Motorola MT2070 用户手册
Operating the MT2070/MT2090 2 - 59
The following authentication types have credential caching:
•
EAP-TLS
•
PEAP
•
LEAP
•
TTLS
•
EAP-FAST.
Some exceptions to the credential caching rules apply for profiles where the credentials expire, such as EAP-GTC
token profiles. Since the token expires after a short period, the user is prompted for credentials even when
credentials have already been entered and cached for that profile. The At Connect caching option has a slightly
different function. If the user leaves the At Connect box unchecked, then the Fusion software tries to authenticate
without prompting the user for a new token. If Fast Session Reconnect is enabled on the RADIUS server and the
device was previously connected and authenticated using the same profile, then the device may be able to
reconnect without going through the entire authentication process. In this case, new credentials are not required
(even though the old ones have expired) and the Fusion software does not prompt the user for new credentials. If
Fast Session Reconnect is not enabled on the RADIUS server or if the user selected the At Connect check box,
then the user is prompted to enter new credentials. Note also that the On Resume caching option is always forced
to “checked” for profiles where the credentials expire. This is necessary because the Fusion software does not
support the use of Fast Session Reconnect across a suspend / resume cycle; therefore, new credentials are
always needed.
token profiles. Since the token expires after a short period, the user is prompted for credentials even when
credentials have already been entered and cached for that profile. The At Connect caching option has a slightly
different function. If the user leaves the At Connect box unchecked, then the Fusion software tries to authenticate
without prompting the user for a new token. If Fast Session Reconnect is enabled on the RADIUS server and the
device was previously connected and authenticated using the same profile, then the device may be able to
reconnect without going through the entire authentication process. In this case, new credentials are not required
(even though the old ones have expired) and the Fusion software does not prompt the user for new credentials. If
Fast Session Reconnect is not enabled on the RADIUS server or if the user selected the At Connect check box,
then the user is prompted to enter new credentials. Note also that the On Resume caching option is always forced
to “checked” for profiles where the credentials expire. This is necessary because the Fusion software does not
support the use of Fast Session Reconnect across a suspend / resume cycle; therefore, new credentials are
always needed.
Selecting the At Time check box displays the Time Cache Options dialog.
Figure 2-71
Time Cache Options Dialog Box
1.
Tab to the Interval radio button and press ENT to check credentials at a set time interval.
2.
Enter the value in minutes in the text box.
3.
Select the At(hh:mm) radio button to check credentials at a set time.
NOTE
Entering credentials applies the credentials to a particular profile. Logging out clears all cached
credentials. Editing a profile clears any cached credentials for that profile.
credentials. Editing a profile clears any cached credentials for that profile.
Users who configure their APs to use the Fast Session Resume capability available with some
Authentication Types (e.g., PEAP) should not check At Connect or On Resume if they wish to avoid being
prompted to re-enter credentials in circumstances in which Fast Session Resume would allow them not to
be.
Authentication Types (e.g., PEAP) should not check At Connect or On Resume if they wish to avoid being
prompted to re-enter credentials in circumstances in which Fast Session Resume would allow them not to
be.