Siemens SCALANCE W1750D UI, Руководство по настройке

Страница: 127 / 570

Wireless Network Profiles
11.1 Configuring Wireless Network Profiles
SCALANCE W1750D UI
Configuration Manual, 02/2018, C79000-G8976-C451-02
127
Parameter Description
Security
Level
Authentication surviva-
bility
To enable authentication survivability, set Authentication
survivability to Enabled. Specify a value in hours for
Cache timeout (global) to set the duration after which
the authenticated credentials in the cache must expire.
When the cache expires, the clients are required to
authenticate again. You can specify a value within a
range of 1–99 hours and the default value is 24 hours.
NOTE: The authentication survivability feature requires
ClearPass Policy Manager 6.0.2 or later, and is availa-
ble only when the New server option is selected. On
setting this parameter to Enabled, SCALANCE W au-
thenticates the previously connected clients using EAP-
PEAP authentication even when connectivity to
ClearPass Policy Manager is temporarily lost. The Au-
thentication survivability feature is not applicable when a
RADIUS server is configured as an internal server.
Enterprise
security level
MAC
authentication To enable MAC-address-based authentication for Per-
sonal and Open
security levels, set MAC authentication to Enabled.
For Enterprise security level, the following options are
available:
•
Perform MAC authentication before 802.1X—Select
this check box to use 802.1X authentication only
when the MAC authentication is successful.
•
MAC authentication fail-thru—On selecting this
check box, the 802.1X authentication is attempted
when the MAC authentication fails.
Enterprise, Personal,
and Open security
levels.
Delimiter character Specify a character (for example, colon or dash) as a
delimiter for the MAC address string. When configured,
the AP will use the delimiter in the MAC authentication
request. For example, if you specify colon as the delim-
iter, MAC addresses in the xx:xx:xx:xx:xx:xx format are
used. If the delimiter is not specified, the MAC address
in the xxxxxxxxxxxx format is used.
NOTE: This option is available only when MAC authenti-
cation is enabled.
Enterprise, Personal,
and Open security
levels.
Uppercase support Set to Enabled to allow the AP to use uppercase letters
in MAC address string for MAC authentication.
NOTE: This option is available only if MAC authentica-
tion is enabled.
Enterprise, Personal,
and Open security
levels.
Upload Certificate Click Upload Certificate and browse to upload a certifi-
cate file for the internal server. For more information on
certificates, see Uploading Certificates on page 177.
Enterprise, Personal,
and Open security
levels