Reference Guide

Parameter
* Global overrides identically-named user prole
** After sign o, user prole returns to global value
Description
[peapmschaphidedm={yes,no}]
[peapsinglesignon={yes, no}]
[peapgtcun={username for EAP-PEAP/ EAP-GTC}]
[peapgtcpwd={password for EAP-PEAP/ EAP-GTC}]
[peapgtcpwdEnc={password for encrypted for EAP-PEAP/EAP-
GTC}]
[wpapskpwd={passphrase for WPA-PSK}]
[wpapskpwdEnc={passphrase encrypted for WPA-PSK}]
[wpa2pskpwd={passphrase for WPA2-PSK}]
[wpa2pskpwdEnc={passphrase encrypted for WPA2-PSK}]
[encryption={TKIP|CCMP}]
[fasteap={EAP-MSCHAPV2, EAP-GTC}]
[fastidentity={Identity for EAP_FAST}]
[fastmschapun={username for EAP-FAST/EAP-MSCHAPV2}]
[fastpmschappwd={password for EAP-FAST/EAP-MSCHAPV2}]
[fastmschappwdEnc={password encrypted for EAP-FAST/EAP-
MSCHAPV2}]
[fastmschapdm={domain for EAP-FAST/EAP-MSCHAPV2}]
[fastmschaphidedm={yes,no}]
[fastsinglesignon={yes, no}]
[fastgtcun={username for EAP-FAST/EAP-GTC}]
[fastgtcpwd={password for EAP-FAST/EAP-GTC}]
[fastgtcpwdEnc={password for encrypted for EAP-FAST/EAP-
GTC}]
[wiredreset={yes, no}]
Device=Wireless Mode=Infrastructure
SSID=ThinIsInIEEE8021X=yes network=wireless
prole=ThinIsIn access=WPA2-ENT eap=yes eaptype=EAP-
PEAP peapeap=EAP-MSCHAPV2 peapmschapdm=wyse
#wtos_95
Device=Wireless Mode=Infrastructure
SSID=wtos_95IEEE8021X=yes network=wireless
prole=wtos_95 access=WPA2-ENT eap=yes eaptype=EAP-
PEAP peapeap=EAP-MSCHAPV2
Example: IEEE8021X=yes network=wireless access=wpa-ent
eap=yes eaptype=eap-tls tlsclntcert=user.cer
tlsclntprikey=user.pfx tlsclntprikeypwd=12345678
OR
IEEE8021X=yes network=wireless access=wpa-ent eap=yes
eaptype=eap-tls tlsclntcert=user.cer tlsclntprikey=user.pfx
tlsclntprikeypwd=12345678 leapun=user1 password=1234
peapmschapun=user1 peapmschappwd=12345
peapmschapdm=wyse.com
IEEE8021X=yes network=wired eap=yes eaptype=eap-tls
tlsclntcert=user.cer tlsclntprikey=user.pfx
tlsclntprikeypwd=12345678
By default, peapidentity is same as peapmschapun.If
peapmschaphidedm is set to yes, the domain will use saved
peap MSCHAP domain name and the prompts dialog will not
include the domain eld when you perform ieee8021x
authentication.
The following example describes wildcard server validation:
IEEE8021X=yes network=WIRED access=WPA2-ENT
servervalidate=yes eap=yes eaptype=EAP-PEAP
servercheck=yes servername=w2k8-
ACS-64.sqawirelsess.com peapmschapdm=EAP-MSCHAPV2
peapgtcun=sqawirless2 peapmschappwd=123!@#qwe
The username of ieee8021x (fastmschapun, peapmschapun,
peapgtcun, leapun) can be congured as system variables like
$mac, $sn etc. By default, fastidentity is same as
fastmschapun.
If fastmschaphidedm is set to yes, the domain uses saved
EAP_FAST MSCHAP domain name, and the prompts dialog
does not include the domain eld when you perform ieee8021x
authentication.
The following example describes wildcard server
validation:IEEE8021X=yes network=WIRED access=WPA2-
ENT servervalidate=yes eap=yes eaptype=EAP-FAST
servercheck=yes servername=w2k8-
ACS-64.sqawirelsess.com fastmschapdm=EAP-MSCHAPV2
fastgtcun=sqawirless2 fastmschappwd=123!@#qwe
wiredreset—The option wiredreset is used to reset MII when
authenticate cancel occurs. This option is only for wired-network
and is disabled by default.
76
Parameters for wnos INI, {username} INI, and $MAC INI les