WiNG How-To Guide 802.11i - Configuration
The following section outlines the configuration
steps required to configure 802.11i with 802.1X and pre-shared keys on a RF
Switch:
1) 802.11i
with 802.1X Authentication [Section 3.1]:
2) 802.11i
with Pre-Shared Key Authentication
[Section 3.2]:
3.1 802.11i
with 802.1X Authentication:
As shown in figure 3.1, five AP300s have been
deployed at a site with an RF Switch. In this example a WLAN named MOTO-DATA
will be created to provide secure 802.11i 802.1X authenticated access for enterprise
data users. Authentication will be provided using an external Microsoft IAS
RADIUS server configured with a remote access policy for PEAP authentication.
As this site is small all authenticated data users will be statically mapped to
a data VLAN 40, however dynamic VLAN assignments can be enabled at a later date
if required.
Web UI Configuration Example:
802.11i with Pre-Shared Key Authentication:
As shown in figure 3.2, five AP300s have been
deployed at a site with an RF Switch. In this example a WLAN named MOTO-VOICE
will be created to provide secure 802.11i pre-shared-key authenticated access
for Wi-Fi voice handsets. All authenticated voice handsets will be statically
mapped to a voice VLAN 80.
0 nhận xét:
Post a Comment