Cisco Cisco Aironet 1200 Access Point Notas de publicación
6
EAP Authentication Requires Matching 802.1x Protocol Drafts
OL-3077-01
Limitations and Restrictions
EAP Authentication Requires Matching 802.1x Protocol Drafts
Note
This section applies to wireless networks set up to use LEAP. If you do not use LEAP on your
wireless network, you can skip this section.
wireless network, you can skip this section.
Wireless client devices use Extensible Authentication Protocol (EAP) to log onto a network and generate
a dynamic, client-specific WEP key for the current logon session. If your wireless network uses WEP
without EAP, client devices use the static WEP keys entered in the Aironet Client Utilities.
a dynamic, client-specific WEP key for the current logon session. If your wireless network uses WEP
without EAP, client devices use the static WEP keys entered in the Aironet Client Utilities.
If you use Network-EAP authentication on your wireless network, your client devices and access points
must use the same 802.1x protocol draft. For example, if the radio firmware on the client devices that
will associate with an access point is 4.16, the access point should be configured to use Draft 8 of the
802.1x protocol.
must use the same 802.1x protocol draft. For example, if the radio firmware on the client devices that
will associate with an access point is 4.16, the access point should be configured to use Draft 8 of the
802.1x protocol.
lists firmware versions for Cisco Aironet products and the draft with which they
comply.
Use the Authenticator Configuration page to select the draft of the 802.1x protocol the access point
should use. Follow these steps to set the draft for your access point:
should use. Follow these steps to set the draft for your access point:
Step 1
Browse to the Authenticator Configuration page in the access point management system:
a.
On the Summary Status page, click Setup.
b.
On the Setup page, click Security.
c.
On the Security Setup page, click Authentication Server.
Step 2
Use the 802.1x Protocol Version (for EAP authentication) pull-down menu to select the draft of the
802.1x protocol the access point radio should use. Menu options include:
802.1x protocol the access point radio should use. Menu options include:
•
Draft 7—No radio firmware versions compliant with Draft 7 have LEAP capability, so you
should not need to select this setting.
should not need to select this setting.
Table 1
802.1x Protocol Drafts and Compliant Client Firmware
Firmware Version
Draft 7
Draft 8
Draft 10
1
1.
The functionality in Draft 10 is equivalent to the functionality in Draft 11, the
ratified draft of the 802.1x standard.
ratified draft of the 802.1x standard.
PC/PCI cards 4.13
—
x
—
PC/PCI cards 4.16
—
x
—
PC/PCI cards 4.23
—
x
—
PC/PCI cards 4.25 and later
—
—
x
WGB34x/352 8.58
—
x
—
WGB34x/352 8.61 and later
—
—
x
AP34x/35x 11.05 and earlier
—
x
—
AP34x/35x 11.06 and later
2
2.
The default draft setting in access point firmware version 11.06 and later is
Draft 10.
Draft 10.
—
x
x
AP34x/35x 11.07 and later
—
x
x
AP12xx 11.40T and later
—
x
x