Alcatel-Lucent 6850-48 Guida Di Rete

Pagina di 1162
Configuring Authenticated VLANs
Setting Up Authentication Clients
OmniSwitch AOS Release 6 Network Configuration Guide
September 2009
page 36-11
SSL for Web Browser Clients
A Secure Socket Layer (SSL) is used to authenticate Web browser clients. A certificate from a Certifica-
tion Authority (CA) or a self-signed (private) certificate must be installed on the switch. A self-signed 
certificate is provided by Alcatel-Lucent (wv-cert.pem). If you are using a well-known certificate or some 
other self-signed certificate, you should replace the wv-cert.pem file with the relevant file.
Web browser clients will automatically recognize well-known SSL certificates, but if a self-signed certifi-
cate (such as the wv-cert.pem file) is used, the client will not automatically recognize the certificate.
Windows, Linux, and Mac OS 9 Clients
If you are using the wv-cert.pem file or another self-signed certificate, the client will not recognize the 
certificate, and a warning message will display on the client; however, the client will be allowed to 
authenticate.
Note that when using Windows Internet Explorer Version 7 (IE7) browser software with the Alcatel-
Lucent self-signed certificate, the following certificate warning message is displayed:
Click on “Continue to this website (not recommended)” to continue the browser session. A certificate 
error message, similar to the one shown below, will appear at the top of the browser window. 
At this point, you can decide to do one of the following:
• Ignore the certificate error message and continue on with the authentication process and subsequent 
browser activity. Note that by doing so, the certificate error message will always appear at the top of 
every browser window display; or,
• Follow the steps below to install the Alcatel-Lucent self-signed certificate in the Trusted Root Certifi-
cation Authorities store. Doing so will clear the certificate error message.
Click on the certificate error message. A “Certificate Invalid” popup window displays.
Click on “View Certificates” at the bottom of the “Certificate Invalid” popup window. A “Certifi-
cate Information” popup window displays.