Qeedji AMP300, User Manual

Page: 84 / 87

84
7.7 Appendix: 802.1X security
Using 802.1X security requires to have:
specific LAN switch or WiFi modem supporting
802.1X
security,
a RADIUS server properly configured.
Several 802.1X modes are supported. Depending on the chosen
802.1X
security mode, you may have to install on the tablet:
the CA certificate of your RADIUS server,
one trusted client certificate per AMP300 device generated with the CA certificate of your RADIUS server.
◬
When using a RADIUS certificate, it is recommended that the system date of the AMP300 device is properly set, else you may not be able to
access to the secured network.
802.1X security on WLAN interface
Activate the WiFi connection (not activated by default) and connect to the WLAN access point supporting
802.1X security
.
When filling settings for WiFi connection, fill the
802.1X security
as well:
EAP method
,
PEAP ,
TLS ,
TTLS ,
PWD .
Phase 2 authentication
PAP ¹,
MSCHAP ¹,
MSCHAPV2 ¹,
GTC ¹,
None ¹: the
AOSP
uses automatical the right Phase 2 authentication value given by the RADIUS server
CA certificate
: select the RADIUS CA certificate
Identity
: client identity registered in the RADIUS server for this AMP300 device for the WLAN interface
Anonymous identity
: identity used for the first identifization phase. If the
Anonymous Identity
value is let empty, the
Anonymous Identity
value
worths the the
Identity
value set above.
Password
: client password registered in the RADIUS server for this AMP300 device for the WLAN interface
Advanced options
:
Metered
,
Proxy
,
IP settings
:
DHCP ,
Static :
IP address
Gateway
Network prefix
DNS 1
DNS 2
☛ The virtual keyboard appears each time entering in the WiFi configuration window. To hide the virtual keyboard, press on the back menu of
AOSP
.
¹ The values available here are depending on the chosen EAP method.
◬
The 802.1X security configuration has to be done either entirely by the
AOSP Settings
application, or entirely by a configuration script. For further
information, refer to configuration script template V1.10.16 (or above) .
802.1X security on LAN interface
The
LAN
configuration can only be done with a configuration script. For further information, refer to configuration script template V1.10.16 (or above) .