5-34
Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide for Windows
OL-1394-04
Chapter 5 Configuring the Client Adapter
Setting Network Security Parameters
Step 8
Click OK to exit the LEAP Settings screen.
Step 9
Click OK to exit the Network Security screen and return to the Profile Manager screen. On the Profile
Manager screen, click OK or Apply to save your changes
Note
Chapter 6
describes the sequence of events that occurs when a profile that is set for LEAP authentication
is selected for use.
Enabling Host-Based EAP
Before you can enable host-based EAP authentication, your network devices must meet the following
requirements:
•
Client adapters must support WEP and use PCM/LMC/PCI card firmware version 4.25 or greater,
mini PCI card firmware version 5.0 or greater, or PC-Cardbus card firmware version 4.99 or greater.
•
Client adapters and access points must use firmware that supports 802.1X draft 10, which is
functionally equivalent to the ratified 802.1X standard.
•
PEAP and EAP-SIM authentication are supported only by ACU version 5.05 or greater, 2.4-GHz
client adapters, and 340 and 350 series access points running firmware version 11.23T or 1200 series
access points running firmware version 11.54T.
•
Service Pack 3 and the Windows 2000 Wireless 802.1X hot fix must be installed if your computer
is running Windows 2000.
•
All necessary infrastructure devices (for example, access points, servers, gateways, user databases,
etc.) must be properly configured for the authentication type you plan to enable on the client.
Follow the steps below to enable host-based EAP authentication (EAP-TLS, EAP-MD5, PEAP, or
EAP-SIM) for this profile.
Note
Because EAP-TLS, EAP-MD5, PEAP, and EAP-SIM authentication are enabled in the operating system
and not in ACU, you cannot switch between these authentication types simply by switching profiles in
ACU. You can create a profile in ACU that uses host-based EAP, but you must enable the specific
authentication type in Windows 2000 (with Service Pack 3 or greater and the Windows 2000 Wireless
802.1X hot fix) or Windows XP. In addition, Windows can be set for only one authentication type at a
time; therefore, if you have more than one profile in ACU that uses host-based EAP and you want to use
another authentication type, you must change authentication types in Windows after switching profiles
in ACU.
Step 1
Select Host Based EAP from the Network Security Type drop-down box on the Network Security
screen.
Note
The Host Based EAP option is available for all operating systems except Windows 95; however,
your client adapter can EAP authenticate only if your computer’s operating system is Windows
2000 (with Service Pack 3 or greater and the Windows 2000 Wireless 802.1X hot fix) or
Windows XP.
