LevelOne WAP-0005 Using WPA-802.1x, Wireless Station Configuration, Radius Server Configuration

PC and Server Configuration

Using WPA-802.1x

This is the most secure and most complex system.

802.1x mode provides greater security and centralized management, but it is more complex to configure.

Wireless Station Configuration

For each of the following items, each Wireless Station must have the same settings as the Wireless Access Point.

Mode	On each PC, the mode must be set to Infrastructure.
SSID (ESSID)	This must match the value used on the Wireless Access Point.
	The default value is wireless
	Note! The SSID is case sensitive.
802.1x	Each client must obtain a Certificate which is used for authentication for
Authentication	the Radius Server.
802.1x	Typically, EAP-TLS is used. This is a dynamic key system, so keys do
Encryption	NOT have to be entered on each Wireless station.

Radius Server Configuration

If using WPA-802.1xmode, the Radius Server on your network must be configured as follow:

•It must provide and accept Certificates for user authentication.

•There must be a Client Login for the Wireless Access Point itself.

•The Wireless Access Point will use its Default Name as its Client Login name.

•The Shared Key, set on the Security Screen of the Access Point, must match the Shared Secret value on the Radius Server.

•Encryption settings must be correct.

37