Cisco AP541N Dual-band Single-radio Access Point Administration ...

4WirelessModifying Virtual Access Point SettingsIEEE 802.1X AuthenticationIEEE 802.1X is the standard defining port-based authentication and infrastructurefor doing key management. Extensible Authentication Protocol (EAP) messagessent over an IEEE 802.11 wireless network using a protocol called EAPEncapsulation Over LANs (EAPOL). IEEE 802.1X provides dynamically-generatedkeys that are periodically refreshed. An RC4 stream cipher is used to encrypt theframe body and cyclic redundancy checking (CRC) of each 802.11 frame.This mode requires the use of an external RADIUS server to authenticate users.The access point requires a RADIUS server capable of EAP, such as the MicrosoftInternet Authentication Server. To work with Windows clients, the authenticationserver must support Protected EAP (PEAP) and MSCHAP V2.You can use any of a variety of authentication methods that the IEEE 802.1X modesupports, including certificates, Kerberos, and public key authentication. You mustconfigure the client stations to use the same authentication method the accesspoint uses.NOTEAfter you configure the security settings, you must click Apply to apply the changesand to save the settings.Table 13 IEEE 802.1XFieldUse Global RADIUSServer SettingsDescriptionBy default each VAP uses the global RADIUS settingsthat you define for the access point at the top of theVAP page. However, you can configure each VAP touse a different set of RADIUS servers.To use the global RADIUS server settings, make surethe check box is selected.To use a separate RADIUS server for the VAP, clear thecheck box and enter the RADIUS server IP addressand key in the following fields.RADIUS IP AddressEnter the address for the primary RADIUS server forthis VAP.67 Cisco AP 541N Dual-band Single-radio Access Point Quick Start Guide