AMX MVP-9000i Скачать руководство пользователя страница 89

Страница: 89 / 202

Protected Setup Pages

MVP-9000i 9" Modero® ViewPoint® Touch Panel with Intercom

Refer to the

EAP Authentication

section on page 178 and the

Using the Wireless Site Survey Tool

section on page 30 for

further details on these security options.

EAP-FAST (Cont.)

Anonymous Identity:

Opens an on-screen keyboard to enter an IT provided alphanumeric string
which (similar to the username) is used as the identity, but that does not
represent a real user.

This information is used as a fictitious name which might be seen by sniffer
programs during the initial connection and setup process between the panel
and the Radius server. In this way the real identity (username) is protected.
Typically, this is in the form of a fictitious username, such as
[email protected]

Password:

Opens an on-screen keyboard. Enter the network password string specified
for the user entered within the

Identity

field (used by the panel to identify itself

to an Authentication (RADIUS) Server)

Note

: This information is similar to the password entered to gain access to a

secured workstation.

Key Mgmt:

This button has 4 options:

WPA-EAP:

The default and most common setting for EAP authentication

methods. Accepts WPA, WPA2 & TKIP, or AES.

8021X:

Used to specify IEEE 802.1x port authentication only.

CCKM-WPA:

Cisco key management option. Used with CCKM and WPA

(TKIP encryption only) authentication.

CCKM-WPA2:

Cisco key management option. Used with CCKM and WPA2

(AES encryption only) authentication.

NOTE:

The

Key Mgmt

selection must match the security settings on the AP

in order for the connection to be successful.

Automatic PAC
Provisioning:

This selection toggles PAC (Protected Access Credential) Provisioning -

Enabled

(automatic)

Disabled

(manual)

• If

Enabled

is selected, the following

PAC File Location

field is disabled,

because the search for the PAC file is done automatically.

• If

Disabled

is selected, the user is required to manually locate a file

containing the PAC shared secret credentials for use in authentication.

this case, the IT department must create a PAC file and then transfer it into
the panel using the

AMX Certificate Upload

application.

Note:

Even when automatic provisioning is enabled, the PAC certificate is

only downloaded the first time that the panel connects to the RADIUS server.
This file is then saved into the panel's file system and is then reused from
then on. It is possible for the user to change a setting, such as a new Identity,
that would invalidate this certificate. In that case, the panel must be forced to
download a new PAC file.

To do this, set Automatic PAC Provisioning to Disabled and then back to
Enabled. This forces the firmware to delete the old file and request a new
one.

PAC File Location:

This field is used when the previous Automatic PAC Provisioning option has
been

Disabled

• When pressed, the panel displays an on-screen PAC File Location

keyboard which allows you to enter the name of the file containing the PAC
shared secret credentials for use in authentication.

• This field is only valid when the automatic PAC provisioning feature has

been enabled via the previous field.

Auto Key Renewal:

• Select between NEVER, 1 Day, 3 Days, 7 Days, 14 Days, and 30 Days.

Cancel/Save:

•

Cancel