68
Item Description
Authentication Method
• EAP—Use EAP. With EAP authentication, the authenticator encapsulates
802.1X user information in the EAP attributes of RADIUS packets and sends
the packets to the RADIUS server for authentication. It does not need to
repackage the EAP packets into standard RADIUS packets for
authentication.
• CHAP—Use CHAP. By default, CHAP is used. CHAP transmits only
usernames but not passwords over the network. Therefore this method is
safer.
• PAP—Use PAP. PAP transmits passwords in plain text.
Handshake
• Enable—Enable the online user handshake function so that the device can
periodically send handshake messages to a user to check whether the user
is online. By default, the function is enabled.
• Disable—Disable the online user handshake function.
Multicast Trigger
• Enable—Enable the multicast trigger function of 802.1X to send multicast
trigger messages to the clients periodically for initiating authentication. By
default, the multicast trigger function is enabled.
• Disable—Disable the 802.1X multicast trigger function.
IMPORTANT:
For a WLAN, the clients can actively initiate authentication, or the AP can
discover users and trigger authentication. Therefore, the ports do not need to
send 802.1X multicast trigger messages periodically for initiating authentication.
You are recommended to disable the multicast trigger function in a WLAN
because the multicast trigger messages consume bandwidth.
MAC Authentication Select the
MAC Authentication
option.
Domain
Select an existing domain from the list.
The default domain is
system
. To create a domain, select
Authentication
>
AAA
from the navigation tree, click the
Domain Setup
tab, and type a new
domain name in the
Domain Name
field.
• The selected domain name applies to only the current wireless service, and
all clients accessing the wireless service use this domain for authentication,
authorization, and accounting.
• Do not delete a domain name in use. Otherwise, the clients that access the
wireless service are logged out.
Configuring crypto type wireless service
Configuring basic settings for crypto type wireless service
1. Select Interface Setup > Wireless > Access Service from the navigation tree.
2. Click the icon for the target crypto type wireless service.
Figure 45 Configuring crypto type wireless service