LEGRAND Server Technology PRO3X, User Manual, Page: 66 / 182

Using the PRO3X Command Line Interface (CLI)
PRO3X User Guide – Command Line Interface (CLI)
66 of 182
Setting Wireless EAP Parameters
When the wireless authentication method is set to EAP, you must configure EAP authentication parameters, including outer
authentication, inner authentication, EAP identity, client certificate, client private key, password, CA certificate, and RADIUS
authentication server.
Determine the outer authentication protocol:
config:# network wireless eapOuterAuthentication <outer_auth>
Determine the inner authentication protocol for authentication set to "EAP + PEAP":
config:# network wireless eapInnerAuthentication <inner_auth>
Set the EAP identity:
config:# network wireless eapIdentity <identity>
Set the EAP password:
config:# network wireless eapPassword
After performing the above command, the PRO3X prompts you to enter the password. Then type the password and press
Enter.
Provide a Client Certificate for authentication set to "EAP + TLS" or "EAP + PEAP + TLS":
config:# network wireless eapClientCertificate
After performing any certificate or private key commands, including commands for the client certificate, client private key,
and CA certificate, the system prompts you to enter the contents of the wanted certificate or key.
Provide a Client Private Key for authentication set to "EAP + TLS" or "EAP + PEAP + TLS":
config:# network wireless eapClientPrivateKey
Provide a CA TLS certificate for EAP:
config:# network wireless eapCACertificate
Enable or disable verification of the TLS certificate chain:
config:# network wireless enableCertVerification <option1>
Allow expired and not yet valid TLS certificates:
config:# network wireless allowOffTimeRangeCerts <option2>