Motorola MK4000 MicroKiosk, Руководство по продукции

Страница: 87 / 136

Wireless Configuration B - 19
Entering credentials applies these credentials to a particular profile. Logging out clears all cached credentials.
Editing a profile clears all cached credentials for that profile. If you configure the APs to use the Fast Session
Resume capability available with some authentication types (e.g., PEAP), do not check
At Connect
or
On Resume
if
you want to avoid being prompted to re-enter credentials in circumstances in which Fast Session Resume would
allow them not to be.
The following authentication types have credential caching:
•
EAP-TLS
•
PEAP
•
LEAP
•
TTLS
•
EAP-FAST.
Some exceptions to the credential caching rules apply for profiles where the credentials expire, such as EAP-GTC
token profiles. Since the token expires after a short period, you are prompted for credentials even when credentials
were already entered and cached for that profile. The
At Connect
caching option has a slightly different function. If
do not check the
At Connect
box, the Fusion software tries to authenticate without prompting for a new token. If
Fast Session Reconnect is enabled on the RADIUS server and the device was previously connected and
authenticated using the same profile, the device may be able to reconnect without the entire authentication
process. In this case, new credentials are not required (even though the old ones have expired) and the Fusion
software does not prompt for new credentials. If Fast Session Reconnect is not enabled on the RADIUS server or if
you checked the
At Connect
checkbox, you are prompted to enter new credentials. Note also that the On Resume
caching option must always check for profiles where the credentials expire, because the Fusion software does not
support the use of Fast Session Reconnect across a suspend/resume cycle, so new credentials are always
needed.
Table B-10
Cache Options
Option Description
At Connect Select this option to prompt for credentials whenever the device tries to connect to a new
profile. Deselect this to use the cached credentials to authenticate. If the credentials are not
cached, you are prompted to enter credentials. This option only applies when logged in.
On Resume Selecting this reauthenticates an authenticated user when a suspend/resume occurs. Once
reauthenticated, the user is prompted for credentials. If the user does not enter the same
credentials that were entered prior to the suspend/resume within three attempts, the user is
disconnected from the network. This option only applies when logged in.
At Time Select this option to perform a local verification on an authenticated user at a specified time.
The time can be an absolute time or a relative time from the authentication, and should be
in at least 5 minute intervals. Once the time has passed, the user is prompted for
credentials. If the user does not enter the correct credentials within three attempts, the user
is disconnected from the network. This option only applies when logged in.