2 - 58 MT2070/MT2090 User Guide

Credential Cache Options

If the user selected any of the password-based authentication types then different credenti al caching options are
available. These options specify when the network credential prom pts appear: at connection, on each resume or at
a specified time.
Entering the credentials directly into the profile permanently cache s the credentials. In this case, the device does
not require user login. If a profile does not contain credentials entered through the Profile Editor Wizard, credentials
must be entered when prompted, either when connecting to the profile in the Manage Profiles screen or when
logging onto the profile using the Log On/Off command.
Credential caching options only apply to a profile when credentials are enter ed through the login dialog. This
includes using the Log On/Off command to log on to a profile for which the credentials were directly entered into
the profile (the username / password fields left blank).
Figure 2-70
Prompt for Login at Dialog Box
If the device does not have the credentials, a username and password must be enter ed. If the device has the
credentials (previous entered via a login dialog), it uses these creden tials unless the caching options require the
device to prompt for new credentials. If credentials were entered via th e profile, the device does not prompt for new
credentials (except for profiles where the credentials exp ire, such as EAP-GTC token profiles). Table 2-10 lists the
caching options.
Table 2-10
Cache Options
Option Description
At Connect Select this option to have device prompt for credentials whenever it tries to connect to the profile.
Deselect this to use the cached credentials to authenticate. If the credentials are n ot cached, the user is
prompted to enter credentials. This option only applies when the user has p reviously logged in to the
profile.
On Resume Selecting this re-authenticates an authenticated user when a suspend/res ume occurs. Once
re-authenticated, the user is prompted for credentials. If the user does not enter the same credentials
that were entered prior to the suspend/resume within three attempts, the user is di sconnected from the
network. This option only applies when the user has previously log ged in to the profile.
At Time Select this option to perform a local verification on an authenticated u ser at a specified time. The time
can be an absolute time or a relative time from the authentication and shou ld be in at least five minute
intervals. Once the time has passed, the user is prompted for credentials. If the user does not enter the
same credentials that were entered prior to the At-Time event within three attempts, the user is
disconnected from the network. This option only applies when the user has pr eviously logged in to the
profile.