Motorola 2.1, Networking Setup Manual

Page: 42 / 135

Chapter 2: Network Setup
Authentication Server Configuration
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
.
.
Juniper Steel-Belted RADIUS
This section describes how to configure Juniper Steel Belted Radius server in support of
EAP-TTLS Secure Mesh. Any Radius server package can be used as long as it supports
EAP-TTLS authentication.
The pre-requisites for the procedure in this section are:
•
Windows 2003 server installation complete.
•
Installation of our Certificate Authority (CA).
•
Creation of a server certificate.
•
Steel Belted Radius Enterprise Edition (available from Juniper.net). Download /
purchase SBR installer and proceed to install the program by double clicking the
installer. We download an evaluation copy of this example. Contact Juniper
Networks to purchase a licensed copy.
After the installation SBR is complete we need to add our trusted root and server certificate to our Steel
Belted Radius server.
Exporting Certificates
Procedure 2-9 describes how to export existing certificates and install them for use with
Steel-Belted RADIUS.
Procedure 2-9 Exporting Certificates
With the installation of our certificate authority in the previous section and the creation of a server
certificate we need to add these to Steel Belted Radius.
1
Find the server certificate installed on the authentication server.
•
Click Start | Run | and type MMC.exe. Press enter.
•
Browse to the certificate store by selecting:
Console / Add/Remove Snap-in / Add… /
Certificates / Computer Account
.
Result
: The select PC dialog appears.
•
Select
Local Computer
.
•
Open the
Personal / Certificates
folder in its tree view.
•
A server certificate was created when we created our Certificate Authority. In our
reference design this certificate will be named
radius
.
2-28