SEOWON INTECH SWC-3100, User Manual

Page: 13 / 24

13
#authentication_pkm_type=EAP-TLS
#authentication_pkm_type=EAP-TTLS-CHAP
authentication_pkm_type=EAP-TTLS-MSCHAPV2
[EAPTLS setparam]
tls_cacert=/etc/auth/cacert.pem
tls_pricert=/etc/auth/client.pem
tls_pripasswd=whatever
tls_userid=socswtls
tls_userpasswd=whatever
[EAPTTLSCHAP setparam]
ttls-chap_cacert=/etc/auth/cacert.pem
ttls-chap_pricert=/etc/auth/client.pem
ttls-chap_pripasswd=whatever
ttls-chap_anonyid=ttls
ttls-chap_userid=socswchap
ttls-chap_passwd=whatever
[EAPTTLSMSCHAPV2 setparam]
ttls-mschapv2_cacert=/etc/auth/cacert.pem
ttls-mschapv2_pricert=/etc/auth/client.pem
ttls-mschapv2_pripasswd=whatever
ttls-mschapv2_anonyid=ttls
ttls-mschapv2_userid=socswmschap
ttls-mschapv2_passwd=whatever
…
[DM command]
wb_ru
cfg sbc param_set 0
…
The setparam sections have some variables, and you should fill them with the data from your service provider.
Cacert is root certificate, and you can change file name but you should not modify the path name. Pricert is
client client certificate with(or without) a private key. The restrictions for file and path name are same to the
cacert . Pripasswd is private key. Anonyid is anonymous id, or outer NAI(Network Access Identifier).
Userid is user id, or inner NAI. Passwd is the password for userid.
“ Authentication_alpha_delimiter_enable ” makes the character, “@”, in userid or anonyid as a delimiter or
as just a character. If it is YES, “@” is a delimiter, if not, “@” is a character. If your set userid with
“aaa@bbb.ccc.com” and the variable is YES, then your userid is just “aaa”. If it is NO, then your userid is
“aaa@bbb.ccc.com” .
For the time being, because our EAP method support the base64 encoding, you should change the encoding
format to base64 if your certificate is encoded by DER method. You can use certificate administrator’s tools
in MS Windows for this purpose.
You can update certificates files with FTP. That is, you change directory to /etc/auth, get CA certificate and
Private certificate by binary mode FTP, and change the name of the files or change filenames in wcm.conf.
Another tools for updating certificate files is web access, and it is explained in section 5.4.3.
If you want to connect to WiMAX service provider with authentication mode, then you should run a
command, “cfg sbc param_set 0”, after RF_UP and before NET_ENTRY. This can be done by inserting the
command in “DM command” section in “wcm.conf”, when booting time