Administrator Guide

Table 22. Parameters for a xen.ini File (continued)
Parameter Description
[fastmschapun={username for EAP-FAST/EAP-
MSCHAPV2}]
[fastpmschappwd={password for EAP-FAST/EAP-
MSCHAPV2}]
[fastmschappwdEnc={password encrypted for EAP-
FAST/EAP-MSCHAPV2}]
[fastmschapdm={domain for EAP-FAST/EAP-
MSCHAPV2}][fastmschaphidedm={yes,no}]
[fastsinglesignon={yes, no}]
[fastgtcun={username for EAP-FAST/EAP-GTC}]
[fastgtcpwd={password for EAP-FAST/EAP-GTC}]
[fastgtcpwdEnc={password for encrypted for EAP-
FAST/EAP-GTC}]
[wiredreset={yes, no}]
servername=w2k8-ACS-64.sqawirelsess.com peapmschapdm=EAP-
MSCHAPV2 peapgtcun=sqawirless2 peapmschappwd=123!@#qwe
The username of ieee8021x (fastmschapun, peapmschapun,
peapgtcun, leapun) can be configured as system variables like
$mac, $sn etc.
By default, fastidentity is same as fastmschapun.
If fastmschaphidedm is set to yes, the domain uses saved
EAP_FAST MSCHAP domain name, and the prompts dialog
does not include the domain field when you perform ieee8021x
authentication.
The following example describes wildcard server
validation:IEEE8021X=yes network=WIRED access=WPA2-ENT
servervalidate=yes eap=yes eaptype=EAP-FAST servercheck=yes
servername=w2k8-ACS-64.sqawirelsess.com fastmschapdm=EAP-
MSCHAPV2 fastgtcun=sqawirless2 fastmschappwd=123!@#qwe
The option wiredreset is used to reset MII when authenticate
cancel occurs. This option is only for wired-network and is disabled
by default.
INACTIVE = minutes
[NoSessionTimer=minutes]
[LockTimer=seconds]
Default is 0.
There is no Idle timeout. The range is 0 minutes to 480 minutes. If
the value given is bigger than 480, 480 is set instead. If the value
given is smaller than 0, 0 is set instead.
When the system idle is time out in the configured minutes, the
system will automatically sign off, reboot or shutdown which are
based on the setting of AutoSignoff.
The parameter NoSessionTimer has the same range as INACTIVE
and it is valid only if INACTIVE value is not 0. If there is a
session use the value of Inactive, otherwise use the value of
NoSessionTimer, if NoSessionTimer is configured.
If AutoSignoff=yes Shutdown=yes is configured, then this
statement can work before sign on.
f the parameter LockTimer is set, the terminal is locked and
the system idle is timeout in the configured seconds, system will
automatically sign off, reboot or shutdown which are based on the
setting of AutoSignoff.
IPProto=ICMP
[DisableTStamp={yes, no}]
[DisableEcho={yes, no}]
Configures the ICMP protocol.
DisableTStamp — If DisableTStamp=yes, the system will not
reflect the ICMP timestamp (13) request.
DisableEcho — If DisableEcho=yes, the system will not reflect the
ICMP echo (8) request. In this case, the unit cannot be pinged.
KeySequence={no, yes}
[Ctrl+Alt+Del={no,yes}]
[Ctrl+Alt+Up={no,
yes}]
[Ctrl+Alt+Down={no, yes}]
[Ctrl+Alt+Left={no, yes}]
[Ctrl+Alt+Right={no, yes}]
[Win+L key={
no,yes}]
[Alt+Tab={yes,no}]
Default is yes.
keySequence — Yes/no option to enable the following supported
combined keys options
● KeySequence=yes enables all of these options, each having a
default of yes that you can change individually to no if desired.
● KeySequence=no disables all of these options regardless of the
individual settings.
Ctrl+Alt+Del — Default is no. Yes/no option to enable use of
Ctrl+Alt+Del key to display the windows menu.
182 Creating and Using xen.ini Files