Release Notes

ManualsBrandsDell ManualsAccess PlatformsW-Clearpass 100 Software

RADIUS 802.1X/EAP Setup

This is a draft guide until a full technote with a walkthrough is available.

Tested with amigopod RADIUS Services 2.0.16 which is the current 2.1 release

candidate.

802.1X/EAP Configuration

First navigate to RADIUS Services > EAP & 802.1X

Now create a self-signed digital certificate for this server by clicking the Create

Server Certificate link

Complete the Create RADIUS Server Certificate form – this certificate will be used

to identify the server in EAP-TLS protocol (and derived protocols i.e. PEAP)

Click the Continue button to proceed to the Sign RADIUS Server Certificate form.

This will be filled out with defaults based on the previous page.

Summary of content (9 pages)

PAGE 1
RADIUS 802.1X/EAP Setup This is a draft guide until a full technote with a walkthrough is available. Tested with amigopod RADIUS Services 2.0.16 which is the current 2.1 release candidate. 802.1X/EAP Configuration First navigate to RADIUS Services > EAP & 802.
PAGE 2
Modify these parameters if appropriate – note that the default CA certificate expiration is set for 10 years. In particular, the “Common Name” of the certificate will be used to identify it to clients installing it as a trusted CA root, so choose a sensible name. Click the Continue button to proceed to the summary screen.
PAGE 3
The details of the certificates are shown. To enable these certificates for use in EAPTLS, EAP-TTLS and PEAP, select the Use this certificate to identify this RADIUS server checkbox and click Apply Settings.
PAGE 4
RADIUS server will need to be restarted to complete these changes, but don’t do this just yet as some additional configuration options must be selected. Click the EAP Configuration command link. In the EAP Configuration form, select the EAP types that are to be supported. To enable the common case of PEAPv0/MS-CHAPv2 (broadly supported by all wireless clients that implement 802.1X), complete the form as shown below: Click the Save Changes button. Now restart the RADIUS Server.
PAGE 5
Click the Download File button and a file named amigopod Certificate Authority.p7b will be downloaded (the precise name depends on the common name for the CA certificate). This file must be imported as a trusted root certification authority on any client wishing to authenticate using this RADIUS Server. The reason for this is that the server’s identity must be established via a trusted root CA in order for authentication to proceed.
PAGE 6
Click the Install Certificate… button
PAGE 7
Click the Browse… button to select the Trusted Root Certification Authorities store:
PAGE 8
Make sure that the imported CA is specified as a Trusted Root Certification Authority for the wireless network connection that is using PEAP.
PAGE 9
Successful PEAP Authentication Tue Nov 17 01:20:13 2009 : Auth: Login OK: [demo@example.com] (from client linksys port 21 cli 001c2603de08) Tue Nov 17 01:20:13 2009 : Auth: Login OK: [demo@example.