![Cisco Cisco Aironet Wireless LAN Client Скачать руководство пользователя страница 91](http://html.mh-extra.com/html/cisco/cisco-aironet-wireless-lan-client/cisco-aironet-wireless-lan-client_installation-and-configuration-manual_63462091.webp)
5-23
Cisco Aironet Wireless LAN Client Adapters Installation and Configuration Guide for Windows
OL-1394-04
Chapter 5 Configuring the Client Adapter
Setting Network Security Parameters
Note
If LEAP was not selected during installation, the LEAP option is unavailable in ACU. If you
want to be able to enable and disable LEAP, you must run the installation program again and
select Modify and LEAP.
•
Host Based EAP—Selecting this option enables you to use any 802.1X authentication type for
which your operating system has support. For example, Windows 2000 (with Service Pack 3 or
greater and the Windows 2000 Wireless 802.1X hot fix) and Windows XP provide native support for
EAP-TLS and EAP-MD5 authentication and general support for PEAP and EAP-SIM
authentication.
Note
To use EAP-TLS, EAP-MD5, PEAP, or EAP-SIM with Windows 2000, you must install
Windows Service Pack 3, the Windows 2000 Wireless 802.1X hot fix, and ACU; configure
your client adapter using ACU; and enable Network-EAP on the access point.
Note
To use PEAP or EAP-SIM authentication, you must also install either the PEAP or EAP-SIM
supplicant during ACU installation.
Note
PC-Cardbus cards do not support PEAP and EAP-SIM authentication.
–
EAP-TLS—EAP-TLS is enabled or disabled through the operating system and uses a dynamic
session-based WEP key, which is derived from the client adapter and RADIUS server, to encrypt
data. Once enabled, a few configuration parameters must be set within the operating system.
RADIUS servers that support EAP-TLS include Cisco Secure ACS version 3.0 or greater and
Cisco Access Registrar version 1.8 or greater.
Note
EAP-TLS requires the use of a certificate. Refer to Microsoft’s documentation for
information on downloading and installing the certificate.
–
EAP-MD5—EAP-MD5 is enabled or disabled through the operating system and uses static
WEP to encrypt data. EAP-MD5 requires you to enter a separate EAP username and password
(in addition to your standard Windows network login) in order to start the EAP authentication
process and gain access to the network.
RADIUS servers that support EAP-MD5 include Cisco Secure ACS version 3.0 or greater and
Cisco Access Registrar version 1.8 or greater.
Note
If you want to authenticate without encrypting the data that is transmitted over your
network, you can use EAP-MD5 without static WEP.