Symbol Technologies WS 2000 guide

Security—How to Configure Kerberos Authentication

Security—How to Configure Kerberos Authentication

Kerberos provides strong authentication method for client/server applications by using secret-key cryptography. Using this protocol, a client can prove its identity to a server (and vice versa) across an insecure network connection. After a client and server use Kerberos to prove their identity, they can encrypt all communications to assure privacy and data integrity.

1.Select the Kerberos radio button to enable Kerberos authentication.

2.Click the Kerberos Configuration button to display a sub-screen for authentication settings.

3.A realm name functions similarly to a DNS domain name. In theory, the realm name is arbitrary; however, in practice a Kerberos realm is typically named using an uppercase version of the DNS domain name that is associated with hosts in the realm. Specify a realm name that is case-sensitive, for example, MYCOMPANY.COM.

4.Specify a Username for the Kerberos configuration.

5.Specify a Password for the Kerberos configuration.

The KDC (Key Distribution Center) implements an Authentication Service and a ticket granting service, whereby an authorized user is granted a ticket that is encrypted with the user’s password. The KDC has a copy of every user password.

6.Specify a server IP address and a port to be used as the Primary KDC.

7.Optionally, specify a Backup KDC server by providing the IP address and port.

8.Optionally, specify a Remote KDC server by providing the IP address and port.

9.Click OK when done.

Copyright © 2004 Symbol Technologies, Inc. All Rights Reserved	59
WS 2000 Wireless Switch: 1.0 Date of last Revision: March 2004

Image 59

Symbol Technologies WS 2000 manual Security-How to Configure Kerberos Authentication

Contents

72E-67701-01 Rev a March WS 2000 Wireless Switch VersionSystem Reference Patents Copyright Table of Contents Chapter Advanced Configuration Chapter Field Office Example 111 Document Conventions WS 2000 Wireless Switch System Reference GuideAbout this Document Firewall Security Management of Access PortsWireless LAN Wlan Security System Overview Hardware Overview Technical SpecificationsPhysical Specifications Environmental Specifications Operating System OS ServicesCell Controller Services Power Specifications Gateway Services 802.11b Support 802.11a Support Access Ports Network Address Translation NAT Gateway ServicesWS 2000 Wireless Switch Firewall Overview Layer 3 RoutingSnmp Management Support Dhcp Client and Server WEP 128 104-bit Key 802.1x with Radius AuthenticationWEP 64 40-bit key Kerberos Authentication 802.1x with Shared Key Authentication KeyGuard-MCM Support Wireless Protected Access WPA Getting Started Overview Installing the SwitchSet up Communication to the Switch Getting Started Overview Changing the Administrator Password Configuring the Switch Configure the LAN Interface Field Description Defining the Subnets Interfaces Configure Subnets Dhcp Configuration Advanced Dhcp Settings Communicating with the Outside World Configure the WAN Interface Setting Up Point-to-Point over Ethernet PPPoE Communication Chap Enable Wireless LANs WLANs Wireless Summary Area Access Port Adoption Configure WLANs Subnet Configure Wlan SecurityField Description Name 802.1x EAP Authentication Setting the Authentication Method Configuring WEP Encryption Setting the Encryption MethodKerberos Authentication Configuring WPA-TKIP Configure Wlan Security No Encryption KeyGuard-MCM Mobile Unit Access Control List ACL Configure Access Ports Configure Access Ports Name Configure Subnet Access Yellow Access Overview TableAccess Exception Area Color Access Type Description Green Http Protocol Transport Description Port Used ALL Transport Description WLAN-How to Configure Advanced Settings Advanced Configuration WLAN-Setting Default Access Port Settings WLAN-Setting Default Access Port Settings Dtim Period Beacon Interval Security Beacon WLAN-Advanced Access Port SettingsPrimary Wlan WLAN-Advanced Access Port Settings Beacon is a packet broadcast by the adopted access ports to Gateway-How to Configure Network Address Translation NAT Gateway-How to Configure Network Address Translation NAT Always On Firewall Filters Gateway-How to Configure the WS 2000 Firewall Configurable Firewall Filters Mime Flood Attack Check Gateway-How to Configure Static Routes RIP Setting the RIP ConfigurationDefining Routes No RIP None Security-How to Configure 802.1x EAP AuthenticationRIP v2 Compat Security-How to Configure 802.1x EAP Authentication Security-How to Configure 802.1x EAP Authentication Security-How to Configure Kerberos Authentication Security-How to Specify a Network Time Protocol NTP Server Location Description Switch SettingsWS 2000 Wireless Switch LED Functions Overview Changing the Name of the Switch Location field Change the Location and Country Settings of the WS Updating the WS 2000 Wireless Switch’s Firmware How to Restart the WS 2000 Wireless Switch Performing the Firmware Update Checking for and Downloading Firmware updates Exporting and Importing Wireless Switch Settings System Configuration To Export Settings to a Local File To Import or Export Settings to an FTP SiteTo Import Settings to a Local File How to Restore Default Configuration Settings Property Value Setting Up Snmp v1/v2c Community Definitions Remote AdministrationHow to Configure Snmp Traps Setting the Snmp Version Configuration AuthPriv Setting Up Snmp v3 Community DefinitionsNoAuth AuthNoPriv Setting the Trap Configuration Setting Up the Access Control List Cold Start AuthenticationConfiguration Trap Trap Name Generates a Trap when… Category Setting the Trap Configuration for Snmp v1/v2c Setting the Trap Configuration for Snmp Configure Administrator Access Access Port Description Configure Management Access Statistics and Logs Access Port StatisticsSetup AirBEAM Software Access Changing the Administrator and Manager Passwords General Access Port Information Associated Mobile Units Received and Transmitted Tables Subnet Statistics Transmitted Description Field Received Field Description Interfaces WAN Statistics Received Field Description Viewing the Log on the Switch Setting Up and Viewing the System Log Setting Up a Log Server Background Retail Use Cases Plan Contacting the Wireless Switch Configuring the System Settings Entering the Basic System Settings Setting Access Control Subnet IP Address Range Configuring the SubnetsIP Address Plan For each subnet Configuring POS Subnet Configuring the Printer Subnet Retail Use Cases Configuring the Cafe Subnet Retail Use Cases Configuring the WAN Interface Configuring Network Address Translation NAT Retail Use Cases Inspecting the Firewall Configuring the Access PortsSetting Access Port Defaults Switch Port Connected to Naming the POS Access Port Configuring the Printer Access Port Configuring the Cafe Access Port Associating the Access Ports to the WLANs Configuring the Cafe Wlan Configuring the WLANs Name Printer Configuring the Printer Wlan For the POS WLAN, she makes the following choices Configuring the POS Wlan Setting Subnet Access Retail Use Cases Client IP Address Subnet Mask Gateway Port Testing ConnectionsConfiguring the Clients Wireless Authentication Encryption Channel Field Office Example Plan Configuring the System Settings Entering the Basic System Settings Setting Access Control Field Office Example Configuring the Engineering LAN Configuring the LAN Field Office Example Field Office Example Configuring the Sales Subnet Configuring the WAN Field Office Example Setting Up Network Address Translation Field Office Example Adoption List Label Confirm Firewall ConfigurationAdopting Access Ports MAC Address Location Field Office Example Configuring the WLANs Security Field Office Example Wlan Field Office Example Field Office Example Field Office Example Access Port Channel Configuring Subnet Access Installing the Access Ports and Testing Appendix A. Sample Configuration File NTP menu Wlan 1 configuration set mode 1 enable Wlan 3 configuration set mode 3 disable Default 802.11 a radio configuration set reg a in/out 149 Access Port configuration LAN Dhcp configuration network Firewall configuration set syn enable Outbound 1-To-Many NAT configuration set outb map s1 Page Index FTP Snmp 802.1x EAP authentication