Motorola MC55 Enterprise Betriebsanweisung PDF herunterladen (Seite 34)

4 - 10 Wireless Fusion Enterprise Mobility Suite User Guide

Figure 4-14

Password Dialog Box

1. Enter a password in the Password field.

If an authentication tunnel type of EAP-GTC is used, a

Password dialog box with additional radio buttons

displays.

Figure 4-15

EAP-GTC Password Dialog Box

Two radio buttons are added to allow the user to choose a token or static password.

Choose the

Token radio button when using the profile in conjunction with a token generator (hardware or software).

The system administrator should supply the user with a token generator for use with EAP-GTC token profiles. A

token generator generates a numeric value that is entered into the password field at connect time, usually along

with a PIN. Tokens have a very limited lifetime and usually expire within 60 seconds. The token generator is

time-synchronized with a token server. When authenticating, the RADIUS server asks the token server to verify the

token entered. The token server knows what value the token generator generates given the time of day and the

username. Since tokens expire, EAP-GTC token profiles are treated differently. A prompt appears at the

appropriate time to enter a token, even if a token has previously been entered. Tokens are never cached in the

credential cache (though the username that is entered when the token is entered is cached).

Choose the

Static radio button, the Password field is enabled and a password can be entered if desired. A profile

that uses an EAP-GTC tunnel type with a static password is handled in the same manner as other profiles that

have credentials that don't expire.

1. Select the Advanced ID check box, if advanced identification is required.

2. Tap Next. The Prompt for Login at dialog box displays. See Credential Cache Options on page 4-11.

Advanced Identity

Use the Advanced ID dialog box to enter the 802.1X identity to supply to the authenticator. This value can be 63

characters long and is case sensitive. In TTLS and PEAP, it is recommended entering the identity anonymous

(rather than a true identity) plus any desired realm (e.g., anonymous@myrealm). A user ID is required before

proceeding.

NOTE When authenticating with a Microsoft IAS server, do not use advanced identity.

1 2 ... 29 30 31 32 33 34 35 36 37 38 39 ... 83 84

Keine Kommentare

Motorola MC55 Enterprise Betriebsanweisung Seite 34