for AWK-1100AP/Bridge Review and Apply Settings Configure AWK-1100’s Ieee 802.11 settingsConfiguring Ieee 802.11g-related Settings Deploying the Access Point APSetting up Client Computers Checking if the Ieee 802.11g-related Settings Work Confirming the Settings of the AP and Client ComputersConfiguring TCP/IP-related Settings To check if a client computer can assess the Internet Checking if the TCP/IP-related Settings WorkPage ‰ Viewing Status Web Console ConfigurationMenu Structure Home and Refresh Buttons Save, Save & Restart, and Cancel ButtonsSystem Log Associated Wireless ClientsViewing Status Current Dhcp MappingsSTA-AP Link Monitor AP Client mode onlySpecifying the Operational Mode General OperationsAP/Bridge AP Client Administrative PasswordManaging the Firmware Upgrading Firmware by HttpUpgrading Firmware by Tftp Backing up and Restoring Configuration Settings by HttpChoose Tftp as the Firmware management protocol Backing up and Restoring Configuration Settings by Tftp Addressing Configuring TCP/IP-related SettingsResetting the Configuration to Factory Defaults Static Dhcp Mappings Dhcp Server AP/Bridge modes onlyBasic Link Integrity Configuring Ieee 802.11g-related SettingsCommunication AP Load Balancing Wireless Distribution SystemAssociation Control Sample wireless bridge network topology Security STA Shared Key , and Auto Set the Access control type to inclusive MAC-Address-Based Access ControlSet the Access control type to exclusive Click Download Ieee 802.1X/RADIUS AP mode onlyInternet IP Protocol Filters Configuring Advanced SettingsPacket Filters Ethernet Type FiltersSystem Log ManagementTCP/UDP Port Filters UPnPSnmp Page Default Settings Snmp write community LAN InterfaceManagement Snmp read communityWireless client computer cannot associate with an AWK-1100 TroubleshootingWireless Settings Problems AP does not respond to ping from the client computer TCP/IP Settings ProblemsUnknown Problems Moxa AirWorks AWK-1100 User’s Manual TTE Compliance Statement Regulatory StatementFederal Communication Commission Interference Statement Moxa AirWorks AWK-1100 User’s Manual Regulatory Statement Service Information Following services are provided Moxa Internet ServicesMoxa Product † AWK-1100-US † AWK-1100-EU Serial Number Problem Report FormProduct Return Procedure