Secure Access Configuration Guide For Wireless Clients Part Two: Wireless Data Privacy and Monitored Logon 2003-03

b. On the ACS, browse to Rights -> Access Policies and select the

Unauthenticated Access Policy. Configure the following parameters and

save changes.

• Network Address Translation: Always

• IP Addressing: Require DHCP

• Encryption: Allowed, but not required

• Encryption Protocol: PPTP

• MPPE: Stateless

• Key Length: 128 bits

• All other parameters in the default state.

Figure 4.2 – Unauthenticated Access Policy

c. Configure the Authenticated Access Policy EXACTLY the same as the

Unauthenticated Access Policy and save changes.

2) On the ACS, define a RADIUS Authentication Service, associate it to the

System Authentication Policy, and enable the RADIUS server to

authenticate the user during PPTP session negotiation.