Manuals / Symbol Technologies / Computer Equipment / Network Router

Symbol Technologies AP-4131 manual Manual Kerberos Authentication Configuration

Models: AP-4131

1 250

Download 250 pages 60.1 Kb

Page 104

Configuring the AP

2.6.3Manual Kerberos Authentication Configuration

The Configure Kerberos Authentication screen allows the network administrator to change or verify the AP parameters for Kerberos authentication. If a DHCP server is not available use the Configure Kerberos Authentication screen to manually configure and enable Kerberos, save and reset the AP. If the KSS has been installed on the Kerberos server, resetting the AP allows the KSS to complete the Kerberos configuration and start the Kerberos authentication services. If a DHCP server is available enable Kerberos using DHCP server options found in section 1.3.3: ”DHCP Support” on page 15. These options can enable Kerberos on the AP, and setup the KDC name, KSS name and port number.

Enabling Kerberos disables Telnet, SNMP and Web services. Configure the AP through a direct serial connection. Disabling Kerberos returns (Kerberos Disabled is the default setting) Telnet, SNMP, and Web services to their previous setting. If an AP cannot be accessed through a serial connection and SNMP is not configured for read/write, use DHCP option 131.

94	AP-4131 Access Point Product Reference Guide

Image 104

Symbol Technologies AP-4131 manual Manual Kerberos Authentication Configuration

Contents

Spectrum24 AP-4131 Access Point 72E-56316-01 Revision a FebruaryCopyright About This Document ItalicsAP-4131 Access Point Product Reference Guide Contents Manual Kerberos Authentication Configuration 157 182 Appendix E Installing and Configuring Kerberos Setup Service AP-4131 Access Point Product Reference Guide Access Point AP IntroductionBootp Radio Basics 1 S24 Network TopologyIntroduction Introduction Introduction Introduction Cellular Coverage Introduction Root AP and Association Process Site Surveys Ieee 802.1d Spanning Tree SupportSite Topography Access Point Functional Theory MAC Layer Bridging Filtering and Access Control Auto Fallback to Wireless ModeDhcp Support Media Types EssidIntroduction Direct-Sequence Spread Spectrum MU Association Process Introduction Mobile IP Introduction Introduction Supporting CAM and PSP Stations Data Encryption Kerberos Authentication Introduction Introduction Page Introduction KSS Open Enrollment Roaming and Authentication KSS DatabasesMixed Mode Security Web Management SupportManagement Options Programmable Snmp Trap SupportUsing Snmp Increased MIB SupportUsing the UI See .1.1 Using Telnet onSee .1.2 Using a Direct Serial Connection on See .1.3 Using a Dial-Up Connection onGaining Access to the UI Using TelnetAt the prompt type the password Using a Direct Serial Connection EmulationUsing a Dial-Up Connection Refer to .12.2 Updating Using Xmodem on page 132 toUsing a Web Browser Setup Network Web Server Help File Access From this menu select Microsoft Internet ServercommonAccessing Web Browser UI WWW Service Properties window opens Select DirectoriesSelect Reset AP Http//xxx.xxx.xxx.xxx Configuring the AP Type the password AP displays a Main Menu when gaining access to the UI Navigating the UIConfiguring the AP Entering Admin Mode Changing the Access to the UI Change System Passwords screen displays As asterisks. The default password is SymbolConfiguring for Dial-Up to the UI EmulationAccess Point Installation Navigating the UI Using a Web BrowserSelect AP Installation from the Main Menu DHCP/BOOTPCountry Config Unit NameIP Address Gateway IP AddressBest signal strength and transmits on Radio receives on the primary orSecondary antenna which ever has Last antenna it received onDhcp and Bootp interoperate Only Bootp responses will be acceptedBy the AP. If both Dhcp and Bootp Services are required, do not selectedConfiguring System Parameters To enable or disable. To save Configuration, select F1On the next power up, the AP scans all Channel in Flash the power LEDConfiguring the AP Encryption maintenance page to change Any allows users with admin privileges to changeSerial allows users with admin privileges to See .4.1 Encryption Administration onIf enabled, mobile units associated with the same Specifies if the AP can perform Wnmp functionsSystem Allows the user to change the passwords for Password Default interface is Ethernet. The AP defaults to Encryption Administration Parameter Access Method Interface Serial Encryption Parameter Access to Telnet and Serial InterfacesEncryption Parameter Access to Web Interface Encryption Parameter Access for Snmp Interface System Password Administration User Password Asterisks. The default password is SymbolAny alphanumeric, case-sensitive entry up to Characters, the characters selected are displayed asConfiguring Radio Parameters Select Set RF Configuration from the Main Menu to displayConfiguring the AP Configuring the AP Configuring the AP Wlap Mode Wlap Priority Wlap Manual Wlap Hello Time Wlap Max AgePreamble length is transmission data rate Wlap Forward DelayTo the packet prior to transmission Eiap F4 Configuring the AP Wireless AP Operation Parameters Configuring the AP Select Set RF Configuration from the Main Menu Wlap ModeAP sets up automatically for wireless No wireless operation possible. DefaultIf setting the Wlap Manual Bssid to This feature speeds up the association processMinimizes confusion when more than two Wlap Manual Specifies the Bssid of a particular WlapConfiguring the AP Enhanced Packet Prioritization EPP Enhanced Interference Avoidance Properties Eiap Configuring the AP Encryption Configuration and Key Maintenance Configuring the AP 1 40-Bit WEP Encryption Configuring the AP 2 128-Bit WEP Encryption Configuring the AP Manual Kerberos Authentication Configuration User ID Ap3 Password OK-CR Save-F1Cancel-ESC Enable Kerberos Address Backup KDC KSS PortKSS Secret KSS NameConfiguring EAP-TLS Support Configure Authenticator screen displays For an MU’s response once the access point Requests an MUs identity. Default is 30 secondsRe-authentication Re-authenticate after the re-authentication periodConfiguring Mixed Mode Security Snmp and Mixed Mode Security Configuring the Snmp Agent AP-4131 Access Point Product Reference Guide 103 Operation Configuration could adversely effect SNMPv1/2cFor SNMPv3 operations. Changing the factory AP-4131 Access Point Product Reference Guide 105 Root AP lost. The Wlap eventually resets itself to Setup and ready to forward dataIf the current Wlap fails to receive a Config Bpdu Connection Generated Change Root Wlap UpAP-4131 Access Point Product Reference Guide 107 Configuring SNMPv3 Security AP-4131 Access Point Product Reference Guide 109 Authentication ACL and Address Filtering Access Address Filtering Access Control List Results ListConfiguring the ACL Range of MUs114 Adding Allowed MUs Removing Allowed MUsUse ACL options from the Set System Configuration menu ACL OptionsRemoving All Allowed MUs Load ACL from MU ListLoad ACL from File ACLIndividual FlushConfiguring Address Filtering Adding Disallowed MUs Removing Disallowed MUsConfiguring Type Filtering Adding Filter TypesRemoving Filter Types Controlling Type FiltersManually Updating the AP Configuration Clearing MUs from the AP122 AP-4131 Access Point Product Reference Guide 123 124 AP-4131 Access Point Product Reference Guide 125 126 AP-4131 Access Point Product Reference Guide 127 128 Updating Using Tftp AP displays the Main Menu Firmware Update Menu displays Are You Sure? yes no Type Y Firmware Update Menu displays Are You Sure? yes no Type YUpdating Using Xmodem Select Enter Admin Mode and enter the password From the Main Menu select Special Functions Press F3 to view the Firmware Update Menu Special Functions Menu displays Are You Sure? yes no Type YDownload is complete when the UI displays Setting Logging Options 138 Update Using Tftp Updating AP Firmware140 AP-4131 Access Point Product Reference Guide 141 142 AP-4131 Access Point Product Reference Guide 143 144 Select Enter Admin Mode and type the password From the Main Menu select Special Functions and press Enter Select Send File Auto Upgrade all APs Through Messaging AP-4131 Access Point Product Reference Guide 149 Type the firmware filename in the Download Filename field Press Enter Select Save-F1to save settings Performing Pings Select Regular to display Select Echo-F1to display the Packet Ping Setup screen Mobile IP Using MD5 Authentication Saving the Configuration Select Special Functions from the Main Menu to displaySelect Special Functions from the Main Menu Resetting the APRestoring the Factory Configuration Configuring Network Time System Summary Select Show System Summary from the Main Menu to displayAccess point Enables Windows XP MUs to use EAP/TLS forAuthentication using 40 or 128-bit WEP Range required for the operating countryAP Configuration ACL & Filters When Disallowed is selected, only MAC Are allowed to associate with the APSelect Interface Statistics from the Main Menu to display Interface StatisticsInterface Statistics screen provides Forwarding Counts Select Forwarding Counts from the Main Menu to displayMobile Units Select Show Mobile Units from the Main Menu to displayShared Key is enabled for this device AP-4131 Access Point Product Reference Guide 167 MU power mode PSP or CAM Voice indicates packet delivery is time critical and aHigh priority Normal indicates packet delivery is not time criticalPackets Sent Packets RcvdBytes Sent Bytes RcvdMobile IP Known APs HSQ MUSSelect Switch to view the Unit Name for each known AP MUs associated with the AP Data traffic handled by the AP in kilobytes in and outPer second FWVer Firmware version used by the specified AP AwayEthernet Statistics Select Ethernet Statistics from the Main Menu to displayEthernet because of a busy medium Radio Statistics Select Show RF Statistics from the Main Menu to displayIf the device fails to receive an acknowledgment ACK from a destinationValue errors. An MU transmitted a corrupt data Packet and failed to pass the ICV verification.Calculated ICV value does not match with the ICV Value in the received packetTo display the Wlap RF Statistics screen select WLAP-F3 Send Cfg Bpdu configuration Bridge Under .5 Configuring Radio ParametersCurrent # Wlap Itf Current StateNegotiate the position of Root AP at power up. AP with the lowest Root ID, path and Wlap IDBecomes the Root AP. The Root ID and the Wlap ID Are 16-digit numbers. The first 4 digits representMiscellaneous Statistics Select Show Misc Statistics from the Main Menu to displayReceived Analyzing Channel Use Analyzing Retries Select Show Misc Statistics from the Main MenuEvent History Clearing Statistics Select Special Functions from the Main MenuMonitoring Statistics 188 Precautions Package Contents2 10/100Base-T UTP RequirementsNetwork Connection Placing the AP Single CellPower Options Connecting the Power Adapter Mounting the APResting flat Rests on the four rubber pads on the underside From trafficBIAS-T Low Power Distribution System Bias -T 196 AP-4131 Access Point Product Reference Guide 197 Steady Green during operation LED IndicatorsPower Wireless LAN Activity Wlap mode LED displayPower Wired LAN Activity Special cases Electrical Management System EMS operating outlet TroubleshootingEnsure wired network is operating Setting Up MUs Physical Characteristics Meets CE-MarkRadio Characteristics Network Characteristics S24dsap.mib, MIB-II and 802.1x.mibSpecifications Appendix B Supported Modems Supported Modems Appendix C Customer Support North American ContactsInternational Contacts Appendix D Country Identification Codes Country Identification Codes UAE Country Identification Codes Creating a Windows 2000 Environment for the KSS Installing the KSS in a Windows 2000 Environment Creating a User Account and Password in Active Directory Click OK Preparing the KSS for Access Point Validation Installing and Configuring Kerberos Setup Service Kerberos Account Entry dialog box displays Installing and Configuring Kerberos Setup Service Enable Open Enrollment info box appears Listen For Connection Box displays Installing and Configuring Kerberos Setup Service Manually Creating an Access Point Setup Account Installing and Configuring Kerberos Setup Service Implementing Kerberos without the KSS Installing and Configuring Kerberos Setup Service Installing and Configuring Kerberos Setup Service Index Dtim Index-3 Index-4 Index-5 LAN Index-7 Index-8 TIM Wlap