Cisco Cisco Aironet 350 Access Points

Seite von 15
   
6
EAP Authentication Requires Matching 802.1x Protocol Drafts
OL-2385-01
Limitations and Restrictions
Note
Draft standard 8 is the default setting in firmware version 11.05 and earlier, and it might remain in 
effect when you upgrade the firmware to version 11.06 or later. Check the setting on the 
Authenticator Configuration page in the management system to make sure the best draft standard for 
your network is selected.
Use the Authenticator Configuration page in firmware version 11.10T1 to select the draft of the 802.1x 
protocol the access point or bridge radio should use. Follow these steps to set the draft for your access 
point or bridge:
Step 1
Browse to the Authenticator Configuration page in the access point management system.
a.
On the Summary Status page, click Setup.
b.
On the Setup page, click Security.
c.
On the Security Setup page, click Authentication Server.
Step 2
Use the 802.1x Protocol Version (for EAP authentication) pull-down menu to select the draft of the 
802.1x protocol the access point or bridge radio should use. Menu options include:
Draft 7—No radio firmware versions compliant with Draft 7 have LEAP capability, so you 
should not need to select this setting.
Draft 8—Select this option if LEAP-enabled client devices that associate with this access point 
or bridge use radio firmware versions 4.13, 4.16, or 4.23.
Draft 10—This is the default setting in firmware versions 11.06 and later. Select this option if 
client devices that associate with this access point or bridge use Microsoft Windows XP EAP 
authentication or if LEAP-enabled client devices that associate with this access point or bridge 
use radio firmware version 4.25 or later. The functionality in Draft 10 is equivalent to the 
functionality in Draft 11, the ratified draft of the 802.1x standard.
Step 3
Click Apply or OK to apply the setting. The access point or bridge reboots.
PC/PCI cards 4.23
x
PC/PCI cards 4.25 and later
x
WGB34x/352 8.58
x
WGB34x/352 8.61 or later
x
AP34x/35x 11.05 and earlier
x
AP34x/35x 11.06 and later
2
x
x
AP34x/35x 11.07 and later
x
x
AP34x/35x and BR35x 11.10T1
x
x
1.
The functionality in Draft 10 is equivalent to the functionality in Draft 11, the 
ratified draft of the 802.1x standard.
2.
The default draft setting in access point and bridge firmware version 11.06 and 
later is Draft 10.
Table 1
802.1x Protocol Drafts and Compliant Client Firmware (continued)
Firmware Version
Draft 7
Draft 8
Draft 10
1