Configuring Local EAP

Local EAP is an authentication method that allows users and wireless clients to be authenticated locally. It is designed for use in remote offices that want to maintain connectivity to wireless clients when the backend system is disrupted or the external authentication server is unavailable. When you enable local EAP, your device serves as the authentication server and the local user database, which removes dependence on an external authentication server. Local EAP retrieves user credentials from the local user database or the LDAP backend database to authenticate users.

Local EAP supports LEAP, EAP-FAST, EAP-TLS, P EAPv0/MSCHAPv2, and PEAPv1/GTC authentication between the device and wireless clients.

On the Configuration > Security > Local EAP page, you can configure Local EAP profiles and EAP-FAST profiles.

The Local EAP tab allows you to configure a Local EAP profile and its properties.

  1. In the Local EAP Profiles tab, click Add.

  2. Enter a profile name.

  3. Select the check boxes to specify the types of EAP that can be used for local authentication.

    • LEAP

    • EAP-FAST

    • EAP-TLS

    • PEAP

  4. Choose a trust point you want to associate with the EAP profile.

    Note: This option is available if you select the EAP-FAST, EAP-TLS, and PEAP types.

  5. Click Apply to Device.

The EAP-FAST parameters tab allows you to configure EAP-FAST parameters profile and its properties.

  1. In the EAP-FAST Parameters tab, click Add.

  2. Enter a profile name.

  3. Specify a server key (in hexadecimal characters) used to encrypt and decrypt certificates. Confirm the server key.

  4. In the Time to Live field, specify the time, in seconds, for the certificate to remain viable. The valid range is 1 to 1000 days, and the default setting is 10 days.

  5. In the Authority Id field, enter the authority identifier of the local EAP-FAST server in hexadecimal characters. You can enter up to 32 hexadecimal characters, but you must enter an even number of characters.

  6. In the Authority Id Information field, enter the authority identifier of the local EAP-FAST server in text format.

  7. Enter a description.

  8. Click Apply to Device.

 

Related Topics Link IconRelated Topics