Eion LibraPlus 5845, Руководство пользователя, Страница: 62 / 140

Configuration commands Authentication mode
PSK
interface authentication wpa-psk
EAP-MD5
*
interface authentication ieee-802.1x
interface authentication md5
interface authentication identity
interface authentication password
EAP-MSCHAPv2
*
interface authentication ieee-802.1x
interface authentication mschap-v2
interface authentication identity
interface authentication password
EAP-TTLS interface authentication ieee-802.1x
interface authentication ttls
interface authentication identity
interface authentication password
interface authentication ca-cert
PEAP interface authentication ieee-802.1x
interface authentication peap
interface authentication identity
interface authentication password
interface authentication ca-cert
EAP-TLS
interface authentication ieee-802.1x
interface authentication tls
interface authentication ca-cert
interface authentication client-cert
interface authentication identity
**
Table 4.1. WPA Configuration Table
*
EAP-MD5 and EAP-MSCHAPv2 can be used with disabled or static WEP encryption, or in conjunction with other authentication
methods like EAP-TTLS, EAP-TLS and PEAP.
**
In EAP-TLS mode, supplicant identity is taken from CN attribute of the client certificate, if it's not explicitly overridden by the
in-
terface authentication identity
command.
Warning
Note that system time is important to validate CA and client certificates. If the device doesn't
have nonvolatile system clock and some critical connection is certificate based, use
date and
time
setting command to set initial time after reboot. The system can then calibrate the time
using NTP client
.
Example 4.20. WPA2 PSK station (CPE)
EION: interface Wireless 1 type station
Interface 'Wireless 1': type 'station'.
EION: interface Wireless 1 ssid Acid
Interface 'Wireless 1': SSID 'Acid'.
EION: interface Wireless 1 encryption ccmp
Interface 'Wireless 1': CCMP enabled.
EION: interface Wireless 1 authentication wpa-psk qqKdoeeiUS2
WPA PSK enabled.
52
Configuration